last executing test programs:

18.317919389s ago: executing program 2 (id=6204):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, &(0x7f0000000140)=0x8, 0x4)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0, 0x0, 0x3}, 0x18)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_DATA_DIR(r7, 0x0, 0x1, &(0x7f0000000040), 0x4)
ioctl$sock_bt_hci(r6, 0x400448c9, 0x0)
sendmmsg$inet(r5, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2400c042)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00', @ANYBLOB="010000000020000000001a0000001c0000800400010200000800060000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1)
sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0)

18.317168891s ago: executing program 0 (id=6205):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657220"], 0x38}}, 0x0)
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000140)="89e7ee2c78dad9b4b473fec988ca58e8000f75d38e0d369bd7c50580", 0x140}, {&(0x7f0000000380)="9c74dfbf7757d9c4135f04770d56", 0xe}], 0x2)

18.218504648s ago: executing program 1 (id=6206):
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async, rerun: 64)
r0 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1, 0x0, 0x4c}, 0x0) (async, rerun: 32)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffe0) (rerun: 32)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async)
ioctl(r2, 0x8b1b, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) (async, rerun: 32)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32)
socket$kcm(0x2, 0x3, 0x2) (rerun: 32)

18.142546877s ago: executing program 2 (id=6207):
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x1, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
recvmsg(r1, &(0x7f0000000840)={&(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000200)=""/251, 0xfb}, {&(0x7f0000000300)=""/47, 0x2f}, {&(0x7f0000000340)=""/114, 0x72}, {&(0x7f00000003c0)=""/66, 0x42}, {&(0x7f0000000440)=""/141, 0x8d}, {&(0x7f0000000500)=""/240, 0xf0}, {&(0x7f0000000600)=""/101, 0x65}, {&(0x7f0000000680)=""/60, 0x3c}], 0x8, &(0x7f0000000740)=""/238, 0xee}, 0x12020)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000000880)={0x6, 'rose0\x00', {0xa3e}, 0xfffd})
r3 = accept4$inet6(r0, &(0x7f00000008c0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000900)=0x1c, 0x80000)
setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000940)=@ccm_128={{0x304}, "31184b70fac9a117", "65d438d2b37fee297bf997e4024268b3", "698a9b27", "3ca5056bd5561cf9"}, 0x28)
bind$l2tp(r0, &(0x7f0000000980)={0x2, 0x0, @multicast2, 0x4}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x5, 0x9, 0xdf16, 0x8000, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2, 0x3}, 0x50)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000a40)=0x8200, 0x4)
tee(r4, r1, 0x3, 0xe)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000a80)=0x4, 0x1)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x28, r5, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xa, 0x2}}}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000801)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x1010, r3, 0x8c98f000)
r6 = socket$inet(0x2, 0x1, 0x8)
r7 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000c00)='cgroup.max.depth\x00', 0x2, 0x0)
write$cgroup_int(r7, &(0x7f0000000c40)=0x2, 0x12)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x6c, 0x3, 0x3, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x80000001}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0xa}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x6}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x3}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x1}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008040)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001000)={0x6, 0x10, &(0x7f0000000dc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000e40)='GPL\x00', 0x4, 0x79, &(0x7f0000000e80)=""/121, 0x41100, 0x0, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000f00)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000f40)={0x0, 0xa, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000f80)=[r4], &(0x7f0000000fc0)=[{0x4, 0x3, 0x3}], 0x10, 0x3}, 0x94)
bpf$PROG_BIND_MAP(0x23, &(0x7f00000010c0)={r8, r4}, 0xc)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001100), 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f0000001140)=0x1)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001240)={r4, &(0x7f0000001180)="3c197b30efd9c169653e2b709200bb9b4a2b1dee55d1b48c36e35b25a3afe7381c7a4542fa18315c65135bd7e0a90f5b8bc7547cf48f6307fcf19c0f9bfad6ad61a3e79961a9f36928fa9ab5b889febdfc", &(0x7f0000001200)=@udp=r0, 0x2}, 0x20)
sendmsg$kcm(r0, &(0x7f0000002500)={&(0x7f0000001280)=@ieee802154={0x24, @none={0x0, 0x1}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001300)="586425cda3789a203ec94b299a0fb40ddc78b4222b1dfed0edd1c2a2773501a429c9b5d8fa6361a1a23fe93a54091f8aa5d18e8bbdcad4141adc938b99cac8080c2f6bb31412bfc93508e1de242ebdfb2420432c25ae4d3eb0541bead0b702c4bb9598d9aae8e80ed39fce365f8d4d621adbd362f9af8340174ea921e76ac422dcacce52715b5b432de757d58b8a525bee9475062887d3409a8bf97c55a0283849470da2fa5c", 0xa6}], 0x1, &(0x7f0000001400)=[{0xd8, 0x10b, 0x8, "557c8df510703f86eabd0c6499a204f88bb0aa3f761c403d348f2acf079412fcbec43fb39098504512f0521e771739711a79a62d1fcbfae068befd9f2cd292cc9de4c1e00c8b941e2b2480d2a68edc0fa84559ac97e3bb8ae77d89f80c4e84db50160fdf9552aa83bc90dafe2551191782a74c87c398b62d3c0ef7087811b5b01d76fce726d6cb183ad55c8722330c4da3af00ac6597f96b5c36aeab8351cca9a5bc71548b362a7b4d91e99739f85fbb10cb020c943a663ba7ef01ecc81438f62b2898e1b832"}, {0x1010, 0x103, 0x5, "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"}], 0x10e8}, 0x4050)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000002540)={'batadv_slave_0\x00', <r10=>0x0})
r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002680)={&(0x7f0000002580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0x8, [@int={0xd, 0x0, 0x0, 0x1, 0x0, 0x3c, 0x0, 0x3b, 0x7}, @enum64={0xe, 0xa, 0x0, 0x13, 0x1, 0x0, [{0x9, 0x40000000, 0x9}, {0x5, 0x40, 0xb6f}, {0xe, 0x3, 0x2}, {0x2, 0x70, 0x8001}, {0x5, 0x1c000, 0x4}, {0x2, 0x9, 0xfffffff9}, {0x8, 0x7c, 0x5}, {0x5, 0x10000, 0x2b65e198}, {0x10, 0xc, 0xfb}, {0xf, 0x4, 0xc968}]}, @fwd={0xa}]}, {0x0, [0x0, 0x1e, 0x61, 0x30, 0x30, 0x5f]}}, &(0x7f0000002640)=""/57, 0xc0, 0x39, 0x0, 0xdc78}, 0x28)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000026c0)={0x1b, 0x0, 0x0, 0x6, 0x0, r4, 0x7, '\x00', r10, r11, 0x2, 0x0, 0x4}, 0x50)

18.141989474s ago: executing program 1 (id=6208):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000240)=ANY=[@ANYBLOB="0a00000009000000080000000200000000010000", @ANYRES32, @ANYBLOB="000000000006000000a7a203a30000000000000028fcfe4085e748dff9470a3b2382224a79ff7a7dc16ff6618dd7cf369be06707cfd7a58b7696c3e7ff66344d31c5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8}, 0x10) (async)
recvmmsg(r2, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x2061, 0x0) (async)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000018724c00", @ANYRES32=r1, @ANYBLOB="0000000000000000850000001200000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f00000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448d788dd965f7a33121800", 0x0, 0xbffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180009ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

16.8988034s ago: executing program 0 (id=6209):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async, rerun: 64)
r1 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 64)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000001100), 0xffffffffffffffff) (rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000001140)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)={0x28, r5, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="f9b7b5acfe1e"}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8000000)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000400)={r2, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0xffffffff}}}, 0x90) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5}, 0x38) (async, rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00'}, 0x10) (async, rerun: 32)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) (async)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@var={0x3, 0x0, 0x0, 0xe, 0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000180)=""/161, 0x45, 0xa1, 0x1}, 0x28)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36b31fa7e35ce95d04"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0x20, 0x0, &(0x7f0000000240)="5cdd3086ddff0066b3c9bbac88a8862c00dffd0013dd00000000000000008100", 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={r2, 0x3}, 0x8)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0xfffffffffffffca6, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="140100002d00010000000000000000000401008039393e98104850c35ab475020532c2401fdbc888eda95a8392467a26816a708555badea07559c64bfec12f482d798305b2cb86c380530d"], 0x114}], 0x1}, 0x0)

16.816555726s ago: executing program 1 (id=6210):
r0 = socket(0x15, 0x80000, 0x1)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x4008af10, &(0x7f0000000040)=0x1)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x40}, 0x10}, 0x94)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r2, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r3, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x4}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x40}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8040}, 0x20004008)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r6}, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030768f1258c989e14f05c71", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@updsa={0x164, 0x1a, 0x1, 0x0, 0x2, {{@in=@loopback, @in6=@empty}, {@in=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00', {}, {}, {}, 0x0, 0x3502, 0x2}, [@algo_auth_trunc={0x71, 0x14, {{'xcbc(aes)\x00'}, 0x128, 0x0, "000000000000000000000000000000003fe380589cc8d6d2287e1ad94098733cb609bf729c"}}]}, 0x164}}, 0x0)
sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002d00090027bd70000000000004000000040019000c00090000000080"], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x84)

16.815232689s ago: executing program 2 (id=6211):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x1406, 0x4, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x10000800)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f280080018000bac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

16.725929137s ago: executing program 0 (id=6212):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000800)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac141440000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000030000000000000000000000000000f77973dc26a5571c86c78b8850e28e764871c19bda8935bc79a15a2461199bd06ece6a8b16e840488886bf1b6140dc09788b29ecb1536f69d941ce99364c3fec97d505740e8e4e4ab2e55e123a55b48d9719aa41a09bbb5df3c3bc9abfb866cb09d06725e704"], 0xfc}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="840100002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0000000200000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x800}, 0x0)

16.725189427s ago: executing program 0 (id=6213):
socket$inet(0x2, 0x6000000000000001, 0x0) (async)
r0 = socket$inet(0x2, 0x6000000000000001, 0x0)
mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r0, 0x0) (async)
mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0024716adefa"], &(0x7f0000000f80)=""/4096, 0x26, 0x1000, 0x1, 0x80}, 0x28) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0024716adefa"], &(0x7f0000000f80)=""/4096, 0x26, 0x1000, 0x1, 0x80}, 0x28)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'dummy0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x3a, 0x201a0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x50}}, 0x800) (async)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x3a, 0x201a0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x50}}, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000002000000000000000000000d0400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x28)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r7=>0x0})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB="3800000001010101000000000000000002000000180001801400018008000100ffffffff08000200ac1414bb0c001980080001000602"], 0x38}, 0x1, 0x0, 0x0, 0x8804}, 0x0)
r9 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10) (async)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10)
write(r9, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800"/36, 0x24)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r7, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea43961a6007c1674e79a267dc5be7897c84a89a72097bc2cf211a7ea330c86604e"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)

16.527080281s ago: executing program 2 (id=6214):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, 0x0, 0x20000000) (async)
socket$packet(0x11, 0x2, 0x300)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async)
r2 = socket(0x2, 0x80805, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f0000000080)) (async)
r4 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r4, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x18}}], 0x1, 0x4000880) (async)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@broadcast}}}, &(0x7f0000000480)=0xe8)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006c80)=ANY=[@ANYBLOB, @ANYBLOB="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", @ANYRES32, @ANYBLOB="82004700b9acf7b8a44cc5f0f49539752e78cc4522ec0dd7a27ac972fc8a01c17ea018613a6b7f0284ad90fd10fbb77ff9322c53844b0c8a52ce12e49f5db09bead901d5febad8b4fe40b8cc807ab74737765da922f1b719ae96b7c594ce19d07ec1cc3da275058b36495dde732ed3ebd028efef19b0496adcd2578293616e9a13d00000000000874d268018ae6bdd0c83e714391ac30f2bd0a0e25022a75ce5f4c00c71c834a448198a365f12a027906d9e1bb81d554403c31c3ce9451515e1f7a6bd9150adfde10a95166207a1fa0e2e133bf29a811dc62c781f4faf0c4c9033ad276f907b7f2adf8008", @ANYRES32=r2, @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="0c00d180080022007f0000010f58804e470d9df3c160e78b9c38c4943ae3bf7cf834bf8cb14983db2cdaf475f2bd756bfee913663831c4d25bbcf0bed2c63cacbdb8adf8e4ad8cc24a92333d6dc075052761295d8c4036550a969512e18810e87b858b3802a2c5672e8b862ad36ba3a0837ac1cea4db512e14311130560349cd111f99d4e79ff8fad6a9d54139c793641d68f53de4e65f2d50020652200d362dc55aaf52995e55e77695c0d6fe5becbc558d92a527eaec67a86328f414192aa13a744e09e190ef0073a9a6bbcff5db7b54a2bc5be76534e2679d56142b3ca972a4d3ea749f0d15d2d012a421aa5e6c92e36925a0e9a45b7cb51ea3614d945d1ba17b08dffb001d8047433b37a4b8ffe2a66c1742533284e0883931284e465f4ac2c19b65f7119b0f8eb9d24d42f9146ec9458d8ceccf60cb7f6e7968fd1fbf470255d3158cc29fde37b2497e0d5a6c1980705b8ec7ef899f92f16827d5a8eb0c0028000f000000000000002f6803027df42f500ca29e45d17404f099f0fe11f22c3775f4df65c73d49020993ddc943febc2bab58806a415083dbe31943ad00215fa3c8a2b17f951520e8e21556a79075e86c9fb1f6ca9beb574e2ec6b2934f5b48c65b0d10330ff291081353ab7c434d79e1fb07b1048878e896911b676fb64b7db8c8671c933faf2491a18468646e9d319a593a055ed975a1bfb9dffce69c00040040000400050016b5294c8308b90ba517db2066b981dda8a636e3f54d617846c16f430ca1dce117bf0c19020c6e4763a6b3c6914d54002d01118086099a0002681009e92e19d459c65ced362d1edf2a8769a06cd44eb4a31ad4bbf069f9448abf50ff315fb884bafd7c454f4eb6af56b881d0d8957899ca5ccbaeb674350242e8de35b1303b18f8ee60accbd7e1e7f739ed49dda01c2a4c7d081baef38b76800dc7424b0846bcc499a60d5cb32ce4a04c4cc845f4dc160162064e4750d051a07a2433038ac59e3cfdbe871df88423226051cca8a36d1f36410def209a34f5d7c0cc80b0924210176909a37519ae8c6b7181a89fb33685146cee8a3fcdb82cea7968c79ccad99709d64a3a2ce8709a97222c72df972900de7c4047d0d4b1b4f704002a803e00f900cb60ab30bbda861904c27cdbc329a7ad18461d84e18b114c27bcf983f6c015302f2623309fff985f7821d894579a48a305981e4e7532ed4d86f40000000000bfb9152a9a4b9cd9251181a1be942d7d9b4479a72bd7b98dea3b5932bb4818202b6c4e222848d67df44d8856b34e656eb3d618a8db3277c9134f658ecad8800ff782e8d8cc986f30e297a0efd8f11bb6acb87513bebeedbb07c7e71efdf462b03918e621c69cb2470497c2bf4d28c34d48b8b3ac4ff06decfc946ee72bd6abaf4b1839691ca3e3277fa952b705f7cc1bd40800058004001b800fd10bd0d59a3ed37eb0f6e8a4e856174df49dfabe798531eec20e3ead542b717bb2fb49e00ac3c621a99187d8ff92284b4e111cdee70986406f35627dfbf42fee60b120a3489468a5702f577481379bd9c6383feee18d74daec546372baf4b7293a13726668ec2942ac9b6bf6f64ee086459ec87d9dad89b11405d2624401b520f275360055f3b7c3941c243198675c11a3b75eb23e9568a80d912f4dcd4de1d3192637bf4d3b6aa8a42de8caadf36c9d8e6651b9eea1544870ef28d300b548cbc8cc44973151d36ba33dce725015cbdafc1b4fc3c9c57aef9af9b3a9c12d14f5888ad793ec6585316298bf3d810c59064d489d6c757a1990d61df110db1b93fd2ac11bba52b1db8a6174169336c6609e2f6b3fc6ac5a0a542e4339f8bb515fbbc30e4c8729ea07d98e7644c4c2c019fbbb7fb375cb842b8ebe736b1ee1d5dc62773682b7750936f820065f625c783577bf3563d49b941e24afbbcc3e83b5b49252cf7f7d8cacfad8750f35646d022f828ae6432d40ee052d0529772e209efbf8cd6222a909affab16d0e88c9225932e54615a6d5ffee532fe46cb17ccce10b62aac205d4e52be2ef9c0758e34d72c5be07aae5f0d478d6b5457d53fa4b4eb200cb0b01963296cc2c02fdd9632d337190e3e9f7b0e553791c4221311bfba7c819406ace25db71a1ad67630c030e4ff8ec7597825a7cc4311da1937a57de70e44a2204f456e28938d87d9125b9f7fa188860dbfb34a07477773ca879ae56f51488627cb4f87959aafbc11b40cd67a27d3666725964c09207abbcb5f6ee167ac510c8d654b36a2857beba2f1289f357e2a5f90e66d34033c206a19406e4b50b8706828f0afd126e12ce1b985fb4959b03a9304d8df902bd9bbce6b4bd898fdf7ee17ed3c64ef00610afbe8c0176c148e94a0ae9400ab28ff069e6cf8b84be5248929766b9ef696894c45f3ce132b367bad19ae9b0e7625905cf43007912d8059c00d179114dddfdbb8251b0744a482cd5f79e93899f44bb47e131d5601e65e253630619e94da49d160e386752ca8357b96cd19f1d0cbb441aaf3f97b1d950f0231212ac56d096e66cd64b895d284a4a0e73b174bde3f737d2a9c7a665266f3fc5e154a4722c8574df1bb50b1bc9c421d010a3b1407dbef44944f475c401fb7b9805c13e0645c946c469437bf377fa6f8112596543ca2d84b82edcac3feea587550d6715c9b8841bbd237bb8273cab16a9b671c255b7581dc3411154911a06f456c6b87cd4b6e40a9729332a798049a9da3961324992d21c94cf222aaae34b9dab61818ca0b614e88810704532e8fcf3ca07c8fb3b5483878c437f2b7b65e868fa0da01a663d935c317bdf7964e715078726e615a7513ce22bc0abc8df94e84324a25ac13c934f3e6cb5efba9f827797c89a79aceee93bf8ccfb7beae31eab8eb9632ed67402389d34b6b6977aff4c16ae2abdf89d2a496d9bb1549e83a977fd4bda7eb30aef79c463d5a7a00a9259e0cfa8ca4c555880ff90223ce72716718d3b117b72d71cef5fa1b0a80078d351f3680d9d43998209fb6465fcbed2d2e8dfbaa4164dbc2653665c36c0016636e9be0fb5e863496a2dfc93faccf4667e32c09e0b3325bbcf100219855c5121f8bd832bbd3911e19549ebb553df291990fb0fbaa310b5e5b4bb2adb4ffe35b49e3a2e43a570e760e1e9d6ef2aa4762ae8f384f94d97d3f84ec39655a8dcdee01000eb122b5a2e1369fb2e1918309c02f4c693e906faad6398584d92e94dad3fa0ddd28d2f8b9acbef233fa853857b3e5dd5bf2a6000329b5851cfbc2c385c1c97866560544cdebdd65c3d6d77b730aa5204e91680a4ce467a2804efec62c8e8ccd54cf5ea6e08524eabc1a595aa07bf6f75ad44d5c2b399f9f5960ec9898eb1aa6e2af90cb1987f93600a0fe1475adac9c374067abaf313306976d1afef5ae61d1df7536c18d430b45d260f23dc2527d576ae9f645a5b8fcede0c174806e7bd2a9f03d142bd74a379c35a470dfb20521d745589ecfc4057abdc0d55f9cfd2a114007c221309537f13397458b7fc3d2459258f3cabba39a0e4fda7fa6ae2ccb2d6fe9c3b6b10ec8a516c87d767fc6df9e70557b2caa82fe5f77392574c43a91d4c9ea0cd4a38444036b4ec1cb413f8908b3d89330ebb2c51dfd7ab4f1899b7633b509fc7f25b3b871fe0dd133c57b3c104008072006eb31c50328eb94cf01b17bf5a8c10fc964b1f835d53c59bb5415dd10ff9ee4fabaa9ba18d177695504a8a36073d47be82b19dd5f1c29189b36dad5c39288e27e2259bb73094c1c679c25a27df729fc373581e5c9d0528254e73035d1b69d1d21f22c3aa78c1fbb6c4e7b781b6455769b1afb40fce6f2f54302dfe2fb7db144cb5959093d8650af00e73f4a411dc63262f95c361a6407351b7a2a589f4ba203961c579d37995aa19b862740d183545250e03a4cde090a1c65e494ae5979da86e91cbbc9b54850c34b81e65b66b3115ecdc89c52ee229e636765c3a185b5844ddff1ef9fb608f3c1beac796cbba812ea4f61c0e3ab6c6d6f48ec3a056bf4aec5ec554894bb53685f01b38c4c2f012accd2f821c177e4ba6eae9f310dd5343920aaafae377d0ef3d1248f4e13aa39d297aea7799bee1356bfc108ea75ff6319d47f01d09eea5aeeecae5d00433c2997cda06a0fbf7f59d0c78f623155e10f6f34491b9d247618df28aee373fd9a910533fda71716e6b1e57a5bd83572c2efb1b191d4ba8aaa6dc39b8e3e1d76c59b1e7c6e43428f19de846524ae93db71917571d1a43c62cd878f062ac9dc0c3804727390d927ad7f988b9873ee037eabcb79a9f819ed282daf8d9a7ae1c74eae868e066e335447ff59c9307550b3bda0bf41d112c3334a13c3722b60917703a957e6c4d317f32326fb94638590f21bc5af62ce9de97000be1b030b9c1419a9ef3fab6fc4a50a5f6d28d9d825d141fca19a3dd54fc147990a9d698ea93063fae7e218ecb4fea309864eda4510bd9801fc3d7ace5a73b56716a314d04b473caf8ffbd24f883783ceaccb9eb467ea7d505b4359aeb8e22f02e86aee9fd930de36feb20f2898fb03c2f9a2628a7cb4b094ed3985ffeea7613fe86e2b4a7ef47ba5e6a76b99dcbba209a6d3866ed25903e1094e7d9caeb7feb59865eaebf15a5101d2ab9daca75399f6331009e3fd5affbdb2c5219465bd03cf299f43f7e6ef662ee3013214b4f35aea1f2094d0ad5ac4b2cc6fdb496fb73c81de5ff8ca27b49af4db76f1b4da7ef95dbe1af89da58aea064f5b6b7cd13ab52abc819d2ff9bcd1c39f1a01b3bec8265e19c83768f030c27313c9b6947c707ebfa7bdfc156a1c3cb8bfb2f8fb9ddc2425cba900c0e46cd1f9b06c2ff8eea48e59027a1088f19a1a43aa0f27ba301b5750c384125dcc854ca8a43eb1bea4c0dc3f12052a9067f4269c6176002c96dab3a6f7a2d98d3f0a4ea37b37d2b9d8373280d1fd839719cad86adecfc134a768435f433f2dec43697a7b19007bea9bad4a9c6495b024bbd2ac400a911c2e06ae777e1f792d6a4e32a0321131dfd6c83488000f0248b8c771489a5ec7f91f3b8cc3fa811f09afc01c52290e94b2d3e96f8e0547e2bc230ebac18a5ddadc499ca246465052b52d78bb901c9640e8d36906d1b6d53d1123577197121ac1cefc45f8d834b3481a111e0d2b8d8f18b3f9cd9bf053fda762a24ab77f6109a1d014c7c0b86e0960ee61761dd9dd77f1940bbed12637e94dd461625b708b4197210300d1c7b544a6eda619e3a5eff30cddb5a3a01c157bd69fbe71e62f3bd84f9e8663af203957ebed4071b9f0d8369f5b4ffdde73be44612172cd93052685941497a87b30b8dfac329444b1ccd4a8498e1bb85ccf59f2581f692380090a66eb4004122f7bf758034a280f3932f793643fc51035b16fd90e1906ab2c79aee4205a68c1dc0781b2719cb57d780635c3e4b7e7c6acccbc68ac5978a44bc248d07a2e8f8f9b7924d8de418e8c12abdad8cb678af19b67deac4b3eb677c9cd62b823ed9026f30d14d6ef110e7e573f59e73c5634b959c801c4073ff100743c0e9ec12d78fd28760f7492780ffd0f6a3bd0e4eb3fdc044286be023b16260112a54469b67e8ab83ed452e1eb79fc5c61cfd6bd04023dc60c8436e1d6e752fbb744f9f4c08c8dc9fe35eda33f8fef345942f58ee41b06d25ed7f74401476cae72a09b3f8af92c12044f67453215efaf9cb592a58cf34c36c44332e025242e6ef566e3c003be271fbd92ee14b5dbfe7038ad3928a9f4d4fe5e9dfc82a3b21c35d5947d9380c6afc3dcb902a29b4800e9cfe4d6c6da32aff45cd97f3608b68045e2d4f585195f4009fc0feb8698acd21eb6db495c54ca3cda37ddba98f30d613852b66be4f96e2979197757d9a58ce9280bde9497fab5d4bef30c171f97e87fc6e18e11d05b91b17d544910dda7001d52ad4a93419516d87b2dcde230b576cace99b816ad2e87d2124aa2e9733fb3c1c62db8e63d3d1f756c7f0411640542eb837e8c8195a959fb05fabfcc5102e4f47e89365dbdfe9e287e1dfbdd40558a375ea552e4c5a3bbdbcf406848e5b57765368beaa23f3b49ca4249fd8d3bb69461502ade5cb3a89dd503ec18ea10864f17d44ee873b185a75e332529697dc327b21dac00fcd7af1d940537a689e9d3157c0d1e1c23d8e37ea51382111a342558eb16005578fb6e82ade0ad2c75a1ca5d684d2a8b2e8390c1bc1f63fe680aefcc2ceb192dc6995066e9b8c18fe104b10236942fe61aabaa09a3ead8e27560d040b962c6f00eff00bc81dc30b58da3d5056085fca562c9c8223e7e39bcf56a564b5bef9b7db4c1d124b24190069c33bf4189669962837e38202349f0f6ee2829b78d9f28d5dcd3cd6402827155e32272839a2add55c8d7ca62a3b307cec70c420359208d17f78b26ebb69e8d928e55505299a19a7637dff57fb02e560e6a73fbeb8887dbd05458adc5f1f9269cdf68a5a2e0d320019b50c5e653d188230ab107d94acf2948ed344e03615c7902cca8fda25c1b60a19fe0e2b5eff2dd2efa8b213fc3eebda94bbec21f80a952e9664c4a050877cb930b05feaac97223d00caad5f8cc6db40e4b2231b7d169b242031de6ee3c55985246608e35653846ce0284b6dd480c38ad899b7259cd7093eb9500b8e13a79579db6e921a0b0dea5afeb866a655b435af23a7c29082c2a8e25338e17286a12bae4ca098c0dfeea2f5a9f9f311079ec1d05577cec51993cc148d093b512df896dbd7dc789a213059e88757b0af24a8ba8ff2624698be0080c289c6e1c6f66066b20599c920f56e46c7fc343cc1b112369a1235667d7920ad13f71aa37bda1a630b21d81682322610d3800e4ab91365f5fa19744bab0fc5e9154741da60c57c3f57706dbc266818f48465312233501016e4567339cce75305b2614a00296664fd95fe877088c61da96e0151cd0bb5533562856b393c3aeb59b1df082f9eddd0b4637bfd0c99ffb06832bbfd645a90be8669539f57e224aaceed0a7d59a22ea56186c767d1a177d4f91ae2fba6993f74adec099156bcf816e0b2b51b5e3c2a275ce7975cb4de5179028e620234a44138330717e2a7075c6b07a005f50a167b4a9d237a10186904c722f46b9a0e46e8596897cbc7e840b7e53bb1c3c4a806b8847310bb8ee46a80a19b4f192e2b9784f01741fe23ab14440f6eb08a372855571ba95fd2f5b768b1182f1cf57ab51b54cca8c0d95eaf57aa593c6f05a836845bc13a5188961a76d100ed004dbfd022dc789050f11d69ba364bce69b7796256cb35cfccb3ec59a009b8b2e32203da8863d0a8588776648babfb18e7534e1891c99f79536d895df086c34acf644336c0dd43aec64195fc4bd88a1b46c89f6761cab6e1527dbd95bd9155e1197ff541b388c9ac0d028f7fa79bf720bc2ddd9d687c03541b54e07c627aea020667419aba7732f4ed9e23c04071186a9bbd586e20c6fd5ae0d8e8c85163de973ed575bc3135b4400d06db44762921ed7dd343055de1f34ea23f396a296afdbbee3396b87e1f672d2883ef87faa10000001800df8008008980040050800c00c0000d000000000000000800c300070000007ce85e0504c9afc8d344557de0ab06fd1ce3d315ef43dbf10b96f7b92b0785af45bf610ee26dc2633dd8646369b5ca37504b3f8a27d4b1f3e6465ca34ba7c61f7e289a312b1f13a12eb109e704de0896e6f7badfae7e7db23c4ee7557b04e04cb2514a551eb348d6a5b7eeadcd33e9ac0158bbb769e33ea75376e35d1f5a20249b01d6f00410f7c603eaa829cee26621f49283f8c49cdd8ed3ac893928e8d7eb0f69959a6add0800a900", @ANYRES32, @ANYBLOB="be0e3295e7e9a3a28b222472eed6a664b98fee0475ac3660e4367b690b4b04d9d9d8657c7f2229a8ddd98d1ff550d9730a688d831c499ccee2f9edd1801fd30e126fd14c69a12946d2af9b7640ebdc2dc53756aca27223565afa8df6bed13d178027466a0a8f664fcfa9c11d9c0dea84299bc72bf46b9bcf6f8506c9b88e31395e67246802d64292e0d108b68a2e6e0da394346fa327e70c32e383e209d7a8801f9219a2daf23f770bf662969088df94b1fe9c5050791675e922f0371dec97f97a90673727c5433837cc3d5d933be525a44e339dc4454fe2721c5014a679d6c3b6fe491cd4197aa5bbdacb1f505db9d1d9aaa115eb23857f201f03217bddccc5cd21f3bb544c5c75c70cd6391aa2b0aa86f19cab63ca03ce597312a1257bf30547e88de9d47730ff371032b724472866f858e383b2b58f5ea4203245403760d1e04d098976cb0aaa1badcc1f4a0c114ec64d36f0a58b5388fc789f3fd063cc7840b89d5b3f7e4d0d1d8de786d8bd56bab33791b1e8fa7305b8c6d745b4e97cde53c38d45de661c71be03d6f5b87c2331a00db3c87db355c6c91612f349b2a64d02250507eaa7a8a3377df5e2af5345520727443161fef3811279eef0b7de7030649d926ba93ef707bad0c8a58b4d964602c40fddd52f0cad2604910b17eb34627310e234b3be4937df5ca427bc0fcbd8d75c42c40f95bfd3716247c1d62d330dbc4ead5d116e19d406cd9c537f3031cb4ef4a88626199ff1b51cc838a5873e1f1f6c47ec7289de46b12148f7d190f611e20d10566d85535ed7049bca3a29a5bb7eb17f48e059108e6fcbdd9caa2159aa515cb5d736a995f22bc7060fe3dd1dcf5df9e31ed9482ddfaa21ea8e1676c885082ebc120775df324398f7f2d2dc962f9219b410d312a350de45e5cc968e5c8747e047a98e7b35fe6babd457148b8a36a0715a1d69a7f92776648d52df25e06c8459d1a77a0efe039ec574b4b4ed6ac6794d924fc0c74ec22ad3978bfda16399cb2bc986d7450d678dc0998033bc87f4ae262c12b318c1ec7f2fba1c3a86f9d8f7a87f855c9bcb7c1b623eaefe6490ea6bf0fe1cb74f0dcbcad4f8d84ab5c1e40c599efdd627e403f7f705ba40172aab5cb52ccf4b6a51d7bdf3795b738aade36e530a0b32c26c51620135ef70a854ac0f2b29e56fe82a0f38a223eb27f3fb7e661fc76a6b65d930ad73ed597976e727cc44170a23921f5cff020121b19388a3c1faa546e8dd178753bdc30f09097b0f6e9618908938751643764f1c3afb438f87759c67c563714771118b2604f65f3dd45169bd75982550ac38ca1e6426da5183d762ffa8bd2ff59f16a45db5ab9e202421b41126c81b1b90864c4c710aa71dfd0aff7b4a34cd068901184b747a80b65d5870a7edf3b7cb6a64b552fd57ee280261efaac509de8a03912203cfe1d3fcfefcb06a2d043f02fa1044ee0144b69812b021601babd01f45b9c4b0b6bae625829ec4483cce2f9ed4c09c9008d65d2d6f6c9301fe581778dc4ffe9047a8ed20f35087bdca7cfa4bad0629f1fe3b812b0852f0397b2fbc9c728064fa185a01b7cc137cd8d8853adffd4ac76d8aab42351b75cb3e23c384d479c73aa6a8f0b2a71009e617d0c623c8a89bb494a0001b5e1d7fed8615dd964d1ade408a45dfb6c24006be7cc0d6f1e0134ead35475ea1b0998a28a0670a8b5117b247adfb82f6374b66f53b48d69dd9168aa4bbd37e31a74fe034bc8605fa5fb388781e2908393936b21bd38ded85ac4c6fceafd9d101c897a402fe2322f222763fbccadd888d8f995c7f5951be3155ee91e40129af4d5855d0a42a782b08ddc76ec5f9db6b0a30e6a400e128696efbf3dc44c2511954b2514b259b8d4936bd5f6e41d04d8fcb0c549c7e4719bf4597a7966b39174080e4c973d6e35995f915aeebb428568f26ec1b076ea88888fb87716a58afb0da3f0d106b115300bc8832d703040784b5569feb484416a8759a41c7f223ae3055d321fb1a1419da3c1785cade8b243cf4ac2b8947655c6e40edcff03ec9687e405e1de107712ae29a069f5400a826ac2f856ef5b1954c3286668a5319d4f9418326b731f0addd185f5df097d99aaec44f8ea03d6771bdf4fb1c3ed503a4b3196d97c1afd319e136fe34f6bdd795d2a5390ed6190162779748729e5b415d20f0b8da1066fc5c271680b4d16b93ee99adc8d0727a0ae1caf39446986313ba36038289083be51f4a16f56ff7fd0c28b93cd2d0b10ac1f3128f4415a12215c03f273cb7cd6d43464350f8494929ca9a3b1aea3d7fe079de03e89897f325f3dab56c0d27399c3c678a5359a84140351b0f6a9600c2acd5b34d22305b5cf273940ddee2e2c60c7e49436ec0ee7691c6836a561d76c77182d8df95d488c58cf4d08960bd20b57d7981e08c2adc5f505439e2c380f82a305de04aaf1d7a04ea1b6e32d2ef64a1e3c0efb80fb65bdf518ebf7de9f42b36c118087ea43c28068c4b6e3aaee0aeab202aed879b8b48371c168de992d02fd7c86d50dab728df47456a0cdd3047eaa76142a1c981229a8a51a3ee58a3e6ef25775b37a4feb45aca5b0f4ec218de6f1f52aec667cfeef3fa20dc31e43e3dbcc0ba56b9ad379ba1bc66cbbb028a3e9b67550dc0163481678be0dedf9dc7b5cc5129ec9c9802824e38da0dccc4eb6743924f84a4572ef0755f61ebecb520773d0ddd9c1e8ff3c1559b1d85f86d29be48510dd171409758edbbca3344e29ca9ee37628ac56303b357960dfdff9aabd701403b486631748fe937b1411d261987aa3bbcec220a6988b14dcaa804e9bd028e099642b1e006384f5107ef22f2e8288e50e928d7972eaaf823d2753cf0d2bd152651d532e2bbbcc1f2e41770ab2f5a0b37f385875cc7885b3975e57e0c2af0ee10df39983275bdc83348ed91b90cb5b5df59f68ed450e8aceea3259c30dcc99e2115243950035ca5f2a4f5bd1212a67eac86c46cbb63ec2cc8fdc58f4b51d6fe6b93d438f0ac6c915e93fc9d613b9815b469b885575fa620c2cd3dfed056a1c5324d8514b319b653b9cbc8a7798cbbd9bd9c304f97eb7489d8721c22f038a97f79f3fde6348463b952a7463e353ff96f531301e40085acf90fd08a726c1e54765c7aa9ce165c4dfd8160a8381a85e956e2b91a4b4ec90c820e2a8bf68a3340c046782476756312c9f283e5b86e7fbdc53ade4990d311629541c59bfc00d4cbee9acf326b46571d2189ea56df920d498587a92ab5c8b643814ee7b4a1d1694f0f88b174661486a4e7ab8dafc8418c231b1e6ec083474fefc2b34eb62063a8715699a048af9e8aacc8fe7c62a2862407005f3a1ea3dd8d2c62323e13306bf2c0529ed7744b0747ac2348df8baf211c81adc7d9e3afef198bb3d6c8a0dacda8254076f70a82067af9317165bb96a2b645c63d8e852912687481afc9198bbf57fbda2c6b63981f86df6eaab5a401612df46939d0acab1ed02620201d6348c873da61c460d3181882ec38d9eeaf283a21eaa6a0481741d098aa85d78e2c6c2381c87ba5675e71793f3f6be4fa17401701714e9ee396b46a37b8aee7777c52e12cc70fd20c4f8a282bfe1d5f75097d99aac302502594966efaafb32f86eaf18b6a0f89c1cf0f5b2a579f7b328f04daba58138bcc74d37ecf9c38f2b154919885441a2cb16120a08a809f40caa271a9088b37c23fc177dfde4883cf9b73b8527544392e51356c005e9a4e1f4749aebe5fc5fef845245ed01390a2e5992e5d97d9120a918d00711624ade1bffcc45959e7835e05996d86ded2ef26e7d49702ec726b5467dc62c7d62d6f0d6626a4862c9e65d6a860f0d81ffc0bb2a86c6f44ef53372c60fd0e089d578a6184b31cbbc48361898fca7ce52b77bfa3ae0517ec7f7edbe71df3265dcb5a86ec6451a036a6f9de5b8618d6b6f55deec918de011c0778c180ea419bcacb39cef00b562eb5b191da9b1a22d4f0500fd4250eedeae8759ced201f7dfaf3abf3bcf73013d7bf047674c0f243db1a5e2536d9aea6bd868e0efb185a03f0eb49e2e2662a75970cff174309550afbf2f3b2ed15e006659f717ed37ad291722cbe37fb6a0dbaf1534b60bfc9c1d77bea34b7a11b9d06fbeb8028afd586a9b98a7357b7784d7348f69f24fc2d29004d84b9661470940eb3e4bc0259d9f7a5e11c24697fb82564363a88107a6bb4a1fb05a56359d13fa439d5f21f5eb87580d53cdf66a92efb87f71e660cd4e5f339e0bef8b6e33e384c54f7896da9a2ff86d4feeca571f01414c1ad8f36c4a224ab79507033ce079b2d6b2bf6fdf4b888f17c6fd67c3c5d73cd82027d346d2bbabaee47e89b5fee1129b9767d256c3c607bf6ec09d3fb0dfefc9d1322978793c168943bc4449e42cebf4044e2863ff06659a14c949d65a2bea8bdfe9d8f7f49b63d9aa455809b904da2f1e9ed2bdf52dc615a851a1fb10a75560fe3381b41d6cbf726099bb8e6ae9994a4e3dfb570498b90e6d7148b561d4e2c0ad6a6d83b3ba1fb7c385a0f90aa29a105e07ce43f29de8b20ee0f3905553a377f5ced48391b18b81dc1fa6dec4f53991c89b0cd4aa8bdea0dfc633fb278188953f835b81d56fd99dfa65070088ec729e58ff878176672f3aaf6e2a598a33afda6aede0ccbae3b6c0db3d1dbcc59c5ac16ad1ffa8b2b7f8673507ddf41352d40b398ca5cd49d1979ca9b6be12ee4c9e3127256b461cd28c8c28b9e73fde3a22de57dfadfaefc06dd602264c876aa1216e91d92fe7ea487e7c55f964a3002936ff6e63dc1e2c5083d1097a982667d80bfc4c5775f10698a520866de2471a6e67b57a37bc8c7fa75b151ab95ef44bff8603e857f253c6153c5ebd1fc58af17c27153a9595376628d66aa44fd4b6405c30cb299e4a1f1963e92e6c51a3c76ba1fc1ae05f8bfee9433da7d14a0fc4fe55b9fd6f1dbc1c20cac8be5dbf8f5d7fa0945ec68e96f970b7f39d441b3055b4f7f1475d320e58da400b62452fd08e85602102084b4f5a64066c078645cf7152cb1ede263b037e6c2541d89311c5194f2bdfbe69fbd99663fcd7b8c18b4d7b181d96715a5b828144a1defb6a9011410296bc101797e2a9954060987ba4282b13630f6246eeaa481ae83dbdc4dc7d6b98bbed4c3785457a1a24f013736936552cb2fff9aece4327a6ab785ace713e6dfda4b03c241fae48bca247999f0013d1382d09ff2d5c9e80427756c9e5a7e90fc43bc9673601c06b9fdc9e700af169a9a7ed703b5362f9944ddbc2eb33fe262ee23ae810a502964eaa8d4d9373c46b5ccc45c11aa9b30d812cbf68e5f98335106c43b6a830e0d1d978e03d2948193dfa4718eae28cb1d59b9229b6611e9cd0a22a97c8aea1bac5c202f9f7def7e628db212f807f09c69f31e84cb86ae879e614c5064314acfacea52ff7a71df839f09a0e78bda84976c07422329da77ef57664fc90b2c604a5dd67f11e3fc9506190aa3d8535051faf195900b48b1006960da26eb33d7a4037bb652bd1a908ead28942f7e38d481e373df832129c351b415d59a800be3976448b9cf94e3812017c842caa9bd5e7518f55bb2b493e7053863ff21b5b0b51dedb477e40b04d68e0223f53b0f59a6b4065e9aab41e48f4797fa469d2dedcde9f2f8115f4d1acdc65dc248e06fe2724782b039ce75fbdc3f1560b75cb240b4b52664f7d2887c4839f4877811ff2479f00334497eea53efa491d943f666e2e257821f94bb468846ab0e35320fe6b62f23cfbc9df35fc1864209bad848d2d3a60ce95c5788525e4904000a807d01058008", @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=r5, @ANYBLOB='\x00'], 0x51c0}, 0x1, 0x0, 0x0, 0x20004094}, 0xc000)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
setsockopt$sock_int(r4, 0x1, 0x5, &(0x7f0000000000), 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
socket$kcm(0x10, 0x2, 0x0) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r9 = socket$igmp6(0xa, 0x3, 0x2) (async)
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) (async)
write$tun(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) (async)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r7)
accept$netrom(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @rose}, [@default, @bcast, @default, @netrom, @default, @netrom, @rose, @default]}, &(0x7f0000000140)=0x48) (async)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYRES32=r1, @ANYRES16=r2, @ANYBLOB="140004006e696376663000ffffffff000000000008000500080000"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x240048d0)

16.417990396s ago: executing program 2 (id=6215):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2000c82520376373de26dc78c06362eb078314fa67dada29b78731ee00230076e849c9ec7560af6cfe713099a0019b091d96f6307d3442a5bceb76c04399786c9d8885f8f486a489b97ff1273df2a7316eb6522b07040a4b658af378384ee3710b1cb6d0a4ca4af7068531cbd86e125825e1890f4019aa2a249b826004922a6f773b334ad9505cf72f126ee6b65c917569ce8cb2b3b9768c000000000b3e7dd4d94ed5594e59e235321497eb904e47a8efd730283cf703c20a91a7dd0a4d0221ef23", @ANYRES32=0x0, @ANYBLOB="ae1e020000000000"], 0x20}}, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, 0x0, 0x0)
sendto$inet6(r2, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xa}, 0x1c)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, 0x0, &(0x7f0000000200))
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r6=>0xffffffffffffffff})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r8=>0x0})
recvfrom$ax25(r4, &(0x7f0000000180)=""/35, 0x23, 0x10000, &(0x7f00000001c0)={{0x3, @bcast, 0x1}, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r9, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x44, r7, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050)
sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r10 = socket$inet(0x2, 0x1, 0x0)
close(0x3)
socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet_opts(r10, 0x0, 0x4, 0x0, 0x0)
setsockopt$inet_opts(r10, 0x0, 0x4, 0x0, 0x0)
socket$unix(0x1, 0x2, 0x0)

16.413275669s ago: executing program 1 (id=6216):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x17)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000140), 0x0}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000140), 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00'})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan1\x00', <r7=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x34, r4, 0x60b, 0x0, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}]}, 0x34}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r9=>0x0})
sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xfffffe42, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00002bbd7000ffdbdf2513000000f1ffff0500826dd2800796bd05cfe90fa38566ce39000008000600b36ae499249befeb78fcdbc9b2", @ANYRES32=r9, @ANYBLOB="08002c0006000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000085}, 0x24008805)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r11=>0x0})
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="4dadfef954e92a19e70200", @ANYRES32=r11, @ANYBLOB="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"], 0x28}}, 0x0) (async)
sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="4dadfef954e92a19e70200", @ANYRES32=r11, @ANYBLOB="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"], 0x28}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r14)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r15)

16.41173751s ago: executing program 0 (id=6217):
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000006c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000006c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x103}}], 0x18}, 0x0)
socket$kcm(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4008000)
socket$unix(0x1, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) (async)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000340), 0x2, 0x0)
write$cgroup_type(r4, 0x0, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
socket$inet(0x2, 0x1, 0x0)
r5 = socket(0x2a, 0x2, 0x0)
socket(0x848000000015, 0x805, 0x0)
socket$packet(0x11, 0x3, 0x300) (async)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000100)) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0)
ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000080)={'dummy0\x00', 0x3})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), r9)
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000240)) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000240)={'team0\x00', <r11=>0x0})
ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r10, @ANYBLOB="05043fbd7000fddbdf250100000008000100", @ANYRES32=r11, @ANYBLOB="9800028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000240004000900090603000000feff00070000000000000005f60000009e0c0907"], 0xb4}, 0x1, 0x0, 0x0, 0x20000401}, 0x44084)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)

16.287429619s ago: executing program 1 (id=6218):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="14005a8010000180040001000600020081"], 0x30}}, 0x0) (async)
socket$inet6(0xa, 0x1, 0x84) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x9e}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x125}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) (async)
r6 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000380)={'wlan1\x00', 0x8000}) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r4, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r13 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r12, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r13, @ANYBLOB="0100000000000000000001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb54208000500000000007c0008807800008006000500002000004800098028000080060001000a0000001400020000000000000000000000ffffac1414bb050003000200000000000080010001000200000008000200e00000010500030000000000240001"], 0xd0}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010)
r14 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) (async)
ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000340)={0x0, 0x1}) (async)
sendmsg$kcm(r14, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r15 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r15, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e)

16.286611965s ago: executing program 1 (id=6219):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r6=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$alg(r4, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cbc(camellia),sha256-asm)\x00'}, 0x58)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xc, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}]}}]}, 0x38}}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r10 = socket$unix(0x1, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x64b0e8cf2c8e828d}, 0x24044884)

16.279053748s ago: executing program 0 (id=6220):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@assoc={0x18, 0x117, 0x4, 0xbf}], 0x18}, 0x0)
sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000840)=""/127, 0x7f}], 0x2}}], 0x1, 0x60, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0500839eca00000000000600000008000300", @ANYRES32=r4, @ANYBLOB="08000500020000000500530001000000"], 0x2c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240))
r5 = socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r7, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000020)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r8, 0x5133c4bf67cd92a7}, 0x38)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0)
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r6, &(0x7f0000000080)=ANY=[], 0xfdef)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r11, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet(r11, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0xfcfd}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800)

15.548835419s ago: executing program 2 (id=6221):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r1, @ANYRES32, @ANYRESOCT=r0], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000ddaa"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0)
unshare(0x8040300)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r3], 0x24}, 0x1, 0x0, 0x0, 0x46804}, 0x84)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000080), 0x4)
socket$nl_rdma(0x10, 0x3, 0x14)

1.208743264s ago: executing program 32 (id=6220):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@assoc={0x18, 0x117, 0x4, 0xbf}], 0x18}, 0x0)
sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000840)=""/127, 0x7f}], 0x2}}], 0x1, 0x60, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0500839eca00000000000600000008000300", @ANYRES32=r4, @ANYBLOB="08000500020000000500530001000000"], 0x2c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240))
r5 = socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r7, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000020)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r8, 0x5133c4bf67cd92a7}, 0x38)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0)
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r6, &(0x7f0000000080)=ANY=[], 0xfdef)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r11, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet(r11, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0xfcfd}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800)

1.168630381s ago: executing program 33 (id=6219):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r6=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$alg(r4, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cbc(camellia),sha256-asm)\x00'}, 0x58)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xc, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}]}}]}, 0x38}}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r10 = socket$unix(0x1, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x64b0e8cf2c8e828d}, 0x24044884)

0s ago: executing program 34 (id=6221):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r1, @ANYRES32, @ANYRESOCT=r0], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000ddaa"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0)
unshare(0x8040300)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r3], 0x24}, 0x1, 0x0, 0x0, 0x46804}, 0x84)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000080), 0x4)
socket$nl_rdma(0x10, 0x3, 0x14)

kernel console output (not intermixed with test programs):

0x60e/0x790
[  477.823890][T25581]  ? __pfx_genl_rcv_msg+0x10/0x10
[  477.823901][T25581]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  477.823923][T25581]  netlink_rcv_skb+0x208/0x470
[  477.823935][T25581]  ? __lock_acquire+0xab9/0xd20
[  477.823950][T25581]  ? __pfx_genl_rcv_msg+0x10/0x10
[  477.823963][T25581]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  477.823993][T25581]  ? down_read+0x1ad/0x2e0
[  477.824005][T25581]  genl_rcv+0x28/0x40
[  477.824016][T25581]  netlink_unicast+0x82f/0x9e0
[  477.824037][T25581]  ? __pfx_netlink_unicast+0x10/0x10
[  477.824056][T25581]  ? netlink_sendmsg+0x642/0xb30
[  477.824064][T25581]  ? skb_put+0x11b/0x210
[  477.824079][T25581]  netlink_sendmsg+0x805/0xb30
[  477.824096][T25581]  ? __pfx_netlink_sendmsg+0x10/0x10
[  477.824108][T25581]  ? aa_sock_msg_perm+0xf1/0x1d0
[  477.824119][T25581]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  477.824130][T25581]  ? __pfx_netlink_sendmsg+0x10/0x10
[  477.824141][T25581]  __sock_sendmsg+0x21c/0x270
[  477.824157][T25581]  ____sys_sendmsg+0x505/0x830
[  477.824172][T25581]  ? __pfx_____sys_sendmsg+0x10/0x10
[  477.824189][T25581]  ? import_iovec+0x74/0xa0
[  477.824204][T25581]  ___sys_sendmsg+0x21f/0x2a0
[  477.824217][T25581]  ? __pfx____sys_sendmsg+0x10/0x10
[  477.824251][T25581]  ? __fget_files+0x2a/0x420
[  477.824260][T25581]  ? __fget_files+0x3a0/0x420
[  477.824277][T25581]  __x64_sys_sendmsg+0x19b/0x260
[  477.824291][T25581]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  477.824316][T25581]  ? do_syscall_64+0xbe/0x3b0
[  477.824329][T25581]  do_syscall_64+0xfa/0x3b0
[  477.824339][T25581]  ? lockdep_hardirqs_on+0x9c/0x150
[  477.824354][T25581]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  477.824363][T25581]  ? exc_page_fault+0x9f/0xf0
[  477.824380][T25581]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  477.824390][T25581] RIP: 0033:0x7f45d7f8ebe9
[  477.824401][T25581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  477.824410][T25581] RSP: 002b:00007f45d8d72038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  477.824423][T25581] RAX: ffffffffffffffda RBX: 00007f45d81c5fa0 RCX: 00007f45d7f8ebe9
[  477.824431][T25581] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  477.824438][T25581] RBP: 00007f45d8011e19 R08: 0000000000000000 R09: 0000000000000000
[  477.824446][T25581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  477.824453][T25581] R13: 00007f45d81c6038 R14: 00007f45d81c5fa0 R15: 00007fffa6365e88
[  477.824472][T25581]  </TASK>
[  478.035868][T25583] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  478.044099][T25583] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  478.047306][T25583] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  478.051875][T25583] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  478.054867][T25583] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  478.057413][T25583] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  478.061809][T25583] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  478.065222][T25583] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  478.068570][T25583] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  478.076630][T25583] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  478.080402][T25583] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  478.086155][T25583] tipc: Resetting bearer <eth:syzkaller0>
[  478.167554][T25590] tipc: Disabling bearer <eth:syzkaller0>
[  478.347242][T25603] 8021q: adding VLAN 0 to HW filter on device bond1
[  478.372046][T25603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5094'.
[  478.383569][T25603] batman_adv: batadv0: Adding interface: ipvlan3
[  478.385965][T25603] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1596 would solve the problem.
[  478.395867][T25603] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active
[  478.400975][T25603] batman_adv: batadv0: Removing interface: ipvlan3
[  478.438558][T25607] netlink: 248 bytes leftover after parsing attributes in process `syz.0.5095'.
[  478.541729][T25615] netlink: 27 bytes leftover after parsing attributes in process `syz.2.5097'.
[  478.620799][T25623] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5099'.
[  478.675553][T25625] tipc: Failed to remove unknown binding: 66,1,1/2832432701:2125113519/2125113521
[  478.952370][T25634] netlink: 'syz.0.5104': attribute type 12 has an invalid length.
[  479.125721][T25637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5105'.
[  479.250348][T25639] lo speed is unknown, defaulting to 1000
[  479.351408][T25646] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  479.357433][T25646] CPU: 1 UID: 0 PID: 25646 Comm: syz.2.5108 Not tainted syzkaller #0 PREEMPT(full) 
[  479.357453][T25646] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  479.357461][T25646] Call Trace:
[  479.357467][T25646]  <TASK>
[  479.357474][T25646]  dump_stack_lvl+0x189/0x250
[  479.357497][T25646]  ? __pfx_dump_stack_lvl+0x10/0x10
[  479.357513][T25646]  ? __pfx__printk+0x10/0x10
[  479.357547][T25646]  ? kernfs_path_from_node+0x2f/0x290
[  479.357562][T25646]  ? kernfs_path_from_node+0x250/0x290
[  479.357575][T25646]  ? kernfs_path_from_node+0x2f/0x290
[  479.357592][T25646]  sysfs_warn_dup+0x8e/0xa0
[  479.357606][T25646]  sysfs_do_create_link_sd+0xc0/0x110
[  479.357623][T25646]  device_add_class_symlinks+0x1cf/0x240
[  479.357641][T25646]  device_add+0x475/0xb50
[  479.357658][T25646]  wiphy_register+0x1ba6/0x28d0
[  479.357690][T25646]  ? __pfx_wiphy_register+0x10/0x10
[  479.357708][T25646]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  479.357728][T25646]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  479.357746][T25646]  ieee80211_register_hw+0x3425/0x4080
[  479.357773][T25646]  ? ieee80211_register_hw+0x1461/0x4080
[  479.357793][T25646]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  479.357838][T25646]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  479.357862][T25646]  ? __hrtimer_setup+0x187/0x210
[  479.357874][T25646]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  479.357895][T25646]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  479.357932][T25646]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  479.357945][T25646]  ? trace_kmalloc+0x1f/0xd0
[  479.357958][T25646]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  479.357974][T25646]  ? kstrndup+0xbf/0x160
[  479.357994][T25646]  hwsim_new_radio_nl+0xea4/0x1b10
[  479.358011][T25646]  ? __pfx___nla_validate_parse+0x10/0x10
[  479.358040][T25646]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  479.358066][T25646]  ? __nla_parse+0x40/0x60
[  479.358088][T25646]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  479.358110][T25646]  genl_family_rcv_msg_doit+0x215/0x300
[  479.358131][T25646]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  479.358157][T25646]  ? bpf_lsm_capable+0x9/0x20
[  479.358172][T25646]  ? security_capable+0x7e/0x2e0
[  479.358196][T25646]  genl_rcv_msg+0x60e/0x790
[  479.358214][T25646]  ? __pfx_genl_rcv_msg+0x10/0x10
[  479.358226][T25646]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  479.358252][T25646]  netlink_rcv_skb+0x208/0x470
[  479.358268][T25646]  ? __lock_acquire+0xab9/0xd20
[  479.358288][T25646]  ? __pfx_genl_rcv_msg+0x10/0x10
[  479.358304][T25646]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  479.358338][T25646]  ? down_read+0x1ad/0x2e0
[  479.358353][T25646]  genl_rcv+0x28/0x40
[  479.358366][T25646]  netlink_unicast+0x82f/0x9e0
[  479.358391][T25646]  ? __pfx_netlink_unicast+0x10/0x10
[  479.358410][T25646]  ? netlink_sendmsg+0x642/0xb30
[  479.358421][T25646]  ? skb_put+0x11b/0x210
[  479.358434][T25646]  netlink_sendmsg+0x805/0xb30
[  479.358453][T25646]  ? __pfx_netlink_sendmsg+0x10/0x10
[  479.358467][T25646]  ? aa_sock_msg_perm+0xf1/0x1d0
[  479.358482][T25646]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  479.358495][T25646]  ? __pfx_netlink_sendmsg+0x10/0x10
[  479.358507][T25646]  __sock_sendmsg+0x21c/0x270
[  479.358527][T25646]  ____sys_sendmsg+0x505/0x830
[  479.358552][T25646]  ? __pfx_____sys_sendmsg+0x10/0x10
[  479.358573][T25646]  ? import_iovec+0x74/0xa0
[  479.358591][T25646]  ___sys_sendmsg+0x21f/0x2a0
[  479.358607][T25646]  ? __pfx____sys_sendmsg+0x10/0x10
[  479.358651][T25646]  ? __fget_files+0x2a/0x420
[  479.358662][T25646]  ? __fget_files+0x3a0/0x420
[  479.358681][T25646]  __x64_sys_sendmsg+0x19b/0x260
[  479.358697][T25646]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  479.358719][T25646]  ? rcu_is_watching+0x15/0xb0
[  479.358736][T25646]  ? do_syscall_64+0xbe/0x3b0
[  479.358749][T25646]  do_syscall_64+0xfa/0x3b0
[  479.358758][T25646]  ? lockdep_hardirqs_on+0x9c/0x150
[  479.358772][T25646]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.358783][T25646]  ? exc_page_fault+0x9f/0xf0
[  479.358799][T25646]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.358837][T25646] RIP: 0033:0x7f8f1258ebe9
[  479.358851][T25646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  479.358861][T25646] RSP: 002b:00007f8f133e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  479.358876][T25646] RAX: ffffffffffffffda RBX: 00007f8f127c5fa0 RCX: 00007f8f1258ebe9
[  479.358885][T25646] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  479.358894][T25646] RBP: 00007f8f12611e19 R08: 0000000000000000 R09: 0000000000000000
[  479.358902][T25646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  479.358910][T25646] R13: 00007f8f127c6038 R14: 00007f8f127c5fa0 R15: 00007ffd5574c5f8
[  479.358933][T25646]  </TASK>
[  479.567744][T25639] netlink: 'syz.0.5106': attribute type 2 has an invalid length.
[  479.580341][T25639] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5106'.
[  479.840634][T25663] netlink: 'syz.2.5113': attribute type 2 has an invalid length.
[  479.840657][T25664] netlink: 'syz.2.5113': attribute type 2 has an invalid length.
[  479.850231][T25661] netlink: 'syz.1.5114': attribute type 1 has an invalid length.
[  479.884470][T25664] veth37: entered promiscuous mode
[  479.928529][T25665] veth39: entered promiscuous mode
[  479.951534][T25668] netlink: 'syz.0.5115': attribute type 11 has an invalid length.
[  480.174364][T25679] netlink: 'syz.2.5118': attribute type 6 has an invalid length.
[  480.528272][T25712] 8021q: adding VLAN 0 to HW filter on device bond53
[  480.954216][T25733] veth29: left promiscuous mode
[  480.956741][T25733] veth31: left promiscuous mode
[  481.515163][T25753] validate_nla: 6 callbacks suppressed
[  481.515178][T25753] netlink: 'syz.1.5136': attribute type 10 has an invalid length.
[  481.737580][T25752] mac80211_hwsim hwsim1014 wlan1: entered allmulticast mode
[  481.782547][T25768] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  481.785856][T25768] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  481.845376][T25777] netlink: 'syz.0.5141': attribute type 9 has an invalid length.
[  482.061506][T25795] netlink: 'syz.0.5146': attribute type 11 has an invalid length.
[  482.425240][T25806] vlan1: entered promiscuous mode
[  482.427627][T25806] vlan1: entered allmulticast mode
[  482.429964][T25806] veth0_vlan: entered allmulticast mode
[  482.432918][T25806] openvswitch: netlink: nsh attr 20 is out of range max 3
[  482.435940][T25806] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  482.440770][T25805] lo speed is unknown, defaulting to 1000
[  482.445801][T25806] netlink: 'syz.2.5148': attribute type 2 has an invalid length.
[  482.617432][T25822] __nla_validate_parse: 11 callbacks suppressed
[  482.617447][T25822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5152'.
[  482.814250][T25829] netlink: 'syz.1.5153': attribute type 1 has an invalid length.
[  482.817250][T25829] netlink: 'syz.1.5153': attribute type 1 has an invalid length.
[  482.876605][T25836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5156'.
[  482.899666][T25837] netlink: 'syz.1.5153': attribute type 1 has an invalid length.
[  482.970362][T25837] 8021q: adding VLAN 0 to HW filter on device bond53
[  482.974099][T25839] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  482.991534][T25829] bond53: (slave wlan0): Opening slave failed
[  483.097762][T25845] lo speed is unknown, defaulting to 1000
[  483.139604][T25851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5158'.
[  483.208953][T25856] netlink: 'syz.0.5162': attribute type 9 has an invalid length.
[  483.215835][T25856] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5162'.
[  483.300472][T25862] netlink: 'syz.1.5161': attribute type 2 has an invalid length.
[  483.327762][T25853] lo speed is unknown, defaulting to 1000
[  483.365581][T25858] lo speed is unknown, defaulting to 1000
[  483.371921][T25861] netlink: 'syz.2.5163': attribute type 2 has an invalid length.
[  483.449485][T25861] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5163'.
[  483.568123][T25856] sctp: [Deprecated]: syz.0.5162 (pid 25856) Use of struct sctp_assoc_value in delayed_ack socket option.
[  483.568123][T25856] Use struct sctp_sack_info instead
[  483.617154][T25871] netlink: 'syz.1.5165': attribute type 1 has an invalid length.
[  483.644050][T25860] infiniband syz0: set down
[  483.646829][T25860] infiniband syz0: added veth1_to_hsr
[  483.682548][T25871] 8021q: adding VLAN 0 to HW filter on device bond54
[  483.697229][T25871] veth33: entered promiscuous mode
[  483.703105][T25871] bond54: (slave veth33): Enslaving as a backup interface with a down link
[  483.708465][T25871] bond54: (slave veth33): Releasing backup interface
[  483.710280][T25860] RDS/IB: syz0: added
[  483.718066][T25860] smc: adding ib device syz0 with port count 1
[  483.725528][T25860] smc:    ib device syz0 port 1 has pnetid 
[  483.811384][T25878] mac80211_hwsim hwsim895 wlan0: entered promiscuous mode
[  483.813871][T25878] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  483.957886][T25883] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5168'.
[  484.705595][T25902] netlink: 'syz.0.5173': attribute type 11 has an invalid length.
[  484.708989][T25902] netlink: 'syz.0.5173': attribute type 11 has an invalid length.
[  484.712490][T25902] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5173'.
[  484.978039][T25908] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.5174'.
[  485.276274][T25919] 8021q: adding VLAN 0 to HW filter on device bond1
[  485.360778][T25923] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5179'.
[  485.375950][T25923] mac80211_hwsim hwsim184 wlan0: left promiscuous mode
[  485.823530][T25940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5186'.
[  486.275951][T25984] lo speed is unknown, defaulting to 1000
[  486.921663][T26011] lo speed is unknown, defaulting to 1000
[  487.073784][T26021] mac80211_hwsim hwsim1119 wlan1: entered allmulticast mode
[  487.216166][T26024] validate_nla: 15 callbacks suppressed
[  487.216180][T26024] netlink: 'syz.1.5206': attribute type 10 has an invalid length.
[  487.255570][T26021] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  487.258608][T26021] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  487.372949][T26027] netlink: 'syz.2.5207': attribute type 33 has an invalid length.
[  487.487523][T26032] netlink: 'syz.0.5209': attribute type 9 has an invalid length.
[  487.768601][T26045] vlan1: left promiscuous mode
[  487.771478][T26045] vlan1: left allmulticast mode
[  487.773309][T26045] veth0_vlan: left allmulticast mode
[  487.798518][T26045] mac80211_hwsim hwsim895 wlan0: left promiscuous mode
[  487.810789][T26045] veth37: left promiscuous mode
[  487.812758][T26045] veth39: left promiscuous mode
[  487.870689][T26053] netlink: 'syz.2.5212': attribute type 21 has an invalid length.
[  487.873898][T26053] __nla_validate_parse: 8 callbacks suppressed
[  487.873906][T26053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5212'.
[  487.880867][T26053] netlink: 'syz.2.5212': attribute type 21 has an invalid length.
[  487.884321][T26053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5212'.
[  487.948151][T26061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5217'.
[  488.013480][T26068] netlink: 'syz.0.5220': attribute type 6 has an invalid length.
[  488.025456][T26068] netlink: 'syz.0.5220': attribute type 12 has an invalid length.
[  488.028758][T26068] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.5220'.
[  488.058698][T26073] mac80211_hwsim hwsim673 wlan0: entered promiscuous mode
[  488.064981][T26073] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  488.128664][T26073] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  488.141201][T26073] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  488.155122][T26073] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  488.163549][T26073] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  488.170335][T26073] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  488.178006][T26073] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  488.183770][T26073] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  488.189990][T26073] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  488.196565][T26073] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  488.206796][T26076] netlink: 248 bytes leftover after parsing attributes in process `syz.0.5223'.
[  488.352424][T26079] lo speed is unknown, defaulting to 1000
[  488.458540][  T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  488.468638][  T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  488.513245][T26080] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  488.517300][T26080] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  488.787161][T26100] lo speed is unknown, defaulting to 1000
[  488.889451][T26102] netlink: 'syz.0.5229': attribute type 2 has an invalid length.
[  488.897615][T26102] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5229'.
[  489.254732][T26114] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  489.268453][T26114] syzkaller0: entered promiscuous mode
[  489.281584][T26114] syzkaller0: entered allmulticast mode
[  489.331463][T26116] netlink: 'syz.1.5233': attribute type 6 has an invalid length.
[  489.343947][T26114] tipc: Resetting bearer <eth:syzkaller0>
[  489.379951][T26113] tipc: Resetting bearer <eth:syzkaller0>
[  489.404947][T26113] tipc: Disabling bearer <eth:syzkaller0>
[  489.420624][T26116] netlink: 'syz.1.5233': attribute type 12 has an invalid length.
[  489.423937][T26116] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.5233'.
[  489.509019][T26127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5234'.
[  489.722013][T26135] lo speed is unknown, defaulting to 1000
[  489.788140][T26139] 8021q: adding VLAN 0 to HW filter on device bond1
[  489.866552][T26144] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5239'.
[  489.883456][T26146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5240'.
[  491.271818][T26175] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  491.342643][T26229] lo speed is unknown, defaulting to 1000
[  491.662162][T26239] 8021q: adding VLAN 0 to HW filter on device bond1
[  491.889418][T26246] workqueue: Failed to create a rescuer kthread for wq "bond51": -EINTR
[  492.066433][T26257] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  492.464575][T26267] 8021q: VLANs not supported on wg1
[  492.735847][T26282] lo speed is unknown, defaulting to 1000
[  492.774874][T26284] validate_nla: 3 callbacks suppressed
[  492.774888][T26284] netlink: 'syz.2.5274': attribute type 10 has an invalid length.
[  492.993575][T26294] __nla_validate_parse: 11 callbacks suppressed
[  492.993585][T26294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5277'.
[  493.208454][T26299] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5279'.
[  493.397924][T26319] sctp: [Deprecated]: syz.0.5282 (pid 26319) Use of struct sctp_assoc_value in delayed_ack socket option.
[  493.397924][T26319] Use struct sctp_sack_info instead
[  493.408823][T26319] netlink: 'syz.0.5282': attribute type 21 has an invalid length.
[  493.417498][T26319] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5282'.
[  493.531005][T26332] lo speed is unknown, defaulting to 1000
[  493.548977][T26334] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5284'.
[  493.574082][T26334] mac80211_hwsim hwsim673 wlan0: left promiscuous mode
[  493.590777][T26334] veth33: left promiscuous mode
[  493.593139][T26334] mac80211_hwsim hwsim1119 wlan1: left allmulticast mode
[  493.615014][T26328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5284'.
[  493.644158][T26336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5287'.
[  493.650288][T26336] netlink: 'syz.2.5287': attribute type 12 has an invalid length.
[  493.732453][T26342] lo speed is unknown, defaulting to 1000
[  493.790827][T26344] bond1: option mode: unable to set because the bond device is up
[  493.809014][T26344] bond1: (slave macvlan19): Enslaving as a backup interface with a down link
[  493.852845][T26344] bond1: (slave macvlan19): Releasing backup interface
[  494.070465][T26342] netlink: 'syz.1.5288': attribute type 2 has an invalid length.
[  494.085098][T26342] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  494.107057][T26342] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5288'.
[  494.431118][T26369] netlink: 'syz.2.5294': attribute type 1 has an invalid length.
[  494.434033][T26369] netlink: 'syz.2.5294': attribute type 1 has an invalid length.
[  494.540725][T26377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5296'.
[  494.542638][T26369] netlink: 'syz.2.5294': attribute type 1 has an invalid length.
[  494.577621][T26369] 8021q: adding VLAN 0 to HW filter on device bond51
[  494.599990][T26369] bond51: (slave wlan0): Opening slave failed
[  494.633836][T26369] vlan2: entered allmulticast mode
[  494.637277][T26369] bond51: (slave vlan2): Opening slave failed
[  494.902986][T26399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5302'.
[  495.398625][T26433] lo speed is unknown, defaulting to 1000
[  495.577887][T26440] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5309'.
[  495.862361][T26465] mac80211_hwsim hwsim1048 wlan1: entered allmulticast mode
[  495.870859][T26455] netlink: 'syz.2.5313': attribute type 9 has an invalid length.
[  497.084280][T26523] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  497.087471][T26523] CPU: 0 UID: 0 PID: 26523 Comm: syz.2.5330 Not tainted syzkaller #0 PREEMPT(full) 
[  497.087483][T26523] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  497.087488][T26523] Call Trace:
[  497.087492][T26523]  <TASK>
[  497.087496][T26523]  dump_stack_lvl+0x189/0x250
[  497.087511][T26523]  ? __pfx_dump_stack_lvl+0x10/0x10
[  497.087520][T26523]  ? __pfx__printk+0x10/0x10
[  497.087532][T26523]  ? kernfs_path_from_node+0x2f/0x290
[  497.087540][T26523]  ? kernfs_path_from_node+0x250/0x290
[  497.087547][T26523]  ? kernfs_path_from_node+0x2f/0x290
[  497.087556][T26523]  sysfs_warn_dup+0x8e/0xa0
[  497.087567][T26523]  sysfs_do_create_link_sd+0xc0/0x110
[  497.087575][T26523]  device_add_class_symlinks+0x1cf/0x240
[  497.087585][T26523]  device_add+0x475/0xb50
[  497.087594][T26523]  wiphy_register+0x1ba6/0x28d0
[  497.087611][T26523]  ? __pfx_wiphy_register+0x10/0x10
[  497.087643][T26523]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  497.087656][T26523]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  497.087667][T26523]  ieee80211_register_hw+0x3425/0x4080
[  497.087683][T26523]  ? ieee80211_register_hw+0x1461/0x4080
[  497.087695][T26523]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  497.087705][T26523]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  497.087718][T26523]  ? __hrtimer_setup+0x187/0x210
[  497.087725][T26523]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  497.087736][T26523]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  497.087758][T26523]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  497.087765][T26523]  ? trace_kmalloc+0x1f/0xd0
[  497.087774][T26523]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  497.087782][T26523]  ? kstrndup+0xbf/0x160
[  497.087794][T26523]  hwsim_new_radio_nl+0xea4/0x1b10
[  497.087804][T26523]  ? __pfx___nla_validate_parse+0x10/0x10
[  497.087821][T26523]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  497.087836][T26523]  ? __nla_parse+0x40/0x60
[  497.087848][T26523]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  497.087860][T26523]  genl_family_rcv_msg_doit+0x215/0x300
[  497.087871][T26523]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  497.087884][T26523]  ? bpf_lsm_capable+0x9/0x20
[  497.087893][T26523]  ? security_capable+0x7e/0x2e0
[  497.087906][T26523]  genl_rcv_msg+0x60e/0x790
[  497.087916][T26523]  ? __pfx_genl_rcv_msg+0x10/0x10
[  497.087924][T26523]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  497.087939][T26523]  netlink_rcv_skb+0x208/0x470
[  497.087947][T26523]  ? __lock_acquire+0xab9/0xd20
[  497.087959][T26523]  ? __pfx_genl_rcv_msg+0x10/0x10
[  497.087968][T26523]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  497.087985][T26523]  ? down_read+0x1ad/0x2e0
[  497.087993][T26523]  genl_rcv+0x28/0x40
[  497.088000][T26523]  netlink_unicast+0x82f/0x9e0
[  497.088013][T26523]  ? __pfx_netlink_unicast+0x10/0x10
[  497.088023][T26523]  ? netlink_sendmsg+0x642/0xb30
[  497.088028][T26523]  ? skb_put+0x11b/0x210
[  497.088037][T26523]  netlink_sendmsg+0x805/0xb30
[  497.088047][T26523]  ? __pfx_netlink_sendmsg+0x10/0x10
[  497.088055][T26523]  ? aa_sock_msg_perm+0xf1/0x1d0
[  497.088062][T26523]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  497.088069][T26523]  ? __pfx_netlink_sendmsg+0x10/0x10
[  497.088076][T26523]  __sock_sendmsg+0x21c/0x270
[  497.088087][T26523]  ____sys_sendmsg+0x505/0x830
[  497.088097][T26523]  ? __pfx_____sys_sendmsg+0x10/0x10
[  497.088108][T26523]  ? import_iovec+0x74/0xa0
[  497.088118][T26523]  ___sys_sendmsg+0x21f/0x2a0
[  497.088126][T26523]  ? __pfx____sys_sendmsg+0x10/0x10
[  497.088148][T26523]  ? __fget_files+0x2a/0x420
[  497.088155][T26523]  ? __fget_files+0x3a0/0x420
[  497.088165][T26523]  __x64_sys_sendmsg+0x19b/0x260
[  497.088174][T26523]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  497.088186][T26523]  ? rcu_is_watching+0x15/0xb0
[  497.088195][T26523]  ? do_syscall_64+0xbe/0x3b0
[  497.088204][T26523]  do_syscall_64+0xfa/0x3b0
[  497.088209][T26523]  ? lockdep_hardirqs_on+0x9c/0x150
[  497.088219][T26523]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  497.088226][T26523]  ? exc_page_fault+0x9f/0xf0
[  497.088236][T26523]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  497.088242][T26523] RIP: 0033:0x7f8f1258ebe9
[  497.088250][T26523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  497.088256][T26523] RSP: 002b:00007f8f133e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  497.088264][T26523] RAX: ffffffffffffffda RBX: 00007f8f127c5fa0 RCX: 00007f8f1258ebe9
[  497.088269][T26523] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  497.088274][T26523] RBP: 00007f8f12611e19 R08: 0000000000000000 R09: 0000000000000000
[  497.088278][T26523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  497.088282][T26523] R13: 00007f8f127c6038 R14: 00007f8f127c5fa0 R15: 00007ffd5574c5f8
[  497.088294][T26523]  </TASK>
[  497.476099][T26537] syzkaller0: entered promiscuous mode
[  497.478590][T26537] syzkaller0: entered allmulticast mode
[  497.510120][T26537] net_ratelimit: 58 callbacks suppressed
[  497.510129][T26537] syzkaller0: mtu less than device minimum
[  497.519041][T26535] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  497.604845][T26543] lo speed is unknown, defaulting to 1000
[  497.963925][T26560] IPv6: sit2: Disabled Multicast RS
[  497.971865][T26560] sit2: entered allmulticast mode
[  498.372027][T26572] __nla_validate_parse: 14 callbacks suppressed
[  498.372041][T26572] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5340'.
[  498.520735][T26581] netlink: 'syz.2.5341': attribute type 9 has an invalid length.
[  499.054444][T26600] 8021q: adding VLAN 0 to HW filter on device bond1
[  499.071653][T26602] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  499.076584][T26602] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5348'.
[  499.280429][T26611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5349'.
[  499.375458][T26616] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5353'.
[  499.388390][T26618] bond1: (slave macvlan20): Enslaving as a backup interface with a down link
[  499.397998][T26618] bond1: (slave macvlan20): Releasing backup interface
[  499.480006][T26616] nbd4: detected capacity change from 0 to 127
[  499.487916][   T56] block nbd4: Receive control failed (result -32)
[  499.663855][T26628] netlink: 248 bytes leftover after parsing attributes in process `syz.0.5357'.
[  499.760682][T26639] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5359'.
[  499.765937][T26640] netlink: 'syz.0.5359': attribute type 9 has an invalid length.
[  500.080997][T26644] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5360'.
[  500.148433][T26649] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5360'.
[  500.353207][T26654] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5363'.
[  500.358200][T26654] mac80211_hwsim hwsim1048 wlan1: left allmulticast mode
[  500.426572][T26657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5363'.
[  500.678413][T26660] 8021q: VLANs not supported on nlmon0
[  500.819801][T26664] 8021q: VLANs not supported on nlmon0
[  500.851476][T26666] netlink: 'syz.2.5366': attribute type 9 has an invalid length.
[  501.169799][T26683] netlink: 'syz.1.5368': attribute type 3 has an invalid length.
[  501.172528][T26683] netlink: 'syz.1.5368': attribute type 2 has an invalid length.
[  501.180236][T26683] netlink: 'syz.1.5368': attribute type 2 has an invalid length.
[  501.306085][T26708] netlink: 'syz.1.5374': attribute type 1 has an invalid length.
[  501.312154][T26708] netlink: 'syz.1.5374': attribute type 1 has an invalid length.
[  501.493191][T26732] netlink: 'syz.2.5380': attribute type 8 has an invalid length.
[  501.605907][T26736] 8021q: adding VLAN 0 to HW filter on device bond54
[  501.610883][T26735] workqueue: Failed to create a rescuer kthread for wq "bond55": -EINTR
[  501.978616][T26762] netlink: 'syz.1.5387': attribute type 12 has an invalid length.
[  502.226843][T26771] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  503.696316][T26814] team0: Mode changed to "loadbalance"
[  503.732374][T26816] lo speed is unknown, defaulting to 1000
[  503.910808][T26828] validate_nla: 7 callbacks suppressed
[  503.910822][T26828] netlink: 'syz.0.5406': attribute type 25 has an invalid length.
[  504.218393][T26842] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  504.223432][T26842] CPU: 0 UID: 0 PID: 26842 Comm: syz.0.5410 Not tainted syzkaller #0 PREEMPT(full) 
[  504.223451][T26842] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  504.223460][T26842] Call Trace:
[  504.223466][T26842]  <TASK>
[  504.223472][T26842]  dump_stack_lvl+0x189/0x250
[  504.223496][T26842]  ? __pfx_dump_stack_lvl+0x10/0x10
[  504.223511][T26842]  ? __pfx__printk+0x10/0x10
[  504.223535][T26842]  ? kernfs_path_from_node+0x2f/0x290
[  504.223576][T26842]  ? kernfs_path_from_node+0x250/0x290
[  504.223589][T26842]  ? kernfs_path_from_node+0x2f/0x290
[  504.223607][T26842]  sysfs_warn_dup+0x8e/0xa0
[  504.223622][T26842]  sysfs_do_create_link_sd+0xc0/0x110
[  504.223638][T26842]  device_add_class_symlinks+0x1cf/0x240
[  504.223656][T26842]  device_add+0x475/0xb50
[  504.223673][T26842]  wiphy_register+0x1ba6/0x28d0
[  504.223706][T26842]  ? __pfx_wiphy_register+0x10/0x10
[  504.223723][T26842]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  504.223744][T26842]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  504.223762][T26842]  ieee80211_register_hw+0x3425/0x4080
[  504.223790][T26842]  ? ieee80211_register_hw+0x1461/0x4080
[  504.223813][T26842]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  504.223831][T26842]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  504.223854][T26842]  ? __hrtimer_setup+0x187/0x210
[  504.223866][T26842]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  504.223886][T26842]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  504.223926][T26842]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  504.223941][T26842]  ? trace_kmalloc+0x1f/0xd0
[  504.223956][T26842]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  504.223974][T26842]  ? kstrndup+0xbf/0x160
[  504.223996][T26842]  hwsim_new_radio_nl+0xea4/0x1b10
[  504.224015][T26842]  ? __pfx___nla_validate_parse+0x10/0x10
[  504.224045][T26842]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  504.224076][T26842]  ? __nla_parse+0x40/0x60
[  504.224098][T26842]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  504.224121][T26842]  genl_family_rcv_msg_doit+0x215/0x300
[  504.224142][T26842]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  504.224168][T26842]  ? bpf_lsm_capable+0x9/0x20
[  504.224185][T26842]  ? security_capable+0x7e/0x2e0
[  504.224209][T26842]  genl_rcv_msg+0x60e/0x790
[  504.224235][T26842]  ? __pfx_genl_rcv_msg+0x10/0x10
[  504.224250][T26842]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  504.224278][T26842]  netlink_rcv_skb+0x208/0x470
[  504.224294][T26842]  ? __lock_acquire+0xab9/0xd20
[  504.224314][T26842]  ? __pfx_genl_rcv_msg+0x10/0x10
[  504.224329][T26842]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  504.224364][T26842]  ? down_read+0x1ad/0x2e0
[  504.224380][T26842]  genl_rcv+0x28/0x40
[  504.224394][T26842]  netlink_unicast+0x82f/0x9e0
[  504.224419][T26842]  ? __pfx_netlink_unicast+0x10/0x10
[  504.224437][T26842]  ? netlink_sendmsg+0x642/0xb30
[  504.224447][T26842]  ? skb_put+0x11b/0x210
[  504.224463][T26842]  netlink_sendmsg+0x805/0xb30
[  504.224481][T26842]  ? __pfx_netlink_sendmsg+0x10/0x10
[  504.224496][T26842]  ? aa_sock_msg_perm+0xf1/0x1d0
[  504.224509][T26842]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  504.224522][T26842]  ? __pfx_netlink_sendmsg+0x10/0x10
[  504.224535][T26842]  __sock_sendmsg+0x21c/0x270
[  504.224582][T26842]  ____sys_sendmsg+0x505/0x830
[  504.224602][T26842]  ? __pfx_____sys_sendmsg+0x10/0x10
[  504.224624][T26842]  ? import_iovec+0x74/0xa0
[  504.224643][T26842]  ___sys_sendmsg+0x21f/0x2a0
[  504.224659][T26842]  ? __pfx____sys_sendmsg+0x10/0x10
[  504.224704][T26842]  ? __fget_files+0x2a/0x420
[  504.224716][T26842]  ? __fget_files+0x3a0/0x420
[  504.224736][T26842]  __x64_sys_sendmsg+0x19b/0x260
[  504.224752][T26842]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  504.224774][T26842]  ? rcu_is_watching+0x15/0xb0
[  504.224791][T26842]  ? do_syscall_64+0xbe/0x3b0
[  504.224806][T26842]  do_syscall_64+0xfa/0x3b0
[  504.224816][T26842]  ? lockdep_hardirqs_on+0x9c/0x150
[  504.224834][T26842]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  504.224846][T26842]  ? exc_page_fault+0x9f/0xf0
[  504.224865][T26842]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  504.224876][T26842] RIP: 0033:0x7f74f7d8ebe9
[  504.224889][T26842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  504.224900][T26842] RSP: 002b:00007f74f8ba6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  504.224914][T26842] RAX: ffffffffffffffda RBX: 00007f74f7fc5fa0 RCX: 00007f74f7d8ebe9
[  504.224923][T26842] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  504.224931][T26842] RBP: 00007f74f7e11e19 R08: 0000000000000000 R09: 0000000000000000
[  504.224939][T26842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  504.224947][T26842] R13: 00007f74f7fc6038 R14: 00007f74f7fc5fa0 R15: 00007fff0d404718
[  504.224966][T26842]  </TASK>
[  504.258798][T26844] mac80211_hwsim hwsim1119 wlan1: entered allmulticast mode
[  504.281370][T26846] netlink: 'syz.2.5411': attribute type 10 has an invalid length.
[  504.426949][T26853] mac80211_hwsim hwsim1119 wlan1: left allmulticast mode
[  504.443703][T26841] mac80211_hwsim hwsim1110 wlan1: entered allmulticast mode
[  504.533485][T26860] __nla_validate_parse: 19 callbacks suppressed
[  504.533495][T26860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5417'.
[  504.546143][T26860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5417'.
[  504.563125][T26865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5418'.
[  504.649818][T26874] mac80211_hwsim hwsim1110 wlan1: left allmulticast mode
[  504.671354][T26869] netlink: 'syz.2.5419': attribute type 10 has an invalid length.
[  504.674611][T26869] mac80211_hwsim hwsim1110 wlan1: entered allmulticast mode
[  504.723124][T26880] netlink: 'syz.2.5421': attribute type 11 has an invalid length.
[  504.981253][T26886] mac80211_hwsim hwsim673 wlan0: entered allmulticast mode
[  505.001794][T26888] lo speed is unknown, defaulting to 1000
[  505.025451][T26894] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  505.028749][T26894] syzkaller0: entered promiscuous mode
[  505.031232][T26894] syzkaller0: entered allmulticast mode
[  505.164911][T26899] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  505.175243][T26895] tipc: Resetting bearer <eth:syzkaller0>
[  505.176395][T26899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5425'.
[  505.194345][T26893] tipc: Resetting bearer <eth:syzkaller0>
[  505.208246][T26893] tipc: Disabling bearer <eth:syzkaller0>
[  505.307936][T26909] netlink: 248 bytes leftover after parsing attributes in process `syz.0.5428'.
[  505.433391][T26913] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5428'.
[  505.461053][T26918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5430'.
[  505.485165][T26911] 8021q: adding VLAN 0 to HW filter on device bond55
[  505.574195][T26920] mac80211_hwsim hwsim673 wlan0: left allmulticast mode
[  505.603816][T26924] lo speed is unknown, defaulting to 1000
[  505.653787][T26926] netlink: 'syz.0.5432': attribute type 2 has an invalid length.
[  505.662181][T26928] netlink: 'syz.1.5433': attribute type 10 has an invalid length.
[  505.908689][T26944] netlink: 'syz.1.5437': attribute type 6 has an invalid length.
[  505.913395][T26944] netlink: 'syz.1.5437': attribute type 12 has an invalid length.
[  505.915985][T26944] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.5437'.
[  506.262115][T26953] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5439'.
[  506.269238][T26953] vlan0: entered promiscuous mode
[  506.276599][T26953] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  506.295622][T26957] netlink: 'syz.1.5441': attribute type 1 has an invalid length.
[  506.296878][T26955] lo speed is unknown, defaulting to 1000
[  506.306925][T26957] netlink: 'syz.1.5441': attribute type 1 has an invalid length.
[  506.314677][T26957] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5441'.
[  506.338915][T26959] mac80211_hwsim hwsim1110 wlan1: left allmulticast mode
[  506.363670][T26959] netlink: 'syz.2.5442': attribute type 10 has an invalid length.
[  506.585303][T26973] mac80211_hwsim hwsim1119 wlan1: entered allmulticast mode
[  506.705807][T26984] tbf_change: 24 callbacks suppressed
[  506.705821][T26984] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  506.768374][T26982] lo speed is unknown, defaulting to 1000
[  507.258551][T27009] mac80211_hwsim hwsim1119 wlan1: left allmulticast mode
[  507.303869][T27012] bond0: entered promiscuous mode
[  507.306039][T27012] bond0: entered allmulticast mode
[  507.543045][T27027] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  507.546179][T27027] syzkaller0: entered promiscuous mode
[  507.548377][T27027] syzkaller0: entered allmulticast mode
[  507.563183][T27027] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  507.592803][T27027] tipc: Resetting bearer <eth:syzkaller0>
[  507.766120][T27027] tipc: Resetting bearer <eth:syzkaller0>
[  507.781414][T27027] tipc: Disabling bearer <eth:syzkaller0>
[  507.860792][T27041] lo speed is unknown, defaulting to 1000
[  507.965592][T27044] mac80211_hwsim hwsim1048 wlan1: entered allmulticast mode
[  508.549636][T27062] lo speed is unknown, defaulting to 1000
[  510.971117][T27124] mac80211_hwsim hwsim1048 wlan1: left allmulticast mode
[  511.230227][T27140] __nla_validate_parse: 13 callbacks suppressed
[  511.230242][T27140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5487'.
[  511.276669][T27130] validate_nla: 4 callbacks suppressed
[  511.276679][T27130] netlink: 'syz.2.5485': attribute type 2 has an invalid length.
[  511.313687][T27139] netlink: 'syz.0.5488': attribute type 2 has an invalid length.
[  511.343590][T27139] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5488'.
[  511.348916][T27139] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5488'.
[  511.426742][T27130] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5485'.
[  511.920190][T27158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5490'.
[  511.927191][T27168] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5493'.
[  511.990179][T27169] syzkaller0: entered promiscuous mode
[  511.993109][T27169] syzkaller0: entered allmulticast mode
[  512.231032][T27180] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5495'.
[  512.260915][T27177] netlink: 'syz.1.5494': attribute type 12 has an invalid length.
[  512.263567][T27177] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.5494'.
[  512.464237][T27182] netlink: 248 bytes leftover after parsing attributes in process `syz.1.5496'.
[  512.664257][T27184] netlink: 'syz.1.5497': attribute type 10 has an invalid length.
[  512.668851][T27184] netlink: 'syz.1.5497': attribute type 9 has an invalid length.
[  512.671708][T27184] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5497'.
[  512.883446][T27190] bond0: option active_slave: mode dependency failed, not supported in mode 802.3ad(4)
[  513.002297][T27209] macvlan20: entered promiscuous mode
[  513.004145][T27209] vlan0: entered promiscuous mode
[  513.198871][T27219] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  513.205119][T27219] syzkaller0: entered promiscuous mode
[  513.207193][T27219] syzkaller0: entered allmulticast mode
[  513.227977][T27219] tipc: Resetting bearer <eth:syzkaller0>
[  513.238589][T27218] tipc: Resetting bearer <eth:syzkaller0>
[  513.254357][T27218] tipc: Disabling bearer <eth:syzkaller0>
[  513.337364][T27225] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  513.341085][T27225] CPU: 1 UID: 0 PID: 27225 Comm: syz.1.5508 Not tainted syzkaller #0 PREEMPT(full) 
[  513.341097][T27225] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  513.341101][T27225] Call Trace:
[  513.341106][T27225]  <TASK>
[  513.341109][T27225]  dump_stack_lvl+0x189/0x250
[  513.341133][T27225]  ? __pfx_dump_stack_lvl+0x10/0x10
[  513.341142][T27225]  ? __pfx__printk+0x10/0x10
[  513.341155][T27225]  ? kernfs_path_from_node+0x2f/0x290
[  513.341163][T27225]  ? kernfs_path_from_node+0x250/0x290
[  513.341171][T27225]  ? kernfs_path_from_node+0x2f/0x290
[  513.341180][T27225]  sysfs_warn_dup+0x8e/0xa0
[  513.341189][T27225]  sysfs_do_create_link_sd+0xc0/0x110
[  513.341198][T27225]  device_add_class_symlinks+0x1cf/0x240
[  513.341209][T27225]  device_add+0x475/0xb50
[  513.341218][T27225]  wiphy_register+0x1ba6/0x28d0
[  513.341235][T27225]  ? __pfx_wiphy_register+0x10/0x10
[  513.341244][T27225]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  513.341257][T27225]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  513.341267][T27225]  ieee80211_register_hw+0x3425/0x4080
[  513.341282][T27225]  ? ieee80211_register_hw+0x1461/0x4080
[  513.341293][T27225]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  513.341302][T27225]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  513.341317][T27225]  ? __hrtimer_setup+0x187/0x210
[  513.341325][T27225]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  513.341336][T27225]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  513.341357][T27225]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  513.341365][T27225]  ? trace_kmalloc+0x1f/0xd0
[  513.341376][T27225]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  513.341385][T27225]  ? kstrndup+0xbf/0x160
[  513.341396][T27225]  hwsim_new_radio_nl+0xea4/0x1b10
[  513.341406][T27225]  ? __pfx___nla_validate_parse+0x10/0x10
[  513.341422][T27225]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  513.341435][T27225]  ? __nla_parse+0x40/0x60
[  513.341470][T27225]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  513.341484][T27225]  genl_family_rcv_msg_doit+0x215/0x300
[  513.341496][T27225]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  513.341510][T27225]  ? bpf_lsm_capable+0x9/0x20
[  513.341520][T27225]  ? security_capable+0x7e/0x2e0
[  513.341534][T27225]  genl_rcv_msg+0x60e/0x790
[  513.341562][T27225]  ? __pfx_genl_rcv_msg+0x10/0x10
[  513.341570][T27225]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  513.341585][T27225]  netlink_rcv_skb+0x208/0x470
[  513.341594][T27225]  ? __lock_acquire+0xab9/0xd20
[  513.341605][T27225]  ? __pfx_genl_rcv_msg+0x10/0x10
[  513.341613][T27225]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  513.341632][T27225]  ? down_read+0x1ad/0x2e0
[  513.341640][T27225]  genl_rcv+0x28/0x40
[  513.341647][T27225]  netlink_unicast+0x82f/0x9e0
[  513.341661][T27225]  ? __pfx_netlink_unicast+0x10/0x10
[  513.341671][T27225]  ? netlink_sendmsg+0x642/0xb30
[  513.341678][T27225]  ? skb_put+0x11b/0x210
[  513.341687][T27225]  netlink_sendmsg+0x805/0xb30
[  513.341697][T27225]  ? __pfx_netlink_sendmsg+0x10/0x10
[  513.341705][T27225]  ? aa_sock_msg_perm+0xf1/0x1d0
[  513.341712][T27225]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  513.341720][T27225]  ? __pfx_netlink_sendmsg+0x10/0x10
[  513.341726][T27225]  __sock_sendmsg+0x21c/0x270
[  513.341737][T27225]  ____sys_sendmsg+0x505/0x830
[  513.341748][T27225]  ? __pfx_____sys_sendmsg+0x10/0x10
[  513.341760][T27225]  ? import_iovec+0x74/0xa0
[  513.341769][T27225]  ___sys_sendmsg+0x21f/0x2a0
[  513.341778][T27225]  ? __pfx____sys_sendmsg+0x10/0x10
[  513.341801][T27225]  ? __fget_files+0x2a/0x420
[  513.341808][T27225]  ? __fget_files+0x3a0/0x420
[  513.341818][T27225]  __x64_sys_sendmsg+0x19b/0x260
[  513.341827][T27225]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  513.341839][T27225]  ? rcu_is_watching+0x15/0xb0
[  513.341849][T27225]  ? do_syscall_64+0xbe/0x3b0
[  513.341857][T27225]  do_syscall_64+0xfa/0x3b0
[  513.341864][T27225]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  513.341870][T27225]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  513.341880][T27225]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  513.341887][T27225] RIP: 0033:0x7f45d7f8ebe9
[  513.341894][T27225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  513.341900][T27225] RSP: 002b:00007f45d8d72038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  513.341909][T27225] RAX: ffffffffffffffda RBX: 00007f45d81c5fa0 RCX: 00007f45d7f8ebe9
[  513.341914][T27225] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005
[  513.341918][T27225] RBP: 00007f45d8011e19 R08: 0000000000000000 R09: 0000000000000000
[  513.341923][T27225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  513.341927][T27225] R13: 00007f45d81c6038 R14: 00007f45d81c5fa0 R15: 00007fffa6365e88
[  513.341939][T27225]  </TASK>
[  513.717665][T27235] mac80211_hwsim hwsim184 wlan0: entered promiscuous mode
[  513.722590][T27235] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  513.778603][T27239] netlink: 'syz.1.5513': attribute type 1 has an invalid length.
[  513.782190][T27239] netlink: 'syz.1.5513': attribute type 1 has an invalid length.
[  513.880329][T27239] netlink: 'syz.1.5513': attribute type 1 has an invalid length.
[  513.910636][T27239] 8021q: adding VLAN 0 to HW filter on device bond56
[  514.519819][T27280] netlink: 'syz.0.5520': attribute type 12 has an invalid length.
[  514.861084][T27301] 8021q: adding VLAN 0 to HW filter on device bond1
[  514.914396][T27309] netlink: 'syz.0.5526': attribute type 1 has an invalid length.
[  515.252466][   T33] audit: type=1800 audit(1757241924.073:6): pid=27320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5527" name="x000000000000000700000000000000000000007" dev="tmpfs" ino=9728 res=0 errno=0
[  515.275445][   T33] audit: type=1804 audit(1757241924.093:7): pid=27320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.5527" name="x000000000000000700000000000000000000007" dev="tmpfs" ino=9728 res=1 errno=0
[  515.405000][T27329] vlan0: left promiscuous mode
[  515.427414][T27329] bond0: left promiscuous mode
[  515.432191][T27329] bond0: left allmulticast mode
[  516.114242][T27350] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  516.117201][T27350] CPU: 1 UID: 0 PID: 27350 Comm: syz.2.5535 Not tainted syzkaller #0 PREEMPT(full) 
[  516.117217][T27350] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  516.117225][T27350] Call Trace:
[  516.117246][T27350]  <TASK>
[  516.117252][T27350]  dump_stack_lvl+0x189/0x250
[  516.117267][T27350]  ? __pfx_dump_stack_lvl+0x10/0x10
[  516.117276][T27350]  ? __pfx__printk+0x10/0x10
[  516.117289][T27350]  ? kernfs_path_from_node+0x2f/0x290
[  516.117298][T27350]  ? kernfs_path_from_node+0x250/0x290
[  516.117306][T27350]  ? kernfs_path_from_node+0x2f/0x290
[  516.117315][T27350]  sysfs_warn_dup+0x8e/0xa0
[  516.117324][T27350]  sysfs_do_create_link_sd+0xc0/0x110
[  516.117334][T27350]  device_add_class_symlinks+0x1cf/0x240
[  516.117344][T27350]  device_add+0x475/0xb50
[  516.117353][T27350]  wiphy_register+0x1ba6/0x28d0
[  516.117377][T27350]  ? __pfx_wiphy_register+0x10/0x10
[  516.117387][T27350]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  516.117399][T27350]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  516.117429][T27350]  ieee80211_register_hw+0x3425/0x4080
[  516.117449][T27350]  ? ieee80211_register_hw+0x1461/0x4080
[  516.117461][T27350]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  516.117471][T27350]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  516.117485][T27350]  ? __hrtimer_setup+0x187/0x210
[  516.117493][T27350]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  516.117504][T27350]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  516.117526][T27350]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  516.117534][T27350]  ? trace_kmalloc+0x1f/0xd0
[  516.117543][T27350]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  516.117552][T27350]  ? kstrndup+0xbf/0x160
[  516.117564][T27350]  hwsim_new_radio_nl+0xea4/0x1b10
[  516.117574][T27350]  ? __pfx___nla_validate_parse+0x10/0x10
[  516.117592][T27350]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  516.117607][T27350]  ? __nla_parse+0x40/0x60
[  516.117620][T27350]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  516.117632][T27350]  genl_family_rcv_msg_doit+0x215/0x300
[  516.117644][T27350]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  516.117657][T27350]  ? bpf_lsm_capable+0x9/0x20
[  516.117666][T27350]  ? security_capable+0x7e/0x2e0
[  516.117679][T27350]  genl_rcv_msg+0x60e/0x790
[  516.117690][T27350]  ? __pfx_genl_rcv_msg+0x10/0x10
[  516.117698][T27350]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  516.117713][T27350]  netlink_rcv_skb+0x208/0x470
[  516.117722][T27350]  ? __lock_acquire+0xab9/0xd20
[  516.117732][T27350]  ? __pfx_genl_rcv_msg+0x10/0x10
[  516.117741][T27350]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  516.117759][T27350]  ? down_read+0x1ad/0x2e0
[  516.117767][T27350]  genl_rcv+0x28/0x40
[  516.117775][T27350]  netlink_unicast+0x82f/0x9e0
[  516.117788][T27350]  ? __pfx_netlink_unicast+0x10/0x10
[  516.117798][T27350]  ? netlink_sendmsg+0x642/0xb30
[  516.117804][T27350]  ? skb_put+0x11b/0x210
[  516.117812][T27350]  netlink_sendmsg+0x805/0xb30
[  516.117823][T27350]  ? __pfx_netlink_sendmsg+0x10/0x10
[  516.117831][T27350]  ? aa_sock_msg_perm+0xf1/0x1d0
[  516.117839][T27350]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  516.117846][T27350]  ? __pfx_netlink_sendmsg+0x10/0x10
[  516.117853][T27350]  __sock_sendmsg+0x21c/0x270
[  516.117864][T27350]  ____sys_sendmsg+0x505/0x830
[  516.117874][T27350]  ? __pfx_____sys_sendmsg+0x10/0x10
[  516.117886][T27350]  ? import_iovec+0x74/0xa0
[  516.117895][T27350]  ___sys_sendmsg+0x21f/0x2a0
[  516.117904][T27350]  ? __pfx____sys_sendmsg+0x10/0x10
[  516.117927][T27350]  ? __fget_files+0x2a/0x420
[  516.117933][T27350]  ? __fget_files+0x3a0/0x420
[  516.117943][T27350]  __x64_sys_sendmsg+0x19b/0x260
[  516.117952][T27350]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  516.117964][T27350]  ? rcu_is_watching+0x15/0xb0
[  516.117973][T27350]  ? do_syscall_64+0xbe/0x3b0
[  516.117982][T27350]  do_syscall_64+0xfa/0x3b0
[  516.117988][T27350]  ? lockdep_hardirqs_on+0x9c/0x150
[  516.117997][T27350]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  516.118004][T27350]  ? exc_page_fault+0x9f/0xf0
[  516.118014][T27350]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  516.118021][T27350] RIP: 0033:0x7f8f1258ebe9
[  516.118029][T27350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  516.118035][T27350] RSP: 002b:00007f8f133e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  516.118044][T27350] RAX: ffffffffffffffda RBX: 00007f8f127c5fa0 RCX: 00007f8f1258ebe9
[  516.118050][T27350] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005
[  516.118054][T27350] RBP: 00007f8f12611e19 R08: 0000000000000000 R09: 0000000000000000
[  516.118059][T27350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  516.118063][T27350] R13: 00007f8f127c6038 R14: 00007f8f127c5fa0 R15: 00007ffd5574c5f8
[  516.118075][T27350]  </TASK>
[  516.513958][T27359] 8021q: VLANs not supported on nlmon0
[  516.636029][T27367] mac80211_hwsim hwsim895 wlan0: entered promiscuous mode
[  516.638576][T27367] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  516.766523][T27380] __nla_validate_parse: 12 callbacks suppressed
[  516.766533][T27380] netlink: 248 bytes leftover after parsing attributes in process `syz.1.5545'.
[  516.857795][T27376] validate_nla: 1 callbacks suppressed
[  516.857806][T27376] netlink: 'syz.2.5544': attribute type 12 has an invalid length.
[  516.864865][T27376] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.5544'.
[  516.874020][T27381] netlink: 'syz.0.5542': attribute type 10 has an invalid length.
[  516.897554][T27385] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.5546'.
[  516.975310][T27385] netlink: 248 bytes leftover after parsing attributes in process `syz.1.5546'.
[  517.231190][T27395] netlink: 'syz.1.5548': attribute type 10 has an invalid length.
[  517.275080][T27399] mac80211_hwsim hwsim673 wlan0: entered promiscuous mode
[  517.277684][T27399] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  517.343925][T27400] delete_channel: no stack
[  517.384668][T27403] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  517.388689][T27403] CPU: 0 UID: 0 PID: 27403 Comm: syz.2.5552 Not tainted syzkaller #0 PREEMPT(full) 
[  517.388700][T27403] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  517.388705][T27403] Call Trace:
[  517.388710][T27403]  <TASK>
[  517.388714][T27403]  dump_stack_lvl+0x189/0x250
[  517.388728][T27403]  ? __pfx_dump_stack_lvl+0x10/0x10
[  517.388736][T27403]  ? __pfx__printk+0x10/0x10
[  517.388748][T27403]  ? kernfs_path_from_node+0x2f/0x290
[  517.388757][T27403]  ? kernfs_path_from_node+0x250/0x290
[  517.388763][T27403]  ? kernfs_path_from_node+0x2f/0x290
[  517.388772][T27403]  sysfs_warn_dup+0x8e/0xa0
[  517.388780][T27403]  sysfs_do_create_link_sd+0xc0/0x110
[  517.388789][T27403]  device_add_class_symlinks+0x1cf/0x240
[  517.388799][T27403]  device_add+0x475/0xb50
[  517.388808][T27403]  wiphy_register+0x1ba6/0x28d0
[  517.388826][T27403]  ? __pfx_wiphy_register+0x10/0x10
[  517.388835][T27403]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  517.388847][T27403]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  517.388857][T27403]  ieee80211_register_hw+0x3425/0x4080
[  517.388872][T27403]  ? ieee80211_register_hw+0x1461/0x4080
[  517.388883][T27403]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  517.388893][T27403]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  517.388906][T27403]  ? __hrtimer_setup+0x187/0x210
[  517.388913][T27403]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  517.388924][T27403]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  517.388958][T27403]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  517.388967][T27403]  ? trace_kmalloc+0x1f/0xd0
[  517.388975][T27403]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  517.388985][T27403]  ? kstrndup+0xbf/0x160
[  517.388996][T27403]  hwsim_new_radio_nl+0xea4/0x1b10
[  517.389006][T27403]  ? __pfx___nla_validate_parse+0x10/0x10
[  517.389023][T27403]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  517.389037][T27403]  ? __nla_parse+0x40/0x60
[  517.389049][T27403]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  517.389061][T27403]  genl_family_rcv_msg_doit+0x215/0x300
[  517.389072][T27403]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  517.389110][T27403]  ? bpf_lsm_capable+0x9/0x20
[  517.389120][T27403]  ? security_capable+0x7e/0x2e0
[  517.389133][T27403]  genl_rcv_msg+0x60e/0x790
[  517.389144][T27403]  ? __pfx_genl_rcv_msg+0x10/0x10
[  517.389152][T27403]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  517.389166][T27403]  netlink_rcv_skb+0x208/0x470
[  517.389176][T27403]  ? __lock_acquire+0xab9/0xd20
[  517.389186][T27403]  ? __pfx_genl_rcv_msg+0x10/0x10
[  517.389195][T27403]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  517.389213][T27403]  ? down_read+0x1ad/0x2e0
[  517.389221][T27403]  genl_rcv+0x28/0x40
[  517.389229][T27403]  netlink_unicast+0x82f/0x9e0
[  517.389242][T27403]  ? __pfx_netlink_unicast+0x10/0x10
[  517.389252][T27403]  ? netlink_sendmsg+0x642/0xb30
[  517.389258][T27403]  ? skb_put+0x11b/0x210
[  517.389268][T27403]  netlink_sendmsg+0x805/0xb30
[  517.389278][T27403]  ? __pfx_netlink_sendmsg+0x10/0x10
[  517.389286][T27403]  ? aa_sock_msg_perm+0xf1/0x1d0
[  517.389295][T27403]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  517.389302][T27403]  ? __pfx_netlink_sendmsg+0x10/0x10
[  517.389309][T27403]  __sock_sendmsg+0x21c/0x270
[  517.389319][T27403]  ____sys_sendmsg+0x505/0x830
[  517.389330][T27403]  ? __pfx_____sys_sendmsg+0x10/0x10
[  517.389342][T27403]  ? import_iovec+0x74/0xa0
[  517.389352][T27403]  ___sys_sendmsg+0x21f/0x2a0
[  517.389360][T27403]  ? __pfx____sys_sendmsg+0x10/0x10
[  517.389383][T27403]  ? __fget_files+0x2a/0x420
[  517.389389][T27403]  ? __fget_files+0x3a0/0x420
[  517.389421][T27403]  __x64_sys_sendmsg+0x19b/0x260
[  517.389433][T27403]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  517.389445][T27403]  ? rcu_is_watching+0x15/0xb0
[  517.389454][T27403]  ? do_syscall_64+0xbe/0x3b0
[  517.389463][T27403]  do_syscall_64+0xfa/0x3b0
[  517.389469][T27403]  ? lockdep_hardirqs_on+0x9c/0x150
[  517.389479][T27403]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  517.389485][T27403]  ? exc_page_fault+0x9f/0xf0
[  517.389496][T27403]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  517.389502][T27403] RIP: 0033:0x7f8f1258ebe9
[  517.389510][T27403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  517.389516][T27403] RSP: 002b:00007f8f133e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  517.389525][T27403] RAX: ffffffffffffffda RBX: 00007f8f127c5fa0 RCX: 00007f8f1258ebe9
[  517.389531][T27403] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005
[  517.389535][T27403] RBP: 00007f8f12611e19 R08: 0000000000000000 R09: 0000000000000000
[  517.389540][T27403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  517.389544][T27403] R13: 00007f8f127c6038 R14: 00007f8f127c5fa0 R15: 00007ffd5574c5f8
[  517.389556][T27403]  </TASK>
[  517.750339][T27414] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  517.754209][T27414] CPU: 0 UID: 0 PID: 27414 Comm: syz.1.5556 Not tainted syzkaller #0 PREEMPT(full) 
[  517.754226][T27414] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  517.754234][T27414] Call Trace:
[  517.754240][T27414]  <TASK>
[  517.754248][T27414]  dump_stack_lvl+0x189/0x250
[  517.754271][T27414]  ? __pfx_dump_stack_lvl+0x10/0x10
[  517.754287][T27414]  ? __pfx__printk+0x10/0x10
[  517.754310][T27414]  ? kernfs_path_from_node+0x2f/0x290
[  517.754324][T27414]  ? kernfs_path_from_node+0x250/0x290
[  517.754336][T27414]  ? kernfs_path_from_node+0x2f/0x290
[  517.754352][T27414]  sysfs_warn_dup+0x8e/0xa0
[  517.754366][T27414]  sysfs_do_create_link_sd+0xc0/0x110
[  517.754381][T27414]  device_add_class_symlinks+0x1cf/0x240
[  517.754423][T27414]  device_add+0x475/0xb50
[  517.754444][T27414]  wiphy_register+0x1ba6/0x28d0
[  517.754478][T27414]  ? __pfx_wiphy_register+0x10/0x10
[  517.754495][T27414]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  517.754517][T27414]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  517.754536][T27414]  ieee80211_register_hw+0x3425/0x4080
[  517.754565][T27414]  ? ieee80211_register_hw+0x1461/0x4080
[  517.754586][T27414]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  517.754604][T27414]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  517.754629][T27414]  ? __hrtimer_setup+0x187/0x210
[  517.754640][T27414]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  517.754661][T27414]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  517.754702][T27414]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  517.754718][T27414]  ? trace_kmalloc+0x1f/0xd0
[  517.754732][T27414]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  517.754748][T27414]  ? kstrndup+0xbf/0x160
[  517.754770][T27414]  hwsim_new_radio_nl+0xea4/0x1b10
[  517.754789][T27414]  ? __pfx___nla_validate_parse+0x10/0x10
[  517.754821][T27414]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  517.754848][T27414]  ? __nla_parse+0x40/0x60
[  517.754869][T27414]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  517.754892][T27414]  genl_family_rcv_msg_doit+0x215/0x300
[  517.754913][T27414]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  517.754939][T27414]  ? bpf_lsm_capable+0x9/0x20
[  517.754955][T27414]  ? security_capable+0x7e/0x2e0
[  517.754978][T27414]  genl_rcv_msg+0x60e/0x790
[  517.754998][T27414]  ? __pfx_genl_rcv_msg+0x10/0x10
[  517.755012][T27414]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  517.755040][T27414]  netlink_rcv_skb+0x208/0x470
[  517.755056][T27414]  ? __lock_acquire+0xab9/0xd20
[  517.755075][T27414]  ? __pfx_genl_rcv_msg+0x10/0x10
[  517.755091][T27414]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  517.755131][T27414]  ? down_read+0x1ad/0x2e0
[  517.755145][T27414]  genl_rcv+0x28/0x40
[  517.755159][T27414]  netlink_unicast+0x82f/0x9e0
[  517.755183][T27414]  ? __pfx_netlink_unicast+0x10/0x10
[  517.755202][T27414]  ? netlink_sendmsg+0x642/0xb30
[  517.755211][T27414]  ? skb_put+0x11b/0x210
[  517.755228][T27414]  netlink_sendmsg+0x805/0xb30
[  517.755248][T27414]  ? __pfx_netlink_sendmsg+0x10/0x10
[  517.755264][T27414]  ? aa_sock_msg_perm+0xf1/0x1d0
[  517.755278][T27414]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  517.755292][T27414]  ? __pfx_netlink_sendmsg+0x10/0x10
[  517.755305][T27414]  __sock_sendmsg+0x21c/0x270
[  517.755326][T27414]  ____sys_sendmsg+0x505/0x830
[  517.755344][T27414]  ? __pfx_____sys_sendmsg+0x10/0x10
[  517.755365][T27414]  ? import_iovec+0x74/0xa0
[  517.755382][T27414]  ___sys_sendmsg+0x21f/0x2a0
[  517.755424][T27414]  ? __pfx____sys_sendmsg+0x10/0x10
[  517.755471][T27414]  ? __fget_files+0x2a/0x420
[  517.755483][T27414]  ? __fget_files+0x3a0/0x420
[  517.755504][T27414]  __x64_sys_sendmsg+0x19b/0x260
[  517.755541][T27414]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  517.755584][T27414]  ? rcu_is_watching+0x15/0xb0
[  517.755603][T27414]  ? do_syscall_64+0xbe/0x3b0
[  517.755619][T27414]  do_syscall_64+0xfa/0x3b0
[  517.755629][T27414]  ? lockdep_hardirqs_on+0x9c/0x150
[  517.755647][T27414]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  517.755660][T27414]  ? exc_page_fault+0x9f/0xf0
[  517.755680][T27414]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  517.755693][T27414] RIP: 0033:0x7f45d7f8ebe9
[  517.755705][T27414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  517.755716][T27414] RSP: 002b:00007f45d8d72038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  517.755729][T27414] RAX: ffffffffffffffda RBX: 00007f45d81c5fa0 RCX: 00007f45d7f8ebe9
[  517.755739][T27414] RDX: 0000000000000300 RSI: 0000200000000080 RDI: 0000000000000004
[  517.755746][T27414] RBP: 00007f45d8011e19 R08: 0000000000000000 R09: 0000000000000000
[  517.755754][T27414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  517.755761][T27414] R13: 00007f45d81c6038 R14: 00007f45d81c5fa0 R15: 00007fffa6365e88
[  517.755783][T27414]  </TASK>
[  517.766587][T27416] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  518.043274][T27417] team0: Mode changed to "loadbalance"
[  518.167627][T27430] netlink: 'syz.1.5561': attribute type 83 has an invalid length.
[  518.370306][T27436] netlink: 'syz.1.5563': attribute type 6 has an invalid length.
[  518.394302][T27435] netlink: 11776 bytes leftover after parsing attributes in process `syz.1.5563'.
[  519.062677][T27448] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5567'.
[  519.444088][T27459] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5569'.
[  519.452184][T27461] netlink: 'syz.2.5570': attribute type 1 has an invalid length.
[  519.454988][T27461] netlink: 'syz.2.5570': attribute type 1 has an invalid length.
[  519.539915][T27461] netlink: 'syz.2.5570': attribute type 1 has an invalid length.
[  519.561953][T27461] 8021q: adding VLAN 0 to HW filter on device bond52
[  519.566910][T27461] mac80211_hwsim hwsim895 wlan0: left promiscuous mode
[  519.572031][T27461] bond52: (slave wlan0): Opening slave failed
[  519.583739][T27461] vlan2: entered allmulticast mode
[  519.587072][T27461] bond52: (slave vlan2): Opening slave failed
[  519.661788][T27467] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5571'.
[  520.291713][T27483] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5576'.
[  520.350689][T27484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5576'.
[  520.881577][T27491] netlink: 'syz.2.5578': attribute type 10 has an invalid length.
[  520.888747][T27491] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  520.893171][T27491] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  521.350348][T27493] netlink: 'syz.0.5579': attribute type 10 has an invalid length.
[  521.658380][T27513] 8021q: adding VLAN 0 to HW filter on device bond56
[  521.668669][T27513] veth39: entered promiscuous mode
[  521.673462][T27513] bond56: (slave veth39): Enslaving as a backup interface with a down link
[  522.204969][T27528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5586'.
[  522.211934][T27528] validate_nla: 1 callbacks suppressed
[  522.211942][T27528] netlink: 'syz.2.5586': attribute type 10 has an invalid length.
[  522.339809][T27538] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5589'.
[  522.343124][T27538] netlink: 'syz.2.5589': attribute type 7 has an invalid length.
[  522.345981][T27538] netlink: 'syz.2.5589': attribute type 8 has an invalid length.
[  522.348975][T27541] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5589'.
[  522.353143][T27541] netlink: 'syz.2.5589': attribute type 7 has an invalid length.
[  522.356068][T27541] netlink: 'syz.2.5589': attribute type 8 has an invalid length.
[  522.358972][T27541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5589'.
[  522.362960][T27538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5589'.
[  522.367235][T27538] netlink: 'syz.2.5589': attribute type 10 has an invalid length.
[  522.370296][T27541] netlink: 'syz.2.5589': attribute type 10 has an invalid length.
[  522.406378][T27549] netlink: 'syz.2.5590': attribute type 9 has an invalid length.
[  522.412020][T27549] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5590'.
[  522.535410][T27540] netlink: 'syz.0.5588': attribute type 10 has an invalid length.
[  522.567330][T27554] netlink: 'syz.2.5591': attribute type 6 has an invalid length.
[  522.582036][T27559] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5592'.
[  522.646096][T27571] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5595'.
[  522.933910][T27583] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  523.361293][T27596] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  523.365583][T27596] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  523.656959][T27604] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.5604'.
[  523.886702][T27607] mac80211_hwsim hwsim1210 wlan1: entered allmulticast mode
[  524.183206][T27618] team0: Unable to change to the same mode the team is in
[  524.542260][T27633] 8021q: adding VLAN 0 to HW filter on device bond54
[  524.547776][T27633] bond54: (slave wlan0): Opening slave failed
[  524.688969][T27638] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  524.702241][T27637] tipc: Resetting bearer <eth:syzkaller0>
[  525.843622][T27637] tipc: Disabling bearer <eth:syzkaller0>
[  526.070192][T27650] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.5615'.
[  526.355136][T27662] netlink: zone id is out of range
[  526.357351][T27662] netlink: zone id is out of range
[  526.361018][T27662] netlink: zone id is out of range
[  526.363290][T27662] netlink: zone id is out of range
[  526.365494][T27662] netlink: zone id is out of range
[  526.367806][T27662] netlink: zone id is out of range
[  526.374987][T27662] netlink: zone id is out of range
[  526.377352][T27662] netlink: zone id is out of range
[  526.380479][T27662] netlink: zone id is out of range
[  526.382878][T27662] netlink: zone id is out of range
[  526.451072][T27665] bond56: (slave veth39): Releasing backup interface
[  526.958430][T27702] 8021q: adding VLAN 0 to HW filter on device bond1
[  527.016557][T27706] mac80211_hwsim hwsim1210 wlan1: left allmulticast mode
[  527.352706][T27724] validate_nla: 18 callbacks suppressed
[  527.352720][T27724] netlink: 'syz.0.5636': attribute type 10 has an invalid length.
[  527.988508][T27725] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  527.992670][T27725] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  528.116833][T27732] netlink: 'syz.1.5637': attribute type 15 has an invalid length.
[  528.477119][T27758] __nla_validate_parse: 9 callbacks suppressed
[  528.477134][T27758] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5643'.
[  528.522769][T27762] netlink: 'syz.2.5644': attribute type 11 has an invalid length.
[  528.675478][T27764] team0: Mode changed to "broadcast"
[  528.929916][T27780] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5649'.
[  529.035244][T27780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5649'.
[  529.282621][T27808] netlink: 'syz.1.5655': attribute type 1 has an invalid length.
[  529.289524][T27808] netlink: 'syz.1.5655': attribute type 1 has an invalid length.
[  529.359037][T27814] netlink: 248 bytes leftover after parsing attributes in process `syz.2.5653'.
[  529.575953][T27837] netlink: 'syz.0.5658': attribute type 1 has an invalid length.
[  529.581388][T27837] netlink: 'syz.0.5658': attribute type 1 has an invalid length.
[  529.612914][T27843] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5659'.
[  530.353956][T27870] netlink: 'syz.0.5661': attribute type 12 has an invalid length.
[  530.378796][T27870] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.5661'.
[  530.633139][T27894] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5665'.
[  530.647823][T27896] netlink: 'syz.1.5666': attribute type 11 has an invalid length.
[  531.113974][T27913] netlink: 'syz.0.5671': attribute type 10 has an invalid length.
[  531.126227][T27913] mac80211_hwsim hwsim1210 wlan1: entered allmulticast mode
[  531.253208][T27922] netlink: 'syz.0.5673': attribute type 1 has an invalid length.
[  531.256508][T27922] netlink: 'syz.0.5673': attribute type 1 has an invalid length.
[  531.273721][T27922] mac80211_hwsim hwsim184 wlan0: left promiscuous mode
[  531.444956][T27934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5677'.
[  531.770520][T27950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5681'.
[  531.801647][T27950] 8021q: adding VLAN 0 to HW filter on device bond1
[  531.804961][T27950] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5681'.
[  531.855615][T27955] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  531.858894][T27955] team0: Device macvtap1 is already an upper device of the team interface
[  532.254776][T27985] 8021q: adding VLAN 0 to HW filter on device team0
[  532.257843][T27985] tipc: Resetting bearer <eth:team0>
[  532.260503][T27985] tipc: Resetting bearer <eth:team0>
[  532.273524][T27985] net_ratelimit: 10 callbacks suppressed
[  532.273531][T27985] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  533.184476][T28025] tipc: Resetting bearer <eth:team0>
[  533.249859][T28028] validate_nla: 2 callbacks suppressed
[  533.249873][T28028] netlink: 'syz.0.5701': attribute type 10 has an invalid length.
[  533.501576][T28032] __nla_validate_parse: 6 callbacks suppressed
[  533.501586][T28032] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5703'.
[  533.507152][T28033] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5703'.
[  533.711574][T28036] mac80211_hwsim hwsim1216 wlan1: entered allmulticast mode
[  533.726600][T28036] netlink: 'syz.2.5704': attribute type 10 has an invalid length.
[  533.734165][T28037] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  533.737923][T28037] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  534.090196][T28040] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5705'.
[  534.177825][T28046] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5707'.
[  534.364179][T28048] tipc: Resetting bearer <eth:team0>
[  534.418295][T28048] vlan0: left promiscuous mode
[  534.420254][T28048] macvlan20: left promiscuous mode
[  534.426695][T28048] veth39: left promiscuous mode
[  534.428345][T28048] mac80211_hwsim hwsim1210 wlan1: left allmulticast mode
[  534.595853][T28072] netlink: 'syz.0.5713': attribute type 12 has an invalid length.
[  534.726211][T28080] bond0: entered promiscuous mode
[  534.729347][T28080] bond0: entered allmulticast mode
[  534.742633][T28077] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  534.749362][T28074] syzkaller0: entered promiscuous mode
[  534.750733][T28076] netlink: 'syz.2.5715': attribute type 16 has an invalid length.
[  534.751341][T28074] syzkaller0: entered allmulticast mode
[  534.754034][T28076] netlink: 'syz.2.5715': attribute type 17 has an invalid length.
[  534.811016][T28074] tipc: Resetting bearer <eth:syzkaller0>
[  534.846966][T28073] tipc: Resetting bearer <eth:syzkaller0>
[  534.865921][T28073] tipc: Disabling bearer <eth:syzkaller0>
[  534.986633][T28097] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5720'.
[  535.057447][T28099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5719'.
[  535.105648][T28101] netlink: 'syz.2.5721': attribute type 9 has an invalid length.
[  535.377130][T28115] mac80211_hwsim hwsim1216 wlan1: left allmulticast mode
[  535.505267][T28122] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5725'.
[  535.539961][T28122] netlink: 'syz.2.5725': attribute type 10 has an invalid length.
[  535.794731][T28117] netlink: 'syz.0.5726': attribute type 2 has an invalid length.
[  535.801068][T28117] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5726'.
[  536.064099][T28129] netlink: 'syz.1.5730': attribute type 2 has an invalid length.
[  536.114172][T28129] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5730'.
[  536.325897][T28135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5732'.
[  536.740640][T28160] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  536.744392][T28160] syzkaller0: entered promiscuous mode
[  536.746725][T28160] syzkaller0: entered allmulticast mode
[  536.757094][T28159] tipc: Resetting bearer <eth:syzkaller0>
[  536.770429][T28159] tipc: Disabling bearer <eth:syzkaller0>
[  537.377708][T28179] bond57: entered promiscuous mode
[  537.382629][T28179] 8021q: adding VLAN 0 to HW filter on device bond57
[  537.495255][T28179] bond57 (unregistering): Released all slaves
[  537.874063][T28197] netlink: 'syz.1.5747': attribute type 10 has an invalid length.
[  538.117654][T28227] netlink: 'syz.0.5752': attribute type 11 has an invalid length.
[  538.365741][T28246] netlink: 'syz.2.5751': attribute type 2 has an invalid length.
[  538.401921][T28244] 8021q: VLANs not supported on nlmon0
[  538.456258][T28243] netlink: 'syz.0.5757': attribute type 1 has an invalid length.
[  538.456283][T28245] netlink: 'syz.0.5757': attribute type 1 has an invalid length.
[  538.458990][T28243] netlink: 'syz.0.5757': attribute type 1 has an invalid length.
[  538.485759][T28245] 8021q: adding VLAN 0 to HW filter on device bond57
[  538.593351][T28243] bond57: (slave wlan0): Opening slave failed
[  539.237147][T28288] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  539.270657][T28288] syzkaller0: entered promiscuous mode
[  539.272726][T28288] syzkaller0: entered allmulticast mode
[  539.288200][T28288] tipc: Resetting bearer <eth:syzkaller0>
[  539.591329][T28297] __nla_validate_parse: 10 callbacks suppressed
[  539.591338][T28297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5767'.
[  539.638823][T28300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5768'.
[  539.940470][T28312] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5771'.
[  539.963840][T28286] tipc: Resetting bearer <eth:syzkaller0>
[  539.989924][T28286] tipc: Disabling bearer <eth:syzkaller0>
[  540.700363][T28319] netlink: 248 bytes leftover after parsing attributes in process `syz.0.5773'.
[  541.486912][T28356] netlink: 248 bytes leftover after parsing attributes in process `syz.1.5782'.
[  541.558838][T28361] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5782'.
[  541.877068][T28371] netlink: 'syz.2.5783': attribute type 2 has an invalid length.
[  541.896923][T28371] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5783'.
[  542.580251][T28389] bond0: left promiscuous mode
[  542.581905][T28389] bond0: left allmulticast mode
[  542.648434][T28397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5790'.
[  543.284315][T28386] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  543.446608][T28426] netlink: 'syz.0.5796': attribute type 2 has an invalid length.
[  543.468111][T28426] : entered promiscuous mode
[  543.475699][T28429] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  543.488629][T28426] netlink: 'syz.0.5796': attribute type 2 has an invalid length.
[  543.517363][T28419] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5794'.
[  543.798357][T28442] mac80211_hwsim hwsim1210 wlan1: entered allmulticast mode
[  543.883213][T28454] mac80211_hwsim hwsim1210 wlan1: left allmulticast mode
[  543.899974][T28450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5802'.
[  544.160655][T28463] mac80211_hwsim hwsim1245 wlan0: entered promiscuous mode
[  544.167572][T28463] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  544.463777][T28475] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  544.525092][T28478] netlink: 'syz.0.5808': attribute type 10 has an invalid length.
[  544.577772][T28480] 8021q: adding VLAN 0 to HW filter on device bond1
[  544.586742][T28480] 8021q: adding VLAN 0 to HW filter on device macvlan22
[  544.591494][T28480] bond1: (slave macvlan22): Enslaving as a backup interface with a down link
[  544.596988][T28482] bond1: (slave macvlan22): Releasing backup interface
[  544.728740][T28486] bond1: option mode: unable to set because the bond device is up
[  544.744878][T28486] 8021q: adding VLAN 0 to HW filter on device macvlan17
[  544.753332][T28486] bond1: (slave macvlan17): Enslaving as a backup interface with a down link
[  544.761211][T28484] team0: Mode changed to "loadbalance"
[  544.941168][T28493] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  544.948380][T28493] netlink: 'syz.0.5814': attribute type 11 has an invalid length.
[  545.168346][T28472] tipc: Disabling bearer <eth:syzkaller0>
[  545.273249][T28510] netlink: 'syz.1.5819': attribute type 6 has an invalid length.
[  545.330247][T28510] netlink: 'syz.1.5819': attribute type 12 has an invalid length.
[  545.333708][T28510] __nla_validate_parse: 1 callbacks suppressed
[  545.333720][T28510] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.5819'.
[  545.826283][T28522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5821'.
[  545.872597][T28529] netlink: 'syz.2.5823': attribute type 1 has an invalid length.
[  545.875676][T28529] netlink: 'syz.2.5823': attribute type 1 has an invalid length.
[  545.905237][T28531] mac80211_hwsim hwsim184 wlan0: entered promiscuous mode
[  545.908356][T28531] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  545.984420][T28529] netlink: 'syz.2.5823': attribute type 1 has an invalid length.
[  546.010141][T28529] 8021q: adding VLAN 0 to HW filter on device bond55
[  546.014461][T28529] mac80211_hwsim hwsim1245 wlan0: left promiscuous mode
[  546.019494][T28529] bond55: (slave wlan0): Opening slave failed
[  546.027863][T28540] syzkaller1: entered promiscuous mode
[  546.030260][T28540] syzkaller1: entered allmulticast mode
[  546.216949][T28554] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5830'.
[  546.854078][T28571] netlink: 'syz.1.5834': attribute type 6 has an invalid length.
[  546.858012][T28572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5834'.
[  546.866815][T28572] netlink: 'syz.1.5834': attribute type 12 has an invalid length.
[  546.873760][T28572] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.5834'.
[  547.463923][T28588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5837'.
[  547.493353][T28588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5837'.
[  547.729734][T28597] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5839'.
[  547.771027][T28599] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  547.788486][T28601] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  547.851361][T28605] bond1: (slave macvlan17): Releasing backup interface
[  548.163488][T28626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5847'.
[  548.300874][T28609] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5843'.
[  548.307599][T28626] tipc: Enabled bearer <eth:gre0>, priority 10
[  548.576435][T28633] validate_nla: 3 callbacks suppressed
[  548.576448][T28633] netlink: 'syz.1.5848': attribute type 1 has an invalid length.
[  548.744799][T28636] veth35: entered promiscuous mode
[  549.028390][T28650] netlink: 'syz.1.5854': attribute type 10 has an invalid length.
[  549.584818][T28690] netlink: 'syz.0.5863': attribute type 21 has an invalid length.
[  549.591224][T28690] netlink: 'syz.0.5863': attribute type 1 has an invalid length.
[  549.685358][T28698] netlink: 'syz.0.5866': attribute type 9 has an invalid length.
[  549.941973][T28716] netlink: 'syz.1.5871': attribute type 9 has an invalid length.
[  550.185673][T28718] netlink: 'syz.0.5869': attribute type 2 has an invalid length.
[  551.134827][T28755] __nla_validate_parse: 7 callbacks suppressed
[  551.134843][T28755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5877'.
[  551.404654][T28762] 8021q: adding VLAN 0 to HW filter on device bond58
[  551.433076][T28762] 8021q: adding VLAN 0 to HW filter on device macvlan18
[  551.438217][T28762] bond1: (slave macvlan18): Enslaving as a backup interface with a down link
[  551.488833][T28762] bond1: (slave macvlan18): Releasing backup interface
[  551.574979][T28765] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  551.600874][T28765] netlink: 'syz.0.5880': attribute type 4 has an invalid length.
[  551.684452][T28773] netlink: 'syz.2.5882': attribute type 1 has an invalid length.
[  551.722238][T28776] netlink: 'syz.1.5883': attribute type 1 has an invalid length.
[  551.725602][T28776] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5883'.
[  551.766832][T28776] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5883'.
[  551.782234][T28773] 8021q: adding VLAN 0 to HW filter on device bond56
[  551.810127][T28773] veth41: entered promiscuous mode
[  551.815916][T28773] bond56: (slave veth41): Enslaving as a backup interface with a down link
[  551.829483][T28773] bond56: (slave veth41): Releasing backup interface
[  551.969886][T28785] mac80211_hwsim hwsim673 wlan0: left promiscuous mode
[  552.008145][T28785] veth35: left promiscuous mode
[  552.031816][T28785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5885'.
[  552.068507][T28795] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5887'.
[  552.089631][T28797] syzkaller0: entered promiscuous mode
[  552.091713][T28797] syzkaller0: entered allmulticast mode
[  552.211362][T28802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5889'.
[  552.342200][T28805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5890'.
[  552.449594][T28810] bridge: RTM_NEWNEIGH with invalid ether address
[  552.526683][T28814] 8021q: adding VLAN 0 to HW filter on device bond1
[  552.541735][T28814] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  552.546749][T28814] bond1: (slave macvlan0): Enslaving as a backup interface with a down link
[  552.643919][T28818] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5894'.
[  552.891052][T28825] netlink: 'syz.0.5895': attribute type 11 has an invalid length.
[  552.937005][T28822] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5892'.
[  553.022478][T28822] netlink: 216 bytes leftover after parsing attributes in process `syz.2.5892'.
[  553.303663][T28837] mac80211_hwsim hwsim1245 wlan0: entered promiscuous mode
[  553.306936][T28837] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  553.761049][T28854] validate_nla: 7 callbacks suppressed
[  553.761059][T28854] netlink: 'syz.2.5902': attribute type 10 has an invalid length.
[  553.885265][T28859] netlink: 'syz.0.5904': attribute type 11 has an invalid length.
[  553.946624][T28860] bond1: (slave macvlan0): Releasing backup interface
[  554.012883][T28865] netlink: 'syz.1.5905': attribute type 10 has an invalid length.
[  554.749980][T28880] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  554.753060][T28880] syzkaller0: entered promiscuous mode
[  554.755605][T28880] syzkaller0: entered allmulticast mode
[  554.772853][T28880] tipc: Resetting bearer <eth:syzkaller0>
[  554.776532][T28882] netlink: 'syz.2.5909': attribute type 10 has an invalid length.
[  554.780179][T28879] tipc: Resetting bearer <eth:syzkaller0>
[  554.791528][T28879] tipc: Disabling bearer <eth:syzkaller0>
[  554.800331][T28882] mac80211_hwsim hwsim1260 wlan1: entered allmulticast mode
[  556.190486][T28953] __nla_validate_parse: 10 callbacks suppressed
[  556.190501][T28953] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5929'.
[  556.224326][T28955] netlink: 'syz.2.5930': attribute type 6 has an invalid length.
[  556.241753][T28955] netlink: 'syz.2.5930': attribute type 12 has an invalid length.
[  556.245247][T28955] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.5930'.
[  556.257353][T28957] netlink: 176 bytes leftover after parsing attributes in process `syz.0.5931'.
[  556.271846][T28959] netlink: 'syz.1.5932': attribute type 2 has an invalid length.
[  556.275426][T28959] netlink: 1184 bytes leftover after parsing attributes in process `syz.1.5932'.
[  556.571845][T28973] netlink: 'syz.1.5935': attribute type 1 has an invalid length.
[  556.574416][T28973] netlink: 'syz.1.5935': attribute type 1 has an invalid length.
[  556.626761][T28973] netlink: 'syz.1.5935': attribute type 1 has an invalid length.
[  556.642188][T28973] 8021q: adding VLAN 0 to HW filter on device bond59
[  556.648131][T28973] bond59: (slave wlan0): Opening slave failed
[  556.653887][T28973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5935'.
[  556.845191][T28990] tipc: New replicast peer: 255.255.255.255
[  556.849743][T28990] tipc: Enabled bearer <udp:syz2>, priority 10
[  557.244116][T29015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5946'.
[  557.695451][T29031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5949'.
[  558.053311][T29046] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  558.165238][T29050] team0: Mode changed to "broadcast"
[  558.168360][T29050] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5955'.
[  558.172879][T29050] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  558.333156][T29059] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5957'.
[  558.987526][T29081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5962'.
[  559.547479][T29106] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  560.110285][T29135] validate_nla: 4 callbacks suppressed
[  560.110300][T29135] netlink: 'syz.0.5975': attribute type 2 has an invalid length.
[  560.653578][T29158] netlink: 'syz.1.5981': attribute type 9 has an invalid length.
[  560.874557][T29177] netlink: 'syz.0.5983': attribute type 10 has an invalid length.
[  561.654699][T29201] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  561.657336][T29201] CPU: 1 UID: 0 PID: 29201 Comm: syz.1.5992 Not tainted syzkaller #0 PREEMPT(full) 
[  561.657347][T29201] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  561.657352][T29201] Call Trace:
[  561.657356][T29201]  <TASK>
[  561.657360][T29201]  dump_stack_lvl+0x189/0x250
[  561.657376][T29201]  ? __pfx_dump_stack_lvl+0x10/0x10
[  561.657385][T29201]  ? __pfx__printk+0x10/0x10
[  561.657398][T29201]  ? kernfs_path_from_node+0x2f/0x290
[  561.657407][T29201]  ? kernfs_path_from_node+0x250/0x290
[  561.657415][T29201]  ? kernfs_path_from_node+0x2f/0x290
[  561.657424][T29201]  sysfs_warn_dup+0x8e/0xa0
[  561.657432][T29201]  sysfs_do_create_link_sd+0xc0/0x110
[  561.657441][T29201]  device_add_class_symlinks+0x1cf/0x240
[  561.657451][T29201]  device_add+0x475/0xb50
[  561.657460][T29201]  wiphy_register+0x1ba6/0x28d0
[  561.657480][T29201]  ? __pfx_wiphy_register+0x10/0x10
[  561.657490][T29201]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  561.657503][T29201]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  561.657512][T29201]  ieee80211_register_hw+0x3425/0x4080
[  561.657532][T29201]  ? ieee80211_register_hw+0x1461/0x4080
[  561.657549][T29201]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  561.657565][T29201]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  561.657588][T29201]  ? __hrtimer_setup+0x187/0x210
[  561.657600][T29201]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  561.657618][T29201]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  561.657652][T29201]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  561.657661][T29201]  ? trace_kmalloc+0x1f/0xd0
[  561.657669][T29201]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  561.657677][T29201]  ? kstrndup+0xbf/0x160
[  561.657689][T29201]  hwsim_new_radio_nl+0xea4/0x1b10
[  561.657699][T29201]  ? __pfx___nla_validate_parse+0x10/0x10
[  561.657716][T29201]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  561.657730][T29201]  ? __nla_parse+0x40/0x60
[  561.657741][T29201]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  561.657753][T29201]  genl_family_rcv_msg_doit+0x215/0x300
[  561.657764][T29201]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  561.657778][T29201]  ? bpf_lsm_capable+0x9/0x20
[  561.657787][T29201]  ? security_capable+0x7e/0x2e0
[  561.657800][T29201]  genl_rcv_msg+0x60e/0x790
[  561.657810][T29201]  ? __pfx_genl_rcv_msg+0x10/0x10
[  561.657818][T29201]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  561.657832][T29201]  netlink_rcv_skb+0x208/0x470
[  561.657842][T29201]  ? __lock_acquire+0xab9/0xd20
[  561.657859][T29201]  ? __pfx_genl_rcv_msg+0x10/0x10
[  561.657868][T29201]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  561.657894][T29201]  ? down_read+0x1ad/0x2e0
[  561.657907][T29201]  genl_rcv+0x28/0x40
[  561.657919][T29201]  netlink_unicast+0x82f/0x9e0
[  561.657968][T29201]  ? __pfx_netlink_unicast+0x10/0x10
[  561.657986][T29201]  ? netlink_sendmsg+0x642/0xb30
[  561.657995][T29201]  ? skb_put+0x11b/0x210
[  561.658012][T29201]  netlink_sendmsg+0x805/0xb30
[  561.658026][T29201]  ? __pfx_netlink_sendmsg+0x10/0x10
[  561.658034][T29201]  ? aa_sock_msg_perm+0xf1/0x1d0
[  561.658042][T29201]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  561.658049][T29201]  ? __pfx_netlink_sendmsg+0x10/0x10
[  561.658056][T29201]  __sock_sendmsg+0x21c/0x270
[  561.658067][T29201]  ____sys_sendmsg+0x505/0x830
[  561.658077][T29201]  ? __pfx_____sys_sendmsg+0x10/0x10
[  561.658089][T29201]  ? import_iovec+0x74/0xa0
[  561.658098][T29201]  ___sys_sendmsg+0x21f/0x2a0
[  561.658107][T29201]  ? __pfx____sys_sendmsg+0x10/0x10
[  561.658130][T29201]  ? __fget_files+0x2a/0x420
[  561.658136][T29201]  ? __fget_files+0x3a0/0x420
[  561.658147][T29201]  __x64_sys_sendmsg+0x19b/0x260
[  561.658155][T29201]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  561.658171][T29201]  ? do_syscall_64+0xbe/0x3b0
[  561.658179][T29201]  do_syscall_64+0xfa/0x3b0
[  561.658192][T29201]  ? lockdep_hardirqs_on+0x9c/0x150
[  561.658203][T29201]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  561.658215][T29201]  ? exc_page_fault+0x9f/0xf0
[  561.658226][T29201]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  561.658234][T29201] RIP: 0033:0x7f45d7f8ebe9
[  561.658242][T29201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  561.658249][T29201] RSP: 002b:00007f45d8d72038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  561.658258][T29201] RAX: ffffffffffffffda RBX: 00007f45d81c5fa0 RCX: 00007f45d7f8ebe9
[  561.658264][T29201] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  561.658269][T29201] RBP: 00007f45d8011e19 R08: 0000000000000000 R09: 0000000000000000
[  561.658274][T29201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  561.658278][T29201] R13: 00007f45d81c6038 R14: 00007f45d81c5fa0 R15: 00007fffa6365e88
[  561.658291][T29201]  </TASK>
[  561.944074][T29206] IPVS: set_ctl: invalid protocol: 22 224.0.0.1:20003
[  562.061488][T29214] netlink: 'syz.2.5995': attribute type 8 has an invalid length.
[  562.094527][T29215] netlink: 'syz.1.5993': attribute type 10 has an invalid length.
[  562.412418][T29234] netlink: 'syz.2.5999': attribute type 11 has an invalid length.
[  562.572815][T29239] netlink: 'syz.0.6000': attribute type 12 has an invalid length.
[  562.748191][T29241] 8021q: adding VLAN 0 to HW filter on device bond1
[  562.764396][T29242] bond1: (slave macvlan22): Enslaving as a backup interface with a down link
[  562.774458][T29243] bond1: (slave macvlan22): Releasing backup interface
[  562.800107][T29246] __nla_validate_parse: 8 callbacks suppressed
[  562.800121][T29246] netlink: 248 bytes leftover after parsing attributes in process `syz.1.6002'.
[  563.005455][T29248] bond1: option mode: unable to set because the bond device is up
[  563.008853][T29249] bond1: option mode: unable to set because the bond device is up
[  563.018583][T29254] bond1: (slave macvlan23): Enslaving as a backup interface with a down link
[  563.122040][T29260] xfrm0: entered promiscuous mode
[  563.124740][T29260] xfrm0: entered allmulticast mode
[  563.138865][T29266] netlink: 'syz.0.6008': attribute type 1 has an invalid length.
[  563.142891][T29260] netlink: 'syz.1.6006': attribute type 10 has an invalid length.
[  563.146785][T29266] netlink: 'syz.0.6008': attribute type 1 has an invalid length.
[  563.151663][T29261] netlink: 'syz.1.6006': attribute type 10 has an invalid length.
[  563.205036][T29270] mac80211_hwsim hwsim1260 wlan1: left allmulticast mode
[  563.287037][T29266] 8021q: adding VLAN 0 to HW filter on device bond58
[  563.297217][T29266] mac80211_hwsim hwsim184 wlan0: left promiscuous mode
[  563.303566][T29266] bond58: (slave wlan0): Opening slave failed
[  563.315164][T29275] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.6011'.
[  564.236870][T29303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6017'.
[  564.373553][T29305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6018'.
[  564.806028][T29320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6022'.
[  565.420872][T29355] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  565.440368][T29352] validate_nla: 7 callbacks suppressed
[  565.440382][T29352] netlink: 'syz.1.6029': attribute type 1 has an invalid length.
[  565.446168][T29352] netlink: 'syz.1.6029': attribute type 1 has an invalid length.
[  565.490912][T29352] netlink: 'syz.1.6029': attribute type 1 has an invalid length.
[  565.512999][T29362] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6031'.
[  565.527674][T29352] 8021q: adding VLAN 0 to HW filter on device bond60
[  565.536454][T29352] bond60: (slave wlan0): Opening slave failed
[  565.622524][T29362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6031'.
[  565.634600][T29372] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6033'.
[  566.112008][T29395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6037'.
[  566.475695][T29407] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  566.581179][T29414] netlink: 248 bytes leftover after parsing attributes in process `syz.2.6042'.
[  566.813418][T29419] bond1: (slave macvlan23): Releasing backup interface
[  566.831931][T29419] team0: Mode changed to "broadcast"
[  566.835825][T29419] vlan0: entered promiscuous mode
[  566.842601][T29419] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  566.938800][T29421] netlink: 'syz.0.6043': attribute type 10 has an invalid length.
[  567.045537][T29425] netlink: 'syz.2.6046': attribute type 12 has an invalid length.
[  567.797104][T29435] netlink: 'syz.1.6049': attribute type 9 has an invalid length.
[  567.980533][T10557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  567.985562][T10557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  567.987809][  T190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  567.993814][  T190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  568.027183][T29448] netlink: 'syz.0.6054': attribute type 1 has an invalid length.
[  568.050206][T29448] bond59: entered promiscuous mode
[  568.052419][T29448] 8021q: adding VLAN 0 to HW filter on device bond59
[  568.072470][T29448] 8021q: adding VLAN 0 to HW filter on device bond59
[  568.075180][T29448] bond59: (slave wireguard0): The slave device specified does not support setting the MAC address
[  568.080825][T29448] bond59: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  568.090474][T29448] bond59: (slave wireguard0): making interface the new active one
[  568.093680][T29448] wireguard0: entered promiscuous mode
[  568.097158][T29448] bond59: (slave wireguard0): Enslaving as an active interface with an up link
[  568.100716][T29450] __nla_validate_parse: 5 callbacks suppressed
[  568.100724][T29450] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6055'.
[  568.107551][T29450] netlink: 'syz.1.6055': attribute type 6 has an invalid length.
[  568.111216][T29448] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  568.111998][T29450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6055'.
[  568.114482][T29448] IPv6: NLM_F_CREATE should be set when creating new route
[  568.121279][T29448] IPv6: NLM_F_CREATE should be set when creating new route
[  568.126202][T29448] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  568.149843][T29448] bond59: (slave wireguard1): The slave device specified does not support setting the MAC address
[  568.166918][T29448] bond59: (slave wireguard1): Enslaving as a backup interface with an up link
[  568.186794][T29457] mac80211_hwsim hwsim184 wlan0: entered promiscuous mode
[  568.191693][T29457] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  568.273954][T29466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6059'.
[  568.278890][T29466] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6059'.
[  568.429973][T29470] syzkaller1: entered promiscuous mode
[  568.431395][T29477] netlink: 248 bytes leftover after parsing attributes in process `syz.2.6062'.
[  568.431717][T29470] syzkaller1: entered allmulticast mode
[  568.734676][T29495] netlink: 'syz.2.6067': attribute type 10 has an invalid length.
[  568.754804][T29499] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  568.757919][T29499] CPU: 1 UID: 0 PID: 29499 Comm: syz.1.6068 Not tainted syzkaller #0 PREEMPT(full) 
[  568.757936][T29499] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  568.757944][T29499] Call Trace:
[  568.757951][T29499]  <TASK>
[  568.757957][T29499]  dump_stack_lvl+0x189/0x250
[  568.757980][T29499]  ? __pfx_dump_stack_lvl+0x10/0x10
[  568.757996][T29499]  ? __pfx__printk+0x10/0x10
[  568.758018][T29499]  ? kernfs_path_from_node+0x2f/0x290
[  568.758032][T29499]  ? kernfs_path_from_node+0x250/0x290
[  568.758045][T29499]  ? kernfs_path_from_node+0x2f/0x290
[  568.758063][T29499]  sysfs_warn_dup+0x8e/0xa0
[  568.758078][T29499]  sysfs_do_create_link_sd+0xc0/0x110
[  568.758093][T29499]  device_add_class_symlinks+0x1cf/0x240
[  568.758111][T29499]  device_add+0x475/0xb50
[  568.758128][T29499]  wiphy_register+0x1ba6/0x28d0
[  568.758161][T29499]  ? __pfx_wiphy_register+0x10/0x10
[  568.758179][T29499]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  568.758201][T29499]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  568.758220][T29499]  ieee80211_register_hw+0x3425/0x4080
[  568.758249][T29499]  ? ieee80211_register_hw+0x1461/0x4080
[  568.758270][T29499]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  568.758288][T29499]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  568.758312][T29499]  ? __hrtimer_setup+0x187/0x210
[  568.758324][T29499]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  568.758345][T29499]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  568.758385][T29499]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  568.758401][T29499]  ? trace_kmalloc+0x1f/0xd0
[  568.758416][T29499]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  568.758434][T29499]  ? kstrndup+0xbf/0x160
[  568.758454][T29499]  hwsim_new_radio_nl+0xea4/0x1b10
[  568.758473][T29499]  ? __pfx___nla_validate_parse+0x10/0x10
[  568.758503][T29499]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  568.758530][T29499]  ? __nla_parse+0x40/0x60
[  568.758552][T29499]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  568.758584][T29499]  genl_family_rcv_msg_doit+0x215/0x300
[  568.758607][T29499]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  568.758633][T29499]  ? bpf_lsm_capable+0x9/0x20
[  568.758650][T29499]  ? security_capable+0x7e/0x2e0
[  568.758675][T29499]  genl_rcv_msg+0x60e/0x790
[  568.758697][T29499]  ? __pfx_genl_rcv_msg+0x10/0x10
[  568.758712][T29499]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  568.758741][T29499]  netlink_rcv_skb+0x208/0x470
[  568.758759][T29499]  ? __lock_acquire+0xab9/0xd20
[  568.758777][T29499]  ? __pfx_genl_rcv_msg+0x10/0x10
[  568.758793][T29499]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  568.758826][T29499]  ? down_read+0x1ad/0x2e0
[  568.758840][T29499]  genl_rcv+0x28/0x40
[  568.758884][T29499]  netlink_unicast+0x82f/0x9e0
[  568.758910][T29499]  ? __pfx_netlink_unicast+0x10/0x10
[  568.758929][T29499]  ? netlink_sendmsg+0x642/0xb30
[  568.758940][T29499]  ? skb_put+0x11b/0x210
[  568.758956][T29499]  netlink_sendmsg+0x805/0xb30
[  568.758977][T29499]  ? __pfx_netlink_sendmsg+0x10/0x10
[  568.758992][T29499]  ? aa_sock_msg_perm+0xf1/0x1d0
[  568.759006][T29499]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  568.759019][T29499]  ? __pfx_netlink_sendmsg+0x10/0x10
[  568.759031][T29499]  __sock_sendmsg+0x21c/0x270
[  568.759052][T29499]  ____sys_sendmsg+0x505/0x830
[  568.759070][T29499]  ? __pfx_____sys_sendmsg+0x10/0x10
[  568.759112][T29499]  ? import_iovec+0x74/0xa0
[  568.759131][T29499]  ___sys_sendmsg+0x21f/0x2a0
[  568.759148][T29499]  ? __pfx____sys_sendmsg+0x10/0x10
[  568.759192][T29499]  ? __fget_files+0x2a/0x420
[  568.759223][T29499]  ? __fget_files+0x3a0/0x420
[  568.759242][T29499]  __x64_sys_sendmsg+0x19b/0x260
[  568.759259][T29499]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  568.759284][T29499]  ? rcu_is_watching+0x15/0xb0
[  568.759298][T29499]  ? trace_sys_enter+0x25/0x100
[  568.759317][T29499]  do_syscall_64+0xfa/0x3b0
[  568.759330][T29499]  ? lockdep_hardirqs_on+0x9c/0x150
[  568.759345][T29499]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  568.759355][T29499]  ? exc_page_fault+0x9f/0xf0
[  568.759372][T29499]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  568.759385][T29499] RIP: 0033:0x7f45d7f8ebe9
[  568.759397][T29499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  568.759407][T29499] RSP: 002b:00007f45d8d72038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  568.759421][T29499] RAX: ffffffffffffffda RBX: 00007f45d81c5fa0 RCX: 00007f45d7f8ebe9
[  568.759429][T29499] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005
[  568.759436][T29499] RBP: 00007f45d8011e19 R08: 0000000000000000 R09: 0000000000000000
[  568.759445][T29499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  568.759451][T29499] R13: 00007f45d81c6038 R14: 00007f45d81c5fa0 R15: 00007fffa6365e88
[  568.759472][T29499]  </TASK>
[  569.035396][T29501] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  569.050134][T29501] netlink: 'syz.2.6069': attribute type 4 has an invalid length.
[  569.131143][T29508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6070'.
[  569.145618][T29518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6072'.
[  569.148788][T29518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6072'.
[  569.172966][T29522] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  569.194065][T29525] mac80211_hwsim hwsim1245 wlan0: left promiscuous mode
[  569.315279][T29532] netlink: 20824 bytes leftover after parsing attributes in process `syz.2.6074'.
[  569.431420][T29536] netlink: 232 bytes leftover after parsing attributes in process `syz.1.6075'.
[  569.584006][T29538] bond0: default FDB implementation only supports local addresses
[  570.488812][T29547] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  570.491819][T29572] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  570.769769][T29589] netlink: 'syz.0.6092': attribute type 6 has an invalid length.
[  571.141314][T29615] netlink: 'syz.1.6097': attribute type 9 has an invalid length.
[  571.227583][T29621] 8021q: VLANs not supported on nicvf0
[  571.373481][T29632] netlink: 'syz.0.6102': attribute type 11 has an invalid length.
[  571.508687][T29634] bond1: option mode: unable to set because the bond device is up
[  571.856381][T29648] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  571.859760][T29648] CPU: 0 UID: 0 PID: 29648 Comm: syz.2.6107 Not tainted syzkaller #0 PREEMPT(full) 
[  571.859771][T29648] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  571.859777][T29648] Call Trace:
[  571.859782][T29648]  <TASK>
[  571.859786][T29648]  dump_stack_lvl+0x189/0x250
[  571.859800][T29648]  ? __pfx_dump_stack_lvl+0x10/0x10
[  571.859808][T29648]  ? __pfx__printk+0x10/0x10
[  571.859852][T29648]  ? kernfs_path_from_node+0x2f/0x290
[  571.859867][T29648]  ? kernfs_path_from_node+0x250/0x290
[  571.859879][T29648]  ? kernfs_path_from_node+0x2f/0x290
[  571.859895][T29648]  sysfs_warn_dup+0x8e/0xa0
[  571.859908][T29648]  sysfs_do_create_link_sd+0xc0/0x110
[  571.859920][T29648]  device_add_class_symlinks+0x1cf/0x240
[  571.859930][T29648]  device_add+0x475/0xb50
[  571.859939][T29648]  wiphy_register+0x1ba6/0x28d0
[  571.859955][T29648]  ? __pfx_wiphy_register+0x10/0x10
[  571.859965][T29648]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  571.859977][T29648]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  571.859987][T29648]  ieee80211_register_hw+0x3425/0x4080
[  571.860003][T29648]  ? ieee80211_register_hw+0x1461/0x4080
[  571.860014][T29648]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  571.860023][T29648]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  571.860037][T29648]  ? __hrtimer_setup+0x187/0x210
[  571.860044][T29648]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  571.860056][T29648]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  571.860076][T29648]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  571.860084][T29648]  ? trace_kmalloc+0x1f/0xd0
[  571.860092][T29648]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  571.860101][T29648]  ? kstrndup+0xbf/0x160
[  571.860113][T29648]  hwsim_new_radio_nl+0xea4/0x1b10
[  571.860123][T29648]  ? __pfx___nla_validate_parse+0x10/0x10
[  571.860140][T29648]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  571.860155][T29648]  ? __nla_parse+0x40/0x60
[  571.860166][T29648]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  571.860178][T29648]  genl_family_rcv_msg_doit+0x215/0x300
[  571.860189][T29648]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  571.860203][T29648]  ? bpf_lsm_capable+0x9/0x20
[  571.860211][T29648]  ? security_capable+0x7e/0x2e0
[  571.860223][T29648]  genl_rcv_msg+0x60e/0x790
[  571.860234][T29648]  ? __pfx_genl_rcv_msg+0x10/0x10
[  571.860242][T29648]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  571.860256][T29648]  netlink_rcv_skb+0x208/0x470
[  571.860265][T29648]  ? __lock_acquire+0xab9/0xd20
[  571.860275][T29648]  ? __pfx_genl_rcv_msg+0x10/0x10
[  571.860283][T29648]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  571.860301][T29648]  ? down_read+0x1ad/0x2e0
[  571.860309][T29648]  genl_rcv+0x28/0x40
[  571.860316][T29648]  netlink_unicast+0x82f/0x9e0
[  571.860329][T29648]  ? __pfx_netlink_unicast+0x10/0x10
[  571.860339][T29648]  ? netlink_sendmsg+0x642/0xb30
[  571.860344][T29648]  ? skb_put+0x11b/0x210
[  571.860353][T29648]  netlink_sendmsg+0x805/0xb30
[  571.860363][T29648]  ? __pfx_netlink_sendmsg+0x10/0x10
[  571.860371][T29648]  ? aa_sock_msg_perm+0xf1/0x1d0
[  571.860378][T29648]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  571.860385][T29648]  ? __pfx_netlink_sendmsg+0x10/0x10
[  571.860392][T29648]  __sock_sendmsg+0x21c/0x270
[  571.860403][T29648]  ____sys_sendmsg+0x505/0x830
[  571.860413][T29648]  ? __pfx_____sys_sendmsg+0x10/0x10
[  571.860424][T29648]  ? import_iovec+0x74/0xa0
[  571.860434][T29648]  ___sys_sendmsg+0x21f/0x2a0
[  571.860443][T29648]  ? __pfx____sys_sendmsg+0x10/0x10
[  571.860465][T29648]  ? __fget_files+0x2a/0x420
[  571.860471][T29648]  ? __fget_files+0x3a0/0x420
[  571.860481][T29648]  __x64_sys_sendmsg+0x19b/0x260
[  571.860490][T29648]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  571.860502][T29648]  ? rcu_is_watching+0x15/0xb0
[  571.860511][T29648]  ? do_syscall_64+0xbe/0x3b0
[  571.860519][T29648]  do_syscall_64+0xfa/0x3b0
[  571.860525][T29648]  ? lockdep_hardirqs_on+0x9c/0x150
[  571.860541][T29648]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  571.860548][T29648]  ? exc_page_fault+0x9f/0xf0
[  571.860559][T29648]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  571.860566][T29648] RIP: 0033:0x7f8f1258ebe9
[  571.860574][T29648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  571.860581][T29648] RSP: 002b:00007f8f133e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  571.860590][T29648] RAX: ffffffffffffffda RBX: 00007f8f127c5fa0 RCX: 00007f8f1258ebe9
[  571.860596][T29648] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  571.860601][T29648] RBP: 00007f8f12611e19 R08: 0000000000000000 R09: 0000000000000000
[  571.860605][T29648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  571.860610][T29648] R13: 00007f8f127c6038 R14: 00007f8f127c5fa0 R15: 00007ffd5574c5f8
[  571.860622][T29648]  </TASK>
[  572.094331][T29655] bond1: option mode: unable to set because the bond device is up
[  572.222678][T29668] mac80211_hwsim hwsim184 wlan0: left promiscuous mode
[  572.249444][T29668] bond59: left promiscuous mode
[  572.251462][T29668] wireguard0: left promiscuous mode
[  572.263067][T29662] vlan0: left promiscuous mode
[  572.303067][T29662] veth41: left promiscuous mode
[  572.304248][T29673] netlink: 'syz.0.6113': attribute type 6 has an invalid length.
[  572.318861][T29673] netlink: 'syz.0.6113': attribute type 12 has an invalid length.
[  572.773902][T29703] netlink: 'syz.0.6121': attribute type 1 has an invalid length.
[  572.777087][T29703] netlink: 'syz.0.6121': attribute type 1 has an invalid length.
[  572.784267][T29703] netlink: 'syz.0.6121': attribute type 1 has an invalid length.
[  572.811251][T29703] 8021q: adding VLAN 0 to HW filter on device bond60
[  572.823748][T29703] bond60: (slave wlan0): Opening slave failed
[  572.877156][T29707] netlink: 'syz.0.6122': attribute type 7 has an invalid length.
[  572.890945][T29708] netlink: 'syz.2.6120': attribute type 10 has an invalid length.
[  572.894236][T29707] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  573.005516][T29710] netlink: 'syz.0.6122': attribute type 2 has an invalid length.
[  573.308370][T29717] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  573.314790][T29717] syzkaller0: entered promiscuous mode
[  573.317160][T29717] syzkaller0: entered allmulticast mode
[  573.323035][T29717] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  573.526888][T29720] __nla_validate_parse: 17 callbacks suppressed
[  573.527037][T29720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6126'.
[  573.553294][T29720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6126'.
[  573.662213][T29727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6128'.
[  573.669310][T29727] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6128'.
[  573.730956][T29726] 8021q: VLANs not supported on nlmon0
[  573.857050][T29733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6129'.
[  573.965767][T29741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6129'.
[  574.268905][T29756] mac80211_hwsim hwsim1319 wlan1: entered allmulticast mode
[  574.322128][T29765] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6136'.
[  574.387702][T29769] mac80211_hwsim hwsim1319 wlan1: left allmulticast mode
[  574.402293][T29769] mac80211_hwsim hwsim1319 wlan1: entered allmulticast mode
[  575.289344][T29809] 8021q: adding VLAN 0 to HW filter on device bond61
[  575.295033][T29809] bond61: (slave wlan0): Opening slave failed
[  575.685102][T29820] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6151'.
[  575.836341][T29823] netlink: 'syz.2.6152': attribute type 11 has an invalid length.
[  576.320555][T29839] validate_nla: 9 callbacks suppressed
[  576.320568][T29839] netlink: 'syz.1.6156': attribute type 1 has an invalid length.
[  576.355923][T29840] netlink: 'syz.2.6155': attribute type 10 has an invalid length.
[  576.452961][T29839] veth37: entered promiscuous mode
[  576.475496][T29845] netlink: 'syz.0.6157': attribute type 1 has an invalid length.
[  576.479005][T29845] netlink: 'syz.0.6157': attribute type 1 has an invalid length.
[  576.561499][T29855] mac80211_hwsim hwsim1248 wlan1: entered allmulticast mode
[  576.575268][T29857] netlink: 248 bytes leftover after parsing attributes in process `syz.0.6160'.
[  576.896796][T29877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6166'.
[  577.011179][T29885] netlink: 'syz.1.6169': attribute type 9 has an invalid length.
[  577.646333][T29923] netlink: 'syz.0.6178': attribute type 4 has an invalid length.
[  578.207869][T29956] mac80211_hwsim hwsim1248 wlan1: left allmulticast mode
[  578.218022][T29956] netlink: 'syz.1.6184': attribute type 10 has an invalid length.
[  578.221593][T29956] mac80211_hwsim hwsim1248 wlan1: entered allmulticast mode
[  578.313033][T29963] netlink: 'syz.1.6186': attribute type 6 has an invalid length.
[  578.318673][T29965] netlink: 'syz.2.6187': attribute type 1 has an invalid length.
[  578.320800][T29963] netlink: 'syz.1.6186': attribute type 12 has an invalid length.
[  578.347443][T29965] 8021q: adding VLAN 0 to HW filter on device bond57
[  578.372815][T29965] veth43: entered promiscuous mode
[  578.381114][T29965] bond57: (slave veth43): Enslaving as a backup interface with a down link
[  578.483328][T29965] bond57: (slave veth43): Releasing backup interface
[  578.553670][T29972] __nla_validate_parse: 5 callbacks suppressed
[  578.553683][T29972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6189'.
[  578.606221][T29972] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6189'.
[  578.805776][T29969] 8021q: adding VLAN 0 to HW filter on device bond61
[  578.810187][T29979] mac80211_hwsim hwsim673 wlan0: entered promiscuous mode
[  578.813207][T29979] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  578.964892][T29996] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6195'.
[  579.218903][T30009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6198'.
[  579.282186][T30016] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6200'.
[  579.285417][T30016] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6200'.
[  579.301655][T30016] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6200'.
[  579.305269][T30016] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6200'.
[  579.447229][T30018] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1)
[  579.461913][T30017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6200'.
[  579.589494][T30020] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  579.607299][T30020] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  579.612481][T30020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6202'.
[  579.652921][T30023] mac80211_hwsim hwsim1245 wlan0: entered promiscuous mode
[  579.655989][T30023] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  581.438999][T30057] validate_nla: 6 callbacks suppressed
[  581.439014][T30057] netlink: 'syz.1.6210': attribute type 9 has an invalid length.
[  581.665412][T30077] bond59: (slave wireguard0): Releasing backup interface
[  581.668368][T30077] bond59: (slave wireguard1): making interface the new active one
[  581.681865][T30077] bond59: (slave wireguard1): Releasing backup interface
[  581.747801][T30076] team0: Unable to change to the same mode the team is in
[  581.766049][T30095] netlink: 'syz.2.6215': attribute type 10 has an invalid length.
[  581.835922][T30098] netlink: 'syz.1.6219': attribute type 10 has an invalid length.
[  597.230228][T30114] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  597.234332][T30114] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  597.239295][T30114] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  597.243378][T30114] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  597.246944][T30114] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  597.250376][T30114] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  597.255578][T30114] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  597.259279][T30114] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  597.269608][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  597.273989][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  597.409369][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  597.412803][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  597.416063][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  597.422288][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  597.425881][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  597.439389][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  597.443426][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  597.446744][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  597.450415][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  597.453889][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  599.019790][T30117] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  599.024004][T30117] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  599.027142][T30117] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  599.030014][T30117] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  599.032800][T30117] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  599.499505][T30117] Bluetooth: hci3: command tx timeout
[  599.502620][T30117] Bluetooth: hci4: command tx timeout
[  601.099362][T30118] Bluetooth: hci5: command tx timeout
[  601.579428][T30118] Bluetooth: hci4: command tx timeout
[  601.581852][T30118] Bluetooth: hci3: command tx timeout
[  603.179326][T30117] Bluetooth: hci5: command tx timeout
[  603.659453][T30117] Bluetooth: hci3: command tx timeout
[  603.661767][T30117] Bluetooth: hci4: command tx timeout
[  605.259331][T30118] Bluetooth: hci5: command tx timeout
[  605.739446][T30118] Bluetooth: hci4: command tx timeout
[  605.741838][T30118] Bluetooth: hci3: command tx timeout
[  607.339275][T30117] Bluetooth: hci5: command tx timeout
[  658.850016][T30118] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  658.855835][T30118] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  658.864658][T30118] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  658.868364][T30118] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  658.872589][T30118] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  660.564747][ T5846] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  660.568842][ T5846] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  660.572509][ T5846] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  660.576210][ T5846] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  660.580616][ T5846] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  660.600151][T30117] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  660.605762][T30117] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  660.610180][T30117] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  660.614041][T30117] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  660.617567][T30117] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  660.939346][T30117] Bluetooth: hci6: command tx timeout
[  662.619341][T30117] Bluetooth: hci8: command tx timeout
[  662.699333][T30117] Bluetooth: hci7: command tx timeout
[  663.019355][T30117] Bluetooth: hci6: command tx timeout
[  664.699292][T30117] Bluetooth: hci8: command tx timeout
[  664.779334][T30117] Bluetooth: hci7: command tx timeout
[  665.099460][T30117] Bluetooth: hci6: command tx timeout
[  666.779323][T30117] Bluetooth: hci8: command tx timeout
[  666.859343][T30117] Bluetooth: hci7: command tx timeout
[  667.179398][T30117] Bluetooth: hci6: command tx timeout
[  668.859268][T30117] Bluetooth: hci8: command tx timeout
[  668.939368][T30118] Bluetooth: hci7: command tx timeout
[  686.789104][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
[  686.791227][    C0] rcu: 	0-....: (1 GPs behind) idle=a1bc/1/0x4000000000000000 softirq=163461/163471 fqs=5241
[  686.796576][    C0] rcu: 	         hardirqs   softirqs   csw/system
[  686.798810][    C0] rcu: 	 number:     7381          0            0
[  686.801005][    C0] rcu: 	cputime:      248          0        52234   ==> 52510(ms)
[  686.803647][    C0] rcu: 	(t=10502 jiffies g=118957 q=19702 ncpus=2)
[  686.805873][    C0] CPU: 0 UID: 0 PID: 30094 Comm: syz.1.6219 Not tainted syzkaller #0 PREEMPT(full) 
[  686.805882][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  686.805886][    C0] RIP: 0010:rcu_lockdep_current_cpu_online+0x32/0x120
[  686.805901][    C0] Code: 53 65 8b 0d f0 d7 f9 10 b0 01 f7 c1 00 00 f0 00 0f 85 d5 00 00 00 83 3d f3 e8 fc 0d 00 0f 84 c8 00 00 00 65 ff 05 ce d7 f9 10 <e8> b9 38 d3 09 89 c3 83 f8 08 0f 83 c7 00 00 00 49 be 00 00 00 00
[  686.805907][    C0] RSP: 0018:ffffc900042aeee0 EFLAGS: 00000202
[  686.805914][    C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000201
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  686.805918][    C0] RDX: ffff888045158000 RSI: ffffffff8be33860 RDI: ffffffff8be33820
[  686.805923][    C0] RBP: 0000000000000001 R08: ffff888045158000 R09: 0000000000000002
[  686.805927][    C0] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff888070f02038
[  686.805931][    C0] R13: dffffc0000000000 R14: ffff888106f00000 R15: ffff888108e64478
[  686.805936][    C0] FS:  00007f45d8d726c0(0000) GS:ffff8880b8618000(0000) knlGS:0000000000000000
[  686.805942][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  686.805946][    C0] CR2: 0000200000001200 CR3: 000000013345a000 CR4: 00000000000006f0
[  686.805972][    C0] Call Trace:
[  686.805977][    C0]  <TASK>
[  686.805981][    C0]  rcu_read_lock_held+0x1e/0x50
[  686.805989][    C0]  qdisc_lookup_rcu+0x381/0x6d0
[  686.805999][    C0]  qdisc_tree_reduce_backlog+0x1b2/0x480
[  686.806007][    C0]  ? qdisc_tree_reduce_backlog+0x3c/0x480
[  686.806016][    C0]  fq_change+0xeba/0x2030
[  686.806025][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  686.806037][    C0]  ? __pfx_fq_change+0x10/0x10
[  686.806050][    C0]  ? __hrtimer_setup+0x187/0x210
[  686.806059][    C0]  fq_init+0x699/0x960
[  686.806068][    C0]  ? __pfx_fq_init+0x10/0x10
[  686.806076][    C0]  ? lockdep_rtnl_is_held+0x26/0x40
[  686.806083][    C0]  ? qdisc_lookup+0x590/0x6d0
[  686.806090][    C0]  ? __pfx_fq_init+0x10/0x10
[  686.806097][    C0]  qdisc_create+0x7ac/0xea0
[  686.806108][    C0]  tc_modify_qdisc+0x1538/0x20e0
[  686.806121][    C0]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  686.806138][    C0]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  686.806145][    C0]  rtnetlink_rcv_msg+0x77c/0xb70
[  686.806154][    C0]  ? __lock_acquire+0xab9/0xd20
[  686.806164][    C0]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  686.806172][    C0]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  686.806187][    C0]  netlink_rcv_skb+0x208/0x470
[  686.806197][    C0]  ? __lock_acquire+0xab9/0xd20
[  686.806205][    C0]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  686.806214][    C0]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  686.806227][    C0]  ? netlink_deliver_tap+0x2e/0x1b0
[  686.806239][    C0]  netlink_unicast+0x82f/0x9e0
[  686.806250][    C0]  ? __pfx_netlink_unicast+0x10/0x10
[  686.806259][    C0]  ? netlink_sendmsg+0x642/0xb30
[  686.806264][    C0]  ? skb_put+0x11b/0x210
[  686.806272][    C0]  netlink_sendmsg+0x805/0xb30
[  686.806281][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  686.806288][    C0]  ? aa_sock_msg_perm+0xf1/0x1d0
[  686.806295][    C0]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  686.806302][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  686.806308][    C0]  __sock_sendmsg+0x21c/0x270
[  686.806322][    C0]  ____sys_sendmsg+0x505/0x830
[  686.806331][    C0]  ? __pfx_____sys_sendmsg+0x10/0x10
[  686.806341][    C0]  ? import_iovec+0x74/0xa0
[  686.806350][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  686.806357][    C0]  ? __pfx____sys_sendmsg+0x10/0x10
[  686.806376][    C0]  ? __fget_files+0x2a/0x420
[  686.806381][    C0]  ? __fget_files+0x3a0/0x420
[  686.806390][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  686.806398][    C0]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  686.806408][    C0]  ? rcu_is_watching+0x15/0xb0
[  686.806416][    C0]  ? do_syscall_64+0xbe/0x3b0
[  686.806424][    C0]  do_syscall_64+0xfa/0x3b0
[  686.806429][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  686.806438][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  686.806445][    C0]  ? exc_page_fault+0x9f/0xf0
[  686.806454][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  686.806460][    C0] RIP: 0033:0x7f45d7f8ebe9
[  686.806467][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  686.806473][    C0] RSP: 002b:00007f45d8d72038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  686.806480][    C0] RAX: ffffffffffffffda RBX: 00007f45d81c5fa0 RCX: 00007f45d7f8ebe9
[  686.806484][    C0] RDX: 0000000000000040 RSI: 0000200000001200 RDI: 000000000000000b
[  686.806488][    C0] RBP: 00007f45d8011e19 R08: 0000000000000000 R09: 0000000000000000
[  686.806492][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  686.806496][    C0] R13: 00007f45d81c6038 R14: 00007f45d81c5fa0 R15: 00007fffa6365e88
[  686.806506][    C0]  </TASK>

VM DIAGNOSIS:
10:48:15  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000073f0
R8 =ffff888020e18237 R9 =1ffff110041c3046 R10=dffffc0000000000 R11=ffffffff854f3b00
R12=dffffc0000000000 R13=ffffffff99afd90a R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f3b7c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f45d8d726c0 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001200 CR3=000000013345a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ff00000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007f45d8cfd100 00007f45d8197460 XMM05=00007f45d8197478 00007f45d81974c0
XMM06=00007f45d81974b8 00007f45d81974b0 XMM07=00007f45d81974a8 00007f45d81974a0
XMM08=0000000000000000 00007f45d8012ee7 XMM09=0000000000000000 00007f45d8012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=fffffffffffffff0 RBX=ffffc900001e0890 RCX=0000000000000000 RDX=ffffc900001e08c8
RSI=dffffc0000000000 RDI=ffffc900001e0888 RBP=dffffc0000000000 RSP=ffffc900001e0760
R8 =ffffc9000310ee08 R9 =0000000000000000 R10=ffffc900001e08d8 R11=fffff5200003c11d
R12=ffffc9000310ee08 R13=ffffc900001e08d8 R14=ffffc900001e0888 R15=ffffc900001e0888
RIP=ffffffff8172e727 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007ff9ad694800 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055ba56607c08 CR3=0000000028608000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
