last executing test programs:

16.745910777s ago: executing program 0 (id=3331):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r2)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x24, 0x40, 0x107, 0x0, 0x25dfdbfd, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}]}, 0x24}}, 0x8004)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r6, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea43961a6007c1674e79a267dc5be7897c84a89a72097bc2cf211a7ea330c86604e"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x40, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x8}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xfffffff8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24048844}, 0x0)
sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000001000ffff27bd7000ebdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231a0500400012800e0001006970366772657461700000002c0002801400060000000000000000000000ffff7f000001140007000000000000000041fffffffffffffffe"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040000)

16.668012841s ago: executing program 0 (id=3332):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4)

16.537208937s ago: executing program 0 (id=3333):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'erspan0\x00'})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4)

16.536309955s ago: executing program 0 (id=3335):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f00000002c0)={0x8, 'nicvf0\x00', {'ip6gre0\x00'}, 0xad8f})
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000140)='cgroup.events\x00', 0x26e1, 0x0)
close(r5)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r7=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}]}}]}, 0x38}}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x4d}, 0x40)
r11 = socket$unix(0x1, 0x2, 0x0)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r13=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32=r13, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)

16.13792603s ago: executing program 2 (id=3343):
socket$inet6(0xa, 0x1, 0x84)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x9e}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000380)={'wlan1\x00', 0x8000})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="b400000000000000dd0a0000000000006301a4000000000095000000000000006681fabfa7afdea451352385fd277a26b1928972a90713774dee000000008abeded0f241d9e16380276de7f845fb77f3942b1b2f835d2704d284651cec42865a01e610e1d8ebed3bca771dd8dfc94bf8454e0ba5feb0a8fb9c709340a7"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001d00)={r4, 0x58, &(0x7f0000002040)}, 0x6d)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000400)={'wpan0\x00'})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000000000000000a036a208ad26d04000300bcc8eb7ed48f1cffe0914997a21ea291ac09cf3074496c0c8759da92aea04f588153233a9393644ee9fab3a4d6096c4de3a7684e59cbe9a6e25a1f547ed2c08b6c34", @ANYRES32=r8, @ANYBLOB="0800050007000000"], 0x24}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000010000000000000000000000711232000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0)
ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000340)={0x0, 0x1})
sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r11 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r11, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e)
sendmmsg(r11, &(0x7f00000003c0)=[{{0x0, 0xfffffffffffffdd4, 0x0}}], 0x1, 0x4020004)

16.13055071s ago: executing program 2 (id=3344):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'wlan1\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

16.027713207s ago: executing program 2 (id=3345):
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000000))
ioctl$int_in(r0, 0x5452, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000000c0)='percpu_alloc_percpu\x00'}, 0x10)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0))
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_sctp(0x2, 0x5, 0x84)
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x38}}, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x3)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2f, 0x100008, 0x0, 0x8, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x4000000, 0x0, 0xff, 0x0, 0xfffffeff}})
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x10, 0x3, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d242d7728c9386c4a0ac7e05bafbae38"}]}}}}}}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1900000004000000040000000200020000060000006bb74079fe36d54b41760fcbab00008694b6b64da087f47268e229208b11c524554cfe172565c6a2a696b74aa513d9b734103e968ba03d311b76019ad3896a02539aa4f0acd53ed86cbb334827161a19d0be49", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r4 = socket(0x10, 0x80003, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0xa, 0x89c8, 0x40401, r3, 0x7f, '\x00', r6, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xa, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9a}}, 0x0, 0x7fff, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94)

15.96570677s ago: executing program 2 (id=3348):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x33, &(0x7f0000000040)=0x141, 0x4)
ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000080)={'hsr0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}})
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={<r3=>r0, 0xb24, 0x2, 0x1000})
sendmsg$can_raw(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@can={{0x4, 0x1}, 0x7, 0x1, 0x0, 0x0, "77809623732abc53"}, 0x10}, 0x1, 0x0, 0x0, 0x20000084}, 0x840)
setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f00000001c0)={0x4, {{0xa, 0x4e24, 0x6, @mcast1, 0xfffffff9}}}, 0x88)
recvfrom$llc(r3, &(0x7f0000000280)=""/113, 0x71, 0x8000, &(0x7f0000000300)={0x1a, 0x307, 0x9, 0xe7, 0x0, 0x7, @broadcast}, 0x10)
ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000000340)={{r1}, "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"})
setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000001340)=0xc9, 0x4)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000001380)={'NETMAP\x00'}, &(0x7f00000013c0)=0x1e)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001400)={'ip6gretap0\x00'})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001440)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000001480)={0x0, 'hsr0\x00', {0x3}, 0x9})
close(r6)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000014c0)={<r8=>0x0, 0xf, "207776b1d41430c00fbe2cb082147c"}, &(0x7f0000001500)=0x17)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001540)={r8, @in={{0x2, 0x4e20, @private=0xa010102}}, 0x6, 0x0, 0x80000000, 0x1ff, 0x0, 0x4}, &(0x7f0000001600)=0x9c)
syz_extract_tcp_res$synack(&(0x7f0000001640), 0x1, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x100010, r6, 0xcc531000)
syz_emit_ethernet(0x4a, &(0x7f0000001680)={@broadcast, @remote, @val={@val={0x88a8, 0x1, 0x1, 0x3}, {0x8100, 0x5, 0x0, 0x3}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, @random="5ac77b9e0ac7", @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}, &(0x7f0000001700)={0x0, 0x1, [0xf2c, 0xc8a, 0x689, 0x8ab]})
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000001900)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001740)=""/180, 0xb4, 0x0, &(0x7f0000001800)=""/252, 0xfc}, &(0x7f0000001940)=0x40)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r7, 0x50009418, &(0x7f0000001980)={{r3}, 0x0, 0x0, @unused=[0x5, 0xe8, 0x0, 0x4], @devid})
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000002a40)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002a00)={&(0x7f00000029c0)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x40000)
setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000002a80)=0x2, 0x4)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002b00), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r3, &(0x7f0000002c00)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b40)={0x5c, r9, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xd0a55bb93d905e95}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xf}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x80)
ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x8000000000000000)

15.897008674s ago: executing program 2 (id=3349):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000020000000000000003000000180000000300000000000000040000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc5c79a324b7d4b3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x0, &(0x7f0000000180), &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
unshare(0x68040200)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f00000043c0)={'tunl0\x00', {0x2, 0x4e23, @empty}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_delrule={0x1c, 0x21, 0x1, 0x0, 0x25dfdbfe}, 0x1c}}, 0x44044)
socket$nl_netfilter(0x10, 0x3, 0xc)
listen(r2, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), 0xffffffffffffffff)
r8 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r2, 0x29, 0x6, &(0x7f0000000040)=r0, 0x4)
sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x4}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)='n', 0x1}], 0x1}, 0x2600c055)
sendmsg$NL80211_CMD_STOP_NAN(r6, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x20, r7, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4044801}, 0x0)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$VHOST_VDPA_GET_CONFIG(r0, 0x8008af73, &(0x7f0000000940)={0x0, 0xe4, ""/228})
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a30000000fc43552a3f575381800b00010065787468647200002c681f39e53f95831692c1ab3cd422702c000280080007400000000c05000200000000000800034000000a4a"], 0x94}}, 0x0)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x3c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x25, 0x11, 0x0, 0x1, [@generic="9e15c00619065e963eba3ef94d765eb501e2e4bea6b8d14b16632741a5bb965fe0"]}]}, 0x3c}], 0x1, 0x0, 0x0, 0x4000040}, 0x300)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002980)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x9, @empty, 0x7ff}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000100)="cd56a29e88ae991996c7820b022834a681dbabd667f730f5b9a88f0bf47645e343e59847432e05ef6809961e5cfe05c3682ea556eb95b06a40f640621a2d91dcc7e68374222c109411", 0x49}, {&(0x7f0000000200)="63ffcd86b3a7d7413b30ce26682c7853a118e7c8e89ee67802de6026c7485a83fa8319ae8daf9205b93eb53b1abfaf76f3acf78c69d7b4caede667f2a5810f9ad3638f62684fb8ba93686af56264e50bcd9260d7e744584dfe39dd3976204276a9ceced763cd5bb1b0a36cedaf642c995a50f04317fbd9459aa9285a753707317e64b186c8e716037eaeb2c03aa4c2ccbd81c0e16a28d6b34d69b5c66f16129917c064b601d40239dcf4f1bbbc7a605c596042997f59e13b7975b2d18ae1", 0xbe}, {&(0x7f00000002c0)="f57d043b14eb3d20b97744498eeb0c3c6c9617976631f514c0492e88c5eb5777d5e4b7097345f360077d8b5676d8db2e00dfdc4d49e425d6a86a988a1942", 0x3e}, {&(0x7f0000000300)="b056002d307cfbe3eeaaca77627f10431d29a9702df81cb9e1bda49ccf9d4eb7ecbd221731c1b27c43138fb9878204963ecf7b63402bdf99e7e2a2929de933c1269426e7c7f3b52ec9a2210c7bee98412942b59c570f60249800d9307d4a248209b914d85b9c943c0fc2bd42c5b35ee9ad8254c60601ff178c1a0f1344a80ac130442e4c1a2b66c4c39530176f78b98d0096a7dc092cf15076c3b638976963171248551b6bc06b5a1e7504418a473ec7a2b6a0f0ccd27d7870ef171b5dca22777fe20afc79f24e6412ede82a7f86e20aeb4c72cc3362589138cac16a0026ec6a5fb6", 0xe2}, {&(0x7f0000000400)="423ba58f2d6b461d2c98b612e40b3b6bd246498e0c633ba90e6efa31f22a3df5aaf62edd594fed81c85ac72b7daca3ccb82b94fd85724d8364a744e99e05554695f04cae9a6534a7c313939b2fa3bb5e74f0b76cab1c", 0x56}], 0x5, &(0x7f0000000640)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80}}, @hopopts={{0x20, 0x29, 0x36, {0x3b, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x81}]}}}], 0x38}}, {{&(0x7f0000000740)={0xa, 0x4e21, 0x2, @remote, 0x1}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000780)="1cd6cb9ac71b9f1bab2658cc0f718d532a4cdb220b90714d1785fa4c20ecef9cfbeed2d64fca6d088abd04dbbe08f18f939bca567547139e7212ab592697f539", 0x40}, {&(0x7f00000007c0)="f97a967481e4d6cc36da70d876912f4a84048ba5063e6ef7c02d5c0008a6e768e7057e03d2e949fda6090b51d75cf9161dc38ff3cc89fda0940304743298ecbf794b57e9e4f80fa8d85f0cef9f9468158beb2a38903cb5c20288cf08ab06ed99d5baf4a1e5499286ffca657040cec61efd8fb30d0484e1f3bf37261c66e58eba92f34e1d3d6163677bee939eadc5fec7d33297e992bac99ecaa8243d33c5fa3a7daa6d9ab01483458aabf5367905ee1b00e567e77d7e7d24d4abdb57", 0xbc}, {&(0x7f0000000880)="6f0015", 0x3}], 0x3}}, {{&(0x7f0000000900)={0xa, 0x4e24, 0x81, @remote}, 0x1c, &(0x7f0000000540), 0x0, &(0x7f0000002b40)=ANY=[@ANYBLOB="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"], 0x118}}, {{&(0x7f0000001bc0)={0xa, 0x4e23, 0x6, @private0, 0xe0d}, 0x1c, &(0x7f0000001cc0)=[{&(0x7f0000001c00)="5fc935659040d11ece2070b33dae41a8271ae1b8b9207bc9d13ea80841a8f4e1ace56b8f4c1fb47e10c376f4ed8eead3bdc17c73964c6e65b9f8934e4b6b7cb6a2d8e3076c1cd9a6c7b4825dfa7b7c0d3135331b21b7b75d7a5988dae3d138fccdd85ca90d5ebdb0b8", 0x69}, {&(0x7f0000000500)="2ae2cace52f1e8482e8f57569f02991dd6fcaf8c0f53219b72a58b8c7307c2e304dd5ca0d3b937", 0x27}], 0x2, &(0x7f0000001d00)}}, {{&(0x7f0000001ec0)={0xa, 0x4e23, 0xb, @private0, 0x9}, 0x1c, &(0x7f0000002080)=[{&(0x7f0000001f00)="a42f93767b3b9970f25322dc94e54b4116de78f703f81717a1d0d93fb2cd9217bd43fe9af80e22e77d70885ff8f54c8c1d319030f6ead00aa58484c5ac59ee63df1baf07b3f4c68b8be734228c9d2de270fcd318eb3f0cee1e92c8caec0c26918b19f31dee79a588", 0x68}, {&(0x7f0000001f80)="9ac68b18e013daa65dae0de5dda36e0e7e3b1479c7e0f69dc3dc6b6ac449a4b375c46209782c81ce86b88040f36817fcf3bb7bde3ebc3ebb5f3617e3cbac19e439070832ebbd2bade28684ae3ab6dfacf8e1378f7ee58073c49633ee2cb15c53f2750947310d61b70b68ec69368eb217a24a6d811887921b1faaaf124b3b5a080cce31bae1e36e78b6a1f54647682ca2820a86b09fb06a64ccf590df6fea9a29f1c8663df609f3fd77e6b1c27d5a30ac086130fa4d1591faf2ddccfe49257dd064ff0c738ceceea601601224f4098d55036e2411edc5394aacd1229b4a4ca277615b305c481e4002458ee15d5d5f4386fcaffe95c6", 0xf5}], 0x2, &(0x7f0000000d80)=ANY=[], 0x1c8}}, {{&(0x7f0000002180)={0xa, 0x4e21, 0x12e, @loopback, 0x10001}, 0x1c, &(0x7f0000002380)=[{&(0x7f00000021c0)="5b22f3358dc681d9fc6e91c9b4f747e1c0ed760f87b2b77c5249baeca7f373de9af3729857c760cdfb2e930cf0b2745137323e091682a67cdfde9b2787e66093a5969bd5c00cb629877762790ae20ddfc4f7ab6e66d6e77972ec4e34b0594d2a78e400a8dd55500e5abea31e619a6757f0a51365609dca914f57ac3209be184ab232acc897916f5ed9dde5090290ea825483bff2ccbf546e5f1603283fe5974cba2f", 0xa2}, {&(0x7f0000002280)="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", 0xfa}], 0x2e, &(0x7f0000002500)=[@rthdrdstopts={{0xa0, 0x29, 0x37, {0x21, 0x10, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @generic={0x8, 0x75, "3e2ed3ebef52da2b55c2b7572f7ea255a2f475299d2f43a5ab805c8b814bdc49553c9f5b8fd5f26e44b525fd5093fba561ce875e49e95c32243c3b62b97edab565106617097b4722e661672ac4dfc1bee910630cd3ac81d473404cf0cffd67cdf1dcd9c4ff600a5b748309df733d6451b65bd118a7"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x19167f1b}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0xe0}}, {{&(0x7f0000002600)={0xa, 0x4e21, 0x5, @empty, 0x10}, 0x1c, &(0x7f0000002740)=[{&(0x7f0000002640)="2181ed494d3a418e25afa433f300c4dc916ebac9c35be6fc2c17489d800b439b50d3e660925e8c619b2127ab5cb5c7a551ef8a21b3235a3bbcb12b162eb36272fce5511f57013a50b01f47dc4576cc245b81214a0638d307054bcdf770f97cedf23b3268a4f7fe32791bb5abc56411d0a0aa52e181e1b1ae14924f12b61eb8a993c3f7d50b242462311413b9718e91ac19f25ff21aa72e2e81543b0eef148db0a777334f08e9dedb2cc97cda7b97546eec7d274b1caa665a54161ba47e9b25625f45f3a9394bbc7c1c2b3a3c4f142ac2b568341caf34fba6e464cb24c842bf19fbaefeda8b6140071ce000da2ff7893c079b400008", 0xf5}], 0x1, &(0x7f0000000940)}}], 0x7, 0x40020)

15.78788994s ago: executing program 1 (id=3352):
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket(0x10, 0x803, 0x0) (async)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0xfffffffffffffe77}, 0x1, 0x0, 0x0, 0x8800}, 0x4000885) (async)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', <r5=>0x0}) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket(0x10, 0x803, 0x0)
bind$netlink(r7, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async)
getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r8, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0) (async)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44800)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10800}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x440c0}, 0x40051)

15.784599355s ago: executing program 1 (id=3353):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000a40)="fc0000", 0x3)
close(r2)
close(r1)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0xb, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x58, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x5}]}, @CTA_TUPLE_REPLY={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0xf, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x58}}, 0x0)
setsockopt$sock_int(r4, 0x1, 0x1e, &(0x7f0000000140), 0x4)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x9, 0x4)
sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x1c}], 0x1}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})

15.658091898s ago: executing program 0 (id=3354):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r0, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x13}, 0x4}, 0x1c)
pipe(&(0x7f0000000600)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
splice(r3, 0x0, r5, 0x0, 0x1100000000f336, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x2}, &(0x7f00000000c0)=0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x20, @rand_addr, 0x8}, 0x1c)
syz_emit_ethernet(0xc2, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000e0800460000b4000000000011907800000000000000000703390000004e21009c907801000100010000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b9649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe092c9a881177709cbf7c7f7d036300004e"], 0x0)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
socket$inet_udp(0x2, 0x2, 0x0)
pipe(&(0x7f0000000200))
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x1, 0x80, 0x1, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x7, 0x0, 0x7fffffff}, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r6, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0xa1}], 0x1, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, 0x0, &(0x7f0000000140))
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00'})

15.571931319s ago: executing program 1 (id=3355):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, &(0x7f0000000140)=0x8, 0x4)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="800037bbfa9ba1ce", 0x8, 0x2004c844, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0, 0x0, 0x3}, 0x18)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r6, 0x400448c9, 0x0)
sendmmsg$inet(r5, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2400c042)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00', @ANYBLOB="010000000020000000001a0000001c0000800400010200000800060000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
r8 = socket(0x1e, 0x4, 0x0)
socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={<r9=>0xffffffffffffffff})
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000}, 0x20)
getsockname$inet(r9, &(0x7f0000000000), &(0x7f0000000100)=0x10)
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038)
sendmmsg(r8, &(0x7f0000000080), 0x1a1, 0x0)

15.571290728s ago: executing program 2 (id=3356):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003300)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf250300000028"], 0x113c}}, 0x8004)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x54)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r3=>0x0})
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r4, 0x0, 0x0, 0x2}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018000180140003"], 0x4c}, 0x1, 0x0, 0x0, 0x20000006}, 0x4000804)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg0\x00'})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000440)={'gretap0\x00', 0x0, 0x788, 0x700, 0xfffff801, 0x10, {{0x6, 0x4, 0x0, 0x3b, 0x18, 0x64, 0x0, 0xe, 0x4, 0x0, @remote, @multicast2, {[@end]}}}}})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000880)={'team0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {0xa}, {}, {0xfff3}}}, 0x24}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00'})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, r1, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wg0\x00'})
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x84)
r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8, 0x0, 0x5}, 0x18)
writev(r7, &(0x7f0000000240)=[{&(0x7f0000000200)="13000000010203", 0x7}], 0x1)
r9 = socket$inet6(0xa, 0x80003, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608fffffff30000180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1e}, 0x94)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, 0x0, 0x0)

15.496405054s ago: executing program 1 (id=3357):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10)
write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000100)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x40000)
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48)
getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_ADDRESS={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000700)={'ipvlan0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500f0e66f1500000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r6], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40101}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)

15.347463111s ago: executing program 1 (id=3358):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
writev(r1, &(0x7f0000001600)=[{}, {&(0x7f0000000040)="576df1c6885c2e3889c965e7549950c8321576f4730da7067e0716e20f0dc0bd45296b88b8b6e40f5f0d5c8cd57cabf7196c256c1bf0f08649ca16d7efdffc3dbe9c96d23ed3b0c3", 0x48}, {&(0x7f00000000c0)="2f6511649876370d66f8767c7ff44d59220b0e85493ea1f9dcea554cb791a1f99a9b534f7a2c4eddcbd7ece4f44ea3050c54a147847cf0b7f39bc9a2d72972047f8589e45179022c4283cf9f03add27b8c63e1cdda833b3d659071758e75848fca40d965023c4405bdb314051f033c1304a24cb8e48b04ed500a9dc23353402df907b94fb8ddc609e7794ec4ee0eec7edeeadbb15dbfd463", 0x98}, {&(0x7f0000000180)="768e1c71303063a1b5b3b1200163fddabd241b9c161ace5e1e04b8579411b322ad46cb5900087d925c620ee24febb154c5da06cddcbe2c2a96c2ca7e70744bc129c685795b3ce7c35733a49bd1ea2d40fc0df9c5184a17259821cd346daf5e71a83e16202c01", 0x66}, {&(0x7f0000000200)="ba07466cbb4396fc74acf70866b167a6e068e1884a9e4515c81c8e87c6f0956260660e8506a1f91bb1930374a43f410b643c709e3eb6b8ef0319e933e422327e459b0c27b3e0df477930e1fa8dcf3d38c770d4fcf766f372a56e061a637cf2071a104056ce7c7caa6ff9c131ac5193ab30f208adb3bc59438335fbbe24a43a6a8167d0cd8be497595971974dfe96418c9ff58445ef3d41e1770112d8d740f3d4527c2a9e37e3dcf5a9201e21d2a142a65cc7d0c0f6c9fe64adc22067efe18efe32d61f317cf7a36f676fef1d2cb44f481e5bab952c71196ca3ab", 0xda}, {&(0x7f0000000300)="8075091ed04ce9b735054eaea1b7fd52d7546240ce6412d239af70b503bb0fc46635c9cf33ce03d7473349f1cab2b02c0ce50f3128f90cf51872ce853e11df5c000130d8f6dfd5fb57464c93d0327096d4b053a889d2973ebd86087bbef08f4a20ea3924d161ddb92ea63e38cd30c123c31f703ce232de658691a20839c9115f9e34d6aefe7d3bf56ee27266f2c8282572023c46bb091d4123c9343c11f35ccc00a10ed77fd0d3849fa14e92273a0813c6ebbee7711ec46854876f83cb7617d2887b9206a221c7c8bedc448e497d9f3bb80dcd588db9902fa9586b6b", 0xdc}, {&(0x7f0000000400)="61ac0645e2a0cc8d740ace1e67ead524093b99728a36c3703c1abad7c2a79ce824e6040826e464920f7b35087a8f2afc3cb831d2c9f234d6f81dab936b20d2e860f48c081361d0c80fadf7d48c5119d5dd23843a8226c8e0b6faf57a144acaba2ebf68471d1478e4be49dd4cd5521bcf0c8696c3fa57665421bc800cd10d2c6e585a2be4f8435bbdc57eb9940140d73aa66fb80b07583f103c2ad6e55458f93109e99eda78834eed22fc82064eff4230c2c745153e8f87c8d93b83ab8ef47a8f19bbd462a2554110be3b3e7bc74086989b0d0b054a481d0e893c8fa4687b5a1f2a4644315af499d2a4", 0xe9}, {&(0x7f0000000500)}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="b4fd91bdba1034302b7ada54895e713fbe5a256eba87c3ad6fcae113df97546a0b8e529835d0ec4298a82f6dd1362ddb846cb94bd6bb76d28b3ad40b7193f5b27ae9df8c6b7103104adb38007acc84dbacacc0c9fddbc8bb9dc7cb27f207d20261ae34b7e084fe4f7b05dfbd084a84bccf6662ff0297db6c10fab21f19b98e3d39b5bbc88aab320320220d2bcf9354bf1d95c8b4cdbc9ff500105b6950b4d5f0428f13a165ec8c260558c6cb52292baca1be36ba7e48f7", 0xb7}], 0xa)
r2 = syz_genetlink_get_family_id$team(&(0x7f0000001700), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001740)={'team0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001780)={'team0\x00', <r4=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001840)={'ip_vti0\x00', &(0x7f00000017c0)={'syztnl1\x00', <r5=>0x0, 0x8000, 0x20, 0x81, 0x3, {{0x16, 0x4, 0x0, 0x5, 0x58, 0x68, 0x0, 0xb8, 0x29, 0x0, @multicast1, @local, {[@timestamp_addr={0x44, 0x44, 0x3b, 0x1, 0x7, [{@broadcast, 0x2c}, {@loopback, 0x6}, {@remote, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@empty, 0x9}, {@loopback, 0xe}, {@multicast1, 0x3}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001900)={'sit0\x00', &(0x7f0000001880)={'gre0\x00', <r6=>0x0, 0x40, 0x8, 0x1, 0xffffffdb, {{0x13, 0x4, 0x1, 0x1a, 0x4c, 0x68, 0x0, 0x99, 0x2f, 0x0, @multicast1, @multicast2, {[@generic={0x82, 0xb, "f14f02536afaece2b8"}, @timestamp_addr={0x44, 0x14, 0x5e, 0x1, 0x5, [{@broadcast, 0x5}, {@multicast2, 0x4}]}, @ssrr={0x89, 0xb, 0x8c, [@multicast2, @local]}, @timestamp_addr={0x44, 0xc, 0xc1, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x3e}, 0x2}]}]}}}}})
getsockname$packet(0xffffffffffffffff, &(0x7f0000001940)={0x11, 0x0, <r7=>0x0}, &(0x7f0000001980)=0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001ac0)={'syztnl0\x00', &(0x7f00000019c0)={'gretap0\x00', <r8=>0x0, 0x700, 0x1, 0x2, 0x4, {{0x36, 0x4, 0x0, 0x2, 0xd8, 0x67, 0x0, 0x0, 0x29, 0x0, @local, @private=0xa010102, {[@timestamp_addr={0x44, 0x1c, 0x94, 0x1, 0x0, [{@multicast1, 0x3}, {@private=0xa010102, 0xbf3}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x3}]}, @timestamp_addr={0x44, 0x3c, 0x83, 0x1, 0x1, [{@multicast2, 0xf}, {@local, 0x8}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x3ff}, {@private=0xa010100, 0x5}, {@private=0xa010102, 0x52e}, {@broadcast}, {@dev={0xac, 0x14, 0x14, 0x39}}]}, @rr={0x7, 0x27, 0xc2, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @loopback, @loopback, @local, @rand_addr=0x64010100, @local, @local, @rand_addr=0x64010102]}, @lsrr={0x83, 0x7, 0x5d, [@loopback]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x82, 0x0, 0x6, [0x101, 0x4, 0xff]}, @cipso={0x86, 0x23, 0x0, [{0x1, 0x2}, {0x1, 0x6, "1f237d40"}, {0x0, 0xf, "116dd05730d52b99a48a302757"}, {0x1, 0x2}, {0x2, 0x4, '[;'}]}, @ra={0x94, 0x4}]}}}}})
getpeername$packet(0xffffffffffffffff, &(0x7f0000001b00)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001b40)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001b80)={'team0\x00', <r10=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001c40)={'ip6gre0\x00', &(0x7f0000001bc0)={'ip6tnl0\x00', <r11=>0x0, 0x4, 0x6, 0x6, 0x5, 0x4c, @mcast1, @rand_addr=' \x01\x00', 0x8, 0x1, 0x5, 0x9}})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001c80)={'team0\x00', <r12=>0x0})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001d40)={0x1, 0x58, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r13=>0x0}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001d80)={'batadv0\x00', <r14=>0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001e40)={'syztnl0\x00', &(0x7f0000001dc0)={'tunl0\x00', <r15=>0x0, 0x80, 0x20, 0x1ff, 0x900, {{0xd, 0x4, 0x1, 0xf, 0x34, 0x67, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @broadcast, {[@lsrr={0x83, 0x7, 0x68, [@broadcast]}, @end, @lsrr={0x83, 0xf, 0x4b, [@private=0xa010101, @rand_addr=0x64010101, @private=0xa010101]}, @lsrr={0x83, 0x7, 0xbd, [@dev={0xac, 0x14, 0x14, 0x27}]}]}}}}})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001e80)={'team_slave_1\x00', <r16=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001f40)={'syztnl1\x00', &(0x7f0000001ec0)={'ip6_vti0\x00', <r17=>0x0, 0x2f, 0x6, 0x23, 0x9b3, 0x4e, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, 0x0, 0x8, 0x6, 0x8}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002080)={'gretap0\x00', &(0x7f0000001f80)={'gre0\x00', <r18=>0x0, 0x80, 0x87, 0xfffffff9, 0x800, {{0x30, 0x4, 0x0, 0x28, 0xc0, 0x67, 0x0, 0xf3, 0x29, 0x0, @empty, @loopback, {[@cipso={0x86, 0x33, 0xffffffffffffffff, [{0x5, 0x2}, {0x0, 0xf, "e84f70d7b487b9cbe9468e3bba"}, {0x1, 0xf, "d3df040297a5b3791c687bdf67"}, {0x1, 0x9, "91ff8b619cd286"}, {0x1, 0x4, "e5d5"}]}, @cipso={0x86, 0x4f, 0x1, [{0x6, 0xc, "6bdb8a535f5465cd801c"}, {0x0, 0x8, "be0f6f5b056a"}, {0x6, 0x2}, {0x6, 0xa, "55cdb18aa708ab5d"}, {0x0, 0x3, "ef"}, {0x7, 0x8, "8c76a17bab42"}, {0x7, 0xc, "f7704cf4a0b007fec56e"}, {0x1, 0x3, '\a'}, {0xa, 0xf, "a12ded8cd58d57efa595ffc509"}]}, @generic={0x89, 0x8, "d399356df9c5"}, @rr={0x7, 0x1f, 0x89, [@local, @multicast1, @local, @private=0xa010100, @local, @rand_addr=0x64010102, @multicast1]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000020c0)={'wg0\x00', <r19=>0x0})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000002100)={@empty, @multicast2, <r20=>0x0}, &(0x7f0000002140)=0xc)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002200)={'syztnl1\x00', &(0x7f0000002180)={'syztnl2\x00', <r21=>0x0, 0x29, 0x6, 0xfa, 0x8, 0x10, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x40, 0x2, 0x4}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002340)={'sit0\x00', &(0x7f0000002240)={'tunl0\x00', <r22=>0x0, 0x40, 0x8000, 0x6, 0x2, {{0x30, 0x4, 0x0, 0x23, 0xc0, 0x66, 0x0, 0x1, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xd5, 0x0, 0xf, [0x9, 0x8]}, @timestamp_prespec={0x44, 0x4c, 0x5e, 0x3, 0xe, [{@multicast2, 0x2}, {@empty, 0x80000}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x8}, {@multicast1, 0x9}, {@empty, 0x8}, {@multicast1, 0x7}, {@empty, 0xffffffff}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}]}, @end, @generic={0x82, 0xa, "162d9a46447849fd"}, @timestamp_prespec={0x44, 0x2c, 0x7a, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3ff}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@private=0xa010102, 0xb3d}, {@private=0xa010102, 0x1}]}, @timestamp={0x44, 0xc, 0xd6, 0x0, 0xf, [0x2fdd, 0x6]}, @timestamp={0x44, 0xc, 0x14, 0x0, 0x8, [0x1000, 0x4]}]}}}}})
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000002d40)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002d00)={&(0x7f0000002380)={0x960, r2, 0x2, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x79}}}]}}, {{0x8, 0x1, r4}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x224, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r9}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x1, 0x1, 0x6, 0x9}, {0x0, 0x8, 0x9, 0x3}, {0x2, 0x7, 0x4, 0x3}, {0xffff, 0x7, 0x8, 0x3}, {0x400, 0x7, 0x81}, {0x9, 0xb}]}}}]}}, {{0x8, 0x1, r10}, {0x224, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r15}}}]}}, {{0x8}, {0x1f8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r17}}}]}}, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4e07}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r19}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xce}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r20}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r21}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r22}}}]}}]}, 0x960}}, 0x40)
ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000002d80)={0x2a3, 0x4, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
r23 = accept4(r0, &(0x7f0000006d00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000006d80)=0x80, 0x40000)
getsockopt$ax25_int(r23, 0x101, 0xc, &(0x7f0000006dc0), &(0x7f0000006e00)=0x4)
r24 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000006e40), 0x2, 0x0)
write$cgroup_subtree(r24, &(0x7f0000006e80)={[{0x2d, 'devices'}, {0x2d, 'memory'}, {0x2b, 'cpuset'}]}, 0x19)

15.346493771s ago: executing program 1 (id=3359):
r0 = socket$kcm(0x10, 0x3, 0x10)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$caif_stream(0x25, 0x1, 0x5)
getsockname(r2, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000100006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="b9ff03887bafe4c6490ef65dd193", 0x0, 0xfffffff5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a0104000000000000000001edffff07000a40000000c79a9213876e6348d01c0b4227e4d1000900020073797a32000000000900010073797a30000000000800054000000003580000000c0a0102000000000000000001000900020073797a32000000002c000380280086d700000000000000001c000b801800018007000100637400000c00028008000140000000000900010073797a300000000014000000100eb6d34fd8e73a7f9f165e4e9116b900010000000000000000000000000a0000"], 0xdc}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00', <r4=>0x0})
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xd}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r7], 0x20}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0)
sendmsg$nl_route(r7, 0x0, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
recvmmsg$unix(r5, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001700)={0x11, 0x1b, &(0x7f0000001580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7bf}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x10001}, @map_val={0x18, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x10001}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x4}, @alu={0x7, 0x0, 0x6, 0x2, 0x2, 0xffffffffffffffe0, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0xfffffff9, 0x8d, &(0x7f0000001380)=""/141, 0x41000, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000012c0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001300)=[r6, r6, r6, 0xffffffffffffffff], &(0x7f0000001680)=[{0x3, 0x2, 0xb, 0x1}, {0x3, 0x2, 0x0, 0xb}, {0x3, 0x3, 0x10, 0x2}, {0x2, 0x4, 0xd, 0x3}, {0x5, 0x1, 0x7, 0x3}, {0x3, 0x2, 0x8, 0x2}], 0x10, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='mm_shrink_slab_start\x00', r11, 0x0, 0xffffffffffffffff}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xa}, {0x0, 0x6}, {0x13}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x20044810)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001e00014b603f640002000800000000000000000e0000000014001100"], 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x2810)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="d50a0000000000006111780000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a595c779f10ce0630fc60", 0x14}], 0x1}, 0x0)

2.560429ms ago: executing program 0 (id=3360):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x2004009}, 0x20008006)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$packet(0x11, 0x2, 0x300) (async)
socket$packet(0x11, 0x2, 0x300)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
socket(0x1e, 0x803, 0x0) (async)
r2 = socket(0x1e, 0x803, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x200, 0x70bd2a, 0x1, {0x0, 0x0, 0x0, r4, {0x4, 0x9}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xffffffff}]}, 0x2c}}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x200, 0x70bd2a, 0x1, {0x0, 0x0, 0x0, r4, {0x4, 0x9}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xffffffff}]}, 0x2c}}, 0x0)
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newtfilter={0x24, 0x2c, 0x800, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, {0x4, 0x4}, {0x6}, {0x1, 0xf}}}, 0x24}}, 0x20040054)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
socket$alg(0x26, 0x5, 0x0) (async)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) (async)
bind$alg(r9, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0)
r10 = accept4(r9, 0x0, 0x0, 0x800)
sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)='\x00\x00\x00', 0x3}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)=""/238, 0xee}], 0x1}, 0x40000000)
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x64, 0x24, 0x100, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xfff2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x80, 0x33, 0x5, 0x0, 0x9, 0xc1, 0x5}}, {0xe, 0x2, [0x6, 0x1, 0xb4, 0x2, 0x1]}}]}, @TCA_RATE={0x6, 0x5, {0x3c, 0x3}}]}, 0x64}}, 0x0)
socket$packet(0x11, 0x2, 0x300) (async)
r11 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00'})
socket(0x23, 0x2, 0x7fffffff)
close(0x3) (async)
close(0x3)
r12 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x13, r12, 0x0)
r13 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
setsockopt$X25_QBITINCL(r13, 0x106, 0x1, &(0x7f0000000000), 0x4)

0s ago: executing program 32 (id=3359):
r0 = socket$kcm(0x10, 0x3, 0x10)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$caif_stream(0x25, 0x1, 0x5)
getsockname(r2, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="b9ff03887bafe4c6490ef65dd193", 0x0, 0xfffffff5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0xdc}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00', <r4=>0x0})
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xd}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r7], 0x20}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0)
sendmsg$nl_route(r7, 0x0, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
recvmmsg$unix(r5, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001700)={0x11, 0x1b, &(0x7f0000001580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7bf}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x10001}, @map_val={0x18, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x10001}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x4}, @alu={0x7, 0x0, 0x6, 0x2, 0x2, 0xffffffffffffffe0, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0xfffffff9, 0x8d, &(0x7f0000001380)=""/141, 0x41000, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000012c0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001300)=[r6, r6, r6, 0xffffffffffffffff], &(0x7f0000001680)=[{0x3, 0x2, 0xb, 0x1}, {0x3, 0x2, 0x0, 0xb}, {0x3, 0x3, 0x10, 0x2}, {0x2, 0x4, 0xd, 0x3}, {0x5, 0x1, 0x7, 0x3}, {0x3, 0x2, 0x8, 0x2}], 0x10, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='mm_shrink_slab_start\x00', r11, 0x0, 0xffffffffffffffff}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xa}, {0x0, 0x6}, {0x13}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x20044810)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001e00014b603f640002000800000000000000000e0000000014001100"], 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x2810)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="d50a0000000000006111780000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a595c779f10ce0630fc60", 0x14}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

[T15011]  ? __pfx_netlink_sendmsg+0x10/0x10
[  216.904391][T15011]  ? aa_sock_msg_perm+0xf1/0x1d0
[  216.904405][T15011]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  216.904417][T15011]  ? __pfx_netlink_sendmsg+0x10/0x10
[  216.904428][T15011]  __sock_sendmsg+0x21c/0x270
[  216.904445][T15011]  ____sys_sendmsg+0x505/0x830
[  216.904462][T15011]  ? __pfx_____sys_sendmsg+0x10/0x10
[  216.904482][T15011]  ? import_iovec+0x74/0xa0
[  216.904499][T15011]  ___sys_sendmsg+0x21f/0x2a0
[  216.904522][T15011]  ? __pfx____sys_sendmsg+0x10/0x10
[  216.904566][T15011]  ? __fget_files+0x2a/0x420
[  216.904577][T15011]  ? __fget_files+0x3a0/0x420
[  216.904596][T15011]  __x64_sys_sendmsg+0x19b/0x260
[  216.904612][T15011]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  216.904634][T15011]  ? rcu_is_watching+0x15/0xb0
[  216.904651][T15011]  ? do_syscall_64+0xbe/0x3b0
[  216.904667][T15011]  do_syscall_64+0xfa/0x3b0
[  216.904676][T15011]  ? lockdep_hardirqs_on+0x9c/0x150
[  216.904691][T15011]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.904702][T15011]  ? exc_page_fault+0x9f/0xf0
[  216.904719][T15011]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.904730][T15011] RIP: 0033:0x7fec98d8ebe9
[  216.904742][T15011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  216.904752][T15011] RSP: 002b:00007fec99ce7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  216.904765][T15011] RAX: ffffffffffffffda RBX: 00007fec98fc5fa0 RCX: 00007fec98d8ebe9
[  216.904774][T15011] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  216.904782][T15011] RBP: 00007fec98e11e19 R08: 0000000000000000 R09: 0000000000000000
[  216.904790][T15011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  216.904827][T15011] R13: 00007fec98fc6038 R14: 00007fec98fc5fa0 R15: 00007ffda8975b48
[  216.904849][T15011]  </TASK>
[  217.259466][T15017] lo speed is unknown, defaulting to 1000
[  217.374381][T15017] netlink: 'syz.0.2330': attribute type 2 has an invalid length.
[  217.568312][T15041] workqueue: Failed to create a rescuer kthread for wq "bond23": -EINTR
[  217.743763][T15060] 8021q: adding VLAN 0 to HW filter on device bond14
[  217.755878][T15060] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  217.760770][T15060] bond14: (slave macvlan7): Enslaving as a backup interface with a down link
[  217.770406][T15062] bond14: (slave macvlan8): Error -98 calling set_mac_address
[  217.774471][T15050] netlink: 'syz.0.2338': attribute type 10 has an invalid length.
[  217.825589][T15060] bond14: (slave macvlan7): Releasing backup interface
[  217.942935][T15083] netlink: 'syz.1.2347': attribute type 11 has an invalid length.
[  218.142804][T15091] netlink: 'syz.2.2349': attribute type 10 has an invalid length.
[  218.375115][T15098] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  218.378872][T15098] CPU: 0 UID: 0 PID: 15098 Comm: syz.1.2352 Not tainted syzkaller #0 PREEMPT(full) 
[  218.378890][T15098] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  218.378897][T15098] Call Trace:
[  218.378904][T15098]  <TASK>
[  218.378910][T15098]  dump_stack_lvl+0x189/0x250
[  218.378931][T15098]  ? __pfx_dump_stack_lvl+0x10/0x10
[  218.378948][T15098]  ? __pfx__printk+0x10/0x10
[  218.378969][T15098]  ? kernfs_path_from_node+0x2f/0x290
[  218.378984][T15098]  ? kernfs_path_from_node+0x250/0x290
[  218.378995][T15098]  ? kernfs_path_from_node+0x2f/0x290
[  218.379009][T15098]  sysfs_warn_dup+0x8e/0xa0
[  218.379048][T15098]  sysfs_do_create_link_sd+0xc0/0x110
[  218.379088][T15098]  device_add_class_symlinks+0x1cf/0x240
[  218.379126][T15098]  device_add+0x475/0xb50
[  218.379143][T15098]  wiphy_register+0x1ba6/0x28d0
[  218.379170][T15098]  ? __pfx_wiphy_register+0x10/0x10
[  218.379185][T15098]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  218.379203][T15098]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  218.379217][T15098]  ieee80211_register_hw+0x3425/0x4080
[  218.379242][T15098]  ? ieee80211_register_hw+0x1461/0x4080
[  218.379261][T15098]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  218.379278][T15098]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  218.379299][T15098]  ? __hrtimer_setup+0x187/0x210
[  218.379310][T15098]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  218.379329][T15098]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  218.379389][T15098]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  218.379405][T15098]  ? trace_kmalloc+0x1f/0xd0
[  218.379417][T15098]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  218.379430][T15098]  ? kstrndup+0xbf/0x160
[  218.379451][T15098]  hwsim_new_radio_nl+0xea4/0x1b10
[  218.379467][T15098]  ? __pfx___nla_validate_parse+0x10/0x10
[  218.379493][T15098]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  218.379516][T15098]  ? __nla_parse+0x40/0x60
[  218.379546][T15098]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  218.379568][T15098]  genl_family_rcv_msg_doit+0x215/0x300
[  218.379589][T15098]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  218.379614][T15098]  ? bpf_lsm_capable+0x9/0x20
[  218.379655][T15098]  ? security_capable+0x7e/0x2e0
[  218.379700][T15098]  genl_rcv_msg+0x60e/0x790
[  218.379722][T15098]  ? __pfx_genl_rcv_msg+0x10/0x10
[  218.379736][T15098]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  218.379763][T15098]  netlink_rcv_skb+0x208/0x470
[  218.379807][T15098]  ? __lock_acquire+0xab9/0xd20
[  218.379826][T15098]  ? __pfx_genl_rcv_msg+0x10/0x10
[  218.379842][T15098]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  218.379875][T15098]  ? down_read+0x1ad/0x2e0
[  218.379890][T15098]  genl_rcv+0x28/0x40
[  218.379902][T15098]  netlink_unicast+0x82f/0x9e0
[  218.379927][T15098]  ? __pfx_netlink_unicast+0x10/0x10
[  218.379944][T15098]  ? netlink_sendmsg+0x642/0xb30
[  218.379953][T15098]  ? skb_put+0x11b/0x210
[  218.379969][T15098]  netlink_sendmsg+0x805/0xb30
[  218.379987][T15098]  ? __pfx_netlink_sendmsg+0x10/0x10
[  218.380002][T15098]  ? aa_sock_msg_perm+0xf1/0x1d0
[  218.380038][T15098]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  218.380074][T15098]  ? __pfx_netlink_sendmsg+0x10/0x10
[  218.380089][T15098]  __sock_sendmsg+0x21c/0x270
[  218.380110][T15098]  ____sys_sendmsg+0x505/0x830
[  218.380129][T15098]  ? __pfx_____sys_sendmsg+0x10/0x10
[  218.380149][T15098]  ? import_iovec+0x74/0xa0
[  218.380168][T15098]  ___sys_sendmsg+0x21f/0x2a0
[  218.380184][T15098]  ? __pfx____sys_sendmsg+0x10/0x10
[  218.380228][T15098]  ? __fget_files+0x2a/0x420
[  218.380239][T15098]  ? __fget_files+0x3a0/0x420
[  218.380259][T15098]  __x64_sys_sendmsg+0x19b/0x260
[  218.380275][T15098]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  218.380297][T15098]  ? rcu_is_watching+0x15/0xb0
[  218.380313][T15098]  ? do_syscall_64+0xbe/0x3b0
[  218.380328][T15098]  do_syscall_64+0xfa/0x3b0
[  218.380340][T15098]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.380351][T15098]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  218.380367][T15098]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.380378][T15098] RIP: 0033:0x7fec98d8ebe9
[  218.380391][T15098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  218.380401][T15098] RSP: 002b:00007fec99ce7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  218.380416][T15098] RAX: ffffffffffffffda RBX: 00007fec98fc5fa0 RCX: 00007fec98d8ebe9
[  218.380425][T15098] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000b
[  218.380433][T15098] RBP: 00007fec98e11e19 R08: 0000000000000000 R09: 0000000000000000
[  218.380440][T15098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  218.380448][T15098] R13: 00007fec98fc6038 R14: 00007fec98fc5fa0 R15: 00007ffda8975b48
[  218.380470][T15098]  </TASK>
[  218.712331][T15102] ieee802154 phy1 wpan1: encryption failed: -22
[  218.984430][T15125] __nla_validate_parse: 10 callbacks suppressed
[  218.984444][T15125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2361'.
[  219.004568][T15125] team0: Mode changed to "broadcast"
[  219.007595][T15125] vlan0: entered promiscuous mode
[  219.011913][T15125] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  219.053284][T15135] gre0: left promiscuous mode
[  219.055965][T15135] veth15: left promiscuous mode
[  219.058585][T15135] veth17: left promiscuous mode
[  219.148030][T15146] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2366'.
[  219.243564][T15154] 8021q: adding VLAN 0 to HW filter on device bond4
[  219.256264][T15151] 8021q: adding VLAN 0 to HW filter on device macvlan10
[  219.261171][T15151] bond4: (slave macvlan10): Enslaving as a backup interface with a down link
[  219.270522][T15151] bond4: (slave macvlan10): Releasing backup interface
[  219.424288][T15163] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2371'.
[  219.810845][T15185] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  219.816609][T15185] tipc: Resetting bearer <eth:syzkaller0>
[  219.824075][T15183] tipc: Disabling bearer <eth:syzkaller0>
[  219.891787][T15189] netlink: 'syz.1.2377': attribute type 1 has an invalid length.
[  219.894715][T15189] netlink: 'syz.1.2377': attribute type 1 has an invalid length.
[  219.901076][T15189] netlink: 'syz.1.2377': attribute type 1 has an invalid length.
[  219.922474][T15189] 8021q: adding VLAN 0 to HW filter on device bond23
[  219.928263][T15189] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  219.933572][T15189] bond23: (slave wlan0): Opening slave failed
[  220.476226][T15203] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2381'.
[  220.480456][T15203] netlink: 'syz.0.2381': attribute type 1 has an invalid length.
[  220.701951][T15222] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  220.706560][T15222] CPU: 1 UID: 0 PID: 15222 Comm: syz.2.2385 Not tainted syzkaller #0 PREEMPT(full) 
[  220.706572][T15222] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  220.706577][T15222] Call Trace:
[  220.706580][T15222]  <TASK>
[  220.706584][T15222]  dump_stack_lvl+0x189/0x250
[  220.706597][T15222]  ? __pfx_dump_stack_lvl+0x10/0x10
[  220.706606][T15222]  ? __pfx__printk+0x10/0x10
[  220.706635][T15222]  ? kernfs_path_from_node+0x2f/0x290
[  220.706646][T15222]  ? kernfs_path_from_node+0x250/0x290
[  220.706652][T15222]  ? kernfs_path_from_node+0x2f/0x290
[  220.706661][T15222]  sysfs_warn_dup+0x8e/0xa0
[  220.706669][T15222]  sysfs_do_create_link_sd+0xc0/0x110
[  220.706677][T15222]  device_add_class_symlinks+0x1cf/0x240
[  220.706687][T15222]  device_add+0x475/0xb50
[  220.706696][T15222]  wiphy_register+0x1ba6/0x28d0
[  220.706728][T15222]  ? __pfx_wiphy_register+0x10/0x10
[  220.706739][T15222]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  220.706770][T15222]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  220.706783][T15222]  ieee80211_register_hw+0x3425/0x4080
[  220.706798][T15222]  ? ieee80211_register_hw+0x1461/0x4080
[  220.706810][T15222]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  220.706819][T15222]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  220.706832][T15222]  ? __hrtimer_setup+0x187/0x210
[  220.706839][T15222]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  220.706851][T15222]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  220.706872][T15222]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  220.706880][T15222]  ? trace_kmalloc+0x1f/0xd0
[  220.706888][T15222]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  220.706897][T15222]  ? kstrndup+0xbf/0x160
[  220.706909][T15222]  hwsim_new_radio_nl+0xea4/0x1b10
[  220.706918][T15222]  ? __pfx___nla_validate_parse+0x10/0x10
[  220.706935][T15222]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  220.706949][T15222]  ? __nla_parse+0x40/0x60
[  220.706960][T15222]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  220.706973][T15222]  genl_family_rcv_msg_doit+0x215/0x300
[  220.706984][T15222]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  220.706997][T15222]  ? bpf_lsm_capable+0x9/0x20
[  220.707006][T15222]  ? security_capable+0x7e/0x2e0
[  220.707019][T15222]  genl_rcv_msg+0x60e/0x790
[  220.707029][T15222]  ? __pfx_genl_rcv_msg+0x10/0x10
[  220.707037][T15222]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  220.707051][T15222]  netlink_rcv_skb+0x208/0x470
[  220.707060][T15222]  ? __lock_acquire+0xab9/0xd20
[  220.707071][T15222]  ? __pfx_genl_rcv_msg+0x10/0x10
[  220.707079][T15222]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  220.707097][T15222]  ? down_read+0x1ad/0x2e0
[  220.707105][T15222]  genl_rcv+0x28/0x40
[  220.707112][T15222]  netlink_unicast+0x82f/0x9e0
[  220.707127][T15222]  ? __pfx_netlink_unicast+0x10/0x10
[  220.707141][T15222]  ? netlink_sendmsg+0x642/0xb30
[  220.707149][T15222]  ? skb_put+0x11b/0x210
[  220.707162][T15222]  netlink_sendmsg+0x805/0xb30
[  220.707178][T15222]  ? __pfx_netlink_sendmsg+0x10/0x10
[  220.707190][T15222]  ? aa_sock_msg_perm+0xf1/0x1d0
[  220.707204][T15222]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  220.707215][T15222]  ? __pfx_netlink_sendmsg+0x10/0x10
[  220.707225][T15222]  __sock_sendmsg+0x21c/0x270
[  220.707241][T15222]  ____sys_sendmsg+0x505/0x830
[  220.707259][T15222]  ? __pfx_____sys_sendmsg+0x10/0x10
[  220.707277][T15222]  ? import_iovec+0x74/0xa0
[  220.707287][T15222]  ___sys_sendmsg+0x21f/0x2a0
[  220.707295][T15222]  ? __pfx____sys_sendmsg+0x10/0x10
[  220.707318][T15222]  ? __fget_files+0x2a/0x420
[  220.707324][T15222]  ? __fget_files+0x3a0/0x420
[  220.707334][T15222]  __x64_sys_sendmsg+0x19b/0x260
[  220.707343][T15222]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  220.707355][T15222]  ? rcu_is_watching+0x15/0xb0
[  220.707364][T15222]  ? do_syscall_64+0xbe/0x3b0
[  220.707373][T15222]  do_syscall_64+0xfa/0x3b0
[  220.707379][T15222]  ? lockdep_hardirqs_on+0x9c/0x150
[  220.707388][T15222]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.707395][T15222]  ? exc_page_fault+0x9f/0xf0
[  220.707405][T15222]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.707412][T15222] RIP: 0033:0x7fd661d8ebe9
[  220.707419][T15222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  220.707425][T15222] RSP: 002b:00007fd65fff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  220.707433][T15222] RAX: ffffffffffffffda RBX: 00007fd661fc5fa0 RCX: 00007fd661d8ebe9
[  220.707445][T15222] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  220.707449][T15222] RBP: 00007fd661e11e19 R08: 0000000000000000 R09: 0000000000000000
[  220.707453][T15222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  220.707457][T15222] R13: 00007fd661fc6038 R14: 00007fd661fc5fa0 R15: 00007ffd4f5d4e78
[  220.707469][T15222]  </TASK>
[  221.112801][T15247] netlink: 'syz.1.2391': attribute type 10 has an invalid length.
[  221.116286][T15245] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2391'.
[  221.172347][T15245] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2391'.
[  221.262031][T15255] 8021q: adding VLAN 0 to HW filter on device bond24
[  221.279996][T15255] veth19: entered promiscuous mode
[  221.284860][T15255] bond24: (slave veth19): Enslaving as a backup interface with a down link
[  221.295969][T15255] bond24: (slave veth19): Releasing backup interface
[  221.301399][T15261] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2396'.
[  221.460058][T15273] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2397'.
[  221.540774][T15286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2404'.
[  221.561035][T15286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2404'.
[  221.708179][T15284] validate_nla: 6 callbacks suppressed
[  221.708195][T15284] netlink: 'syz.0.2403': attribute type 10 has an invalid length.
[  221.767181][T15304] bond4: option mode: unable to set because the bond device is up
[  221.836935][T15312] lo speed is unknown, defaulting to 1000
[  221.976243][T15320] mac80211_hwsim hwsim479 wlan1: entered allmulticast mode
[  222.244363][T15347] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  222.249501][T15347] CPU: 0 UID: 0 PID: 15347 Comm: syz.1.2418 Not tainted syzkaller #0 PREEMPT(full) 
[  222.249520][T15347] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  222.249527][T15347] Call Trace:
[  222.249533][T15347]  <TASK>
[  222.249538][T15347]  dump_stack_lvl+0x189/0x250
[  222.249558][T15347]  ? __pfx_dump_stack_lvl+0x10/0x10
[  222.249573][T15347]  ? __pfx__printk+0x10/0x10
[  222.249593][T15347]  ? kernfs_path_from_node+0x2f/0x290
[  222.249605][T15347]  ? kernfs_path_from_node+0x250/0x290
[  222.249616][T15347]  ? kernfs_path_from_node+0x2f/0x290
[  222.249632][T15347]  sysfs_warn_dup+0x8e/0xa0
[  222.249644][T15347]  sysfs_do_create_link_sd+0xc0/0x110
[  222.249657][T15347]  device_add_class_symlinks+0x1cf/0x240
[  222.249672][T15347]  device_add+0x475/0xb50
[  222.249697][T15347]  wiphy_register+0x1ba6/0x28d0
[  222.249729][T15347]  ? __pfx_wiphy_register+0x10/0x10
[  222.249776][T15347]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  222.249796][T15347]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  222.249813][T15347]  ieee80211_register_hw+0x3425/0x4080
[  222.249839][T15347]  ? ieee80211_register_hw+0x1461/0x4080
[  222.249859][T15347]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  222.249876][T15347]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  222.249898][T15347]  ? __hrtimer_setup+0x187/0x210
[  222.249909][T15347]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  222.249928][T15347]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  222.249966][T15347]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  222.249979][T15347]  ? trace_kmalloc+0x1f/0xd0
[  222.249992][T15347]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  222.250007][T15347]  ? kstrndup+0xbf/0x160
[  222.250026][T15347]  hwsim_new_radio_nl+0xea4/0x1b10
[  222.250042][T15347]  ? __pfx___nla_validate_parse+0x10/0x10
[  222.250071][T15347]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  222.250095][T15347]  ? __nla_parse+0x40/0x60
[  222.250113][T15347]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  222.250134][T15347]  genl_family_rcv_msg_doit+0x215/0x300
[  222.250154][T15347]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  222.250178][T15347]  ? bpf_lsm_capable+0x9/0x20
[  222.250194][T15347]  ? security_capable+0x7e/0x2e0
[  222.250216][T15347]  genl_rcv_msg+0x60e/0x790
[  222.250236][T15347]  ? __pfx_genl_rcv_msg+0x10/0x10
[  222.250248][T15347]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  222.250274][T15347]  netlink_rcv_skb+0x208/0x470
[  222.250290][T15347]  ? __lock_acquire+0xab9/0xd20
[  222.250307][T15347]  ? __pfx_genl_rcv_msg+0x10/0x10
[  222.250321][T15347]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  222.250351][T15347]  ? down_read+0x1ad/0x2e0
[  222.250366][T15347]  genl_rcv+0x28/0x40
[  222.250378][T15347]  netlink_unicast+0x82f/0x9e0
[  222.250401][T15347]  ? __pfx_netlink_unicast+0x10/0x10
[  222.250418][T15347]  ? netlink_sendmsg+0x642/0xb30
[  222.250426][T15347]  ? skb_put+0x11b/0x210
[  222.250440][T15347]  netlink_sendmsg+0x805/0xb30
[  222.250460][T15347]  ? __pfx_netlink_sendmsg+0x10/0x10
[  222.250474][T15347]  ? aa_sock_msg_perm+0xf1/0x1d0
[  222.250488][T15347]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  222.250501][T15347]  ? __pfx_netlink_sendmsg+0x10/0x10
[  222.250513][T15347]  __sock_sendmsg+0x21c/0x270
[  222.250532][T15347]  ____sys_sendmsg+0x505/0x830
[  222.250549][T15347]  ? __pfx_____sys_sendmsg+0x10/0x10
[  222.250570][T15347]  ? import_iovec+0x74/0xa0
[  222.250588][T15347]  ___sys_sendmsg+0x21f/0x2a0
[  222.250604][T15347]  ? __pfx____sys_sendmsg+0x10/0x10
[  222.250648][T15347]  ? __fget_files+0x2a/0x420
[  222.250659][T15347]  ? __fget_files+0x3a0/0x420
[  222.250678][T15347]  __x64_sys_sendmsg+0x19b/0x260
[  222.250702][T15347]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  222.250729][T15347]  ? do_syscall_64+0xbe/0x3b0
[  222.250777][T15347]  do_syscall_64+0xfa/0x3b0
[  222.250787][T15347]  ? lockdep_hardirqs_on+0x9c/0x150
[  222.250803][T15347]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.250815][T15347]  ? exc_page_fault+0x9f/0xf0
[  222.250833][T15347]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.250843][T15347] RIP: 0033:0x7fec98d8ebe9
[  222.250854][T15347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  222.250864][T15347] RSP: 002b:00007fec99ce7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  222.250878][T15347] RAX: ffffffffffffffda RBX: 00007fec98fc5fa0 RCX: 00007fec98d8ebe9
[  222.250887][T15347] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000006
[  222.250894][T15347] RBP: 00007fec98e11e19 R08: 0000000000000000 R09: 0000000000000000
[  222.250901][T15347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  222.250907][T15347] R13: 00007fec98fc6038 R14: 00007fec98fc5fa0 R15: 00007ffda8975b48
[  222.250928][T15347]  </TASK>
[  222.444134][T15351] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  222.462910][T15348] tipc: Disabling bearer <eth:syzkaller0>
[  222.471950][T15354] netlink: 'syz.1.2420': attribute type 1 has an invalid length.
[  222.475217][T15354] netlink: 'syz.1.2420': attribute type 1 has an invalid length.
[  222.545982][T15358] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  222.548703][T15358] CPU: 1 UID: 0 PID: 15358 Comm: syz.2.2421 Not tainted syzkaller #0 PREEMPT(full) 
[  222.548730][T15358] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  222.548754][T15358] Call Trace:
[  222.548758][T15358]  <TASK>
[  222.548762][T15358]  dump_stack_lvl+0x189/0x250
[  222.548776][T15358]  ? __pfx_dump_stack_lvl+0x10/0x10
[  222.548784][T15358]  ? __pfx__printk+0x10/0x10
[  222.548796][T15358]  ? kernfs_path_from_node+0x2f/0x290
[  222.548803][T15358]  ? kernfs_path_from_node+0x250/0x290
[  222.548810][T15358]  ? kernfs_path_from_node+0x2f/0x290
[  222.548819][T15358]  sysfs_warn_dup+0x8e/0xa0
[  222.548826][T15358]  sysfs_do_create_link_sd+0xc0/0x110
[  222.548835][T15358]  device_add_class_symlinks+0x1cf/0x240
[  222.548845][T15358]  device_add+0x475/0xb50
[  222.548854][T15358]  wiphy_register+0x1ba6/0x28d0
[  222.548871][T15358]  ? __pfx_wiphy_register+0x10/0x10
[  222.548880][T15358]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  222.548892][T15358]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  222.548903][T15358]  ieee80211_register_hw+0x3425/0x4080
[  222.548918][T15358]  ? ieee80211_register_hw+0x1461/0x4080
[  222.548929][T15358]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  222.548938][T15358]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  222.548952][T15358]  ? __hrtimer_setup+0x187/0x210
[  222.548959][T15358]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  222.548970][T15358]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  222.548991][T15358]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  222.549000][T15358]  ? trace_kmalloc+0x1f/0xd0
[  222.549008][T15358]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  222.549017][T15358]  ? kstrndup+0xbf/0x160
[  222.549029][T15358]  hwsim_new_radio_nl+0xea4/0x1b10
[  222.549038][T15358]  ? __pfx___nla_validate_parse+0x10/0x10
[  222.549055][T15358]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  222.549069][T15358]  ? __nla_parse+0x40/0x60
[  222.549080][T15358]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  222.549092][T15358]  genl_family_rcv_msg_doit+0x215/0x300
[  222.549104][T15358]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  222.549117][T15358]  ? bpf_lsm_capable+0x9/0x20
[  222.549126][T15358]  ? security_capable+0x7e/0x2e0
[  222.549139][T15358]  genl_rcv_msg+0x60e/0x790
[  222.549150][T15358]  ? __pfx_genl_rcv_msg+0x10/0x10
[  222.549157][T15358]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  222.549172][T15358]  netlink_rcv_skb+0x208/0x470
[  222.549181][T15358]  ? __lock_acquire+0xab9/0xd20
[  222.549191][T15358]  ? __pfx_genl_rcv_msg+0x10/0x10
[  222.549199][T15358]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  222.549217][T15358]  ? down_read+0x1ad/0x2e0
[  222.549225][T15358]  genl_rcv+0x28/0x40
[  222.549232][T15358]  netlink_unicast+0x82f/0x9e0
[  222.549245][T15358]  ? __pfx_netlink_unicast+0x10/0x10
[  222.549254][T15358]  ? netlink_sendmsg+0x642/0xb30
[  222.549259][T15358]  ? skb_put+0x11b/0x210
[  222.549269][T15358]  netlink_sendmsg+0x805/0xb30
[  222.549279][T15358]  ? __pfx_netlink_sendmsg+0x10/0x10
[  222.549287][T15358]  ? aa_sock_msg_perm+0xf1/0x1d0
[  222.549295][T15358]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  222.549302][T15358]  ? __pfx_netlink_sendmsg+0x10/0x10
[  222.549308][T15358]  __sock_sendmsg+0x21c/0x270
[  222.549319][T15358]  ____sys_sendmsg+0x505/0x830
[  222.549330][T15358]  ? __pfx_____sys_sendmsg+0x10/0x10
[  222.549341][T15358]  ? import_iovec+0x74/0xa0
[  222.549350][T15358]  ___sys_sendmsg+0x21f/0x2a0
[  222.549376][T15358]  ? __pfx____sys_sendmsg+0x10/0x10
[  222.549399][T15358]  ? __fget_files+0x2a/0x420
[  222.549405][T15358]  ? __fget_files+0x3a0/0x420
[  222.549415][T15358]  __x64_sys_sendmsg+0x19b/0x260
[  222.549424][T15358]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  222.549436][T15358]  ? rcu_is_watching+0x15/0xb0
[  222.549445][T15358]  ? do_syscall_64+0xbe/0x3b0
[  222.549453][T15358]  do_syscall_64+0xfa/0x3b0
[  222.549459][T15358]  ? lockdep_hardirqs_on+0x9c/0x150
[  222.549468][T15358]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.549475][T15358]  ? exc_page_fault+0x9f/0xf0
[  222.549485][T15358]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.549498][T15358] RIP: 0033:0x7fd661d8ebe9
[  222.549505][T15358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  222.549511][T15358] RSP: 002b:00007fd65fff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  222.549520][T15358] RAX: ffffffffffffffda RBX: 00007fd661fc5fa0 RCX: 00007fd661d8ebe9
[  222.549525][T15358] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  222.549529][T15358] RBP: 00007fd661e11e19 R08: 0000000000000000 R09: 0000000000000000
[  222.549534][T15358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  222.549537][T15358] R13: 00007fd661fc6038 R14: 00007fd661fc5fa0 R15: 00007ffd4f5d4e78
[  222.549549][T15358]  </TASK>
[  222.761622][T15354] netlink: 'syz.1.2420': attribute type 1 has an invalid length.
[  222.785726][T15354] 8021q: adding VLAN 0 to HW filter on device bond25
[  223.063094][T15387] lo speed is unknown, defaulting to 1000
[  223.310490][T15411] netlink: 'syz.0.2430': attribute type 10 has an invalid length.
[  223.883294][T15416] can: request_module (can-proto-0) failed.
[  223.997041][T15415] __nla_validate_parse: 6 callbacks suppressed
[  223.997049][T15415] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2433'.
[  224.002920][T15415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2433'.
[  224.142206][T15425] gre0: left allmulticast mode
[  224.177740][T15420] IPVS: length: 209 != 24
[  224.414135][T15453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2442'.
[  224.432991][T15453] 8021q: adding VLAN 0 to HW filter on device bond26
[  224.544884][T15461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2442'.
[  224.803387][T15490] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2450'.
[  224.804432][T15491] netlink: 26 bytes leftover after parsing attributes in process `syz.2.2450'.
[  224.807141][T15490] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2450'.
[  224.852543][T15495] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2451'.
[  224.866001][T15495] syz_tun: entered promiscuous mode
[  224.994039][T15498] netlink: 'syz.2.2452': attribute type 1 has an invalid length.
[  224.997354][T15498] syz_tun: left promiscuous mode
[  225.001818][T15498] vlan0: left promiscuous mode
[  225.076789][T15500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2453'.
[  225.085205][T15500] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2453'.
[  225.280686][T15510] netlink: 'syz.0.2456': attribute type 9 has an invalid length.
[  225.355436][T15508] team0: Unable to change to the same mode the team is in
[  225.360769][T15508] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  225.378217][T15514] netlink: 'syz.0.2458': attribute type 9 has an invalid length.
[  225.457253][T15521] lo speed is unknown, defaulting to 1000
[  225.582863][T15524] netlink: 'syz.1.2459': attribute type 2 has an invalid length.
[  225.591020][T15526] netlink: 'syz.0.2461': attribute type 6 has an invalid length.
[  226.721205][T15589] lo speed is unknown, defaulting to 1000
[  226.790521][T15594] validate_nla: 4 callbacks suppressed
[  226.790530][T15594] netlink: 'syz.2.2475': attribute type 1 has an invalid length.
[  226.895978][T15599] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  227.171482][T15604] nbd: socks must be embedded in a SOCK_ITEM attr
[  227.176177][T15604] block nbd1: shutting down sockets
[  227.220618][T15614] vlan0: entered promiscuous mode
[  227.224252][T15614] tipc: Enabled bearer <ib:team0>, priority 0
[  227.256081][T15618] netlink: 'syz.2.2482': attribute type 1 has an invalid length.
[  227.259045][T15618] netlink: 'syz.2.2482': attribute type 1 has an invalid length.
[  227.347101][T15625] ieee802154 phy1 wpan1: encryption failed: -22
[  227.349923][T15625] ieee802154 phy1 wpan1: encryption failed: -22
[  227.622607][T15636] vlan0: left promiscuous mode
[  228.126041][T15673] sctp: [Deprecated]: syz.0.2497 (pid 15673) Use of struct sctp_assoc_value in delayed_ack socket option.
[  228.126041][T15673] Use struct sctp_sack_info instead
[  228.161208][T15671] netlink: 'syz.1.2496': attribute type 1 has an invalid length.
[  228.164752][T15671] netlink: 'syz.1.2496': attribute type 1 has an invalid length.
[  228.192881][T15679] lo speed is unknown, defaulting to 1000
[  228.288720][T15679] netlink: 'syz.0.2498': attribute type 2 has an invalid length.
[  228.445477][T15693] 8021q: adding VLAN 0 to HW filter on device macvlan8
[  228.451486][T15693] bond14: (slave macvlan8): Enslaving as a backup interface with a down link
[  228.462940][T15694] mac80211_hwsim hwsim538 wlan0: entered promiscuous mode
[  228.465481][T15694] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  228.476514][T15690] bond14: (slave macvlan8): Releasing backup interface
[  228.500726][T15696] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  228.523449][T15698] netlink: 'syz.2.2503': attribute type 5 has an invalid length.
[  228.526734][T15698] netlink: 'syz.2.2503': attribute type 5 has an invalid length.
[  229.355535][T15746] mac80211_hwsim hwsim540 wlan1: entered allmulticast mode
[  229.491016][T15757] netlink: 'syz.1.2516': attribute type 1 has an invalid length.
[  229.494416][T15757] netlink: 'syz.1.2516': attribute type 2 has an invalid length.
[  229.497812][T15757] __nla_validate_parse: 18 callbacks suppressed
[  229.497824][T15757] netlink: 1172 bytes leftover after parsing attributes in process `syz.1.2516'.
[  229.505569][T15757] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2516'.
[  229.516705][T15752] mac80211_hwsim hwsim540 wlan1: left allmulticast mode
[  229.532127][T15757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2516'.
[  229.667834][T15767] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2519'.
[  229.672128][T15767] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2519'.
[  229.680318][T15760] 8021q: adding VLAN 0 to HW filter on device bond20
[  229.711151][T15771] veth0_to_hsr: entered promiscuous mode
[  229.892809][T15775] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2521'.
[  230.054149][T15778] lo speed is unknown, defaulting to 1000
[  230.554400][T15794] lo speed is unknown, defaulting to 1000
[  230.559963][T15790] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.2524'.
[  230.724304][T15801] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2526'.
[  230.728191][T15801] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  230.806046][T15803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2527'.
[  230.827208][T15803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2527'.
[  231.016351][T15820] mac80211_hwsim hwsim532 wlan1: entered allmulticast mode
[  231.117170][T15825] lo speed is unknown, defaulting to 1000
[  231.341394][T15852] mac80211_hwsim hwsim479 wlan1: left allmulticast mode
[  231.523272][T15863] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  231.833083][T15889] lo speed is unknown, defaulting to 1000
[  231.938492][T15895] mac80211_hwsim hwsim532 wlan1: left allmulticast mode
[  231.957374][T15895] validate_nla: 8 callbacks suppressed
[  231.957384][T15895] netlink: 'syz.0.2552': attribute type 10 has an invalid length.
[  232.024151][T15899] netlink: 'syz.0.2553': attribute type 1 has an invalid length.
[  232.027542][T15899] netlink: 'syz.0.2553': attribute type 1 has an invalid length.
[  232.036363][T15899] netlink: 'syz.0.2553': attribute type 1 has an invalid length.
[  232.060905][T15899] 8021q: adding VLAN 0 to HW filter on device bond21
[  232.197616][   T57] block nbd1: Receive control failed (result -107)
[  232.219473][T15906] nbd1: detected capacity change from 0 to 32
[  232.250825][T15916] netlink: 'syz.0.2557': attribute type 1 has an invalid length.
[  232.253767][T15916] netlink: 'syz.0.2557': attribute type 1 has an invalid length.
[  232.318032][T15921] lo speed is unknown, defaulting to 1000
[  232.672890][T15933] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  232.677506][T15933] CPU: 0 UID: 0 PID: 15933 Comm: syz.1.2560 Not tainted syzkaller #0 PREEMPT(full) 
[  232.677519][T15933] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  232.677524][T15933] Call Trace:
[  232.677527][T15933]  <TASK>
[  232.677531][T15933]  dump_stack_lvl+0x189/0x250
[  232.677544][T15933]  ? __pfx_dump_stack_lvl+0x10/0x10
[  232.677553][T15933]  ? __pfx__printk+0x10/0x10
[  232.677564][T15933]  ? kernfs_path_from_node+0x2f/0x290
[  232.677572][T15933]  ? kernfs_path_from_node+0x250/0x290
[  232.677578][T15933]  ? kernfs_path_from_node+0x2f/0x290
[  232.677587][T15933]  sysfs_warn_dup+0x8e/0xa0
[  232.677595][T15933]  sysfs_do_create_link_sd+0xc0/0x110
[  232.677603][T15933]  device_add_class_symlinks+0x1cf/0x240
[  232.677612][T15933]  device_add+0x475/0xb50
[  232.677621][T15933]  wiphy_register+0x1ba6/0x28d0
[  232.677666][T15933]  ? __pfx_wiphy_register+0x10/0x10
[  232.677675][T15933]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  232.677686][T15933]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  232.677696][T15933]  ieee80211_register_hw+0x3425/0x4080
[  232.677711][T15933]  ? ieee80211_register_hw+0x1461/0x4080
[  232.677722][T15933]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  232.677731][T15933]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  232.677744][T15933]  ? __hrtimer_setup+0x187/0x210
[  232.677751][T15933]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  232.677763][T15933]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  232.677783][T15933]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  232.677791][T15933]  ? trace_kmalloc+0x1f/0xd0
[  232.677800][T15933]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  232.677809][T15933]  ? kstrndup+0xbf/0x160
[  232.677820][T15933]  hwsim_new_radio_nl+0xea4/0x1b10
[  232.677830][T15933]  ? __pfx___nla_validate_parse+0x10/0x10
[  232.677846][T15933]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  232.677860][T15933]  ? __nla_parse+0x40/0x60
[  232.677872][T15933]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  232.677883][T15933]  genl_family_rcv_msg_doit+0x215/0x300
[  232.677895][T15933]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  232.677908][T15933]  ? bpf_lsm_capable+0x9/0x20
[  232.677917][T15933]  ? security_capable+0x7e/0x2e0
[  232.677930][T15933]  genl_rcv_msg+0x60e/0x790
[  232.677940][T15933]  ? __pfx_genl_rcv_msg+0x10/0x10
[  232.677948][T15933]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  232.677962][T15933]  netlink_rcv_skb+0x208/0x470
[  232.677971][T15933]  ? __lock_acquire+0xab9/0xd20
[  232.677982][T15933]  ? __pfx_genl_rcv_msg+0x10/0x10
[  232.677990][T15933]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  232.678008][T15933]  ? down_read+0x1ad/0x2e0
[  232.678015][T15933]  genl_rcv+0x28/0x40
[  232.678022][T15933]  netlink_unicast+0x82f/0x9e0
[  232.678035][T15933]  ? __pfx_netlink_unicast+0x10/0x10
[  232.678045][T15933]  ? netlink_sendmsg+0x642/0xb30
[  232.678050][T15933]  ? skb_put+0x11b/0x210
[  232.678059][T15933]  netlink_sendmsg+0x805/0xb30
[  232.678069][T15933]  ? __pfx_netlink_sendmsg+0x10/0x10
[  232.678077][T15933]  ? aa_sock_msg_perm+0xf1/0x1d0
[  232.678084][T15933]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  232.678091][T15933]  ? __pfx_netlink_sendmsg+0x10/0x10
[  232.678098][T15933]  __sock_sendmsg+0x21c/0x270
[  232.678108][T15933]  ____sys_sendmsg+0x505/0x830
[  232.678118][T15933]  ? __pfx_____sys_sendmsg+0x10/0x10
[  232.678129][T15933]  ? import_iovec+0x74/0xa0
[  232.678138][T15933]  ___sys_sendmsg+0x21f/0x2a0
[  232.678147][T15933]  ? __pfx____sys_sendmsg+0x10/0x10
[  232.678169][T15933]  ? __fget_files+0x2a/0x420
[  232.678175][T15933]  ? __fget_files+0x3a0/0x420
[  232.678185][T15933]  __x64_sys_sendmsg+0x19b/0x260
[  232.678194][T15933]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  232.678209][T15933]  ? do_syscall_64+0xbe/0x3b0
[  232.678217][T15933]  do_syscall_64+0xfa/0x3b0
[  232.678222][T15933]  ? lockdep_hardirqs_on+0x9c/0x150
[  232.678231][T15933]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.678238][T15933]  ? exc_page_fault+0x9f/0xf0
[  232.678248][T15933]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.678254][T15933] RIP: 0033:0x7fec98d8ebe9
[  232.678262][T15933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  232.678268][T15933] RSP: 002b:00007fec99ce7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  232.678276][T15933] RAX: ffffffffffffffda RBX: 00007fec98fc5fa0 RCX: 00007fec98d8ebe9
[  232.678281][T15933] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008
[  232.678285][T15933] RBP: 00007fec98e11e19 R08: 0000000000000000 R09: 0000000000000000
[  232.678289][T15933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  232.678293][T15933] R13: 00007fec98fc6038 R14: 00007fec98fc5fa0 R15: 00007ffda8975b48
[  232.678305][T15933]  </TASK>
[  232.888896][T15943] netlink: 'syz.0.2561': attribute type 9 has an invalid length.
[  233.078187][T15960] veth0_to_hsr: left promiscuous mode
[  233.133991][T15963] netlink: 'syz.0.2563': attribute type 10 has an invalid length.
[  233.284594][T15969] mac80211_hwsim hwsim479 wlan1: entered allmulticast mode
[  233.316170][T15972] lo speed is unknown, defaulting to 1000
[  233.411374][T15978] lo speed is unknown, defaulting to 1000
[  233.415118][T15976] netlink: 'syz.2.2568': attribute type 2 has an invalid length.
[  233.638923][T15989] netlink: 'syz.2.2572': attribute type 10 has an invalid length.
[  233.740348][T15997] team0: Port device dummy0 added
[  233.754968][T15997] team0: Port device dummy0 removed
[  233.941494][T16002] lo speed is unknown, defaulting to 1000
[  234.141448][T16025] mac80211_hwsim hwsim532 wlan1: entered allmulticast mode
[  234.393418][T16047] vlan4: entered promiscuous mode
[  234.395180][T16047] bond0: entered promiscuous mode
[  234.449443][T16056] mac80211_hwsim hwsim479 wlan1: left allmulticast mode
[  234.526249][T16061] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  234.725893][T16080] lo speed is unknown, defaulting to 1000
[  234.948156][T16088] 8021q: adding VLAN 0 to HW filter on device bond14
[  234.955547][T16088] __nla_validate_parse: 26 callbacks suppressed
[  234.955560][T16088] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2600'.
[  235.038522][T16092] bond14: option mode: unable to set because the bond device is up
[  235.135823][T16094] lo speed is unknown, defaulting to 1000
[  235.143591][T16097] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2604'.
[  235.347425][T16101] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  235.350950][T16101] syzkaller0: entered promiscuous mode
[  235.352811][T16101] syzkaller0: entered allmulticast mode
[  235.367905][T16101] tipc: Resetting bearer <eth:syzkaller0>
[  235.373764][T16100] tipc: Resetting bearer <eth:syzkaller0>
[  235.387136][T16100] tipc: Disabling bearer <eth:syzkaller0>
[  235.451946][T16112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2608'.
[  235.484882][T16118] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2610'.
[  235.489680][T16118] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2610'.
[  235.493770][T16118] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2610'.
[  235.538836][T16117] lo speed is unknown, defaulting to 1000
[  235.585375][T16126] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  235.593028][T16126] syzkaller0: entered promiscuous mode
[  235.595083][T16126] syzkaller0: entered allmulticast mode
[  235.649090][T16126] tipc: Resetting bearer <eth:syzkaller0>
[  235.658277][T16125] tipc: Resetting bearer <eth:syzkaller0>
[  235.698797][T16125] tipc: Disabling bearer <eth:syzkaller0>
[  235.732857][T16132] lo speed is unknown, defaulting to 1000
[  235.818272][T16140] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.2616'.
[  236.116225][T16159] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2622'.
[  236.234688][T16153] lo speed is unknown, defaulting to 1000
[  236.354932][T16167] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2624'.
[  236.361489][T16170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2625'.
[  236.494160][T16178] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  237.203626][T16228] validate_nla: 17 callbacks suppressed
[  237.203636][T16228] netlink: 'syz.1.2638': attribute type 9 has an invalid length.
[  237.409400][T16242] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  237.411563][T16237] vlan0: left promiscuous mode
[  237.412899][T16242] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  237.423539][T16237] bridge2: left promiscuous mode
[  237.425794][T16237] bridge2: left allmulticast mode
[  237.428488][T16237] veth17: left promiscuous mode
[  237.444096][T16237] veth19: left promiscuous mode
[  237.446725][T16237] mac80211_hwsim hwsim538 wlan0: left promiscuous mode
[  237.587786][T16249] lo speed is unknown, defaulting to 1000
[  237.614783][T16251] "syz.1.2643" (16251) uses obsolete ecb(arc4) skcipher
[  237.751663][T16278] tc_dump_action: action bad kind
[  238.014130][T16289] netlink: 'syz.0.2651': attribute type 10 has an invalid length.
[  238.406609][T16312] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  238.412888][T16312] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  238.455772][T16314] netlink: 'syz.1.2656': attribute type 1 has an invalid length.
[  238.459272][T16314] netlink: 'syz.1.2656': attribute type 1 has an invalid length.
[  238.513301][T16318] netlink: 'syz.2.2657': attribute type 11 has an invalid length.
[  238.545278][T16314] netlink: 'syz.1.2656': attribute type 1 has an invalid length.
[  238.545287][T16315] netlink: 'syz.1.2656': attribute type 1 has an invalid length.
[  238.608647][T16315] 8021q: adding VLAN 0 to HW filter on device bond27
[  238.841419][T16339] lo speed is unknown, defaulting to 1000
[  238.848098][T16334] netlink: 'syz.0.2660': attribute type 10 has an invalid length.
[  238.849252][T16342] netlink: 'syz.0.2660': attribute type 10 has an invalid length.
[  238.898181][T16344] netlink: 'syz.1.2661': attribute type 2 has an invalid length.
[  238.909967][T16348] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  240.032495][T16380] lo speed is unknown, defaulting to 1000
[  240.091053][T16386] __nla_validate_parse: 11 callbacks suppressed
[  240.091063][T16386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2673'.
[  240.249003][T16390] netlink: 'syz.1.2674': attribute type 1 has an invalid length.
[  240.429081][T16401] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2677'.
[  240.607574][T16415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2679'.
[  240.755888][T16431] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2682'.
[  240.830751][T16439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2684'.
[  240.836575][T16439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2684'.
[  240.954292][T16451] lo speed is unknown, defaulting to 1000
[  241.073930][T16454] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2689'.
[  241.077792][T16454] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2689'.
[  241.081854][T16454] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2689'.
[  241.128796][T16451] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2688'.
[  241.345959][T16468] netlink: 'syz.2.2692': attribute type 11 has an invalid length.
[  241.380965][T16468] syz.2.2692 uses old SIOCAX25GETINFO
[  241.487672][T16486] tipc: New replicast peer: 255.255.255.255
[  241.490892][T16486] tipc: Enabled bearer <udp:syz2>, priority 10
[  241.596871][T16495] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  241.599990][T16495] CPU: 0 UID: 0 PID: 16495 Comm: syz.2.2700 Not tainted syzkaller #0 PREEMPT(full) 
[  241.600000][T16495] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  241.600005][T16495] Call Trace:
[  241.600008][T16495]  <TASK>
[  241.600012][T16495]  dump_stack_lvl+0x189/0x250
[  241.600026][T16495]  ? __pfx_dump_stack_lvl+0x10/0x10
[  241.600034][T16495]  ? __pfx__printk+0x10/0x10
[  241.600046][T16495]  ? kernfs_path_from_node+0x2f/0x290
[  241.600053][T16495]  ? kernfs_path_from_node+0x250/0x290
[  241.600060][T16495]  ? kernfs_path_from_node+0x2f/0x290
[  241.600069][T16495]  sysfs_warn_dup+0x8e/0xa0
[  241.600076][T16495]  sysfs_do_create_link_sd+0xc0/0x110
[  241.600084][T16495]  device_add_class_symlinks+0x1cf/0x240
[  241.600093][T16495]  device_add+0x475/0xb50
[  241.600102][T16495]  wiphy_register+0x1ba6/0x28d0
[  241.600119][T16495]  ? __pfx_wiphy_register+0x10/0x10
[  241.600128][T16495]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  241.600140][T16495]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  241.600150][T16495]  ieee80211_register_hw+0x3425/0x4080
[  241.600164][T16495]  ? ieee80211_register_hw+0x1461/0x4080
[  241.600175][T16495]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  241.600185][T16495]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  241.600197][T16495]  ? __hrtimer_setup+0x187/0x210
[  241.600204][T16495]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  241.600215][T16495]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  241.600242][T16495]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  241.600250][T16495]  ? trace_kmalloc+0x1f/0xd0
[  241.600258][T16495]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  241.600267][T16495]  ? kstrndup+0xbf/0x160
[  241.600278][T16495]  hwsim_new_radio_nl+0xea4/0x1b10
[  241.600288][T16495]  ? __pfx___nla_validate_parse+0x10/0x10
[  241.600304][T16495]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  241.600317][T16495]  ? __nla_parse+0x40/0x60
[  241.600329][T16495]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  241.600341][T16495]  genl_family_rcv_msg_doit+0x215/0x300
[  241.600352][T16495]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  241.600366][T16495]  ? bpf_lsm_capable+0x9/0x20
[  241.600374][T16495]  ? security_capable+0x7e/0x2e0
[  241.600387][T16495]  genl_rcv_msg+0x60e/0x790
[  241.600398][T16495]  ? __pfx_genl_rcv_msg+0x10/0x10
[  241.600405][T16495]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  241.600420][T16495]  netlink_rcv_skb+0x208/0x470
[  241.600428][T16495]  ? __lock_acquire+0xab9/0xd20
[  241.600438][T16495]  ? __pfx_genl_rcv_msg+0x10/0x10
[  241.600446][T16495]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  241.600464][T16495]  ? down_read+0x1ad/0x2e0
[  241.600472][T16495]  genl_rcv+0x28/0x40
[  241.600479][T16495]  netlink_unicast+0x82f/0x9e0
[  241.600492][T16495]  ? __pfx_netlink_unicast+0x10/0x10
[  241.600502][T16495]  ? netlink_sendmsg+0x642/0xb30
[  241.600507][T16495]  ? skb_put+0x11b/0x210
[  241.600516][T16495]  netlink_sendmsg+0x805/0xb30
[  241.600547][T16495]  ? __pfx_netlink_sendmsg+0x10/0x10
[  241.600557][T16495]  ? aa_sock_msg_perm+0xf1/0x1d0
[  241.600565][T16495]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  241.600572][T16495]  ? __pfx_netlink_sendmsg+0x10/0x10
[  241.600579][T16495]  __sock_sendmsg+0x21c/0x270
[  241.600590][T16495]  ____sys_sendmsg+0x505/0x830
[  241.600600][T16495]  ? __pfx_____sys_sendmsg+0x10/0x10
[  241.600611][T16495]  ? import_iovec+0x74/0xa0
[  241.600621][T16495]  ___sys_sendmsg+0x21f/0x2a0
[  241.600629][T16495]  ? __pfx____sys_sendmsg+0x10/0x10
[  241.600651][T16495]  ? __fget_files+0x2a/0x420
[  241.600657][T16495]  ? __fget_files+0x3a0/0x420
[  241.600683][T16495]  __x64_sys_sendmsg+0x19b/0x260
[  241.600694][T16495]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  241.600705][T16495]  ? rcu_is_watching+0x15/0xb0
[  241.600715][T16495]  ? do_syscall_64+0xbe/0x3b0
[  241.600723][T16495]  do_syscall_64+0xfa/0x3b0
[  241.600729][T16495]  ? lockdep_hardirqs_on+0x9c/0x150
[  241.600738][T16495]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.600744][T16495]  ? exc_page_fault+0x9f/0xf0
[  241.600755][T16495]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.600761][T16495] RIP: 0033:0x7fd661d8ebe9
[  241.600769][T16495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  241.600775][T16495] RSP: 002b:00007fd65fff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  241.600783][T16495] RAX: ffffffffffffffda RBX: 00007fd661fc5fa0 RCX: 00007fd661d8ebe9
[  241.600789][T16495] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  241.600793][T16495] RBP: 00007fd661e11e19 R08: 0000000000000000 R09: 0000000000000000
[  241.600797][T16495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  241.600801][T16495] R13: 00007fd661fc6038 R14: 00007fd661fc5fa0 R15: 00007ffd4f5d4e78
[  241.600813][T16495]  </TASK>
[  242.276103][T16527] lo speed is unknown, defaulting to 1000
[  242.536497][T16548] lo speed is unknown, defaulting to 1000
[  242.564399][T16550] lo speed is unknown, defaulting to 1000
[  242.660782][T16550] validate_nla: 9 callbacks suppressed
[  242.660793][T16550] netlink: 'syz.0.2715': attribute type 2 has an invalid length.
[  242.703949][T16547] netlink: 'syz.1.2714': attribute type 2 has an invalid length.
[  243.023331][T16575] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  243.026912][T16575] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  243.324946][T16585] netlink: 'syz.1.2722': attribute type 28 has an invalid length.
[  243.333456][T16585] netlink: 'syz.1.2722': attribute type 12 has an invalid length.
[  243.563658][T16594] team0: Unable to change to the same mode the team is in
[  243.596283][T16596] 8021q: adding VLAN 0 to HW filter on device bond0
[  243.609711][T16596] bond0: (slave macvlan5): Opening slave failed
[  243.928601][T16623] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  243.936593][T16623] CPU: 1 UID: 0 PID: 16623 Comm: syz.0.2732 Not tainted syzkaller #0 PREEMPT(full) 
[  243.936605][T16623] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  243.936610][T16623] Call Trace:
[  243.936614][T16623]  <TASK>
[  243.936617][T16623]  dump_stack_lvl+0x189/0x250
[  243.936632][T16623]  ? __pfx_dump_stack_lvl+0x10/0x10
[  243.936641][T16623]  ? __pfx__printk+0x10/0x10
[  243.936653][T16623]  ? kernfs_path_from_node+0x2f/0x290
[  243.936663][T16623]  ? kernfs_path_from_node+0x250/0x290
[  243.936670][T16623]  ? kernfs_path_from_node+0x2f/0x290
[  243.936680][T16623]  sysfs_warn_dup+0x8e/0xa0
[  243.936691][T16623]  sysfs_do_create_link_sd+0xc0/0x110
[  243.936703][T16623]  device_add_class_symlinks+0x1cf/0x240
[  243.936718][T16623]  device_add+0x475/0xb50
[  243.936732][T16623]  wiphy_register+0x1ba6/0x28d0
[  243.936763][T16623]  ? __pfx_wiphy_register+0x10/0x10
[  243.936779][T16623]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  243.936798][T16623]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  243.936814][T16623]  ieee80211_register_hw+0x3425/0x4080
[  243.936840][T16623]  ? ieee80211_register_hw+0x1461/0x4080
[  243.936857][T16623]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  243.936872][T16623]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  243.936892][T16623]  ? __hrtimer_setup+0x187/0x210
[  243.936904][T16623]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  243.936926][T16623]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  243.936963][T16623]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  243.936977][T16623]  ? trace_kmalloc+0x1f/0xd0
[  243.936989][T16623]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  243.937003][T16623]  ? kstrndup+0xbf/0x160
[  243.937022][T16623]  hwsim_new_radio_nl+0xea4/0x1b10
[  243.937038][T16623]  ? __pfx___nla_validate_parse+0x10/0x10
[  243.937067][T16623]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  243.937090][T16623]  ? __nla_parse+0x40/0x60
[  243.937110][T16623]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  243.937133][T16623]  genl_family_rcv_msg_doit+0x215/0x300
[  243.937153][T16623]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  243.937200][T16623]  ? bpf_lsm_capable+0x9/0x20
[  243.937218][T16623]  ? security_capable+0x7e/0x2e0
[  243.937241][T16623]  genl_rcv_msg+0x60e/0x790
[  243.937268][T16623]  ? __pfx_genl_rcv_msg+0x10/0x10
[  243.937282][T16623]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  243.937310][T16623]  netlink_rcv_skb+0x208/0x470
[  243.937326][T16623]  ? __lock_acquire+0xab9/0xd20
[  243.937344][T16623]  ? __pfx_genl_rcv_msg+0x10/0x10
[  243.937357][T16623]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  243.937388][T16623]  ? down_read+0x1ad/0x2e0
[  243.937401][T16623]  genl_rcv+0x28/0x40
[  243.937413][T16623]  netlink_unicast+0x82f/0x9e0
[  243.937434][T16623]  ? __pfx_netlink_unicast+0x10/0x10
[  243.937453][T16623]  ? netlink_sendmsg+0x642/0xb30
[  243.937463][T16623]  ? skb_put+0x11b/0x210
[  243.937479][T16623]  netlink_sendmsg+0x805/0xb30
[  243.937498][T16623]  ? __pfx_netlink_sendmsg+0x10/0x10
[  243.937541][T16623]  ? aa_sock_msg_perm+0xf1/0x1d0
[  243.937555][T16623]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  243.937568][T16623]  ? __pfx_netlink_sendmsg+0x10/0x10
[  243.937581][T16623]  __sock_sendmsg+0x21c/0x270
[  243.937601][T16623]  ____sys_sendmsg+0x505/0x830
[  243.937619][T16623]  ? __pfx_____sys_sendmsg+0x10/0x10
[  243.937639][T16623]  ? import_iovec+0x74/0xa0
[  243.937656][T16623]  ___sys_sendmsg+0x21f/0x2a0
[  243.937671][T16623]  ? __pfx____sys_sendmsg+0x10/0x10
[  243.937713][T16623]  ? __fget_files+0x2a/0x420
[  243.937723][T16623]  ? __fget_files+0x3a0/0x420
[  243.937742][T16623]  __x64_sys_sendmsg+0x19b/0x260
[  243.937758][T16623]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  243.937779][T16623]  ? rcu_is_watching+0x15/0xb0
[  243.937796][T16623]  ? do_syscall_64+0xbe/0x3b0
[  243.937810][T16623]  do_syscall_64+0xfa/0x3b0
[  243.937820][T16623]  ? lockdep_hardirqs_on+0x9c/0x150
[  243.937836][T16623]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.937848][T16623]  ? exc_page_fault+0x9f/0xf0
[  243.937868][T16623]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.937879][T16623] RIP: 0033:0x7f862438ebe9
[  243.937891][T16623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  243.937902][T16623] RSP: 002b:00007f862519d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  243.937915][T16623] RAX: ffffffffffffffda RBX: 00007f86245c5fa0 RCX: 00007f862438ebe9
[  243.937924][T16623] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  243.937932][T16623] RBP: 00007f8624411e19 R08: 0000000000000000 R09: 0000000000000000
[  243.937939][T16623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  243.937945][T16623] R13: 00007f86245c6038 R14: 00007f86245c5fa0 R15: 00007ffe8aaa0d58
[  243.937963][T16623]  </TASK>
[  244.105012][T16624] lo speed is unknown, defaulting to 1000
[  244.393972][T16646] netlink: 'syz.1.2738': attribute type 12 has an invalid length.
[  244.694663][T16666] netlink: 'syz.2.2743': attribute type 10 has an invalid length.
[  244.699022][T16666] mac80211_hwsim hwsim540 wlan1: entered allmulticast mode
[  244.768553][T16670] netlink: 'syz.1.2745': attribute type 6 has an invalid length.
[  244.776684][T16670] netlink: 'syz.1.2745': attribute type 12 has an invalid length.
[  244.803485][T16668] ieee802154 phy1 wpan1: encryption failed: -22
[  244.856897][T16668] team0: Mode changed to "loadbalance"
[  244.885224][T16676] mac80211_hwsim hwsim540 wlan1: left allmulticast mode
[  244.893293][T16675] lo speed is unknown, defaulting to 1000
[  244.921030][T16676] netlink: 'syz.2.2747': attribute type 10 has an invalid length.
[  245.184860][T16693] lo speed is unknown, defaulting to 1000
[  245.252605][T16697] lo speed is unknown, defaulting to 1000
[  245.295304][T16701] __nla_validate_parse: 19 callbacks suppressed
[  245.295321][T16701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2752'.
[  245.338564][T16705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2753'.
[  245.558631][T16714] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2756'.
[  246.174283][T16731] mac80211_hwsim hwsim548 wlan0: entered promiscuous mode
[  246.177401][T16731] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  246.342066][T16739] ieee802154 phy1 wpan1: encryption failed: -22
[  246.392861][T16741] tipc: Bearer <eth:syzkaller0>: already 2 bearers with priority 0
[  246.395585][T16741] tipc: Enabling of bearer <eth:syzkaller0> rejected, cannot adjust to lower
[  246.401362][T16741] syzkaller0: entered promiscuous mode
[  246.403682][T16741] syzkaller0: entered allmulticast mode
[  246.658940][T16750] netlink: 'syz.2.2768': attribute type 1 has an invalid length.
[  246.781852][T16756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2770'.
[  246.888225][T16765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2772'.
[  247.021420][T16777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2775'.
[  247.273894][T16802] lo speed is unknown, defaulting to 1000
[  247.329079][T16810] lo speed is unknown, defaulting to 1000
[  247.503342][T16816] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2784'.
[  247.547942][T16821] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2785'.
[  247.595754][T16823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2786'.
[  247.853875][T16828] validate_nla: 4 callbacks suppressed
[  247.853885][T16828] netlink: 'syz.0.2788': attribute type 8 has an invalid length.
[  247.910693][T16845] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2793'.
[  248.122617][T16857] netlink: 'syz.0.2795': attribute type 4 has an invalid length.
[  248.181495][T16862] netlink: 'syz.1.2797': attribute type 6 has an invalid length.
[  248.186162][T16862] netlink: 'syz.1.2797': attribute type 12 has an invalid length.
[  248.251323][T16868] netlink: 'syz.2.2798': attribute type 6 has an invalid length.
[  248.266187][T16868] netlink: 'syz.2.2798': attribute type 12 has an invalid length.
[  248.350690][T16876] vlan0: entered promiscuous mode
[  248.451592][T16883] netlink: 'syz.0.2802': attribute type 11 has an invalid length.
[  248.596992][T16888] netlink: 'syz.2.2801': attribute type 10 has an invalid length.
[  249.285319][T16905] netlink: 'syz.2.2807': attribute type 1 has an invalid length.
[  249.288141][T16905] netlink: 'syz.2.2807': attribute type 1 has an invalid length.
[  249.352902][T16915] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  249.356339][T16915] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  249.699095][T16937] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  249.786201][T16943] lo speed is unknown, defaulting to 1000
[  250.090055][T16974] netlink: 'syz.2.2824': attribute type 11 has an invalid length.
[  250.282549][T16988] lo speed is unknown, defaulting to 1000
[  250.544105][T17001] vlan0: entered promiscuous mode
[  251.110688][T17017] lo speed is unknown, defaulting to 1000
[  251.185131][T17020] __nla_validate_parse: 17 callbacks suppressed
[  251.185141][T17020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2834'.
[  251.223137][T17023] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2835'.
[  251.501863][T17034] lo speed is unknown, defaulting to 1000
[  251.537989][T17035] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2838'.
[  251.558804][T17034] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2838'.
[  251.654860][T17038] lo speed is unknown, defaulting to 1000
[  251.891123][T17038] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2839'.
[  252.078954][T17062] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2844'.
[  252.134002][T17064] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  252.140973][T17064] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2845'.
[  253.018172][T17082] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  253.118860][T17096] validate_nla: 13 callbacks suppressed
[  253.118872][T17096] netlink: 'syz.0.2852': attribute type 10 has an invalid length.
[  253.357124][T17114] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004
[  253.388080][T17117] netlink: 'syz.2.2857': attribute type 10 has an invalid length.
[  253.406611][T17119] can: request_module (can-proto-5) failed.
[  253.627496][T17138] netlink: 'syz.0.2864': attribute type 8 has an invalid length.
[  253.632978][T17138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2864'.
[  253.642332][T17138] bond0: entered promiscuous mode
[  253.644980][T17138] bond0: left promiscuous mode
[  253.734572][T17138] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.2864'.
[  253.738545][T17138] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.2864'.
[  254.334200][T17160] netlink: 'syz.2.2868': attribute type 1 has an invalid length.
[  254.366416][T17151] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  254.374098][T17149] tipc: Resetting bearer <eth:syzkaller0>
[  255.364250][T17149] tipc: Disabling bearer <eth:syzkaller0>
[  255.370982][T17160] 8021q: adding VLAN 0 to HW filter on device bond21
[  255.386009][T17162] veth15: entered promiscuous mode
[  255.392817][T17162] bond21: (slave veth15): Enslaving as a backup interface with a down link
[  255.633548][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  255.752364][T17190] netlink: 'syz.1.2877': attribute type 10 has an invalid length.
[  255.756124][T17190] mac80211_hwsim hwsim609 wlan1: entered allmulticast mode
[  255.781830][T17200] netlink: zone id is out of range
[  255.784725][T17200] netlink: zone id is out of range
[  255.786490][T17200] netlink: zone id is out of range
[  255.788245][T17200] netlink: zone id is out of range
[  255.793577][T17200] netlink: zone id is out of range
[  255.795464][T17200] netlink: zone id is out of range
[  255.798714][T17200] netlink: zone id is out of range
[  255.800905][T17200] netlink: zone id is out of range
[  255.802846][T17200] netlink: zone id is out of range
[  255.808312][T17200] netlink: zone id is out of range
[  255.864371][T17209] mac80211_hwsim hwsim609 wlan1: left allmulticast mode
[  256.013032][T17222] bond14: (slave ip6gretap3): making interface the new active one
[  256.016157][T17222] bond14: (slave ip6gretap3): Enslaving as an active interface with an up link
[  256.029596][T17222] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  256.033841][T17222] CPU: 1 UID: 0 PID: 17222 Comm: syz.2.2886 Not tainted syzkaller #0 PREEMPT(full) 
[  256.033857][T17222] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  256.033864][T17222] Call Trace:
[  256.033869][T17222]  <TASK>
[  256.033875][T17222]  dump_stack_lvl+0x189/0x250
[  256.033895][T17222]  ? __pfx_dump_stack_lvl+0x10/0x10
[  256.033908][T17222]  ? __pfx__printk+0x10/0x10
[  256.033926][T17222]  ? kernfs_path_from_node+0x2f/0x290
[  256.033938][T17222]  ? kernfs_path_from_node+0x250/0x290
[  256.033949][T17222]  ? kernfs_path_from_node+0x2f/0x290
[  256.033963][T17222]  sysfs_warn_dup+0x8e/0xa0
[  256.033975][T17222]  sysfs_do_create_link_sd+0xc0/0x110
[  256.033989][T17222]  device_add_class_symlinks+0x1cf/0x240
[  256.034005][T17222]  device_add+0x475/0xb50
[  256.034019][T17222]  wiphy_register+0x1ba6/0x28d0
[  256.034048][T17222]  ? __pfx_wiphy_register+0x10/0x10
[  256.034062][T17222]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  256.034081][T17222]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  256.034097][T17222]  ieee80211_register_hw+0x3425/0x4080
[  256.034121][T17222]  ? ieee80211_register_hw+0x1461/0x4080
[  256.034139][T17222]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  256.034155][T17222]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  256.034176][T17222]  ? __hrtimer_setup+0x187/0x210
[  256.034187][T17222]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  256.034205][T17222]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  256.034242][T17222]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  256.034255][T17222]  ? trace_kmalloc+0x1f/0xd0
[  256.034267][T17222]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  256.034281][T17222]  ? kstrndup+0xbf/0x160
[  256.034300][T17222]  hwsim_new_radio_nl+0xea4/0x1b10
[  256.034316][T17222]  ? __pfx___nla_validate_parse+0x10/0x10
[  256.034343][T17222]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  256.034405][T17222]  ? __nla_parse+0x40/0x60
[  256.034425][T17222]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  256.034445][T17222]  genl_family_rcv_msg_doit+0x215/0x300
[  256.034464][T17222]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  256.034487][T17222]  ? bpf_lsm_capable+0x9/0x20
[  256.034500][T17222]  ? security_capable+0x7e/0x2e0
[  256.034521][T17222]  genl_rcv_msg+0x60e/0x790
[  256.034538][T17222]  ? __pfx_genl_rcv_msg+0x10/0x10
[  256.034550][T17222]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  256.034575][T17222]  netlink_rcv_skb+0x208/0x470
[  256.034589][T17222]  ? __lock_acquire+0xab9/0xd20
[  256.034605][T17222]  ? __pfx_genl_rcv_msg+0x10/0x10
[  256.034619][T17222]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  256.034649][T17222]  ? down_read+0x1ad/0x2e0
[  256.034662][T17222]  genl_rcv+0x28/0x40
[  256.034673][T17222]  netlink_unicast+0x82f/0x9e0
[  256.034695][T17222]  ? __pfx_netlink_unicast+0x10/0x10
[  256.034711][T17222]  ? netlink_sendmsg+0x642/0xb30
[  256.034720][T17222]  ? skb_put+0x11b/0x210
[  256.034734][T17222]  netlink_sendmsg+0x805/0xb30
[  256.034753][T17222]  ? __pfx_netlink_sendmsg+0x10/0x10
[  256.034766][T17222]  ? aa_sock_msg_perm+0xf1/0x1d0
[  256.034778][T17222]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  256.034790][T17222]  ? __pfx_netlink_sendmsg+0x10/0x10
[  256.034801][T17222]  __sock_sendmsg+0x21c/0x270
[  256.034818][T17222]  ____sys_sendmsg+0x505/0x830
[  256.034836][T17222]  ? __pfx_____sys_sendmsg+0x10/0x10
[  256.034855][T17222]  ? import_iovec+0x74/0xa0
[  256.034871][T17222]  ___sys_sendmsg+0x21f/0x2a0
[  256.034885][T17222]  ? __pfx____sys_sendmsg+0x10/0x10
[  256.034926][T17222]  ? __fget_files+0x2a/0x420
[  256.034936][T17222]  ? __fget_files+0x3a0/0x420
[  256.034955][T17222]  __x64_sys_sendmsg+0x19b/0x260
[  256.034969][T17222]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  256.034990][T17222]  ? rcu_is_watching+0x15/0xb0
[  256.035006][T17222]  ? do_syscall_64+0xbe/0x3b0
[  256.035020][T17222]  do_syscall_64+0xfa/0x3b0
[  256.035029][T17222]  ? lockdep_hardirqs_on+0x9c/0x150
[  256.035043][T17222]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.035054][T17222]  ? exc_page_fault+0x9f/0xf0
[  256.035071][T17222]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.035081][T17222] RIP: 0033:0x7fd661d8ebe9
[  256.035093][T17222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  256.035102][T17222] RSP: 002b:00007fd65ffd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  256.035114][T17222] RAX: ffffffffffffffda RBX: 00007fd661fc6090 RCX: 00007fd661d8ebe9
[  256.035122][T17222] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005
[  256.035129][T17222] RBP: 00007fd661e11e19 R08: 0000000000000000 R09: 0000000000000000
[  256.035136][T17222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  256.035143][T17222] R13: 00007fd661fc6128 R14: 00007fd661fc6090 R15: 00007ffd4f5d4e78
[  256.035164][T17222]  </TASK>
[  256.228346][T17224] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  256.231831][T17226] syzkaller0: entered promiscuous mode
[  256.234174][T17226] syzkaller0: entered allmulticast mode
[  256.252277][T17224] tipc: Resetting bearer <eth:syzkaller0>
[  256.391600][T17236] syzkaller1: entered promiscuous mode
[  256.394267][T17236] syzkaller1: entered allmulticast mode
[  256.505822][T17250] __nla_validate_parse: 10 callbacks suppressed
[  256.505837][T17250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2893'.
[  256.761612][T17255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2894'.
[  256.765563][T17255] bridge: RTM_NEWNEIGH with invalid state 0x2c
[  256.777718][T17223] tipc: Resetting bearer <eth:syzkaller0>
[  256.789665][T17223] tipc: Disabling bearer <eth:syzkaller0>
[  256.863119][T17265] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2897'.
[  257.053912][T17275] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2899'.
[  257.058441][T17275] netlink: 'syz.0.2899': attribute type 10 has an invalid length.
[  257.216775][T17277] netlink: 'syz.1.2901': attribute type 1 has an invalid length.
[  257.222745][T17277] netlink: 'syz.1.2901': attribute type 1 has an invalid length.
[  257.372744][T17284] netlink: 'syz.1.2903': attribute type 10 has an invalid length.
[  257.405216][T17284] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  257.410876][T17284] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  257.841015][T17290] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2904'.
[  257.853074][T17292] netlink: 'syz.2.2905': attribute type 6 has an invalid length.
[  257.862189][T17292] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.2905'.
[  257.954277][T17293] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.2905'.
[  258.148481][T17303] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2908'.
[  258.230064][T17316] validate_nla: 3 callbacks suppressed
[  258.230077][T17316] netlink: 'syz.0.2908': attribute type 8 has an invalid length.
[  258.260243][T17315] netlink: 'syz.2.2910': attribute type 1 has an invalid length.
[  258.276752][T17315] netlink: 20824 bytes leftover after parsing attributes in process `syz.2.2910'.
[  258.281180][T17315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2910'.
[  258.341001][T17315] netlink: 'syz.2.2910': attribute type 11 has an invalid length.
[  258.370956][T17322] lo speed is unknown, defaulting to 1000
[  259.291195][T17369] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  259.358427][T17375] netlink: 'syz.0.2920': attribute type 4 has an invalid length.
[  259.855307][T17390] netlink: 'syz.2.2926': attribute type 1 has an invalid length.
[  259.934920][T17408] netlink: 'syz.2.2929': attribute type 1 has an invalid length.
[  259.974410][T17408] bond22: (slave geneve3): making interface the new active one
[  259.979398][T17408] bond22: (slave geneve3): Enslaving as an active interface with an up link
[  259.986484][ T5876] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  259.991278][ T5876] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  260.050600][T17408] 8021q: adding VLAN 0 to HW filter on device bond22
[  260.054000][ T5876] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  260.057762][ T5876] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  260.088731][T17416] netlink: 'syz.1.2931': attribute type 4 has an invalid length.
[  260.100295][T17408] syz.2.2929 (17408) used greatest stack depth: 19144 bytes left
[  260.113732][T17416] netlink: 'syz.1.2931': attribute type 10 has an invalid length.
[  260.133910][T17416] mac80211_hwsim hwsim621 wlan1: entered allmulticast mode
[  260.288678][T17434] 8021q: adding VLAN 0 to HW filter on device bond4
[  260.298946][T17428] ieee802154 phy1 wpan1: encryption failed: -22
[  260.303613][T17434] 8021q: adding VLAN 0 to HW filter on device macvlan11
[  260.308367][T17434] bond4: (slave macvlan11): Enslaving as a backup interface with a down link
[  260.324403][T17428] team0: Mode changed to "loadbalance"
[  260.481033][T17440] mac80211_hwsim hwsim538 wlan0: entered promiscuous mode
[  260.512146][T17447] netlink: 'syz.2.2942': attribute type 10 has an invalid length.
[  260.536782][T17449] lo speed is unknown, defaulting to 1000
[  260.597271][T17454] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  260.600674][T17454] CPU: 1 UID: 0 PID: 17454 Comm: syz.2.2945 Not tainted syzkaller #0 PREEMPT(full) 
[  260.600689][T17454] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  260.600697][T17454] Call Trace:
[  260.600701][T17454]  <TASK>
[  260.600706][T17454]  dump_stack_lvl+0x189/0x250
[  260.600726][T17454]  ? __pfx_dump_stack_lvl+0x10/0x10
[  260.600739][T17454]  ? __pfx__printk+0x10/0x10
[  260.600757][T17454]  ? kernfs_path_from_node+0x2f/0x290
[  260.600768][T17454]  ? kernfs_path_from_node+0x250/0x290
[  260.600778][T17454]  ? kernfs_path_from_node+0x2f/0x290
[  260.600791][T17454]  sysfs_warn_dup+0x8e/0xa0
[  260.600802][T17454]  sysfs_do_create_link_sd+0xc0/0x110
[  260.600814][T17454]  device_add_class_symlinks+0x1cf/0x240
[  260.600827][T17454]  device_add+0x475/0xb50
[  260.600841][T17454]  wiphy_register+0x1ba6/0x28d0
[  260.600866][T17454]  ? __pfx_wiphy_register+0x10/0x10
[  260.600881][T17454]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  260.600897][T17454]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  260.600912][T17454]  ieee80211_register_hw+0x3425/0x4080
[  260.600934][T17454]  ? ieee80211_register_hw+0x1461/0x4080
[  260.600950][T17454]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  260.600966][T17454]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  260.600989][T17454]  ? __hrtimer_setup+0x187/0x210
[  260.600999][T17454]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  260.601018][T17454]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  260.601054][T17454]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  260.601065][T17454]  ? trace_kmalloc+0x1f/0xd0
[  260.601079][T17454]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  260.601093][T17454]  ? kstrndup+0xbf/0x160
[  260.601108][T17454]  hwsim_new_radio_nl+0xea4/0x1b10
[  260.601125][T17454]  ? __pfx___nla_validate_parse+0x10/0x10
[  260.601154][T17454]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  260.601176][T17454]  ? __nla_parse+0x40/0x60
[  260.601195][T17454]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  260.601210][T17454]  genl_family_rcv_msg_doit+0x215/0x300
[  260.601228][T17454]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  260.601253][T17454]  ? bpf_lsm_capable+0x9/0x20
[  260.601268][T17454]  ? security_capable+0x7e/0x2e0
[  260.601298][T17454]  genl_rcv_msg+0x60e/0x790
[  260.601317][T17454]  ? __pfx_genl_rcv_msg+0x10/0x10
[  260.601363][T17454]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  260.601390][T17454]  netlink_rcv_skb+0x208/0x470
[  260.601405][T17454]  ? __lock_acquire+0xab9/0xd20
[  260.601420][T17454]  ? __pfx_genl_rcv_msg+0x10/0x10
[  260.601433][T17454]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  260.601482][T17454]  ? down_read+0x1ad/0x2e0
[  260.601495][T17454]  genl_rcv+0x28/0x40
[  260.601506][T17454]  netlink_unicast+0x82f/0x9e0
[  260.601527][T17454]  ? __pfx_netlink_unicast+0x10/0x10
[  260.601542][T17454]  ? netlink_sendmsg+0x642/0xb30
[  260.601550][T17454]  ? skb_put+0x11b/0x210
[  260.601563][T17454]  netlink_sendmsg+0x805/0xb30
[  260.601578][T17454]  ? __pfx_netlink_sendmsg+0x10/0x10
[  260.601590][T17454]  ? aa_sock_msg_perm+0xf1/0x1d0
[  260.601601][T17454]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  260.601613][T17454]  ? __pfx_netlink_sendmsg+0x10/0x10
[  260.601625][T17454]  __sock_sendmsg+0x21c/0x270
[  260.601643][T17454]  ____sys_sendmsg+0x505/0x830
[  260.601659][T17454]  ? __pfx_____sys_sendmsg+0x10/0x10
[  260.601678][T17454]  ? import_iovec+0x74/0xa0
[  260.601693][T17454]  ___sys_sendmsg+0x21f/0x2a0
[  260.601705][T17454]  ? __pfx____sys_sendmsg+0x10/0x10
[  260.601738][T17454]  ? __fget_files+0x2a/0x420
[  260.601747][T17454]  ? __fget_files+0x3a0/0x420
[  260.601762][T17454]  __x64_sys_sendmsg+0x19b/0x260
[  260.601775][T17454]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  260.601794][T17454]  ? rcu_is_watching+0x15/0xb0
[  260.601809][T17454]  ? do_syscall_64+0xbe/0x3b0
[  260.601822][T17454]  do_syscall_64+0xfa/0x3b0
[  260.601830][T17454]  ? lockdep_hardirqs_on+0x9c/0x150
[  260.601844][T17454]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.601854][T17454]  ? exc_page_fault+0x9f/0xf0
[  260.601869][T17454]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.601878][T17454] RIP: 0033:0x7fd661d8ebe9
[  260.601891][T17454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  260.601899][T17454] RSP: 002b:00007fd65fff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  260.601911][T17454] RAX: ffffffffffffffda RBX: 00007fd661fc5fa0 RCX: 00007fd661d8ebe9
[  260.601919][T17454] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  260.601926][T17454] RBP: 00007fd661e11e19 R08: 0000000000000000 R09: 0000000000000000
[  260.601932][T17454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  260.601938][T17454] R13: 00007fd661fc6038 R14: 00007fd661fc5fa0 R15: 00007ffd4f5d4e78
[  260.601957][T17454]  </TASK>
[  260.894444][T17455] netlink: 'syz.0.2943': attribute type 2 has an invalid length.
[  261.171713][T17476] netlink: 'syz.2.2947': attribute type 9 has an invalid length.
[  261.619798][T17485] __nla_validate_parse: 13 callbacks suppressed
[  261.619814][T17485] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2953'.
[  261.638863][T17485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2953'.
[  261.785432][T17493] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2955'.
[  261.814066][T17493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2955'.
[  261.977533][T17502] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2958'.
[  262.015191][T17502] 8021q: adding VLAN 0 to HW filter on device bond23
[  262.067794][T17509] mac80211_hwsim hwsim621 wlan1: left allmulticast mode
[  262.078585][T17513] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2960'.
[  262.110521][T17512] lo speed is unknown, defaulting to 1000
[  262.448621][T17536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2964'.
[  262.471339][T17539] lo speed is unknown, defaulting to 1000
[  262.491962][T17547] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2967'.
[  262.572623][T17549] netlink: 'syz.2.2968': attribute type 11 has an invalid length.
[  262.981399][T17580] mac80211_hwsim hwsim548 wlan0: left promiscuous mode
[  263.638797][T17589] validate_nla: 6 callbacks suppressed
[  263.638807][T17589] netlink: 'syz.1.2977': attribute type 1 has an invalid length.
[  263.640496][T17585] vlan0: left promiscuous mode
[  263.775195][T17599] netlink: 'syz.0.2978': attribute type 10 has an invalid length.
[  263.788340][T17596] lo speed is unknown, defaulting to 1000
[  263.964577][T17606] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2981'.
[  263.991086][T17602] lo speed is unknown, defaulting to 1000
[  264.082423][T17617] netlink: 'syz.1.2984': attribute type 1 has an invalid length.
[  264.098855][T17621] net_ratelimit: 8 callbacks suppressed
[  264.098868][T17621] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  264.248353][T17626] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2987'.
[  264.299745][T17626] netlink: 'syz.2.2987': attribute type 10 has an invalid length.
[  264.377074][T17634] netlink: 'syz.2.2988': attribute type 1 has an invalid length.
[  264.381196][T17634] netlink: 'syz.2.2988': attribute type 1 has an invalid length.
[  264.397170][T17634] team0: Mode changed to "broadcast"
[  264.443252][T17636] netlink: 'syz.2.2989': attribute type 11 has an invalid length.
[  265.176920][T17655] lo speed is unknown, defaulting to 1000
[  265.311857][T17656] vlan0: entered promiscuous mode
[  265.401306][T17656] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  265.585373][T17662] lo speed is unknown, defaulting to 1000
[  265.815773][T17681] : renamed from bond_slave_0
[  265.820015][T17684] sctp: [Deprecated]: syz.2.3001 (pid 17684) Use of int in max_burst socket option deprecated.
[  265.820015][T17684] Use struct sctp_assoc_value instead
[  266.222364][T17707] netlink: 'syz.0.3005': attribute type 6 has an invalid length.
[  266.336907][T17715] lo speed is unknown, defaulting to 1000
[  266.469538][T17715] netlink: 'syz.0.3007': attribute type 2 has an invalid length.
[  266.678354][T17719] __nla_validate_parse: 8 callbacks suppressed
[  266.678364][T17719] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3008'.
[  266.883447][T17739] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3013'.
[  266.977340][T17742] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3014'.
[  267.136482][T17752] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3016'.
[  267.329373][T17764] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3018'.
[  267.456063][T17767] lo speed is unknown, defaulting to 1000
[  267.467307][T17768] netlink: 'syz.1.3019': attribute type 2 has an invalid length.
[  267.484239][T17768] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3019'.
[  267.760925][T17789] bond21: (slave veth15): Releasing backup interface
[  267.766106][T17789] bond14: (slave ip6gretap3): Releasing active interface
[  267.774296][T17789] bond22: (slave geneve3): Releasing active interface
[  267.806855][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[  267.812207][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  267.816163][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  267.820720][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  267.850604][T17791] netlink: 'syz.2.3024': attribute type 10 has an invalid length.
[  268.065837][T17805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3028'.
[  268.069056][T17805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3028'.
[  268.077504][T17805] vlan0: left promiscuous mode
[  268.087524][T17805] mac80211_hwsim hwsim538 wlan0: left promiscuous mode
[  268.155932][T17807] ieee802154 phy1 wpan1: encryption failed: -22
[  268.450811][T17819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3032'.
[  268.488910][T17824] netlink: 5636 bytes leftover after parsing attributes in process `syz.0.3033'.
[  268.666290][T17834] lo speed is unknown, defaulting to 1000
[  268.861185][T17834] netlink: 'syz.2.3037': attribute type 2 has an invalid length.
[  268.985061][T17845] openvswitch: netlink: Flow actions attr not present in new flow.
[  268.993900][T17845] bond4: option mode: unable to set because the bond device has slaves
[  269.021226][T17845] 8021q: adding VLAN 0 to HW filter on device macvlan12
[  269.025734][T17845] bond4: (slave macvlan12): Enslaving as a backup interface with a down link
[  269.166404][T17854] lo speed is unknown, defaulting to 1000
[  269.456271][T17871] netlink: 'syz.2.3045': attribute type 3 has an invalid length.
[  269.688563][T17881] 8021q: adding VLAN 0 to HW filter on device bond14
[  269.704220][T17881] 8021q: adding VLAN 0 to HW filter on device macvlan9
[  269.709082][T17881] bond14: (slave macvlan9): Enslaving as a backup interface with a down link
[  269.721605][T17881] bond14: (slave macvlan9): Releasing backup interface
[  270.247962][T17907] netlink: 'syz.0.3056': attribute type 9 has an invalid length.
[  270.682978][T17932] netlink: 'syz.2.3063': attribute type 1 has an invalid length.
[  270.686381][T17932] netlink: 'syz.2.3063': attribute type 1 has an invalid length.
[  270.694095][T17932] netlink: 'syz.2.3063': attribute type 1 has an invalid length.
[  270.769312][T17932] 8021q: adding VLAN 0 to HW filter on device bond24
[  270.907564][T17947] tipc: Bearer <eth:syzkaller0>: already 2 bearers with priority 0
[  270.916664][T17947] tipc: Enabling of bearer <eth:syzkaller0> rejected, cannot adjust to lower
[  270.922588][T17947] syzkaller0: entered promiscuous mode
[  270.925623][T17947] syzkaller0: entered allmulticast mode
[  270.973123][T17954] netlink: 'syz.0.3069': attribute type 1 has an invalid length.
[  271.006083][T17957] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  271.017809][T17957] CPU: 0 UID: 0 PID: 17957 Comm: syz.1.3070 Not tainted syzkaller #0 PREEMPT(full) 
[  271.017828][T17957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  271.017836][T17957] Call Trace:
[  271.017841][T17957]  <TASK>
[  271.017847][T17957]  dump_stack_lvl+0x189/0x250
[  271.017868][T17957]  ? __pfx_dump_stack_lvl+0x10/0x10
[  271.017882][T17957]  ? __pfx__printk+0x10/0x10
[  271.017903][T17957]  ? kernfs_path_from_node+0x2f/0x290
[  271.017915][T17957]  ? kernfs_path_from_node+0x250/0x290
[  271.017926][T17957]  ? kernfs_path_from_node+0x2f/0x290
[  271.017940][T17957]  sysfs_warn_dup+0x8e/0xa0
[  271.017951][T17957]  sysfs_do_create_link_sd+0xc0/0x110
[  271.017974][T17957]  device_add_class_symlinks+0x1cf/0x240
[  271.017991][T17957]  device_add+0x475/0xb50
[  271.018005][T17957]  wiphy_register+0x1ba6/0x28d0
[  271.018035][T17957]  ? __pfx_wiphy_register+0x10/0x10
[  271.018050][T17957]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  271.018069][T17957]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  271.018086][T17957]  ieee80211_register_hw+0x3425/0x4080
[  271.018110][T17957]  ? ieee80211_register_hw+0x1461/0x4080
[  271.018130][T17957]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  271.018147][T17957]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  271.018168][T17957]  ? __hrtimer_setup+0x187/0x210
[  271.018179][T17957]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  271.018199][T17957]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  271.018266][T17957]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  271.018281][T17957]  ? trace_kmalloc+0x1f/0xd0
[  271.018294][T17957]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  271.018308][T17957]  ? kstrndup+0xbf/0x160
[  271.018327][T17957]  hwsim_new_radio_nl+0xea4/0x1b10
[  271.018342][T17957]  ? __pfx___nla_validate_parse+0x10/0x10
[  271.018370][T17957]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  271.018396][T17957]  ? __nla_parse+0x40/0x60
[  271.018415][T17957]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  271.018438][T17957]  genl_family_rcv_msg_doit+0x215/0x300
[  271.018458][T17957]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  271.018480][T17957]  ? bpf_lsm_capable+0x9/0x20
[  271.018495][T17957]  ? security_capable+0x7e/0x2e0
[  271.018517][T17957]  genl_rcv_msg+0x60e/0x790
[  271.018535][T17957]  ? __pfx_genl_rcv_msg+0x10/0x10
[  271.018548][T17957]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  271.018571][T17957]  netlink_rcv_skb+0x208/0x470
[  271.018585][T17957]  ? __lock_acquire+0xab9/0xd20
[  271.018600][T17957]  ? __pfx_genl_rcv_msg+0x10/0x10
[  271.018613][T17957]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  271.018644][T17957]  ? down_read+0x1ad/0x2e0
[  271.018658][T17957]  genl_rcv+0x28/0x40
[  271.018670][T17957]  netlink_unicast+0x82f/0x9e0
[  271.018691][T17957]  ? __pfx_netlink_unicast+0x10/0x10
[  271.018709][T17957]  ? netlink_sendmsg+0x642/0xb30
[  271.018718][T17957]  ? skb_put+0x11b/0x210
[  271.018733][T17957]  netlink_sendmsg+0x805/0xb30
[  271.018749][T17957]  ? __pfx_netlink_sendmsg+0x10/0x10
[  271.018762][T17957]  ? aa_sock_msg_perm+0xf1/0x1d0
[  271.018775][T17957]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  271.018785][T17957]  ? __pfx_netlink_sendmsg+0x10/0x10
[  271.018795][T17957]  __sock_sendmsg+0x21c/0x270
[  271.018810][T17957]  ____sys_sendmsg+0x505/0x830
[  271.018824][T17957]  ? __pfx_____sys_sendmsg+0x10/0x10
[  271.018841][T17957]  ? import_iovec+0x74/0xa0
[  271.018855][T17957]  ___sys_sendmsg+0x21f/0x2a0
[  271.018867][T17957]  ? __pfx____sys_sendmsg+0x10/0x10
[  271.018902][T17957]  ? __fget_files+0x2a/0x420
[  271.018910][T17957]  ? __fget_files+0x3a0/0x420
[  271.018925][T17957]  __x64_sys_sendmsg+0x19b/0x260
[  271.018938][T17957]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  271.018955][T17957]  ? rcu_is_watching+0x15/0xb0
[  271.018978][T17957]  ? do_syscall_64+0xbe/0x3b0
[  271.018992][T17957]  do_syscall_64+0xfa/0x3b0
[  271.019004][T17957]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.019014][T17957]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  271.019028][T17957]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.019040][T17957] RIP: 0033:0x7fec98d8ebe9
[  271.019051][T17957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  271.019061][T17957] RSP: 002b:00007fec99ce7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  271.019073][T17957] RAX: ffffffffffffffda RBX: 00007fec98fc5fa0 RCX: 00007fec98d8ebe9
[  271.019082][T17957] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005
[  271.019089][T17957] RBP: 00007fec98e11e19 R08: 0000000000000000 R09: 0000000000000000
[  271.019117][T17957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  271.019125][T17957] R13: 00007fec98fc6038 R14: 00007fec98fc5fa0 R15: 00007ffda8975b48
[  271.019148][T17957]  </TASK>
[  271.198567][T17959] 8021q: adding VLAN 0 to HW filter on device bond22
[  271.276711][T17961] netlink: 'syz.2.3071': attribute type 10 has an invalid length.
[  271.463924][T17986] lo speed is unknown, defaulting to 1000
[  271.756443][T18005] __nla_validate_parse: 15 callbacks suppressed
[  271.756457][T18005] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3082'.
[  271.766494][T18003] netlink: 'syz.2.3081': attribute type 10 has an invalid length.
[  271.906764][T18008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3083'.
[  272.422503][T18019] lo speed is unknown, defaulting to 1000
[  272.444298][T18024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3087'.
[  272.453381][T18028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3086'.
[  272.457907][T18029] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3088'.
[  272.657882][T18039] bond4: (slave macvlan11): Releasing backup interface
[  272.660904][T18039] bond4: (slave macvlan11): the permanent HWaddr of slave - e2:7c:01:2a:49:3b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  272.668005][T18039] bond4: (slave macvlan12): Releasing backup interface
[  272.746562][T18053] netlink: 'syz.0.3089': attribute type 10 has an invalid length.
[  272.912827][T18066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3095'.
[  273.184994][T18080] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  273.202088][T18080] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  273.207113][T18080] CPU: 0 UID: 0 PID: 18080 Comm: syz.1.3098 Not tainted syzkaller #0 PREEMPT(full) 
[  273.207130][T18080] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  273.207138][T18080] Call Trace:
[  273.207144][T18080]  <TASK>
[  273.207151][T18080]  dump_stack_lvl+0x189/0x250
[  273.207173][T18080]  ? __pfx_dump_stack_lvl+0x10/0x10
[  273.207214][T18080]  ? __pfx__printk+0x10/0x10
[  273.207237][T18080]  ? kernfs_path_from_node+0x2f/0x290
[  273.207251][T18080]  ? kernfs_path_from_node+0x250/0x290
[  273.207263][T18080]  ? kernfs_path_from_node+0x2f/0x290
[  273.207280][T18080]  sysfs_warn_dup+0x8e/0xa0
[  273.207294][T18080]  sysfs_do_create_link_sd+0xc0/0x110
[  273.207309][T18080]  device_add_class_symlinks+0x1cf/0x240
[  273.207326][T18080]  device_add+0x475/0xb50
[  273.207343][T18080]  wiphy_register+0x1ba6/0x28d0
[  273.207374][T18080]  ? __pfx_wiphy_register+0x10/0x10
[  273.207390][T18080]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  273.207410][T18080]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  273.207427][T18080]  ieee80211_register_hw+0x3425/0x4080
[  273.207453][T18080]  ? ieee80211_register_hw+0x1461/0x4080
[  273.207474][T18080]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  273.207491][T18080]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  273.207514][T18080]  ? __hrtimer_setup+0x187/0x210
[  273.207525][T18080]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  273.207545][T18080]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  273.207584][T18080]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  273.207598][T18080]  ? trace_kmalloc+0x1f/0xd0
[  273.207613][T18080]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  273.207629][T18080]  ? kstrndup+0xbf/0x160
[  273.207649][T18080]  hwsim_new_radio_nl+0xea4/0x1b10
[  273.207667][T18080]  ? __pfx___nla_validate_parse+0x10/0x10
[  273.207693][T18080]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  273.207716][T18080]  ? __nla_parse+0x40/0x60
[  273.207734][T18080]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  273.207770][T18080]  genl_family_rcv_msg_doit+0x215/0x300
[  273.207792][T18080]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  273.207817][T18080]  ? bpf_lsm_capable+0x9/0x20
[  273.207832][T18080]  ? security_capable+0x7e/0x2e0
[  273.207853][T18080]  genl_rcv_msg+0x60e/0x790
[  273.207871][T18080]  ? __pfx_genl_rcv_msg+0x10/0x10
[  273.207893][T18080]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  273.207920][T18080]  netlink_rcv_skb+0x208/0x470
[  273.207937][T18080]  ? __lock_acquire+0xab9/0xd20
[  273.207955][T18080]  ? __pfx_genl_rcv_msg+0x10/0x10
[  273.207970][T18080]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  273.208003][T18080]  ? down_read+0x1ad/0x2e0
[  273.208019][T18080]  genl_rcv+0x28/0x40
[  273.208033][T18080]  netlink_unicast+0x82f/0x9e0
[  273.208055][T18080]  ? __pfx_netlink_unicast+0x10/0x10
[  273.208074][T18080]  ? netlink_sendmsg+0x642/0xb30
[  273.208083][T18080]  ? skb_put+0x11b/0x210
[  273.208099][T18080]  netlink_sendmsg+0x805/0xb30
[  273.208141][T18080]  ? __pfx_netlink_sendmsg+0x10/0x10
[  273.208159][T18080]  ? aa_sock_msg_perm+0xf1/0x1d0
[  273.208172][T18080]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  273.208212][T18080]  ? __pfx_netlink_sendmsg+0x10/0x10
[  273.208227][T18080]  __sock_sendmsg+0x21c/0x270
[  273.208247][T18080]  ____sys_sendmsg+0x505/0x830
[  273.208267][T18080]  ? __pfx_____sys_sendmsg+0x10/0x10
[  273.208286][T18080]  ? import_iovec+0x74/0xa0
[  273.208303][T18080]  ___sys_sendmsg+0x21f/0x2a0
[  273.208319][T18080]  ? __pfx____sys_sendmsg+0x10/0x10
[  273.208362][T18080]  ? __fget_files+0x2a/0x420
[  273.208372][T18080]  ? __fget_files+0x3a0/0x420
[  273.208391][T18080]  __x64_sys_sendmsg+0x19b/0x260
[  273.208407][T18080]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  273.208428][T18080]  ? rcu_is_watching+0x15/0xb0
[  273.208444][T18080]  ? do_syscall_64+0xbe/0x3b0
[  273.208458][T18080]  do_syscall_64+0xfa/0x3b0
[  273.208468][T18080]  ? lockdep_hardirqs_on+0x9c/0x150
[  273.208485][T18080]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.208498][T18080]  ? exc_page_fault+0x9f/0xf0
[  273.208517][T18080]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.208528][T18080] RIP: 0033:0x7fec98d8ebe9
[  273.208540][T18080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  273.208551][T18080] RSP: 002b:00007fec99ce7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  273.208565][T18080] RAX: ffffffffffffffda RBX: 00007fec98fc5fa0 RCX: 00007fec98d8ebe9
[  273.208574][T18080] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005
[  273.208582][T18080] RBP: 00007fec98e11e19 R08: 0000000000000000 R09: 0000000000000000
[  273.208589][T18080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  273.208596][T18080] R13: 00007fec98fc6038 R14: 00007fec98fc5fa0 R15: 00007ffda8975b48
[  273.208618][T18080]  </TASK>
[  273.472961][T18090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3102'.
[  273.477013][T18090] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3102'.
[  273.534528][T18094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3103'.
[  273.542285][T18094] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.3103'.
[  273.866150][T18109] 8021q: adding VLAN 0 to HW filter on device bond25
[  273.874347][T18109] bond25: (slave wlan0): Opening slave failed
[  274.094765][T18139] sit0: entered promiscuous mode
[  274.096804][T18139] sit0: entered allmulticast mode
[  274.167335][T18139] validate_nla: 9 callbacks suppressed
[  274.167348][T18139] netlink: 'syz.1.3114': attribute type 10 has an invalid length.
[  274.220879][T18150] sch_tbf: peakrate 65537 is lower than or equals to rate 10765663612948939926 !
[  274.225989][T18152] tipc: Bearer <eth:syzkaller0>: already 2 bearers with priority 0
[  274.235945][T18152] tipc: Enabling of bearer <eth:syzkaller0> rejected, cannot adjust to lower
[  274.240252][T18153] syzkaller0: entered promiscuous mode
[  274.242544][T18153] syzkaller0: entered allmulticast mode
[  274.289081][T18157] sit0: left promiscuous mode
[  274.293848][T18157] sit0: left allmulticast mode
[  274.360232][T18160] lo speed is unknown, defaulting to 1000
[  274.377464][T18165] lo speed is unknown, defaulting to 1000
[  274.846378][T18184] netlink: 'syz.0.3125': attribute type 1 has an invalid length.
[  274.870634][T18184] 8021q: adding VLAN 0 to HW filter on device bond23
[  274.877040][T18184] netlink: 'syz.0.3125': attribute type 10 has an invalid length.
[  274.909922][T18178] netlink: 'syz.1.3123': attribute type 10 has an invalid length.
[  274.923591][T18188] netlink: 'syz.0.3126': attribute type 10 has an invalid length.
[  274.927649][T18188] mac80211_hwsim hwsim576 wlan1: entered allmulticast mode
[  275.278535][T18203] mac80211_hwsim hwsim548 wlan0: entered promiscuous mode
[  275.282268][T18203] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  275.366799][T18207] netlink: 'syz.0.3132': attribute type 8 has an invalid length.
[  275.753270][T18223] netlink: 'syz.0.3135': attribute type 10 has an invalid length.
[  275.941547][T18225] netlink: 'syz.1.3137': attribute type 10 has an invalid length.
[  276.452794][T18257] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  277.338794][T18293] netlink: 'syz.2.3152': attribute type 11 has an invalid length.
[  277.459056][T18295] lo speed is unknown, defaulting to 1000
[  277.642074][T18307] __nla_validate_parse: 8 callbacks suppressed
[  277.642084][T18307] netlink: 208 bytes leftover after parsing attributes in process `syz.0.3155'.
[  277.647756][T18307] netlink: 208 bytes leftover after parsing attributes in process `syz.0.3155'.
[  277.703065][T18309] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3156'.
[  277.871925][T18313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3157'.
[  278.011169][T18315] lo speed is unknown, defaulting to 1000
[  278.156912][T18315] netlink: 'syz.1.3158': attribute type 2 has an invalid length.
[  278.167267][T18315] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3158'.
[  278.275328][T18324] netlink: 'syz.2.3160': attribute type 10 has an invalid length.
[  278.335917][T18326] lo speed is unknown, defaulting to 1000
[  278.443181][T18336] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3163'.
[  278.504077][T18339] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3164'.
[  278.612327][T18344] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3165'.
[  278.921326][T18354] ieee802154 phy1 wpan1: encryption failed: -22
[  278.928027][T18354] team0: Unable to change to the same mode the team is in
[  279.369982][T18365] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3173'.
[  279.434109][T18372] team0: Unable to change to the same mode the team is in
[  279.438783][T18371] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  279.442708][T18372] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  279.486178][T18378] validate_nla: 2 callbacks suppressed
[  279.486189][T18378] netlink: 'syz.2.3178': attribute type 1 has an invalid length.
[  279.491670][T18378] netlink: 'syz.2.3178': attribute type 1 has an invalid length.
[  279.508779][T18376] lo speed is unknown, defaulting to 1000
[  279.600911][T18380] netlink: 'syz.2.3178': attribute type 1 has an invalid length.
[  279.638691][T18380] 8021q: adding VLAN 0 to HW filter on device bond26
[  279.668028][T18378] mac80211_hwsim hwsim548 wlan0: left promiscuous mode
[  279.674605][T18378] bond26: (slave wlan0): Opening slave failed
[  279.829876][T18390] lo speed is unknown, defaulting to 1000
[  279.855851][T18398] mac80211_hwsim hwsim692 wlan1: entered allmulticast mode
[  279.886961][T18398] netlink: 'syz.1.3182': attribute type 10 has an invalid length.
[  279.956093][T18401] lo speed is unknown, defaulting to 1000
[  280.009742][T18390] netlink: 'syz.2.3180': attribute type 2 has an invalid length.
[  280.015585][T18390] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3180'.
[  280.056432][T18401] netlink: 'syz.1.3183': attribute type 2 has an invalid length.
[  280.784292][T18419] 8021q: adding VLAN 0 to HW filter on device team0
[  280.786945][T18419] tipc: Resetting bearer <ib:team0>
[  280.788903][T18419] tipc: Resetting bearer <ib:team0>
[  280.795702][T18419] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  280.802327][  T792] lo speed is unknown, defaulting to 1000
[  280.812338][  T792] syz2: Port: 1 Link ACTIVE
[  280.868976][T18426] lo speed is unknown, defaulting to 1000
[  280.992134][T18430] netlink: 'syz.0.3189': attribute type 2 has an invalid length.
[  280.998984][T18439] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  281.334981][T18451] ieee802154 phy1 wpan1: encryption failed: -22
[  281.351387][T18451] team0: Mode changed to "loadbalance"
[  281.416943][T18463] lo speed is unknown, defaulting to 1000
[  281.502314][T18471] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  281.505398][T18471] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  281.540867][T18471] lo speed is unknown, defaulting to 1000
[  281.544335][T18463] netlink: 'syz.0.3199': attribute type 2 has an invalid length.
[  282.065952][T18502] tipc: Resetting bearer <ib:team0>
[  282.072085][T18504] netlink: 'syz.1.3208': attribute type 9 has an invalid length.
[  282.157152][T18511] netlink: 'syz.2.3210': attribute type 1 has an invalid length.
[  282.297911][T18517] 8021q: adding VLAN 0 to HW filter on device bond29
[  282.323026][T18511] 8021q: adding VLAN 0 to HW filter on device bond27
[  282.331191][T18517] bond29: (slave wlan0): Opening slave failed
[  282.337139][T18511] bond27: (slave wlan0): Opening slave failed
[  282.618369][T18555] 8021q: adding VLAN 0 to HW filter on device bond24
[  282.636423][T18555] veth19: entered promiscuous mode
[  282.642709][T18555] bond24: (slave veth19): Enslaving as a backup interface with a down link
[  282.651933][T18555] bond24: (slave veth19): Releasing backup interface
[  282.695032][T18563] lo speed is unknown, defaulting to 1000
[  282.786195][T18565] __nla_validate_parse: 12 callbacks suppressed
[  282.786209][T18565] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3225'.
[  282.860292][T18575] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3227'.
[  282.870032][T18575] mac80211_hwsim hwsim296 wlan0: entered promiscuous mode
[  282.872547][T18575] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  282.917489][T18579] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  282.923080][T18579] CPU: 1 UID: 0 PID: 18579 Comm: syz.2.3229 Not tainted syzkaller #0 PREEMPT(full) 
[  282.923122][T18579] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  282.923129][T18579] Call Trace:
[  282.923135][T18579]  <TASK>
[  282.923141][T18579]  dump_stack_lvl+0x189/0x250
[  282.923162][T18579]  ? __pfx_dump_stack_lvl+0x10/0x10
[  282.923175][T18579]  ? __pfx__printk+0x10/0x10
[  282.923196][T18579]  ? kernfs_path_from_node+0x2f/0x290
[  282.923208][T18579]  ? kernfs_path_from_node+0x250/0x290
[  282.923219][T18579]  ? kernfs_path_from_node+0x2f/0x290
[  282.923234][T18579]  sysfs_warn_dup+0x8e/0xa0
[  282.923247][T18579]  sysfs_do_create_link_sd+0xc0/0x110
[  282.923261][T18579]  device_add_class_symlinks+0x1cf/0x240
[  282.923278][T18579]  device_add+0x475/0xb50
[  282.923293][T18579]  wiphy_register+0x1ba6/0x28d0
[  282.923323][T18579]  ? __pfx_wiphy_register+0x10/0x10
[  282.923339][T18579]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  282.923358][T18579]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  282.923375][T18579]  ieee80211_register_hw+0x3425/0x4080
[  282.923402][T18579]  ? ieee80211_register_hw+0x1461/0x4080
[  282.923421][T18579]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  282.923438][T18579]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  282.923464][T18579]  ? __hrtimer_setup+0x187/0x210
[  282.923475][T18579]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  282.923495][T18579]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  282.923533][T18579]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  282.923547][T18579]  ? trace_kmalloc+0x1f/0xd0
[  282.923560][T18579]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  282.923575][T18579]  ? kstrndup+0xbf/0x160
[  282.923596][T18579]  hwsim_new_radio_nl+0xea4/0x1b10
[  282.923613][T18579]  ? __pfx___nla_validate_parse+0x10/0x10
[  282.923642][T18579]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  282.923667][T18579]  ? __nla_parse+0x40/0x60
[  282.923686][T18579]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  282.923708][T18579]  genl_family_rcv_msg_doit+0x215/0x300
[  282.923728][T18579]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  282.923752][T18579]  ? bpf_lsm_capable+0x9/0x20
[  282.923766][T18579]  ? security_capable+0x7e/0x2e0
[  282.923788][T18579]  genl_rcv_msg+0x60e/0x790
[  282.923807][T18579]  ? __pfx_genl_rcv_msg+0x10/0x10
[  282.923825][T18579]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  282.923852][T18579]  netlink_rcv_skb+0x208/0x470
[  282.923867][T18579]  ? __lock_acquire+0xab9/0xd20
[  282.923885][T18579]  ? __pfx_genl_rcv_msg+0x10/0x10
[  282.923900][T18579]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  282.923932][T18579]  ? down_read+0x1ad/0x2e0
[  282.923945][T18579]  genl_rcv+0x28/0x40
[  282.923958][T18579]  netlink_unicast+0x82f/0x9e0
[  282.923980][T18579]  ? __pfx_netlink_unicast+0x10/0x10
[  282.923996][T18579]  ? netlink_sendmsg+0x642/0xb30
[  282.924004][T18579]  ? skb_put+0x11b/0x210
[  282.924018][T18579]  netlink_sendmsg+0x805/0xb30
[  282.924035][T18579]  ? __pfx_netlink_sendmsg+0x10/0x10
[  282.924049][T18579]  ? aa_sock_msg_perm+0xf1/0x1d0
[  282.924063][T18579]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  282.924075][T18579]  ? __pfx_netlink_sendmsg+0x10/0x10
[  282.924120][T18579]  __sock_sendmsg+0x21c/0x270
[  282.924132][T18579]  ____sys_sendmsg+0x505/0x830
[  282.924142][T18579]  ? __pfx_____sys_sendmsg+0x10/0x10
[  282.924154][T18579]  ? import_iovec+0x74/0xa0
[  282.924164][T18579]  ___sys_sendmsg+0x21f/0x2a0
[  282.924172][T18579]  ? __pfx____sys_sendmsg+0x10/0x10
[  282.924195][T18579]  ? __fget_files+0x2a/0x420
[  282.924201][T18579]  ? __fget_files+0x3a0/0x420
[  282.924211][T18579]  __x64_sys_sendmsg+0x19b/0x260
[  282.924220][T18579]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  282.924232][T18579]  ? rcu_is_watching+0x15/0xb0
[  282.924241][T18579]  ? do_syscall_64+0xbe/0x3b0
[  282.924250][T18579]  do_syscall_64+0xfa/0x3b0
[  282.924256][T18579]  ? lockdep_hardirqs_on+0x9c/0x150
[  282.924265][T18579]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.924272][T18579]  ? exc_page_fault+0x9f/0xf0
[  282.924282][T18579]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.924289][T18579] RIP: 0033:0x7fd661d8ebe9
[  282.924296][T18579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  282.924302][T18579] RSP: 002b:00007fd65fff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  282.924311][T18579] RAX: ffffffffffffffda RBX: 00007fd661fc5fa0 RCX: 00007fd661d8ebe9
[  282.924316][T18579] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  282.924320][T18579] RBP: 00007fd661e11e19 R08: 0000000000000000 R09: 0000000000000000
[  282.924324][T18579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  282.924328][T18579] R13: 00007fd661fc6038 R14: 00007fd661fc5fa0 R15: 00007ffd4f5d4e78
[  282.924340][T18579]  </TASK>
[  282.926922][T18579] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  282.971351][T18583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3228'.
[  282.975022][T18584] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  283.123260][T18584] CPU: 0 UID: 0 PID: 18584 Comm: syz.2.3229 Not tainted syzkaller #0 PREEMPT(full) 
[  283.123277][T18584] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  283.123284][T18584] Call Trace:
[  283.123290][T18584]  <TASK>
[  283.123295][T18584]  dump_stack_lvl+0x189/0x250
[  283.123317][T18584]  ? __pfx_dump_stack_lvl+0x10/0x10
[  283.123331][T18584]  ? __pfx__printk+0x10/0x10
[  283.123351][T18584]  ? kernfs_path_from_node+0x2f/0x290
[  283.123364][T18584]  ? kernfs_path_from_node+0x250/0x290
[  283.123375][T18584]  ? kernfs_path_from_node+0x2f/0x290
[  283.123390][T18584]  sysfs_warn_dup+0x8e/0xa0
[  283.123402][T18584]  sysfs_do_create_link_sd+0xc0/0x110
[  283.123417][T18584]  device_add_class_symlinks+0x1cf/0x240
[  283.123432][T18584]  device_add+0x475/0xb50
[  283.123447][T18584]  wiphy_register+0x1ba6/0x28d0
[  283.123483][T18584]  ? __pfx_wiphy_register+0x10/0x10
[  283.123498][T18584]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  283.123517][T18584]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  283.123532][T18584]  ieee80211_register_hw+0x3425/0x4080
[  283.123558][T18584]  ? ieee80211_register_hw+0x1461/0x4080
[  283.123577][T18584]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  283.123593][T18584]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  283.123614][T18584]  ? __hrtimer_setup+0x187/0x210
[  283.123624][T18584]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  283.123643][T18584]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  283.123679][T18584]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  283.123693][T18584]  ? trace_kmalloc+0x1f/0xd0
[  283.123706][T18584]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  283.123721][T18584]  ? kstrndup+0xbf/0x160
[  283.123741][T18584]  hwsim_new_radio_nl+0xea4/0x1b10
[  283.123758][T18584]  ? __pfx___nla_validate_parse+0x10/0x10
[  283.123785][T18584]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  283.123809][T18584]  ? __nla_parse+0x40/0x60
[  283.123827][T18584]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  283.123847][T18584]  genl_family_rcv_msg_doit+0x215/0x300
[  283.123867][T18584]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  283.123890][T18584]  ? bpf_lsm_capable+0x9/0x20
[  283.123905][T18584]  ? security_capable+0x7e/0x2e0
[  283.123925][T18584]  genl_rcv_msg+0x60e/0x790
[  283.123945][T18584]  ? __pfx_genl_rcv_msg+0x10/0x10
[  283.123958][T18584]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  283.123983][T18584]  netlink_rcv_skb+0x208/0x470
[  283.123998][T18584]  ? __lock_acquire+0xab9/0xd20
[  283.124015][T18584]  ? __pfx_genl_rcv_msg+0x10/0x10
[  283.124030][T18584]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  283.124061][T18584]  ? down_read+0x1ad/0x2e0
[  283.124110][T18584]  genl_rcv+0x28/0x40
[  283.124124][T18584]  netlink_unicast+0x82f/0x9e0
[  283.124147][T18584]  ? __pfx_netlink_unicast+0x10/0x10
[  283.124164][T18584]  ? netlink_sendmsg+0x642/0xb30
[  283.124173][T18584]  ? skb_put+0x11b/0x210
[  283.124188][T18584]  netlink_sendmsg+0x805/0xb30
[  283.124205][T18584]  ? __pfx_netlink_sendmsg+0x10/0x10
[  283.124219][T18584]  ? aa_sock_msg_perm+0xf1/0x1d0
[  283.124232][T18584]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  283.124243][T18584]  ? __pfx_netlink_sendmsg+0x10/0x10
[  283.124254][T18584]  __sock_sendmsg+0x21c/0x270
[  283.124272][T18584]  ____sys_sendmsg+0x505/0x830
[  283.124289][T18584]  ? __pfx_____sys_sendmsg+0x10/0x10
[  283.124309][T18584]  ? import_iovec+0x74/0xa0
[  283.124326][T18584]  ___sys_sendmsg+0x21f/0x2a0
[  283.124340][T18584]  ? __pfx____sys_sendmsg+0x10/0x10
[  283.124381][T18584]  ? __fget_files+0x2a/0x420
[  283.124390][T18584]  ? __fget_files+0x3a0/0x420
[  283.124409][T18584]  __x64_sys_sendmsg+0x19b/0x260
[  283.124423][T18584]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  283.124445][T18584]  ? do_user_addr_fault+0xc8a/0x1390
[  283.124466][T18584]  ? do_syscall_64+0xbe/0x3b0
[  283.124481][T18584]  do_syscall_64+0xfa/0x3b0
[  283.124491][T18584]  ? lockdep_hardirqs_on+0x9c/0x150
[  283.124506][T18584]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.124517][T18584]  ? exc_page_fault+0x9f/0xf0
[  283.124533][T18584]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.124544][T18584] RIP: 0033:0x7fd661d8ebe9
[  283.124555][T18584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  283.124564][T18584] RSP: 002b:00007fd65ffb4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  283.124578][T18584] RAX: ffffffffffffffda RBX: 00007fd661fc6180 RCX: 00007fd661d8ebe9
[  283.124586][T18584] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  283.124593][T18584] RBP: 00007fd661e11e19 R08: 0000000000000000 R09: 0000000000000000
[  283.124599][T18584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  283.124606][T18584] R13: 00007fd661fc6218 R14: 00007fd661fc6180 R15: 00007ffd4f5d4e78
[  283.124627][T18584]  </TASK>
[  283.371303][T18586] lo speed is unknown, defaulting to 1000
[  283.455963][T18599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3234'.
[  283.565382][T18611] lo speed is unknown, defaulting to 1000
[  283.883695][T18620] lo speed is unknown, defaulting to 1000
[  284.375817][T18640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3244'.
[  284.528948][T18648] sock: sock_timestamping_bind_phc: sock not bind to device
[  284.594807][T18656] tipc: Bearer <eth:syzkaller0>: already 2 bearers with priority 0
[  284.597644][T18656] tipc: Enabling of bearer <eth:syzkaller0> rejected, cannot adjust to lower
[  284.660742][T18664] mac80211_hwsim hwsim692 wlan1: left allmulticast mode
[  284.780194][T18670] pim6reg1: entered promiscuous mode
[  284.784514][T18670] pim6reg1: entered allmulticast mode
[  284.840592][T18675] validate_nla: 58 callbacks suppressed
[  284.840603][T18675] netlink: 'syz.0.3253': attribute type 1 has an invalid length.
[  284.900397][T18678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3255'.
[  284.905933][T18680] mac80211_hwsim hwsim548 wlan0: entered promiscuous mode
[  284.909743][T18680] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  284.919369][T18681] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  284.937773][T18683] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3257'.
[  284.956464][T18683] mac80211_hwsim hwsim296 wlan0: left promiscuous mode
[  284.963570][T18683] veth19: left promiscuous mode
[  285.053961][T18697] netlink: 'syz.2.3260': attribute type 10 has an invalid length.
[  285.096542][T18691] netlink: 'syz.0.3259': attribute type 10 has an invalid length.
[  285.230331][T18715] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3265'.
[  285.254989][T18717] delete_channel: no stack
[  285.298778][T18721] pim6reg1: entered promiscuous mode
[  285.301380][T18721] pim6reg1: entered allmulticast mode
[  285.330644][T18723] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3268'.
[  285.337216][T18723] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3268'.
[  285.630655][T18739] tc_dump_action: action bad kind
[  285.695768][T18746] mac80211_hwsim hwsim692 wlan1: entered allmulticast mode
[  285.719747][T18746] netlink: 'syz.1.3276': attribute type 10 has an invalid length.
[  285.726243][T18746] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  285.730853][T18746] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  285.905454][T18751] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  285.908993][T18751] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  285.920430][T18751] vxcan2: entered allmulticast mode
[  285.922937][T18757] netlink: 'syz.0.3280': attribute type 1 has an invalid length.
[  285.926454][T18757] netlink: 'syz.0.3280': attribute type 1 has an invalid length.
[  286.070692][T18762] ip6gre1: entered allmulticast mode
[  286.082416][T18763] netlink: 'syz.0.3281': attribute type 9 has an invalid length.
[  286.291908][T18777] netlink: 'syz.2.3287': attribute type 1 has an invalid length.
[  286.294538][T18777] netlink: 'syz.2.3287': attribute type 1 has an invalid length.
[  286.340890][T18777] netlink: 'syz.2.3287': attribute type 1 has an invalid length.
[  286.375270][T18775] ip6gre1: left allmulticast mode
[  286.407552][T18777] 8021q: adding VLAN 0 to HW filter on device bond28
[  286.411914][T18781] mac80211_hwsim hwsim548 wlan0: left promiscuous mode
[  286.415516][T18781] bond28: (slave wlan0): Opening slave failed
[  286.487151][T18788] lo speed is unknown, defaulting to 1000
[  286.816602][T18803] ieee802154 phy1 wpan1: encryption failed: -22
[  286.823358][T18804] team0: Unable to change to the same mode the team is in
[  286.826223][T18805] team0: Unable to change to the same mode the team is in
[  286.871083][T18807] bridge3: entered promiscuous mode
[  286.873481][T18807] bridge3: entered allmulticast mode
[  286.925635][T18818] 8021q: adding VLAN 0 to HW filter on device bond14
[  286.935238][T18818] 8021q: adding VLAN 0 to HW filter on device macvlan10
[  286.938729][T18818] bond14: (slave macvlan10): Enslaving as a backup interface with a down link
[  287.025649][T18807] bridge4: entered promiscuous mode
[  287.028181][T18807] bridge4: entered allmulticast mode
[  287.123261][T18827] lo speed is unknown, defaulting to 1000
[  287.565207][T18863] lo speed is unknown, defaulting to 1000
[  287.895538][T18874] __nla_validate_parse: 13 callbacks suppressed
[  287.895551][T18874] netlink: 364 bytes leftover after parsing attributes in process `syz.1.3310'.
[  287.902948][T18874] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  287.985084][T18879] mac80211_hwsim hwsim714 wlan1: entered allmulticast mode
[  288.084811][T18892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3315'.
[  288.153235][T18900] mac80211_hwsim hwsim296 wlan0: entered promiscuous mode
[  288.156599][T18900] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  288.216847][T18902] lo speed is unknown, defaulting to 1000
[  288.349976][T18902] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3317'.
[  288.478906][T18919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3322'.
[  288.560566][T18919] mac80211_hwsim hwsim692 wlan1: left allmulticast mode
[  288.623988][T18924] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3324'.
[  288.633933][T18926] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20003
[  288.733349][T18940] mac80211_hwsim hwsim714 wlan1: left allmulticast mode
[  288.777159][T18949] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3330'.
[  288.780244][T18950] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3331'.
[  288.784200][T18949] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3330'.
[  288.790934][T18949] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3330'.
[  288.795476][T18949] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3330'.
[  288.878601][T18953] mac80211_hwsim hwsim296 wlan0: left promiscuous mode
[  288.886659][T18953] bridge3: left promiscuous mode
[  288.888419][T18953] bridge3: left allmulticast mode
[  288.890764][T18953] bridge4: left promiscuous mode
[  288.892590][T18953] bridge4: left allmulticast mode
[  288.954865][T18962] mac80211_hwsim hwsim714 wlan1: entered allmulticast mode
[  288.978415][T18962] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  288.982624][T18962] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  289.087002][T18968] sctp: [Deprecated]: syz.2.3338 (pid 18968) Use of struct sctp_assoc_value in delayed_ack socket option.
[  289.087002][T18968] Use struct sctp_sack_info instead
[  289.381594][T18989] tipc: Bearer <eth:syzkaller0>: already 2 bearers with priority 0
[  289.384316][T18989] tipc: Enabling of bearer <eth:syzkaller0> rejected, cannot adjust to lower
[  289.585936][T19000] lo speed is unknown, defaulting to 1000
[  289.903805][T19022] tipc: Resetting bearer <ib:team0>
[  290.026951][T19022] tipc: Disabling bearer <ib:team0>
[  305.353774][ T5237] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  305.357643][ T5237] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  305.361324][ T5237] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  305.365197][ T5237] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  305.369367][ T5237] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  305.426956][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  305.430468][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  305.434347][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  305.438408][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  305.441570][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  305.464793][T19046] lo speed is unknown, defaulting to 1000
[  305.720803][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  305.725155][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  305.727899][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  305.730678][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  305.733190][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  305.759267][T19050] lo speed is unknown, defaulting to 1000
[  305.825880][T19046] chnl_net:caif_netlink_parms(): no params data found
[  307.471728][ T5845] Bluetooth: hci3: command tx timeout
[  307.789747][ T5845] Bluetooth: hci4: command tx timeout
[  308.751842][ T5237] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  308.756445][ T5237] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  308.760561][ T5237] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  308.764289][ T5237] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  308.767688][ T5237] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  309.549320][ T5237] Bluetooth: hci3: command tx timeout
[  309.869415][ T5237] Bluetooth: hci4: command tx timeout
[  310.829350][ T5237] Bluetooth: hci5: command tx timeout
[  311.629710][ T5237] Bluetooth: hci3: command tx timeout
[  311.949544][ T5237] Bluetooth: hci4: command tx timeout
[  312.909418][ T5237] Bluetooth: hci5: command tx timeout
[  313.709436][ T5237] Bluetooth: hci3: command tx timeout
[  314.029624][ T5237] Bluetooth: hci4: command tx timeout
[  314.989558][ T5237] Bluetooth: hci5: command tx timeout
[  317.078655][ T5237] Bluetooth: hci5: command tx timeout
[  317.082176][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  366.061423][T19062] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  366.065754][T19062] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  366.070245][T19062] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  366.074507][T19062] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  366.077838][T19062] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  366.082574][T19062] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  366.086531][T19062] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  366.091076][T19062] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  366.095297][T19062] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  366.099893][T19062] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  368.109536][T19066] Bluetooth: hci6: command tx timeout
[  368.111905][T19066] Bluetooth: hci7: command tx timeout
[  369.043363][T19066] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  369.047595][T19066] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  369.052400][T19066] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  369.056041][T19066] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  369.059925][T19066] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  370.189492][T19065] Bluetooth: hci7: command tx timeout
[  370.191700][T19065] Bluetooth: hci6: command tx timeout
[  371.149568][T19066] Bluetooth: hci8: command tx timeout
[  372.269711][T19066] Bluetooth: hci6: command tx timeout
[  372.272096][T19066] Bluetooth: hci7: command tx timeout
[  373.229511][T19065] Bluetooth: hci8: command tx timeout
[  374.349756][T19065] Bluetooth: hci7: command tx timeout
[  374.352153][T19065] Bluetooth: hci6: command tx timeout
[  375.309339][T19066] Bluetooth: hci8: command tx timeout
[  377.389407][T19066] Bluetooth: hci8: command tx timeout
[  378.520553][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  398.169127][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  398.171563][    C1] rcu: 	1-....: (1 GPs behind) idle=19d4/1/0x4000000000000000 softirq=86268/86269 fqs=5233
[  398.176485][    C1] rcu: 	         hardirqs   softirqs   csw/system
[  398.178874][    C1] rcu: 	 number:     6334          0            0
[  398.181677][    C1] rcu: 	cputime:      251      52238            6   ==> 52490(ms)
[  398.185008][    C1] rcu: 	(t=10500 jiffies g=62177 q=2004 ncpus=2)
[  398.187750][    C1] CPU: 1 UID: 0 PID: 19038 Comm: syz.1.3359 Not tainted syzkaller #0 PREEMPT(full) 
[  398.187765][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  398.187773][    C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70
[  398.187793][    C1] Code: 89 fb e8 23 00 00 00 48 8b 3d e4 56 fe 0b 48 89 de 5b e9 43 9d 58 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 80 a0 92 65 8b 15 08 d2
[  398.187803][    C1] RSP: 0018:ffffc900001e05c0 EFLAGS: 00000246
[  398.187813][    C1] RAX: ffffffff86791c68 RBX: 0000000000000000 RCX: ffff888022255640
[  398.187821][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  398.187827][    C1] RBP: 0000000000000000 R08: ffffc900001e08bf R09: 0000000000000000
[  398.187834][    C1] R10: ffffc900001e0850 R11: ffffffff86791ba0 R12: 0000000000000000
[  398.187841][    C1] R13: dffffc0000000000 R14: ffff888112a6c028 R15: 0000000000000000
[  398.187875][    C1] FS:  00007fec99ca56c0(0000) GS:ffff8881a3c18000(0000) knlGS:0000000000000000
[  398.187884][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  398.187892][    C1] CR2: 000020000000c030 CR3: 00000000638cc000 CR4: 00000000000006f0
[  398.187926][    C1] Call Trace:
[  398.187934][    C1]  <IRQ>
[  398.187938][    C1]  team_select_queue+0xc8/0x130
[  398.187954][    C1]  ? __pfx_team_select_queue+0x10/0x10
[  398.187966][    C1]  netdev_core_pick_tx+0x11c/0x350
[  398.187984][    C1]  __dev_queue_xmit+0x804/0x3b50
[  398.187996][    C1]  ? ____sys_recvmsg+0x2ab/0x460
[  398.188007][    C1]  ? ___sys_recvmsg+0x1b5/0x510
[  398.188018][    C1]  ? do_recvmmsg+0x307/0x770
[  398.188033][    C1]  ? __dev_queue_xmit+0x27b/0x3b50
[  398.188055][    C1]  ? __pfx___dev_queue_xmit+0x10/0x10
[  398.188068][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  398.188087][    C1]  ? tipc_crypto_xmit+0x1328/0x23a0
[  398.188099][    C1]  ? kfree+0x18e/0x440
[  398.188116][    C1]  ? tipc_crypto_xmit+0x1440/0x23a0
[  398.188136][    C1]  ? eth_header+0x11b/0x200
[  398.188152][    C1]  ? eth_header+0x11b/0x200
[  398.188163][    C1]  ? __pfx_eth_header+0x10/0x10
[  398.188175][    C1]  tipc_l2_send_msg+0x337/0x400
[  398.188193][    C1]  tipc_bearer_xmit_skb+0x2b3/0x400
[  398.188208][    C1]  ? tipc_bearer_xmit_skb+0xa9/0x400
[  398.188223][    C1]  ? __pfx_tipc_bearer_xmit_skb+0x10/0x10
[  398.188245][    C1]  tipc_disc_timeout+0x580/0x6d0
[  398.188265][    C1]  ? __pfx_tipc_disc_timeout+0x10/0x10
[  398.188291][    C1]  call_timer_fn+0x17e/0x5f0
[  398.188306][    C1]  ? __pfx_tipc_disc_timeout+0x10/0x10
[  398.188320][    C1]  ? call_timer_fn+0xbe/0x5f0
[  398.188334][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  398.188356][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  398.188370][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  398.188383][    C1]  ? __pfx_tipc_disc_timeout+0x10/0x10
[  398.188399][    C1]  __run_timer_base+0x61a/0x860
[  398.188413][    C1]  ? ktime_get+0x3e/0x1f0
[  398.188434][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  398.188446][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  398.188469][    C1]  run_timer_softirq+0xb7/0x180
[  398.188485][    C1]  handle_softirqs+0x286/0x870
[  398.188499][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  398.188513][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  398.188531][    C1]  __irq_exit_rcu+0xca/0x1f0
[  398.188542][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  398.188558][    C1]  irq_exit_rcu+0x9/0x30
[  398.188568][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  398.188589][    C1]  </IRQ>
[  398.188593][    C1]  <TASK>
[  398.188597][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  398.188609][    C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70
[  398.188622][    C1] Code: 8b 3d e4 56 fe 0b 48 89 de 5b e9 43 9d 58 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 08 80 a0 92 65 8b 15 08 d2 e0 10 81 e2 00 01 ff 00
[  398.188631][    C1] RSP: 0018:ffffc90008ab7660 EFLAGS: 00000203
[  398.188640][    C1] RAX: ffffffff820a6350 RBX: 0000000000000000 RCX: 0000000000080000
[  398.188646][    C1] RDX: ffffc9002141d000 RSI: 0000000000000017 RDI: ffff888122b31580
[  398.188652][    C1] RBP: 0000000000000017 R08: ffff8880246b0483 R09: 1ffff110048d6090
[  398.188658][    C1] R10: dffffc0000000000 R11: ffffed10048d6091 R12: 0000000000000215
[  398.188665][    C1] R13: ffff888022255640 R14: ffff888122b31580 R15: 1ffff1100444ab7a
[  398.188677][    C1]  ? count_memcg_event_mm+0x10/0x260
[  398.188695][    C1]  count_memcg_event_mm+0x10/0x260
[  398.188709][    C1]  handle_mm_fault+0x50f/0x8e0
[  398.188729][    C1]  do_user_addr_fault+0x764/0x1390
[  398.188752][    C1]  exc_page_fault+0x76/0xf0
[  398.188766][    C1]  asm_exc_page_fault+0x26/0x30
[  398.188775][    C1] RIP: 0010:__put_user_nocheck_4+0x3/0x10
[  398.188790][    C1] Code: d9 0f 1f 00 89 01 31 c9 0f 1f 00 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 <89> 01 31 c9 0f 1f 00 e9 01 44 03 00 90 90 90 90 90 90 90 90 90 90
[  398.188799][    C1] RSP: 0018:ffffc90008ab78b8 EFLAGS: 00010206
[  398.188808][    C1] RAX: 0000000000000020 RBX: 0000000000000020 RCX: 000020000000c030
[  398.188815][    C1] RDX: ffff888022255640 RSI: 0000000000026022 RDI: 00000000ffffffff
[  398.188822][    C1] RBP: ffffc90008ab7a30 R08: ffffffff8fa39037 R09: 1ffffffff1f47206
[  398.188829][    C1] R10: dffffc0000000000 R11: fffffbfff1f47207 R12: 0000000000026022
[  398.188836][    C1] R13: dffffc0000000000 R14: 0000000000000d70 R15: 000020000000c000
[  398.188894][    C1]  ____sys_recvmsg+0x2ab/0x460
[  398.188915][    C1]  ? __pfx_____sys_recvmsg+0x10/0x10
[  398.188939][    C1]  ? import_iovec+0x74/0xa0
[  398.188955][    C1]  ___sys_recvmsg+0x1b5/0x510
[  398.188973][    C1]  ? __pfx____sys_recvmsg+0x10/0x10
[  398.189006][    C1]  ? __might_fault+0xb0/0x130
[  398.189024][    C1]  do_recvmmsg+0x307/0x770
[  398.189042][    C1]  ? __pfx_do_recvmmsg+0x10/0x10
[  398.189063][    C1]  ? __pfx_do_futex+0x10/0x10
[  398.189088][    C1]  __x64_sys_recvmmsg+0x190/0x240
[  398.189103][    C1]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  398.189113][    C1]  ? rcu_is_watching+0x15/0xb0
[  398.189128][    C1]  ? do_syscall_64+0xbe/0x3b0
[  398.189141][    C1]  do_syscall_64+0xfa/0x3b0
[  398.189150][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  398.189164][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.189175][    C1]  ? exc_page_fault+0x9f/0xf0
[  398.189190][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.189202][    C1] RIP: 0033:0x7fec98d8ebe9
[  398.189212][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  398.189221][    C1] RSP: 002b:00007fec99ca5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  398.189232][    C1] RAX: ffffffffffffffda RBX: 00007fec98fc6180 RCX: 00007fec98d8ebe9
[  398.189240][    C1] RDX: 04000000000003b9 RSI: 0000200000002380 RDI: 0000000000000007
[  398.189247][    C1] RBP: 00007fec98e11e19 R08: 0000000000000000 R09: 0000000000000000
[  398.189254][    C1] R10: 0000000000026022 R11: 0000000000000246 R12: 0000000000000000
[  398.189260][    C1] R13: 00007fec98fc6218 R14: 00007fec98fc6180 R15: 00007ffda8975b48
[  398.189280][    C1]  </TASK>
[  399.439280][    C1] sched: DL replenish lagged too much

VM DIAGNOSIS:
11:46:31  Registers:
info registers vcpu 0

CPU#0
RAX=7ffe288324efc600 RBX=ffffffff819683c8 RCX=7ffe288324efc600 RDX=0000000000000001
RSI=ffffffff8d9b8241 RDI=ffffffff8be33880 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa39030 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b79c3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb3d22f5000 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f1dc6597d20
XMM02=001000060000004d 0000000800000000 XMM03=0000000500000007 ec01a01000000001
XMM04=0000000000000000 0000000000000013 XMM05=0000000000000000 000000000003bf12
XMM06=8003000400000000 000401c70000004f XMM07=4bd8006b00000000 2d74736f00000006
XMM08=65642f0100000000 ffffffff0000004e XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001df8f0
R8 =ffff888020da0237 R9 =1ffff110041b4046 R10=dffffc0000000000 R11=ffffffff854f3b00
R12=dffffc0000000000 R13=ffffffff99afd912 R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f3b7c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fec99ca56c0 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000020000000c030 CR3=00000000638cc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fec98e12e53
XMM06=0000000000000000 00007fec98e12e4d XMM07=0000000000000000 00007fec98e12e61
XMM08=0000000000000000 00007fec98e12ee7 XMM09=0000000000000000 00007fec98e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
