last executing test programs:

1.691767446s ago: executing program 0 (id=2417):
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
clock_gettime(0x2, &(0x7f00000001c0))
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0)
socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="c37200b5877bc669f15a3d0e6750ed188fe54bc03803817fe6c052", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x81)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc4d4}, 0x8)
sendto$inet6(r4, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x100, 0x0, @loopback, 0x81}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000800)={0x5, 0x3, 0x4, 0xb, 0x3, 0x3ff, 0xc1, 0x7}, 0x20)
syz_80211_join_ibss(&(0x7f0000000240)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000000)=0x1180, 0x4)
ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0)
sendmsg$NL80211_CMD_LEAVE_IBSS(r5, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000328bd7000fcdbdf252c0000000c0099000100000013000000"], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x40000)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000180c20000000800498000380000000000069078ac1414fdac1e00018307d27fd5c8da6d040000440400008b82fec5f2", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0)

855.36468ms ago: executing program 2 (id=2430):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a00)=@gettaction={0x164, 0x32, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x78, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x70, 0x1, [{0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa2}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf9}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xac9d}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}]}, @action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x2}, @IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x880)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r6 = accept4$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, &(0x7f0000000140)=0x10, 0x80800) (async)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) (async)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
close(0x3) (async)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x35f, @private1, 0xfffffffe}], 0x1c) (async)
setsockopt(r9, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) (async)
shutdown(r8, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={<r10=>0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000000080)={r10, 0x2}, &(0x7f0000000100)=0x8) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000200)={'geneve1\x00', <r12=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newlink={0x120, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_AF_SPEC={0x100, 0x1a, 0x0, 0x1, [@AF_INET={0x40, 0x2, 0x0, 0x1, {0x3c, 0x1, 0x0, 0x1, [{0x8, 0x21}, {0x8, 0x18}, {0x8, 0x1}, {0x8, 0x9, 0x0, 0x0, 0xfffffffd}, {0x8, 0xc, 0x0, 0x0, 0x3}, {0x8, 0x12}, {0x8, 0x1d}]}}, @AF_INET6={0x78, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x28}}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x22}}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_INET6={0x2c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private0}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}]}]}, 0x120}}, 0x0) (async)
r13 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r13, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2002b000103000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8)
recvfrom$inet(r6, &(0x7f0000000380)=""/170, 0xaa, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async)
r14 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r14, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

804.070991ms ago: executing program 1 (id=2431):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r1, 0x29, 0x49, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r3, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x0, 0x2}, 0x8)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.current\x00', 0x0, 0x0)
connect$unix(r4, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="010000e00100"})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r4, <r9=>0xffffffffffffffff}, 0x4)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000540)={r9, &(0x7f0000000380)="16b576bd77572119639f460e4c987fd99f462e3f5357ffe6dc78c132a471777ac4187add02cfddefa6866b6b2e0b7619c2bd42269c402059c652e7ccc71f13e8a28c20cf49c9c230e79d1dde7f708a73e91a718d79f3aacc3af70be702d5fd4f556e3491b4429c8f193cf54fca5adba8e7c30a6b45fc3f10e05e59a2112867b167b4c5e1708757ec80597a6fedfc43de67533f661d898e76cd72ed1646cbcfb49ae9f73ac911b5560d60cfa1692582d25ca302f8fb2d813d2d4883eb0be307e254c29fe690435021e98fa16274695726e59edb445f462864e3324f", &(0x7f0000000480)=""/175}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x88, 0x7a}}}}}, 0x28}}, 0x240400a6)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, r5, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)

802.929445ms ago: executing program 0 (id=2432):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002d00090027bd70000000000004000000040019000c00090000000080"], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x84)

722.603462ms ago: executing program 2 (id=2433):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x9, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="1700000000000000000003000100000000000000", @ANYRES32, @ANYBLOB="fdffffff00000000030000020000000000000000bff74ea048b33e07c2c6a62304b89f320da0e0c6000000f7cb9791c9d09f6bd7afcfc3ea162972c1a27bccc5cd75f0a39ea4c1d9ff22562a0ba2a1fc07591091bbbfaf", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x28d, 0x0, 0x0, 0x0, 0x1}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x62}, 0x94)
sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002d002100000000000000000004"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000100)=<r2=>0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000140)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, <r3=>0x0}})
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000001600)={0x8, 0xffffffff, 0x9, 0x2, 0x5}, 0x14)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000540)={{r0}, r2, 0x14, @unused=[0x1, 0x9, 0x0, 0x3], @devid=r3})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})

716.196221ms ago: executing program 1 (id=2434):
r0 = socket$kcm(0x10, 0x3, 0x10)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0xdc}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00', <r2=>0x0})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0x11, 0x0, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r4], 0x20}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0)
sendmsg$nl_route(r4, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES16=r7, @ANYRES64=r1, @ANYBLOB="2004000000000b4908001b0000000000"], 0x28}}, 0x0)
recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0x0, 0x6}, {0x13}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x20044810)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a595c779f10ce0630fc60", 0x14}], 0x1}, 0x0)

576.989211ms ago: executing program 0 (id=2435):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}, 0x700}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000000000)=""/41, 0x29}, {&(0x7f00000018c0)=""/4104, 0x1008}, {&(0x7f0000000340)=""/75, 0x4b}, {&(0x7f0000000500)=""/224, 0xe0}, {&(0x7f00000000c0)=""/237, 0xed}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0xd}], 0x9, 0x4022, 0x0)

491.461723ms ago: executing program 0 (id=2436):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="04002780a6baa71b38fe4e1400f400ff010000001e7da4f6980000000000000000000001000000"], 0x120}], 0x1}, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @exit, @alu={0x5, 0x1, 0xc, 0xa, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xec, &(0x7f00000004c0)=""/236}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x802, 0x1800000000000000)
bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
connect$802154_dgram(r2, &(0x7f0000000200)={0x2, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x80800)
setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvfrom$packet(r4, 0x0, 0x0, 0x40, 0x0, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x400}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=@newtclass={0x850, 0x28, 0x4, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x10}, {0xffff, 0xd}, {0x7}}, [@tclass_kind_options=@c_htb={{0x8}, {0x824, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x2, 0x9e8, 0x7ff, 0x40004, 0xd60b, 0xa67, 0x6, 0x7ff, 0x7, 0x0, 0x6, 0x3, 0x7, 0x7, 0x8000, 0x6, 0xfffffffe, 0x7e7, 0x4, 0xb2d1, 0x80000, 0x2b84, 0x1000, 0xfff, 0x8, 0x0, 0x2, 0x80000001, 0x7, 0x6, 0x5ff, 0x6, 0xe90, 0x4, 0x5, 0x2, 0x80000000, 0xa6, 0x6, 0x7, 0x5, 0x8, 0x5, 0x6, 0x8, 0x5, 0xfff, 0x3, 0x8001, 0x3, 0x9, 0x1, 0xb3e5, 0x9, 0x26, 0xe, 0xffffff00, 0x7, 0x3, 0x3, 0x67, 0x1, 0xae45, 0x101, 0x7f, 0x0, 0xc0000000, 0x3, 0x1, 0x5, 0x6, 0x5, 0x0, 0xffffff80, 0x9, 0x6, 0x10, 0x7ff, 0xc0000000, 0x40, 0x0, 0x3, 0x0, 0x4, 0x9, 0x2, 0x3ff, 0x5, 0xffffff01, 0x4, 0x0, 0xff, 0x3, 0xff, 0x53, 0x9, 0x5, 0x8, 0x3, 0x10000, 0x8, 0x2, 0x3, 0x1, 0x7f, 0x1, 0x9, 0xa787, 0x7, 0x4, 0x52b3, 0x1, 0x1, 0xa, 0x80000001, 0x0, 0x7, 0x9, 0x7, 0xa33, 0x3, 0x6, 0x7fff, 0x3, 0xe38, 0x5, 0x9, 0xdd, 0x620e049e, 0x800, 0x80, 0x5, 0x9, 0x2, 0xa48, 0x0, 0x8001, 0xc77c, 0x33c, 0x5, 0xa9, 0x6, 0x5, 0x97f, 0x3, 0x6, 0x4, 0x9, 0x7fffffff, 0x6, 0x9, 0x1ff, 0x6, 0x5, 0x9, 0x0, 0xc4f, 0x8, 0x3, 0x0, 0x7, 0x7, 0x9, 0x2, 0x564, 0x84, 0x80, 0xafcb, 0x2, 0x2, 0xfffffff5, 0x7, 0x1000, 0x10, 0x3, 0x4, 0x7, 0x8, 0x400004d0, 0xfffffffd, 0x8, 0xe, 0x0, 0x2b, 0x7, 0x10, 0x2, 0x180000, 0x9, 0x8, 0xccae, 0xceb, 0x2, 0xc, 0x5, 0x0, 0xec5, 0x5, 0x5, 0xfffffff9, 0xfd54, 0x6, 0x1, 0x1, 0xd, 0x3, 0x42, 0xa840, 0x8, 0x8, 0x6, 0x101, 0xfffffffc, 0x324, 0x1, 0x7, 0x5, 0xfffffffb, 0x4d, 0x4, 0x10001, 0x5d40f775, 0x2, 0x7, 0x2, 0x6, 0xfffff14b, 0x9, 0x8, 0x5, 0x8, 0x1, 0x0, 0x7ff, 0x1, 0x96c9, 0xa0, 0x8, 0x2, 0x4, 0x9, 0x9, 0xfffffffd, 0x1, 0xfffffff8, 0x2, 0x0, 0xe, 0xa60b7720, 0x9, 0xa1, 0x6, 0x9, 0x600, 0x9, 0x594]}, @TCA_HTB_CTAB={0x404, 0x3, [0x5, 0x1, 0x4, 0x4, 0x8, 0x0, 0xa5, 0x100, 0x8001, 0x6, 0x70507cb, 0x3, 0x7fff, 0x6, 0x7, 0x8, 0x1, 0xf, 0x5, 0x5, 0xc3d, 0xceb, 0x3, 0x1, 0xff, 0xa5f, 0xb, 0x80000001, 0x6, 0x101, 0xa89, 0xc, 0x10, 0xf, 0xd2, 0x101, 0x9, 0x2, 0x5, 0x6, 0x7f, 0x80, 0xff, 0x7fff, 0xd, 0xfffffffa, 0x3, 0x476, 0xf, 0x5, 0x3ff, 0x7ff, 0x8, 0x2, 0x4, 0x4, 0x3, 0x2, 0xb12, 0x3, 0x1000, 0xdf, 0x3, 0x3, 0x3, 0x2, 0x7fffffff, 0x40, 0x94f5, 0x0, 0x3ff, 0x83, 0x9, 0x4, 0xd4, 0x2, 0x1ff, 0x3, 0x81, 0x257a000, 0x0, 0x1ff, 0x1fba2a5c, 0x6, 0x5, 0x6, 0x8, 0xa9, 0x0, 0x8, 0x80000000, 0x2, 0x100, 0x3, 0x4, 0x3fe, 0x2, 0x8000000, 0x800, 0x10000, 0xa, 0x92, 0x0, 0x9, 0xc0d, 0xf07, 0x6, 0xee6, 0x0, 0x0, 0x9ce, 0x6, 0xa85d, 0x7, 0x400, 0xf6f4, 0x5, 0x3264, 0x1, 0x9, 0x2, 0x42, 0xc, 0x9, 0x0, 0x5, 0x3, 0x6, 0x3, 0x8, 0x9d, 0x1, 0x4, 0x1, 0x2, 0xd, 0x8f, 0x8, 0x1, 0x8000, 0x1, 0x0, 0x9, 0x40, 0x3, 0xffffff41, 0x9, 0x3, 0x8, 0x9, 0xfffffffa, 0xfffffffd, 0x8001, 0x0, 0x1, 0x80000001, 0x1, 0xd, 0x80000001, 0xe, 0x86, 0x7fffffff, 0xe95, 0x9d, 0x5, 0xe, 0xb4d, 0x1, 0x200, 0x9, 0x5, 0x7, 0x9f, 0xfffffffc, 0x2000000, 0x6, 0x8, 0x8000, 0xe0fc, 0x7ff, 0x9, 0x0, 0xd, 0xf76, 0x2, 0x9, 0x6e2d, 0xff, 0x7, 0xfffffffa, 0x58d5, 0x1, 0x2, 0xffff2228, 0x3, 0x9, 0x81, 0x0, 0x9, 0xc11, 0x8, 0x0, 0x8001, 0x5, 0x4, 0xe2, 0x101, 0x3ff, 0x100, 0x5, 0xa, 0x401, 0x1, 0x90000, 0x8000, 0x40, 0x0, 0x6, 0x1000, 0x2, 0x9, 0x0, 0x6, 0x7, 0x0, 0x2, 0x2, 0x5, 0x7, 0x2, 0x8, 0x3, 0x8001, 0x0, 0x4, 0x10000, 0x9, 0x5, 0x400, 0x3, 0x5, 0x8, 0x88, 0x7e2, 0x5, 0xfe, 0x7, 0x4, 0x0, 0x51, 0x10, 0x0, 0x4, 0xffff7fff, 0x2, 0x9]}, @TCA_HTB_CEIL64={0xc, 0x7, 0xffff}, @TCA_HTB_RATE64={0xc, 0x6, 0x9}]}}]}, 0x850}, 0x1, 0x0, 0x0, 0x893}, 0x24040084)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)

490.166865ms ago: executing program 2 (id=2437):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', 0x0, 0x0, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r3=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x26, 0x0, 0x3000000, 0x15, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x8000, 0x80000001, 0x8}}) (async)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r5, &(0x7f0000002680)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, 0x0}}], 0x1, 0x0) (async)
shutdown(r5, 0x1) (async)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f00000004c0)={0x9, 0xff, 0x204, 0x5, 0xb7b, 0x2, 0x2, 0x2}, 0x20) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) (async)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0}) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4)
unshare(0x6a040000) (async)
r8 = socket$inet6_udplite(0xa, 0x2, 0x88)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), r0)
sendmsg$WG_CMD_GET_DEVICE(r9, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000a40)={0x37c, r10, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PEERS={0xfc, 0x8, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x8c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4b02b6ada8046b8912b578fdf99a98974945b91f8afbc731b0a20335a7e457cb"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2c3ce0c38d63593cb81d289497a7f596f65b39b281400a7660b3ab3a28eca0c5"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010102}}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0xa}}}]}]}, @WGDEVICE_A_PEERS={0x25c, 0x8, 0x0, 0x1, [{0x134, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xe}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0xbc, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x6}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x44}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}]}]}, {0xe0, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "353784b7ca2fb84e8f13a3c66c3c597efa9689206cc1baff634a6f9bb42bce1e"}, @WGPEER_A_ALLOWEDIPS={0xb0, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x10}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}]}]}]}, {0x44, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @private=0xa010102}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}]}, 0x37c}, 0x1, 0x0, 0x0, 0x80}, 0x40) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x401, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x5b5d, 0xc999538fae47d0f7}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x18040}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r12 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r12, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) (async)
socket$inet6(0xa, 0x3, 0x1) (async)
sendmmsg$inet6(r8, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="38020000000000002900000036000000004300000000000004013f040100c910ff010000000000000000000000000001c910fc0000000000000000000000000000000001000740000000000e07010101000000010000000200000000000000000000000000000001000000010000002000000000000000ffffffff00000000ffffffffffffff7f06aeb07c1c192077cc9e7c45705803ad5588ca8b194d23f748fe792cfa3d32221f25d73b8ffe64a4ddda6efcfb7483b588194d29c7a04395d8500965a9a1d07879040c44db1d5d6f618d2ab920f0bf168ddc9acc6a51edd1230760d4ae8bf30f5f82a78e8114849ee8e37364560400000035bfa8197ef2ba99103ee5f5aae28ec5c8e2675db11530f5c466d55f2244d479dc653c854406155eada3eaeb90d39149b8d13bab75a9bd1452c8c76284b9ddfbeff41344e64f1771d78a706e1c5a6d63f1c954e24a1e73f75c26e9f09ec9b606cc3470f11c4842db651926bd2263a4a0a8fe80de8b2f9cb176e51819d5f4d10a5d1f0488d5e46953fbfd750f6137fbebe89a8d462158a87f9622355104b4f68d7a6d3ad85c373ea52a25afad37ffb743a5c361158087904b09fcc806d032bac00ee0e0251fc032446e45a3e12417ff4703526ffc45f71567857777927903799e0ba453334186009d22e38099c67b5350c7e82136bba947a18fb61d36fcba1f9efe3d79485d06252702833dc8ee417f40bb9064878fb89dd75a49135e5df148c4ad1e1d5626b44c8112d822f4c9a05e693fd5ae5595627f8684016b37a2bf6d0040030000000000002900000037000000006500000000000000fb1a63687c244e6df3aecb13d6eb957495b669cc032f6d0a11a5e16eed9937b046c9dc1a61dcf9754b767df4735c3f8c37b4d5cd15a99c5a19cc62c921ad4e90d6e3695e85000000a53600d5031b5735acafb556e22279975f958ad437c76573e544506e58455772eb1149"], 0x590}}], 0x1, 0x8008801) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)

485.252585ms ago: executing program 1 (id=2438):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000100"/24], &(0x7f00000006c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x103}}], 0x18}, 0x0) (async)
sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x103}}], 0x18}, 0x0)
socket$kcm(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4008000) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4008000)
socket$unix(0x1, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) (async)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000340), 0x2, 0x0)
write$cgroup_type(r4, 0x0, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
socket$inet(0x2, 0x1, 0x0) (async)
socket$inet(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), r5)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000240)={'team0\x00', <r7=>0x0})
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r6, @ANYBLOB="05043fbd7000fddbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="9800028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000240004000900090603000000feff00070000000000000005f60000009e0c0907"], 0xb4}, 0x1, 0x0, 0x0, 0x20000401}, 0x44084) (async)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r6, @ANYBLOB="05043fbd7000fddbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="9800028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000240004000900090603000000feff00070000000000000005f60000009e0c0907"], 0xb4}, 0x1, 0x0, 0x0, 0x20000401}, 0x44084)
r8 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r2, &(0x7f00000002c0)='net_prio.prioidx\x00', 0x275a, 0x0) (async)
r9 = openat$cgroup_ro(r2, &(0x7f00000002c0)='net_prio.prioidx\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0)
writev(r9, &(0x7f0000003500)=[{0x0}, {&(0x7f0000000080)='C', 0x1}], 0x2)
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', <r10=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010000700"/20, @ANYRES32=0x0, @ANYBLOB="040101000000000014000300766c616e30000000000000000000000008000a00", @ANYRES32=r10], 0x3c}}, 0x0)

346.241163ms ago: executing program 2 (id=2439):
socket$kcm(0x10, 0x2, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)
syz_emit_ethernet(0x36, 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$netlink(0x10, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00'})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="61000000000000001400127909000100626f6e64000000000400028008000a000a537221911246e54125440f0e176ab4ca1a3f3f14709d87b93726854261429268ff0cbf8142a105d84437", @ANYRESHEX=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20000881}, 0x4000)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1, 0x0, 0x0, 0x20000000}})
pipe(&(0x7f0000000040))
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[], 0x48)
syz_emit_ethernet(0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6008008000383a00fc020000000000000000000000000000ff020000000000000000000000000001020090780000000a608cb0356c3618932a6cc9ca2a943e21739a2b00002f0000000000000000000000fffffffffffffe8000000000000000"], 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000690000/0x3000)=nil, 0x3000, 0x2000003, 0x10010, r5, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r6, 0x0)
r7 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r7, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
r8 = socket(0x15, 0x5, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0)
sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt(r8, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x1000004, 0x11, r6, 0x51f20000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)

345.344762ms ago: executing program 1 (id=2440):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@multicast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@empty}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8)
r2 = getpid() (async)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @dev}}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0xe8)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x164c, 0x2d, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x1634, 0x800, 0x0, 0x1, [@typed={0x8, 0x3b, 0x0, 0x0, @uid=r1}, @nested={0x1178, 0x113, 0x0, 0x1, [@nested={0x28, 0x2c, 0x0, 0x1, [@nested={0x4, 0x132}, @typed={0xc, 0x72, 0x0, 0x0, @u64=0xfb1}, @nested={0x4, 0x136}, @nested={0x4, 0xae}, @nested={0x4, 0x9a}, @nested={0x4, 0x56}, @nested={0x4, 0x10e}]}, @nested={0x8, 0xc9, 0x0, 0x1, [@nested={0x4, 0x7d}]}, @typed={0x14, 0x6c, 0x0, 0x0, @ipv6=@private0}, @generic="9b23360af0d4c3959a4553d4197929624a06b9cc9699e351e01074b770694ce0dd4e52038a677dd2df2b2e4fea8d92766b037fb014172c9cbdd743eb12e07d69599d095b6aa821e8dc973cba9a5ca7dae93eac7ab62b214c6be653b5eed8c79c20b9e0b742f83db48f341b8498", @typed={0x8, 0x10d, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x42}}, @typed={0x8, 0x59, 0x0, 0x0, @fd=r0}, @generic="4f0234ae73a60daa8b4add9c5d7fef1bb162a2df8944bdec6551128c1ee804d5f9e9829ad82265dfd6030cf90e825eb1bd83e150e7d809f6e5cd38ba4d7cbc812a442bd746a78ff14883274ffd0bb12a97f574dc684fad5fe2f23fb183bb4838e80a0074ecdd9c", @typed={0xc, 0x129, 0x0, 0x0, @u64=0x2}, @nested={0x1040, 0x137, 0x0, 0x1, [@typed={0x29, 0xfc, 0x0, 0x0, @binary="fcdc977924501a9f2b1655e6fc0407c0c03e9d120e7552093b1ba9a7b42777c54ad502667f"}, @typed={0x8, 0x31, 0x0, 0x0, @pid=r2}, @typed={0x1004, 0x94, 0x0, 0x0, @binary="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"}, @nested={0x4, 0x7}]}]}, @nested={0x492, 0x83, 0x0, 0x1, [@generic="47d9239d27aaaccdc8f2f14f2a60f8d1a069254e4474b69707a906525ae8b93bba3b10b83ef65cc3d823aec7662ed18de7a1be5fc071f7d00955e17e8518e744a679a042bb1f3ee1", @typed={0x8, 0x2e, 0x0, 0x0, @pid=r2}, @typed={0x14, 0xbd, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @typed={0x8, 0x3, 0x0, 0x0, @fd=r0}, @nested={0xe0, 0xa, 0x0, 0x1, [@nested={0x4, 0xd}, @nested={0x4, 0xd9}, @typed={0x7, 0x46, 0x0, 0x0, @str='!\\\x00'}, @generic="294a9db7baa7e0cd8cb892239ba90e662b55b05311d4086fe9d4f05dfa20563b1a83dc0e5f9e9e275ccd85e12642776c6b1c852806af983be360e53ecc37db0909819f741cee641872663dd26bc7820e9292b7d9ce0df4fe5aeacd261f9abdb0c7899d96d58a3070c9688fa6253d5908aa182f811b7021fbae1bf1f46b711000add6", @nested={0x4, 0x4d}, @generic="9ed9ec05cce6988f027e40061be33febc95c6bbb56a1e4734c67981e3949b239827f2395fe1440dbe95e016946e2c8cf46c2109593be866f18e6ebd29bfb", @nested={0x4, 0xa0}, @nested={0x4, 0x6b}]}, @typed={0x8, 0x127, 0x0, 0x0, @ipv4=@loopback}, @nested={0xe7, 0xc9, 0x0, 0x1, [@generic="27ab820fd8b3bdda3720bd8a490364d941fdafb072f8b257d79027ee4011fc7fe7d26dcd97f9f1015ec8560265dc70f77a891263833230237e23fe5153831c9d00c28a8c19", @generic="cc3414075e6073f2123da833fb5b85935abd01bc974fef33fa113086d7d8b9ef484c1c7e2c44aa0ea8299692b71d63340cc501c45725e4ecdb79ad9f4a2583793dd882ddbac05d495f62d6347a3501cd8d7990bd4c151eb4028e08d9623c0096b29aae8b8152a8a0ffec84a81117a0e071eea98d799ec181d87403ed493bbe19f2c2ec6489b1c42f3bd3ca6a8ea583828d63c7dc51976b03b9e0a277e707"]}, @nested={0x206, 0xd2, 0x0, 0x1, [@generic="4ec5371d2ac139b4852d402df300830123dade1848682ad15cb6c4d502ebfbbc83a6d71f7045978ee4609681a6144ff4e58cfc8023a2f09154db922b74537f63ea26650b56688ccb942f5dc5b721a6b2a7eeaa498174818d35756be103011a623937619a0ba534ba1bf61b5cdb60eea33c521f134f2458415e555f4fc28398ace029d91c3d7a784c9ae5282b05a5f255bb8b90d94be2ea9a9d5058f7fed5a5f9bebf5d9e", @generic="f19b6652e0024a5168991940f3b7632813982d469545e1a76f31fff09d68d5aa1b0f586889891a7e9b4810a9d97d4fb2b7f8ca2bf1a48408ba5dbac70db3e1cffbc2c5dd1135daec90602d162831c0d9d698b1c4b91f4150d40d53c7f964c2a235c0242e059273eb385fa5671b907628d2d3be76f3677580a69722ee1ef432c72c3aa2998da548ad0c5116645e8e882b8260805c94c86ce01116d867eb83d7129c10a6e147f31aec6d", @nested={0x4, 0xee}, @generic="f361b8f5bf72d7fe9c1436d25d21edf0dbb5d73d71581e2454a899935cf4ca0d4d58a1fa13e347028f3655c04627cd1d597d8aad3ff12f1fa256e943146f3b8f88d7227939ae8e2a9e6607379d13e284172dad978bf371a51c201de3aea4fb14fea6d6fcf4d641b04eb31747923e771c1cba605f794b0c1b941a5529b782fe1c4137e2d054d6aa9ed47597a3d344d890efaa8c339b934aea6da12d452128b346af0fed5eeda7a7e57d", @typed={0x8, 0x91, 0x0, 0x0, @ipv4=@broadcast}]}, @generic="d5c011b2aea38b8b18d19410a90a15ea53ab337ae0b1b13fc089e4db827ee38b5b767664f833ed308fde7a2c3ae01f97861a60ff0bb07367f376ad270f79911ce6d64c8bd6bfbe3b33d4"]}, @typed={0x8, 0xe4, 0x0, 0x0, @uid=r3}, @typed={0x14, 0xd, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}]}, @nested={0x6, 0x11, 0x0, 0x1, [@generic="2fe5"]}]}, 0x164c}], 0x1}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x30}}, 0x4000800)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$unix(r0, &(0x7f0000002000)={&(0x7f0000001b40)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001f80)=[{&(0x7f0000001bc0)="b03e2e4defc844588b4adf3af186c8e68df678b70d8e73819f5e4669c6936232300dd017536e33dca26e80a4364affc0f2b2bc4120b10adadac01dadc6033175aadf370fd2bbf9f2739b5185ee826488337567a360414da34bfb40dd3860cdcc03262bec8462f8a939c6354d501532881b198e746d67f0fdcd3ee7b40432362d2d733c2ea0a3ae591732acc88441ab9fe1100767e3cb3124c3f14e24b79e4ac0af35e14ed2e9242ebac32507c68e4daa08b6bf774d084ba89573648760896277f4804fcb9f0fba80df84382782eeb623d96bc775af63eed2f533e0da4745", 0xde}, {&(0x7f0000001cc0)="72af3da91abc799c74952a822fa2e08a2f2cb9feef416beb7166ec7bb962567a59199706505b26bb23b2265315b7a4df8fa3e0921f41e6006cfc9ceecfc5b88e8703d061f753ef5ac77a13d985903bccc3ba79ff9b004daeddb50994e5c31427dbd6fcb1a918a6dcd3d47febf642a02eb5cc6d09b04d082c0feccabf539c1f6df15495288e3650d605d0045ca3b5d128f18e876ba98151fab43de1272d373c020e59fec143e82c09d5164f97948e836e1a051360590eac2fcdae644d26927ad0b4", 0xc1}, {&(0x7f0000001dc0)="4061ddedf24a23760ae9", 0xa}, {&(0x7f0000001e00)="86e846ff3b77168d08d40ee50c15853a5f8a89e07e69fe0f5d", 0x19}, {&(0x7f0000001e40)="cecad505f9f868cc2a8e2d0d4114f56957d3d0f0beb8680efeb3182417fd9aff90a6189296aa574636fbee46027a11c7ea769977790bda005f639c16598f81462c421a0ad017f26086dc23aa960c0dbfb801d6eb354942d8317003cdee095a6b90c1234e551afa19855ecbd93972169e1a2ab805e1fca1c180c5d014870e1e2c75e2a3d34deb55e4e53af46324147fa6d5f2df5d02bc354d08d8530b49de5187392916e6a862239b0fd6ae1c6f9797bfd5e6def908e2f69f8524c07a59732b26ee29eebf4f7aafcc1dc3ed2782dd52c8093963a62ad8cf594c81", 0xda}], 0x5, 0x0, 0x0, 0x20048010}, 0x10)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=<r7=>0x0) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async)
r11 = socket(0x400000000010, 0x3, 0x0)
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xe7be759}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x2, 0x6, 0x6, 0x1}, {0x5, 0x1, 0x1, 0xa, 0xd3d, 0x1}, 0x26, 0x4b3b, 0x19c5}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc068fa965e4d9ca}]}}]}, 0x6c}}, 0x0) (async)
sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_STAB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) (async)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r15=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x38, r14, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x2400c890) (async)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f0000002100)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x14, r14, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}}, 0x40001) (async)
r16 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x80000000}, 0x50) (async)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@empty, 0x0, 0xfffc, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, r7}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) (async)
sendmsg$nl_generic(r4, &(0x7f0000001b00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001ac0)={&(0x7f00000019c0)={0xf8, 0x16, 0x200, 0x70bd25, 0x25dfdbfb, {0x1d}, [@typed={0x4, 0x128}, @generic="97f36d612e218d896f12e7fbcb42", @nested={0x8, 0xf9, 0x0, 0x1, [@typed={0x4, 0x75}]}, @typed={0x4, 0x1}, @typed={0x8, 0xe3, 0x0, 0x0, @uid=r7}, @generic="e5bedf2d842df40332bad4c37e6a55035ced675c7e251f59507b77abdadd22097af240704cd5803c0c08d767e28f5c4d40ec92d631b86afed6b67bb784a150ce30d2cd7ca25d95abc92e59d551534ad4e96a5106f72d5253e8d245af071f7dc8db32a9ca1192761e567ae90f7a7a44685e1078a89c2d1bd4ac2ebcdccee6681dac1652f1f25e9ac5452ee41dc0b74a6643d123fb1a9d1c3f74aa8ee5e745bbd4b8ed4adf21016f22302be72995ca72dfc49076fe5b5a3580fdee73"]}, 0xf8}, 0x1, 0x0, 0x0, 0x640080d1}, 0x800)

221.643749ms ago: executing program 2 (id=2441):
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x101}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000000000)=""/41, 0x29}, {&(0x7f00000018c0)=""/4104, 0x1008}, {&(0x7f0000000340)=""/75, 0x4b}, {&(0x7f0000000500)=""/224, 0x4e}, {&(0x7f00000000c0)=""/237, 0xed}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0xd}], 0x9, 0x4022, 0x0)

216.177103ms ago: executing program 2 (id=2442):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, 0x0, 0x0)
sendto$inet6(r2, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xa}, 0x1c)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, 0x0, &(0x7f0000000200))
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="06001b5ec56d96db80ca7c58abbfb1ce73f44a8cb00180115d662b898206e89745dc437b9be5c7acbb3b5ad162fddf3267a68db047036eaac4e555d878ad9604213bfbd61cc03c1b6c76b4ae645b2fb602c5fdae2993bf34d123869f39a547af24b1768f31fa578c9368ea2241c853f9955ab47f4dbec80c0fd478441f6b8ffa3ad4e1480a7cb6a21a1548d70bf0e0c587c9c5f603ef74b4dfe37a22e33c51ea87881f30ca5c07219bf6edc0ebb27091b4b90a0760dbb0df02b35153c6d76d64a8fd641dbbea9db3c73f8b0c"], 0x30}}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r6=>0xffffffffffffffff})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r8=>0x0})
recvfrom$ax25(r4, &(0x7f0000000180)=""/35, 0x23, 0x10000, &(0x7f00000001c0)={{0x3, @bcast, 0x1}, [@null, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r9, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYRES8=0x0, @ANYRES16=r7, @ANYRESOCT, @ANYRES32=r8, @ANYBLOB="040013000600120004000006001000000200010a00060000130100"/40], 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8054)
sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r10 = socket$inet(0x2, 0x1, 0x0)
close(0x3)
socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet_opts(r10, 0x0, 0x4, 0x0, 0x0)
setsockopt$inet_opts(r10, 0x0, 0x4, 0x0, 0x0)
socket$unix(0x1, 0x2, 0x0)

161.626684ms ago: executing program 0 (id=2443):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xf}, {0xd, 0xa}, {0x6}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x10001, 0x3, 0x0, 0x7}, 0xf0, 0x1, 0x8, 0x3, 0x88a, 0x9, 0x8e, 0x1f, 0x3, 0xff, {0x4415, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000001000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817", @ANYRESHEX=r2], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

160.938284ms ago: executing program 1 (id=2444):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e00200002800800010010000000080001000d"], 0x58}}, 0x0)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001300)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="04002780a6baa71b38fe4e1400f400ff010000000000000000000000000001000000"], 0x120}], 0x1}, 0x300)

101.572601ms ago: executing program 0 (id=2445):
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r0) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$kcm(0x10, 0x3, 0x10)
clock_gettime(0x2, &(0x7f00000001c0))
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
socket$key(0xf, 0x3, 0x2) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc4d4}, 0x8) (async)
sendto$inet6(r2, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) (async)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000800)={0x5, 0x3, 0x4, 0xb, 0x3, 0x3ff, 0xc1, 0x7}, 0x20)
syz_80211_join_ibss(&(0x7f0000000240)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x884)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async)
r3 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e1f, @empty}, 0x10) (async)
sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x24040004)
epoll_create(0x1)

0s ago: executing program 1 (id=2446):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf25041a0000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$packet(0x11, 0x2, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x200, 0x70bd2a, 0x1, {0x0, 0x0, 0x0, r4, {0xfff3, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000032c0)=@newtfilter={0x2744, 0x2c, 0x800, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, {0x4, 0x4}, {0x6}, {0x1, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8, 0xb, 0xffffffff}]}}, @filter_kind_options=@f_fw={{0x7}, {0x1170, 0x2, [@TCA_FW_POLICE={0x838, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000000, 0x5, 0x5, 0x1, 0x401, 0x76, 0x5, 0x9d9d, 0x1498000, 0x18bf, 0x1, 0xffff, 0x80, 0x160c5ac8, 0x1, 0x6, 0x8, 0xe4b6, 0x6, 0x80000000, 0x9, 0x16, 0x0, 0x61d, 0x8, 0x8, 0x5, 0xffffff80, 0x1, 0x5c9, 0x75e, 0x5, 0x8, 0x4, 0x59, 0x80000001, 0x8, 0x285, 0x7, 0x0, 0xab4, 0x2, 0x4, 0xe0000000, 0x4, 0x1000, 0x3, 0x5, 0x688, 0x8, 0x4, 0x5, 0xf, 0xaf, 0x2, 0x0, 0x163, 0x8, 0x2, 0x401, 0x6, 0x1000, 0xc0000000, 0x8, 0x174b, 0xe0c8, 0x7, 0x4000, 0x0, 0x6, 0x10000, 0x4, 0x26, 0x7, 0x9, 0x953, 0x8, 0x40, 0x3ff, 0x3, 0x9, 0x101, 0xe, 0x7, 0x2, 0x10000, 0x7fff, 0x4, 0x7, 0x1, 0x2, 0x0, 0x4, 0x6, 0xfff, 0x4e1, 0xb, 0x8, 0x800, 0x9, 0xff, 0x583, 0x5, 0x7, 0x6, 0x0, 0x2, 0x5, 0x10001, 0x5, 0x8a5, 0x80, 0xc7d, 0x1, 0x8a41, 0x7, 0x7, 0x8, 0x0, 0x8, 0x80, 0x9, 0xd, 0x0, 0x0, 0x8, 0x80000001, 0x5, 0x80, 0x85, 0x3, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x7, 0x2, 0x3, 0x7, 0x7, 0x4, 0x0, 0xbdc, 0xfbeb, 0x5, 0x3, 0x2, 0x80000000, 0x9, 0x8, 0x6, 0x9, 0x3, 0x4f5d, 0x9, 0x6, 0x5, 0x2, 0xa, 0x4, 0x6, 0x3, 0x6, 0x3, 0x8, 0xa2, 0x6, 0x4, 0x7fffffff, 0x81, 0x7, 0x8, 0x4, 0xef2, 0xde9, 0x0, 0x3ff, 0xe552, 0x35, 0x6, 0x6, 0xb2ce, 0x4, 0x9, 0x7, 0x4, 0x401, 0x3, 0xfffffff0, 0x4, 0x3, 0x2, 0x742, 0x1000, 0x8, 0x5, 0x3, 0x2, 0x4, 0x19, 0xae, 0x5, 0xfff, 0x9, 0x26, 0x3f9c0000, 0x6923, 0x8, 0x112, 0x3, 0x5, 0x80, 0x7fff, 0x0, 0x1cc, 0x3, 0x4104, 0x1000000, 0x9, 0x4, 0x5, 0x2b, 0x5, 0x1, 0x8000, 0x7, 0x7, 0x8, 0x6, 0x1, 0x1ff, 0x981b, 0x5, 0x3, 0x5, 0x0, 0x0, 0xebf, 0xe, 0xc, 0x1, 0x0, 0x4, 0x8, 0x80000000, 0x8000, 0xfff, 0x9, 0xfffffffa, 0x80, 0x81, 0x3, 0xb, 0xb563, 0xfffffff7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x100, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x3, 0x3, 0x2, 0x3ec40d9f, 0x3, 0x200, 0x8001, 0x4d7, 0x9, 0x7bd47071, 0x80000000, 0x10001, 0x1, 0x1, 0x6, 0xfffff000, 0x4, 0xffffffff, 0x200, 0x7, 0x0, 0x3c0, 0x6, 0x7fff, 0x80000000, 0x4, 0x432c00, 0xda6, 0x101, 0x9, 0x5, 0x40, 0x3, 0x7, 0xfff, 0x7, 0x90e, 0x9, 0x5, 0xc2be, 0xffffffff, 0x0, 0x7df, 0x9, 0xd4, 0x2, 0xfffff001, 0x1, 0x2, 0x7fffffff, 0x4, 0xba8, 0x40, 0x10, 0xfffff800, 0x1000, 0xb, 0x8515, 0x6, 0x5, 0x1, 0x2, 0x23b7, 0x3ff, 0x6, 0x735, 0x3, 0x0, 0x5, 0xd, 0x6, 0x7fffffff, 0x6, 0x5f, 0x0, 0x4, 0x0, 0x293, 0x755, 0x6, 0x7ff, 0x8, 0x3, 0x8, 0x2, 0x7, 0xb47, 0x0, 0xff, 0x8ff70ae, 0x8000, 0x1, 0xa6fd, 0xf91, 0x7fff, 0x8, 0x8, 0x4, 0x4, 0x55, 0xe64, 0x826c, 0x5, 0x6, 0x400, 0x9, 0x1ff, 0x0, 0x4e2c, 0x82b, 0x1bb, 0x7fffffff, 0x9, 0x0, 0x9, 0x1, 0x20000002, 0x16dbf4ab, 0x8, 0x3, 0x4, 0x3, 0x0, 0x89, 0x3, 0x43f, 0x4, 0x1, 0x9, 0x5, 0x800, 0xdb, 0x2, 0xff, 0xf, 0x0, 0x3ff, 0xe8, 0xfffffff7, 0x40, 0xf4, 0x1, 0x89ad, 0x4, 0x5, 0x1, 0x8, 0x80, 0x19, 0x2, 0x0, 0x3, 0x2, 0x7f, 0xffff, 0x5, 0xc201, 0x1000, 0x4, 0x1132, 0x9, 0x4, 0x19, 0x6, 0xfffffc00, 0x0, 0x7, 0x1, 0x8000, 0x7fff, 0x7f, 0x4, 0x5, 0x2, 0x0, 0xfff, 0x0, 0x6, 0xdf48, 0xf, 0x10, 0x8e, 0x1, 0x4, 0x101, 0x3, 0x4, 0xf, 0x1ff, 0x2, 0x6, 0xfa3, 0x7, 0xc, 0x2, 0x800, 0x7fff, 0x45, 0xffffffff, 0x6, 0xfffffffc, 0xe4818f5, 0x0, 0x7f, 0x5e, 0x0, 0x1, 0x0, 0xbc67, 0x7, 0x7f, 0xd, 0x5, 0x3, 0x7a, 0x6, 0x2, 0x8, 0x10, 0x1, 0x29, 0x5, 0x10, 0x7, 0x80000001, 0x6, 0x3, 0x5, 0x401, 0x7, 0x2, 0x9, 0x7b, 0x8, 0xd6, 0x5, 0x7, 0x5e, 0x5, 0x2, 0x80, 0x1000, 0xfffffffc, 0x2, 0x5, 0xa54e, 0x8, 0x8, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x89}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}]}, @TCA_FW_MASK={0x8, 0x5, 0xffff8d21}, @TCA_FW_MASK={0x8, 0x5, 0x5}, @TCA_FW_POLICE={0x408, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xd, 0x8000, 0x0, 0x6, 0x3, 0xffff, 0xcc, 0x8, 0x9, 0x5, 0x8, 0x5, 0x4ee7, 0x8, 0x7140000, 0xb4ae, 0x6, 0x1, 0x384d, 0x5eb2, 0xfff, 0x8, 0x8c8f, 0x4, 0xc492, 0xffff, 0xbd8f, 0x8, 0x6, 0x3, 0x7, 0x8, 0x3, 0x10, 0x80000000, 0xa, 0x8, 0x0, 0x9, 0x6, 0x9, 0x400, 0x1, 0x7, 0x4, 0x2, 0x3, 0x3c4000, 0x9, 0x3, 0x7, 0x0, 0x8, 0x380, 0x7, 0x0, 0x3ff, 0x7, 0x7, 0x9, 0x2, 0x3ff, 0xfffffff9, 0x5, 0x1, 0x0, 0x7, 0x9, 0x2, 0x800, 0x7ff, 0x2, 0x100, 0x4, 0x8000, 0xffffffff, 0x7, 0x6, 0x4, 0x10001, 0x101, 0x80, 0x6, 0x81, 0x61, 0xfffffffd, 0x8, 0x9, 0x4, 0xf, 0x5, 0xa52, 0x50, 0x8, 0x0, 0x3c, 0x3b1f2bd9, 0x1000, 0xe21f, 0x5, 0x8bde, 0x7d9b, 0x3, 0x8, 0x5, 0x2, 0xfffffff9, 0x5, 0x8, 0x8, 0x0, 0x5, 0x5, 0x3, 0x10001, 0x4848, 0x2, 0x0, 0x73b, 0x8, 0x7, 0x400, 0x6, 0xfffffffe, 0xc658, 0x6, 0x6, 0xffffffc0, 0x8, 0x4, 0x401, 0xfffff800, 0x0, 0x1, 0x5, 0x7, 0x101, 0x0, 0x8, 0x800, 0x1, 0x6, 0x80000000, 0x0, 0x100, 0x4, 0x943, 0x1, 0xb4, 0x1, 0x6, 0x2, 0x917, 0x1, 0x4, 0x32873472, 0x7fffffff, 0x95, 0xaa, 0x1, 0x159, 0x3, 0xeb23, 0x0, 0x4, 0xfa, 0x7, 0x3, 0x7, 0x6, 0x2, 0x302c2abb, 0x5f4bf7db, 0x2, 0x8, 0x4, 0x5, 0xfff, 0x0, 0x1, 0x6, 0x9c5, 0xc39, 0x9, 0x4, 0x1, 0x0, 0x0, 0x6, 0x5, 0x9, 0xe, 0x101, 0x0, 0x6, 0x4, 0x8, 0x8, 0x100, 0x5, 0x1, 0x0, 0xfffffff7, 0x400, 0x5, 0x6, 0x5, 0x4, 0x8, 0x7f, 0x1, 0xf, 0xeb, 0x5, 0x8d82d7d, 0x6c8801f, 0xfffffffe, 0x9a86, 0x1ff, 0x7, 0x3ff, 0x343f, 0x8, 0x9, 0x3, 0x0, 0xebf, 0x9, 0x8, 0x2, 0xfffffff9, 0xffffff13, 0x3, 0x80, 0x200, 0x155, 0xffff, 0x3, 0x8, 0x7fff, 0x3, 0x1, 0xb0, 0x3, 0xfff, 0x1, 0x9, 0x3df1, 0x0, 0x5, 0xffffffff, 0x8, 0x9, 0x7fffffff, 0x8dd]}]}, @TCA_FW_INDEV={0x14, 0x3, 'ip6tnl0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0xfff1}}, @TCA_FW_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x9, 0x448d, 0x7, 0x401, 0x3, 0xfff, 0x0, 0x3ff, 0xf1, 0x4, 0x100, 0x7f, 0x400, 0xfffffffb, 0xfffff000, 0x4, 0x201, 0xff, 0x3, 0x10, 0x81, 0xb, 0x0, 0x80000000, 0x3, 0x1ff, 0x4, 0x9, 0x3, 0xe39e, 0x4, 0x7, 0x5, 0x8, 0x80000000, 0x400, 0xe0, 0x8000, 0x4, 0x7, 0x2, 0x7, 0x8, 0x200, 0x504f7cc7, 0xad0, 0x8, 0x5, 0x4, 0xff, 0xffff, 0x6, 0x8, 0x6, 0x5, 0x4c5b, 0xfffffffb, 0xb08b, 0xc0e5, 0xee41, 0x7fff, 0x91, 0x200, 0x5, 0x6, 0xff, 0x1, 0x4, 0x7, 0x80000001, 0x6, 0xee, 0xfff, 0x8001, 0x1, 0x1bb, 0x6, 0x5, 0x8, 0xfffffffc, 0x1000, 0xfffffffd, 0x90, 0x0, 0x8, 0x7fff, 0x81, 0x8, 0x5, 0x7fff, 0xfffffffd, 0x5, 0x4, 0xbe2, 0x3, 0x4, 0x8, 0x2, 0x0, 0x200, 0x0, 0x4, 0x9, 0x8, 0xc, 0x3, 0x2, 0x7, 0x4, 0x0, 0x3, 0x1, 0x8, 0x3, 0x6, 0x4, 0x2, 0x8, 0xc, 0x4, 0x6, 0x7fff, 0x746, 0xe0d, 0x3e, 0xc, 0x0, 0xe, 0xf3c52809, 0x3, 0x62d6275b, 0x4, 0x4c, 0x8000, 0x9, 0x3, 0x2df, 0x9, 0x5, 0x3, 0x3, 0xae8, 0x7, 0x6, 0xe, 0x7f, 0x3, 0x0, 0x0, 0xd8, 0x698f, 0x40000000, 0x4, 0x5, 0x80000000, 0x3, 0x22, 0x9, 0x100, 0x2, 0x0, 0x1, 0x0, 0x780, 0x3, 0x1, 0x0, 0x7, 0x0, 0x2, 0x401, 0x9, 0x30bdb17d, 0x81, 0x28, 0x3, 0x10001, 0x7, 0x101, 0x4, 0x7, 0x7, 0x4, 0x1, 0xe27, 0x2, 0x5, 0x4, 0x3, 0x8, 0x31, 0x0, 0x4b, 0x1000, 0x200, 0x7ff, 0x5, 0x800, 0x5, 0x9, 0x6c33, 0x200, 0xea, 0xb, 0x0, 0xffff, 0x2, 0x401, 0x1, 0xfffffff8, 0x5, 0x5, 0x1, 0x8, 0x0, 0x0, 0xbfe, 0x5, 0x4, 0xb, 0x1d6f4ee5, 0x1, 0x10001, 0x2, 0x5, 0x2, 0x7ff, 0xffffffff, 0x5, 0x2, 0x7, 0x0, 0x200, 0xfffffeff, 0x2, 0x0, 0x7fff, 0xfffffffe, 0x5, 0xe8, 0x7fffffff, 0x2, 0x80000001, 0x101, 0x10, 0x8, 0x8, 0x14, 0x9, 0x2, 0x8000, 0x3, 0x9, 0x21, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x100, 0xffffffffffffffff, 0x3, 0x43f647d8, 0x4, {0x5, 0x0, 0x400, 0x7, 0x5, 0x81}, {0xda, 0x0, 0x3e7, 0x1, 0xfff, 0x5}, 0x4}}]}, @TCA_FW_ACT={0xb4, 0x4, [@m_skbedit={0xb0, 0x13, 0x0, 0x0, {{0xc}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xa, 0x4, 0x5, 0x2, 0x6}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7, 0xf}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x200800}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x6, 0x1, 0x41, 0x50d}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffe0, 0x6}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x8}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}]}, {0x19, 0x6, "ac6941b061252f83f3f36daa737b57d5ceac280b9a"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x2, 0x5}}]}}, @filter_kind_options=@f_route={{0xa}, {0x157c, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x2, 0x6}}, @TCA_ROUTE4_ACT={0x1570, 0x6, [@m_mirred={0xdc, 0x11, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0xd96e, 0x0, 0x8, 0x80000000}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8a90, 0xfffffffd, 0x1, 0x7fffffff, 0x3}, 0x4, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x837, 0x6, 0xfffffffe, 0x5}, 0x4, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x89, 0x367f, 0x7, 0x2ad4, 0x6}, 0x1}}]}, {0x2f, 0x6, "0fe0a5fe7eaf04734727e94782a5cea2d2df6ec5ac50bcac35386ecab5f81f0003168eb41007f6059e68e4"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0xb8, 0x1c, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1a, 0xfffff801, 0x10000000, 0x6, 0x3}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3c1baa9, 0x8, 0x3, 0x0, 0x3000000}, 0x8}}]}, {0x4d, 0x6, "74c0a6d04eb6c4be312d5a0b5aacec78d4c6e5a9c066f9b0c233ce2a0a2b9e0bec4b4f686eda727295f6e3ef7288c15d10dc49961e147ca04f20e673f401f5b91fe44f485b1db82549"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_sample={0x1048, 0x15, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9344}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_mpls={0x120, 0xb, 0x0, 0x0, {{0x9}, {0x5c, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x9ad3b}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x81, 0x1, 0x5, 0x800, 0xa891}, 0x1}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x80, 0x2, 0x10000000, 0x7, 0x401}, 0x4}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x9994a}, @TCA_MPLS_TTL={0x5, 0x7, 0x2}, @TCA_MPLS_TC={0x5, 0x6, 0x4}]}, {0x99, 0x6, "9ba280c49d03722b842c5bca573317dfc92f4aeb22427167fd1c0961ab14f79ccc17ca88ee7eb0b13e382e463459367adb6a287d126561c4ec34819537fcdfb82aace82f99a1c1fd602066caee6646c760dcf769be5e02c2ad76695f6aebe22eff96286d6e756f0699d9b1f744f5958be39895244ee597ff578d321c0959d003e54c1f8cf08e81b8ccdb134bd534dbefd8bf363f56"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0xa8, 0x1d, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}]}, {0x71, 0x6, "ee52fe6bc635fd93a8d06eeebd14b923502c1caed545a0952ebff98f79837337498aa16dfa48301cf179c61aff6d89614ca10cc7af30ca5d36e3dcc4254a55c539824b899b094cad0dbf84d9d54d64720f432d53d3db9b79a000f7bc6c5a00b24261740b03e3af4c768957d537"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_csum={0x5c, 0x5, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x6, 0x10000000, 0x2, 0x2}, 0x5}}]}, {0x14, 0x6, "1faaeef7a9b1af55cf3a1b61ddbd960a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ife={0x84, 0xf, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x3}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, @TCA_IFE_SMAC={0xa, 0x4, @random="02ec57aabd34"}]}, {0x3c, 0x6, "1bef9f5bd3b35fce79cf9c4233f93c4af527604de22292815d0506e84c04d62b313cb350b99ec132e873207473906f94ce74702bc062444b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbmod={0xe8, 0x1e, 0x0, 0x0, {{0xb}, {0x94, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xdc82, 0x2, 0x4, 0x8001, 0x8}, 0x1}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x3, 0x20000000, 0x2, 0x41f}, 0x2}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="484412c92829"}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0xfffffe00, 0x8, 0xe218, 0x3}, 0xa}}]}, {0x2a, 0x6, "ad55f69fbc92c565a50a429ec79ae85c61219f0b31f00ef66e45547dfbb76733178cc4ff78c6"}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xe, 0x24}}]}, 0x2744}}, 0x20040054)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0)
r10 = accept4(r9, 0x0, 0x0, 0x800)
sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)='\x00\x00\x00', 0x3}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)=""/238, 0xee}], 0x1}, 0x40000000)
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x100, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffffe}, @TCA_RATE={0x6, 0x5, {0x3c, 0x3}}]}, 0x48}}, 0x0)
r11 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00'})
socket(0x2, 0x80805, 0x0)
close(0x3)
r12 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x13, r12, 0x0)
r13 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
setsockopt$X25_QBITINCL(r13, 0x106, 0x1, &(0x7f0000000000), 0x4)

kernel console output (not intermixed with test programs):

144.460315][T10165] lo speed is unknown, defaulting to 1000
[  144.688911][T10178] mac80211_hwsim hwsim233 wlan1: entered allmulticast mode
[  144.811124][T10185] tipc: Resetting bearer <ib:wlan0>
[  144.814873][T10184] lo speed is unknown, defaulting to 1000
[  145.271290][T10204] vlan2: left allmulticast mode
[  145.276602][T10204] veth7: left promiscuous mode
[  145.279470][T10208] team0: entered promiscuous mode
[  145.282369][T10208] 8021q: adding VLAN 0 to HW filter on device team0
[  145.360902][T10211] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  145.366601][T10211] syzkaller0: entered promiscuous mode
[  145.369061][T10211] syzkaller0: entered allmulticast mode
[  145.383346][T10211] tipc: Resetting bearer <eth:syzkaller0>
[  145.391365][T10210] tipc: Resetting bearer <eth:syzkaller0>
[  145.403433][T10210] tipc: Disabling bearer <eth:syzkaller0>
[  145.688341][T10220] netlink: 'syz.2.1304': attribute type 11 has an invalid length.
[  146.317596][T10236] __nla_validate_parse: 12 callbacks suppressed
[  146.317606][T10236] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1309'.
[  146.431533][T10246] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1312'.
[  146.435290][T10246] tipc: Resetting bearer <ib:wlan0>
[  146.440054][T10246] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  146.443731][T10246] net_ratelimit: 18 callbacks suppressed
[  146.443738][T10246] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  146.772358][T10260] mac80211_hwsim hwsim233 wlan1: left allmulticast mode
[  146.784809][T10260] validate_nla: 20 callbacks suppressed
[  146.784818][T10260] netlink: 'syz.2.1318': attribute type 10 has an invalid length.
[  146.794884][T10260] mac80211_hwsim hwsim233 wlan1: entered allmulticast mode
[  146.885604][T10265] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1320'.
[  147.274877][T10273] netlink: 'syz.1.1323': attribute type 8 has an invalid length.
[  147.448272][T10285] tipc: Resetting bearer <eth:team0>
[  147.450291][T10285] team0: left promiscuous mode
[  147.457323][T10285] veth5: left promiscuous mode
[  147.464204][T10285] veth7: left promiscuous mode
[  147.483400][T10285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1326'.
[  147.622467][T10296] netlink: 'syz.1.1330': attribute type 10 has an invalid length.
[  147.631246][T10296] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  147.635502][T10296] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  147.642999][T10298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1331'.
[  147.749112][T10300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1332'.
[  147.793425][T10302] netlink: 'syz.0.1333': attribute type 6 has an invalid length.
[  147.797948][T10302] netlink: 'syz.0.1333': attribute type 12 has an invalid length.
[  147.800932][T10302] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.1333'.
[  147.901113][T10312] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1336'.
[  147.908632][T10312] vlan0: left promiscuous mode
[  147.911117][T10312] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  147.917886][T10312] mac80211_hwsim hwsim233 wlan1: left allmulticast mode
[  147.931586][T10312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1336'.
[  147.934232][T10314] bond4: (slave macvlan2): Error -22 calling dev_set_mtu
[  147.999915][T10318] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  148.003364][T10318] CPU: 0 UID: 0 PID: 10318 Comm: syz.2.1340 Not tainted syzkaller #0 PREEMPT(full) 
[  148.003380][T10318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  148.003388][T10318] Call Trace:
[  148.003394][T10318]  <TASK>
[  148.003400][T10318]  dump_stack_lvl+0x189/0x250
[  148.003441][T10318]  ? __pfx_dump_stack_lvl+0x10/0x10
[  148.003458][T10318]  ? __pfx__printk+0x10/0x10
[  148.003480][T10318]  ? kernfs_path_from_node+0x2f/0x290
[  148.003494][T10318]  ? kernfs_path_from_node+0x250/0x290
[  148.003506][T10318]  ? kernfs_path_from_node+0x2f/0x290
[  148.003522][T10318]  sysfs_warn_dup+0x8e/0xa0
[  148.003535][T10318]  sysfs_do_create_link_sd+0xc0/0x110
[  148.003551][T10318]  device_add_class_symlinks+0x1cf/0x240
[  148.003568][T10318]  device_add+0x475/0xb50
[  148.003585][T10318]  wiphy_register+0x1ba6/0x28d0
[  148.003616][T10318]  ? __pfx_wiphy_register+0x10/0x10
[  148.003633][T10318]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  148.003654][T10318]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  148.003672][T10318]  ieee80211_register_hw+0x3425/0x4080
[  148.003700][T10318]  ? ieee80211_register_hw+0x1461/0x4080
[  148.003720][T10318]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  148.003737][T10318]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  148.003760][T10318]  ? __hrtimer_setup+0x187/0x210
[  148.003771][T10318]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  148.003791][T10318]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  148.003830][T10318]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  148.003845][T10318]  ? trace_kmalloc+0x1f/0xd0
[  148.003858][T10318]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  148.003875][T10318]  ? kstrndup+0xbf/0x160
[  148.003896][T10318]  hwsim_new_radio_nl+0xea4/0x1b10
[  148.003914][T10318]  ? __pfx___nla_validate_parse+0x10/0x10
[  148.003943][T10318]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  148.003994][T10318]  ? __nla_parse+0x40/0x60
[  148.004023][T10318]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  148.004045][T10318]  genl_family_rcv_msg_doit+0x215/0x300
[  148.004067][T10318]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  148.004093][T10318]  ? bpf_lsm_capable+0x9/0x20
[  148.004111][T10318]  ? security_capable+0x7e/0x2e0
[  148.004135][T10318]  genl_rcv_msg+0x60e/0x790
[  148.004156][T10318]  ? __pfx_genl_rcv_msg+0x10/0x10
[  148.004170][T10318]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  148.004198][T10318]  netlink_rcv_skb+0x208/0x470
[  148.004216][T10318]  ? __lock_acquire+0xab9/0xd20
[  148.004234][T10318]  ? __pfx_genl_rcv_msg+0x10/0x10
[  148.004250][T10318]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  148.004283][T10318]  ? down_read+0x1ad/0x2e0
[  148.004297][T10318]  genl_rcv+0x28/0x40
[  148.004310][T10318]  netlink_unicast+0x82f/0x9e0
[  148.004335][T10318]  ? __pfx_netlink_unicast+0x10/0x10
[  148.004353][T10318]  ? netlink_sendmsg+0x642/0xb30
[  148.004363][T10318]  ? skb_put+0x11b/0x210
[  148.004378][T10318]  netlink_sendmsg+0x805/0xb30
[  148.004398][T10318]  ? __pfx_netlink_sendmsg+0x10/0x10
[  148.004412][T10318]  ? aa_sock_msg_perm+0xf1/0x1d0
[  148.004425][T10318]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  148.004438][T10318]  ? __pfx_netlink_sendmsg+0x10/0x10
[  148.004450][T10318]  __sock_sendmsg+0x21c/0x270
[  148.004469][T10318]  ____sys_sendmsg+0x505/0x830
[  148.004487][T10318]  ? __pfx_____sys_sendmsg+0x10/0x10
[  148.004508][T10318]  ? import_iovec+0x74/0xa0
[  148.004526][T10318]  ___sys_sendmsg+0x21f/0x2a0
[  148.004541][T10318]  ? __pfx____sys_sendmsg+0x10/0x10
[  148.004584][T10318]  ? __fget_files+0x2a/0x420
[  148.004594][T10318]  ? __fget_files+0x3a0/0x420
[  148.004614][T10318]  __x64_sys_sendmsg+0x19b/0x260
[  148.004629][T10318]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  148.004651][T10318]  ? rcu_is_watching+0x15/0xb0
[  148.004668][T10318]  ? do_syscall_64+0xbe/0x3b0
[  148.004682][T10318]  do_syscall_64+0xfa/0x3b0
[  148.004692][T10318]  ? lockdep_hardirqs_on+0x9c/0x150
[  148.004709][T10318]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.004721][T10318]  ? exc_page_fault+0x9f/0xf0
[  148.004739][T10318]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.004751][T10318] RIP: 0033:0x7fa45498ebe9
[  148.004762][T10318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  148.004773][T10318] RSP: 002b:00007fa4557b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  148.004787][T10318] RAX: ffffffffffffffda RBX: 00007fa454bc5fa0 RCX: 00007fa45498ebe9
[  148.004795][T10318] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  148.004803][T10318] RBP: 00007fa454a11e19 R08: 0000000000000000 R09: 0000000000000000
[  148.004810][T10318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  148.004817][T10318] R13: 00007fa454bc6038 R14: 00007fa454bc5fa0 R15: 00007fff0f825118
[  148.004839][T10318]  </TASK>
[  148.184855][T10320] lo speed is unknown, defaulting to 1000
[  148.241773][T10326] netlink: 'syz.2.1343': attribute type 9 has an invalid length.
[  148.245125][T10326] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1343'.
[  148.486641][T10344] bond0: (slave macvlan5): Error -22 calling dev_set_mtu
[  148.594455][T10349] netlink: 'syz.1.1349': attribute type 1 has an invalid length.
[  148.837902][T10361] netlink: 'syz.0.1351': attribute type 6 has an invalid length.
[  149.701931][T10382] lo speed is unknown, defaulting to 1000
[  149.720016][T10385] netlink: 'syz.2.1356': attribute type 10 has an invalid length.
[  149.779118][T10390] netlink: 'syz.0.1359': attribute type 2 has an invalid length.
[  149.805295][T10391] team0: Unable to change to the same mode the team is in
[  149.811827][T10391] vlan0: entered promiscuous mode
[  149.958497][T10397] dvmrp1: tun_chr_ioctl cmd 1074025677
[  149.960815][T10397] dvmrp1: linktype set to 805
[  150.730356][T10410] lo speed is unknown, defaulting to 1000
[  151.278101][T10438] 8021q: adding VLAN 0 to HW filter on device bond11
[  151.305174][T10438] bond11: (slave wlan0): Opening slave failed
[  151.322315][T10442] lo speed is unknown, defaulting to 1000
[  151.519796][T10454] bond0: (slave macvlan5): Error -22 calling dev_set_mtu
[  151.532467][T10446] lo speed is unknown, defaulting to 1000
[  151.633767][T10442] __nla_validate_parse: 12 callbacks suppressed
[  151.633782][T10442] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1377'.
[  151.781978][T10461] mac80211_hwsim hwsim241 wlan1: entered promiscuous mode
[  151.912455][T10476] netlink: 'syz.0.1386': attribute type 11 has an invalid length.
[  152.022325][T10480] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  152.027684][T10480] CPU: 0 UID: 0 PID: 10480 Comm: syz.1.1389 Not tainted syzkaller #0 PREEMPT(full) 
[  152.027702][T10480] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  152.027709][T10480] Call Trace:
[  152.027714][T10480]  <TASK>
[  152.027720][T10480]  dump_stack_lvl+0x189/0x250
[  152.027743][T10480]  ? __pfx_dump_stack_lvl+0x10/0x10
[  152.027766][T10480]  ? __pfx__printk+0x10/0x10
[  152.027787][T10480]  ? kernfs_path_from_node+0x2f/0x290
[  152.027800][T10480]  ? kernfs_path_from_node+0x250/0x290
[  152.027812][T10480]  ? kernfs_path_from_node+0x2f/0x290
[  152.027827][T10480]  sysfs_warn_dup+0x8e/0xa0
[  152.027840][T10480]  sysfs_do_create_link_sd+0xc0/0x110
[  152.027854][T10480]  device_add_class_symlinks+0x1cf/0x240
[  152.027869][T10480]  device_add+0x475/0xb50
[  152.027885][T10480]  wiphy_register+0x1ba6/0x28d0
[  152.027938][T10480]  ? __pfx_wiphy_register+0x10/0x10
[  152.027956][T10480]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  152.027976][T10480]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  152.027993][T10480]  ieee80211_register_hw+0x3425/0x4080
[  152.028019][T10480]  ? ieee80211_register_hw+0x1461/0x4080
[  152.028038][T10480]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  152.028054][T10480]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  152.028075][T10480]  ? __hrtimer_setup+0x187/0x210
[  152.028106][T10480]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  152.028125][T10480]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  152.028162][T10480]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  152.028177][T10480]  ? trace_kmalloc+0x1f/0xd0
[  152.028190][T10480]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  152.028206][T10480]  ? kstrndup+0xbf/0x160
[  152.028225][T10480]  hwsim_new_radio_nl+0xea4/0x1b10
[  152.028240][T10480]  ? __pfx___nla_validate_parse+0x10/0x10
[  152.028265][T10480]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  152.028288][T10480]  ? __nla_parse+0x40/0x60
[  152.028306][T10480]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  152.028324][T10480]  genl_family_rcv_msg_doit+0x215/0x300
[  152.028342][T10480]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  152.028365][T10480]  ? bpf_lsm_capable+0x9/0x20
[  152.028379][T10480]  ? security_capable+0x7e/0x2e0
[  152.028399][T10480]  genl_rcv_msg+0x60e/0x790
[  152.028418][T10480]  ? __pfx_genl_rcv_msg+0x10/0x10
[  152.028432][T10480]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  152.028457][T10480]  netlink_rcv_skb+0x208/0x470
[  152.028473][T10480]  ? __lock_acquire+0xab9/0xd20
[  152.028491][T10480]  ? __pfx_genl_rcv_msg+0x10/0x10
[  152.028506][T10480]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  152.028539][T10480]  ? down_read+0x1ad/0x2e0
[  152.028553][T10480]  genl_rcv+0x28/0x40
[  152.028566][T10480]  netlink_unicast+0x82f/0x9e0
[  152.028589][T10480]  ? __pfx_netlink_unicast+0x10/0x10
[  152.028606][T10480]  ? netlink_sendmsg+0x642/0xb30
[  152.028615][T10480]  ? skb_put+0x11b/0x210
[  152.028628][T10480]  netlink_sendmsg+0x805/0xb30
[  152.028645][T10480]  ? __pfx_netlink_sendmsg+0x10/0x10
[  152.028659][T10480]  ? aa_sock_msg_perm+0xf1/0x1d0
[  152.028673][T10480]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  152.028684][T10480]  ? __pfx_netlink_sendmsg+0x10/0x10
[  152.028695][T10480]  __sock_sendmsg+0x21c/0x270
[  152.028714][T10480]  ____sys_sendmsg+0x505/0x830
[  152.028731][T10480]  ? __pfx_____sys_sendmsg+0x10/0x10
[  152.028758][T10480]  ? import_iovec+0x74/0xa0
[  152.028776][T10480]  ___sys_sendmsg+0x21f/0x2a0
[  152.028791][T10480]  ? __pfx____sys_sendmsg+0x10/0x10
[  152.028828][T10480]  ? __fget_files+0x2a/0x420
[  152.028841][T10480]  ? __fget_files+0x3a0/0x420
[  152.028859][T10480]  __x64_sys_sendmsg+0x19b/0x260
[  152.028874][T10480]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  152.028894][T10480]  ? rcu_is_watching+0x15/0xb0
[  152.028910][T10480]  ? do_syscall_64+0xbe/0x3b0
[  152.028952][T10480]  do_syscall_64+0xfa/0x3b0
[  152.028962][T10480]  ? lockdep_hardirqs_on+0x9c/0x150
[  152.028978][T10480]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.028990][T10480]  ? exc_page_fault+0x9f/0xf0
[  152.029006][T10480]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.029019][T10480] RIP: 0033:0x7f8c2618ebe9
[  152.029029][T10480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  152.029040][T10480] RSP: 002b:00007f8c26fda038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  152.029052][T10480] RAX: ffffffffffffffda RBX: 00007f8c263c5fa0 RCX: 00007f8c2618ebe9
[  152.029059][T10480] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000009
[  152.029068][T10480] RBP: 00007f8c26211e19 R08: 0000000000000000 R09: 0000000000000000
[  152.029074][T10480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  152.029080][T10480] R13: 00007f8c263c6038 R14: 00007f8c263c5fa0 R15: 00007ffd797e15a8
[  152.029100][T10480]  </TASK>
[  152.281702][T10485] validate_nla: 6 callbacks suppressed
[  152.281716][T10485] netlink: 'syz.1.1391': attribute type 1 has an invalid length.
[  152.286546][T10485] netlink: 'syz.1.1391': attribute type 1 has an invalid length.
[  152.317742][T10486] netlink: 'syz.0.1390': attribute type 1 has an invalid length.
[  152.325429][T10486] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  152.377720][T10485] netlink: 'syz.1.1391': attribute type 1 has an invalid length.
[  152.416014][T10485] 8021q: adding VLAN 0 to HW filter on device bond12
[  152.421800][T10497] netlink: 'syz.0.1394': attribute type 1 has an invalid length.
[  152.422102][T10485] bond12: (slave wlan0): Opening slave failed
[  152.475230][T10497] veth9: entered promiscuous mode
[  152.577789][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.580019][T10508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1397'.
[  152.584620][T10508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1397'.
[  152.588469][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.604998][T10508] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1397'.
[  152.620287][T10510] netlink: 'syz.0.1399': attribute type 1 has an invalid length.
[  152.623736][T10510] netlink: 'syz.0.1399': attribute type 1 has an invalid length.
[  152.690804][T10510] netlink: 'syz.0.1399': attribute type 1 has an invalid length.
[  152.705902][T10510] 8021q: adding VLAN 0 to HW filter on device bond9
[  152.913102][T10523] lo speed is unknown, defaulting to 1000
[  153.037318][T10523] netlink: 'syz.0.1404': attribute type 2 has an invalid length.
[  153.040975][T10523] netlink: 129528 bytes leftover after parsing attributes in process `syz.0.1404'.
[  153.046977][T10523] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1404'.
[  153.050866][T10523] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1404'.
[  153.138768][T10527] netlink: 'syz.0.1405': attribute type 12 has an invalid length.
[  153.300135][T10531] sctp: [Deprecated]: syz.0.1407 (pid 10531) Use of int in maxseg socket option.
[  153.300135][T10531] Use struct sctp_assoc_value instead
[  153.527570][T10549] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1413'.
[  153.680358][T10559] tipc: Resetting bearer <ib:wlan0>
[  153.961696][T10579] vlan0: left promiscuous mode
[  153.994644][T10579] mac80211_hwsim hwsim241 wlan1: left promiscuous mode
[  154.033977][T10569] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.1422'.
[  154.093676][T10582] lo speed is unknown, defaulting to 1000
[  154.099109][T10582] lo speed is unknown, defaulting to 1000
[  154.102057][T10582] lo speed is unknown, defaulting to 1000
[  154.128743][T10582] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  154.147253][T10582] lo speed is unknown, defaulting to 1000
[  154.151194][T10582] lo speed is unknown, defaulting to 1000
[  154.154793][T10582] lo speed is unknown, defaulting to 1000
[  154.226717][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1429'.
[  154.318634][T10607] lo speed is unknown, defaulting to 1000
[  154.321315][T10607] lo speed is unknown, defaulting to 1000
[  154.409603][T10614] syzkaller0: entered promiscuous mode
[  154.411622][T10614] syzkaller0: entered allmulticast mode
[  154.458791][T10619] team0: Unable to change to the same mode the team is in
[  154.462350][T10619] vlan0: entered promiscuous mode
[  154.465332][T10619] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  154.751123][T10650] mac80211_hwsim hwsim244 wlan1: entered allmulticast mode
[  155.057798][T10676] mac80211_hwsim hwsim244 wlan1: left allmulticast mode
[  155.112625][T10678] bond4: (slave macvlan3): Error -22 calling dev_set_mtu
[  155.190714][T10680] erspan1: entered promiscuous mode
[  155.263582][T10682] tipc: Enabled bearer <ib:wlan0>, priority 10
[  155.425552][T10691] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  155.430336][T10691] CPU: 0 UID: 0 PID: 10691 Comm: syz.0.1458 Not tainted syzkaller #0 PREEMPT(full) 
[  155.430347][T10691] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  155.430351][T10691] Call Trace:
[  155.430355][T10691]  <TASK>
[  155.430358][T10691]  dump_stack_lvl+0x189/0x250
[  155.430372][T10691]  ? __pfx_dump_stack_lvl+0x10/0x10
[  155.430381][T10691]  ? __pfx__printk+0x10/0x10
[  155.430393][T10691]  ? kernfs_path_from_node+0x2f/0x290
[  155.430400][T10691]  ? kernfs_path_from_node+0x250/0x290
[  155.430407][T10691]  ? kernfs_path_from_node+0x2f/0x290
[  155.430416][T10691]  sysfs_warn_dup+0x8e/0xa0
[  155.430423][T10691]  sysfs_do_create_link_sd+0xc0/0x110
[  155.430431][T10691]  device_add_class_symlinks+0x1cf/0x240
[  155.430440][T10691]  device_add+0x475/0xb50
[  155.430449][T10691]  wiphy_register+0x1ba6/0x28d0
[  155.430466][T10691]  ? __pfx_wiphy_register+0x10/0x10
[  155.430475][T10691]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  155.430486][T10691]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  155.430496][T10691]  ieee80211_register_hw+0x3425/0x4080
[  155.430510][T10691]  ? ieee80211_register_hw+0x1461/0x4080
[  155.430521][T10691]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  155.430531][T10691]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  155.430543][T10691]  ? __hrtimer_setup+0x187/0x210
[  155.430550][T10691]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  155.430561][T10691]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  155.430581][T10691]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  155.430589][T10691]  ? trace_kmalloc+0x1f/0xd0
[  155.430598][T10691]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  155.430606][T10691]  ? kstrndup+0xbf/0x160
[  155.430618][T10691]  hwsim_new_radio_nl+0xea4/0x1b10
[  155.430628][T10691]  ? __pfx___nla_validate_parse+0x10/0x10
[  155.430644][T10691]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  155.430658][T10691]  ? __nla_parse+0x40/0x60
[  155.430670][T10691]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  155.430682][T10691]  genl_family_rcv_msg_doit+0x215/0x300
[  155.430692][T10691]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  155.430706][T10691]  ? bpf_lsm_capable+0x9/0x20
[  155.430714][T10691]  ? security_capable+0x7e/0x2e0
[  155.430727][T10691]  genl_rcv_msg+0x60e/0x790
[  155.430737][T10691]  ? __pfx_genl_rcv_msg+0x10/0x10
[  155.430749][T10691]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  155.430763][T10691]  netlink_rcv_skb+0x208/0x470
[  155.430773][T10691]  ? __lock_acquire+0xab9/0xd20
[  155.430783][T10691]  ? __pfx_genl_rcv_msg+0x10/0x10
[  155.430791][T10691]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  155.430808][T10691]  ? down_read+0x1ad/0x2e0
[  155.430816][T10691]  genl_rcv+0x28/0x40
[  155.430823][T10691]  netlink_unicast+0x82f/0x9e0
[  155.430836][T10691]  ? __pfx_netlink_unicast+0x10/0x10
[  155.430845][T10691]  ? netlink_sendmsg+0x642/0xb30
[  155.430851][T10691]  ? skb_put+0x11b/0x210
[  155.430859][T10691]  netlink_sendmsg+0x805/0xb30
[  155.430869][T10691]  ? __pfx_netlink_sendmsg+0x10/0x10
[  155.430898][T10691]  ? aa_sock_msg_perm+0xf1/0x1d0
[  155.430907][T10691]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  155.430914][T10691]  ? __pfx_netlink_sendmsg+0x10/0x10
[  155.430926][T10691]  __sock_sendmsg+0x21c/0x270
[  155.430937][T10691]  ____sys_sendmsg+0x505/0x830
[  155.430947][T10691]  ? __pfx_____sys_sendmsg+0x10/0x10
[  155.430958][T10691]  ? import_iovec+0x74/0xa0
[  155.430967][T10691]  ___sys_sendmsg+0x21f/0x2a0
[  155.430976][T10691]  ? __pfx____sys_sendmsg+0x10/0x10
[  155.430998][T10691]  ? __fget_files+0x2a/0x420
[  155.431003][T10691]  ? __fget_files+0x3a0/0x420
[  155.431013][T10691]  __x64_sys_sendmsg+0x19b/0x260
[  155.431022][T10691]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  155.431033][T10691]  ? rcu_is_watching+0x15/0xb0
[  155.431043][T10691]  ? do_syscall_64+0xbe/0x3b0
[  155.431051][T10691]  do_syscall_64+0xfa/0x3b0
[  155.431057][T10691]  ? lockdep_hardirqs_on+0x9c/0x150
[  155.431066][T10691]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.431072][T10691]  ? exc_page_fault+0x9f/0xf0
[  155.431082][T10691]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.431089][T10691] RIP: 0033:0x7fc2ed38ebe9
[  155.431096][T10691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  155.431102][T10691] RSP: 002b:00007fc2ee125038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  155.431110][T10691] RAX: ffffffffffffffda RBX: 00007fc2ed5c5fa0 RCX: 00007fc2ed38ebe9
[  155.431115][T10691] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005
[  155.431120][T10691] RBP: 00007fc2ed411e19 R08: 0000000000000000 R09: 0000000000000000
[  155.431124][T10691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  155.431128][T10691] R13: 00007fc2ed5c6038 R14: 00007fc2ed5c5fa0 R15: 00007ffc02534508
[  155.431139][T10691]  </TASK>
[  155.708967][T10700] bond4: (slave macvlan3): Error -22 calling dev_set_mtu
[  155.930986][T10713] 8021q: adding VLAN 0 to HW filter on device bond7
[  155.947282][T10713] veth5: entered promiscuous mode
[  155.952272][T10713] bond7: (slave veth5): Enslaving as a backup interface with a down link
[  155.970704][T10716] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  155.976656][T10716] CPU: 1 UID: 0 PID: 10716 Comm: syz.0.1467 Not tainted syzkaller #0 PREEMPT(full) 
[  155.976671][T10716] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  155.976679][T10716] Call Trace:
[  155.976684][T10716]  <TASK>
[  155.976689][T10716]  dump_stack_lvl+0x189/0x250
[  155.976708][T10716]  ? __pfx_dump_stack_lvl+0x10/0x10
[  155.976721][T10716]  ? __pfx__printk+0x10/0x10
[  155.976737][T10716]  ? kernfs_path_from_node+0x2f/0x290
[  155.976745][T10716]  ? kernfs_path_from_node+0x250/0x290
[  155.976752][T10716]  ? kernfs_path_from_node+0x2f/0x290
[  155.976760][T10716]  sysfs_warn_dup+0x8e/0xa0
[  155.976768][T10716]  sysfs_do_create_link_sd+0xc0/0x110
[  155.976777][T10716]  device_add_class_symlinks+0x1cf/0x240
[  155.976787][T10716]  device_add+0x475/0xb50
[  155.976796][T10716]  wiphy_register+0x1ba6/0x28d0
[  155.976813][T10716]  ? __pfx_wiphy_register+0x10/0x10
[  155.976823][T10716]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  155.976834][T10716]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  155.976843][T10716]  ieee80211_register_hw+0x3425/0x4080
[  155.976858][T10716]  ? ieee80211_register_hw+0x1461/0x4080
[  155.976890][T10716]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  155.976902][T10716]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  155.976920][T10716]  ? __hrtimer_setup+0x187/0x210
[  155.976927][T10716]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  155.976938][T10716]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  155.976959][T10716]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  155.976967][T10716]  ? trace_kmalloc+0x1f/0xd0
[  155.976976][T10716]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  155.976985][T10716]  ? kstrndup+0xbf/0x160
[  155.976997][T10716]  hwsim_new_radio_nl+0xea4/0x1b10
[  155.977007][T10716]  ? __pfx___nla_validate_parse+0x10/0x10
[  155.977022][T10716]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  155.977036][T10716]  ? __nla_parse+0x40/0x60
[  155.977048][T10716]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  155.977067][T10716]  genl_family_rcv_msg_doit+0x215/0x300
[  155.977083][T10716]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  155.977105][T10716]  ? bpf_lsm_capable+0x9/0x20
[  155.977119][T10716]  ? security_capable+0x7e/0x2e0
[  155.977141][T10716]  genl_rcv_msg+0x60e/0x790
[  155.977155][T10716]  ? __pfx_genl_rcv_msg+0x10/0x10
[  155.977163][T10716]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  155.977177][T10716]  netlink_rcv_skb+0x208/0x470
[  155.977187][T10716]  ? __lock_acquire+0xab9/0xd20
[  155.977197][T10716]  ? __pfx_genl_rcv_msg+0x10/0x10
[  155.977205][T10716]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  155.977222][T10716]  ? down_read+0x1ad/0x2e0
[  155.977230][T10716]  genl_rcv+0x28/0x40
[  155.977237][T10716]  netlink_unicast+0x82f/0x9e0
[  155.977250][T10716]  ? __pfx_netlink_unicast+0x10/0x10
[  155.977260][T10716]  ? netlink_sendmsg+0x642/0xb30
[  155.977265][T10716]  ? skb_put+0x11b/0x210
[  155.977274][T10716]  netlink_sendmsg+0x805/0xb30
[  155.977284][T10716]  ? __pfx_netlink_sendmsg+0x10/0x10
[  155.977291][T10716]  ? aa_sock_msg_perm+0xf1/0x1d0
[  155.977299][T10716]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  155.977306][T10716]  ? __pfx_netlink_sendmsg+0x10/0x10
[  155.977313][T10716]  __sock_sendmsg+0x21c/0x270
[  155.977323][T10716]  ____sys_sendmsg+0x505/0x830
[  155.977333][T10716]  ? __pfx_____sys_sendmsg+0x10/0x10
[  155.977344][T10716]  ? import_iovec+0x74/0xa0
[  155.977355][T10716]  ___sys_sendmsg+0x21f/0x2a0
[  155.977363][T10716]  ? __pfx____sys_sendmsg+0x10/0x10
[  155.977385][T10716]  ? __fget_files+0x2a/0x420
[  155.977391][T10716]  ? __fget_files+0x3a0/0x420
[  155.977406][T10716]  __x64_sys_sendmsg+0x19b/0x260
[  155.977419][T10716]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  155.977438][T10716]  ? rcu_is_watching+0x15/0xb0
[  155.977451][T10716]  ? do_syscall_64+0xbe/0x3b0
[  155.977463][T10716]  do_syscall_64+0xfa/0x3b0
[  155.977470][T10716]  ? lockdep_hardirqs_on+0x9c/0x150
[  155.977483][T10716]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.977492][T10716]  ? exc_page_fault+0x9f/0xf0
[  155.977506][T10716]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.977515][T10716] RIP: 0033:0x7fc2ed38ebe9
[  155.977525][T10716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  155.977534][T10716] RSP: 002b:00007fc2ee125038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  155.977547][T10716] RAX: ffffffffffffffda RBX: 00007fc2ed5c5fa0 RCX: 00007fc2ed38ebe9
[  155.977555][T10716] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  155.977561][T10716] RBP: 00007fc2ed411e19 R08: 0000000000000000 R09: 0000000000000000
[  155.977568][T10716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  155.977573][T10716] R13: 00007fc2ed5c6038 R14: 00007fc2ed5c5fa0 R15: 00007ffc02534508
[  155.977590][T10716]  </TASK>
[  156.238119][T10724] lo speed is unknown, defaulting to 1000
[  156.240839][T10724] lo speed is unknown, defaulting to 1000
[  156.511091][T10751] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  156.560365][T10753] openvswitch: netlink: Flow key attr not present in new flow.
[  156.578590][T10753] 8021q: adding VLAN 0 to HW filter on device bond13
[  156.603998][T10753] veth9: entered promiscuous mode
[  156.609355][T10753] bond13: (slave veth9): Enslaving as a backup interface with a down link
[  156.616763][T10753] bond13: (slave veth9): Releasing backup interface
[  156.662475][T10759] __nla_validate_parse: 17 callbacks suppressed
[  156.662496][T10759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1481'.
[  156.729604][T10765] 8021q: adding VLAN 0 to HW filter on device bond0
[  156.742433][T10765] bond0: (slave macvlan5): Opening slave failed
[  156.891053][T10779] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1487'.
[  156.972569][T10786] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  157.008420][T10795] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  157.131235][T10811] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1498'.
[  157.213678][T10817] bond0: (slave macvlan5): Error -22 calling dev_set_mtu
[  157.358653][T10815] validate_nla: 15 callbacks suppressed
[  157.358669][T10815] netlink: 'syz.0.1500': attribute type 1 has an invalid length.
[  157.392262][T10815] 8021q: adding VLAN 0 to HW filter on device bond10
[  157.395197][T10826] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1504'.
[  157.400281][T10826] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1504'.
[  157.493574][T10830] lo speed is unknown, defaulting to 1000
[  157.499893][T10830] lo speed is unknown, defaulting to 1000
[  157.754468][T10862] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1512'.
[  157.783947][T10862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1512'.
[  157.876329][T10866] lo speed is unknown, defaulting to 1000
[  157.880211][T10866] lo speed is unknown, defaulting to 1000
[  158.350256][T10896] netlink: 'syz.1.1523': attribute type 12 has an invalid length.
[  158.400426][T10899] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1524'.
[  158.514778][T10906] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1527'.
[  158.556966][T10909] bond0: (slave macvlan5): Error -22 calling dev_set_mtu
[  158.578879][T10913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1531'.
[  158.595522][T10911] netlink: 'syz.0.1529': attribute type 12 has an invalid length.
[  158.662518][T10920] netlink: 'syz.1.1533': attribute type 1 has an invalid length.
[  158.668369][T10917] lo speed is unknown, defaulting to 1000
[  158.669456][T10920] netlink: 'syz.1.1533': attribute type 1 has an invalid length.
[  158.674236][T10921] netlink: 'syz.1.1533': attribute type 1 has an invalid length.
[  158.684339][T10921] netlink: 'syz.1.1533': attribute type 1 has an invalid length.
[  158.685469][T10917] lo speed is unknown, defaulting to 1000
[  158.717983][T10919] syz.1.1533 (10919) used obsolete PPPIOCDETACH ioctl
[  158.747789][T10920] vlan3: entered allmulticast mode
[  158.762768][T10919] vlan3: entered allmulticast mode
[  158.844616][T10917] netlink: 'syz.2.1532': attribute type 2 has an invalid length.
[  159.102907][T10948] 8021q: adding VLAN 0 to HW filter on device bond1
[  159.125956][T10948] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  159.130573][T10948] bond1: (slave macvlan5): Enslaving as a backup interface with a down link
[  159.144672][T10948] bond7: (slave veth5): Releasing backup interface
[  159.149622][T10948] bond1: (slave macvlan5): Releasing backup interface
[  159.194943][T10952] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 3, id = 0
[  159.240400][T10954] netlink: 'syz.2.1538': attribute type 6 has an invalid length.
[  159.261195][T10956] netlink: 'syz.2.1538': attribute type 12 has an invalid length.
[  159.424045][T10978] netlink: 'syz.0.1547': attribute type 11 has an invalid length.
[  159.458566][T10980] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  159.476420][T10981] veth9: left promiscuous mode
[  159.483970][T10980] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  159.487916][T10980] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  159.510566][T10981] bond0: (slave ip6gretap3): Enslaving as a backup interface with an up link
[  159.541684][T10987] mac80211_hwsim hwsim244 wlan1: entered allmulticast mode
[  159.928564][T11007] netlink: 'syz.0.1557': attribute type 11 has an invalid length.
[  160.239043][T11018] mac80211_hwsim hwsim244 wlan1: left allmulticast mode
[  160.243582][T11018] erspan1: left promiscuous mode
[  160.596488][T11042] lo speed is unknown, defaulting to 1000
[  160.599311][T11042] lo speed is unknown, defaulting to 1000
[  161.681297][T11090] __nla_validate_parse: 11 callbacks suppressed
[  161.681308][T11090] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1586'.
[  161.969753][T11109] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1591'.
[  161.973853][T11109] 8021q: VLANs not supported on caif0
[  161.979927][T11109] 8021q: adding VLAN 0 to HW filter on device bond11
[  162.620154][T11123] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1596'.
[  162.711441][T11129] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1598'.
[  162.812491][T11137] validate_nla: 7 callbacks suppressed
[  162.812504][T11137] netlink: 'syz.2.1599': attribute type 10 has an invalid length.
[  162.903023][T11139] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1601'.
[  162.955316][T11149] netlink: 'syz.2.1603': attribute type 1 has an invalid length.
[  162.968396][T11149] 8021q: adding VLAN 0 to HW filter on device bond8
[  162.979295][T11149] tipc: Resetting bearer <ib:wlan0>
[  162.981202][T11149] tipc: Resetting bearer <ib:wlan0>
[  162.983277][T11149] bond8: (slave wlan0): Opening slave failed
[  162.985510][T11149] tipc: Resetting bearer <ib:wlan0>
[  162.988408][T11149] tipc: Resetting bearer <ib:wlan0>
[  162.997564][T11149] vlan2: entered allmulticast mode
[  163.000134][T11149] bond8: (slave vlan2): Opening slave failed
[  163.073260][T11159] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1606'.
[  163.164436][T11164] netlink: 'syz.2.1607': attribute type 1 has an invalid length.
[  163.210341][T11164] bond9: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  163.215164][ T8541] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  163.225587][T11164] 8021q: adding VLAN 0 to HW filter on device bond9
[  163.231984][T11169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1609'.
[  163.265546][T11164] veth7: entered promiscuous mode
[  163.270677][T11164] bond9: (slave veth7): Enslaving as a backup interface with a down link
[  163.287328][T11171] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.1611'.
[  163.288585][T11164] bond9: (slave ip6gretap2): Removing an active aggregator
[  163.291170][T11171] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  163.294938][T11164] bond9: (slave ip6gretap2): Releasing backup interface
[  163.300204][T11164] bond9: (slave ip6gretap2): the permanent HWaddr of slave - 62:04:cd:46:1f:5a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  163.308401][T11171] openvswitch: netlink: Duplicate key (type 0).
[  163.319201][T11164] bond9: (slave veth7): Releasing backup interface
[  163.333085][T11173] pimreg: entered allmulticast mode
[  163.336952][T11173] syz_tun: left allmulticast mode
[  163.339386][T11173] pimreg: left allmulticast mode
[  163.496168][T11178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1613'.
[  163.903166][T11186] netlink: 211576 bytes leftover after parsing attributes in process `syz.2.1617'.
[  163.909384][T11187] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  163.978722][T11191] can: request_module (can-proto-0) failed.
[  163.982493][T11191] openvswitch: netlink: IP tunnel dst address not specified
[  164.056569][T11196] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  164.060959][T11196] CPU: 1 UID: 0 PID: 11196 Comm: syz.2.1620 Not tainted syzkaller #0 PREEMPT(full) 
[  164.060975][T11196] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  164.060982][T11196] Call Trace:
[  164.060987][T11196]  <TASK>
[  164.060993][T11196]  dump_stack_lvl+0x189/0x250
[  164.061013][T11196]  ? __pfx_dump_stack_lvl+0x10/0x10
[  164.061025][T11196]  ? __pfx__printk+0x10/0x10
[  164.061045][T11196]  ? kernfs_path_from_node+0x2f/0x290
[  164.061057][T11196]  ? kernfs_path_from_node+0x250/0x290
[  164.061067][T11196]  ? kernfs_path_from_node+0x2f/0x290
[  164.061080][T11196]  sysfs_warn_dup+0x8e/0xa0
[  164.061091][T11196]  sysfs_do_create_link_sd+0xc0/0x110
[  164.061102][T11196]  device_add_class_symlinks+0x1cf/0x240
[  164.061117][T11196]  device_add+0x475/0xb50
[  164.061130][T11196]  wiphy_register+0x1ba6/0x28d0
[  164.061159][T11196]  ? __pfx_wiphy_register+0x10/0x10
[  164.061171][T11196]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  164.061187][T11196]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  164.061201][T11196]  ieee80211_register_hw+0x3425/0x4080
[  164.061224][T11196]  ? ieee80211_register_hw+0x1461/0x4080
[  164.061263][T11196]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  164.061280][T11196]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  164.061300][T11196]  ? __hrtimer_setup+0x187/0x210
[  164.061310][T11196]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  164.061326][T11196]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  164.061359][T11196]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  164.061370][T11196]  ? trace_kmalloc+0x1f/0xd0
[  164.061382][T11196]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  164.061445][T11196]  ? kstrndup+0xbf/0x160
[  164.061464][T11196]  hwsim_new_radio_nl+0xea4/0x1b10
[  164.061480][T11196]  ? __pfx___nla_validate_parse+0x10/0x10
[  164.061504][T11196]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  164.061525][T11196]  ? __nla_parse+0x40/0x60
[  164.061542][T11196]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  164.061560][T11196]  genl_family_rcv_msg_doit+0x215/0x300
[  164.061585][T11196]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  164.061606][T11196]  ? bpf_lsm_capable+0x9/0x20
[  164.061619][T11196]  ? security_capable+0x7e/0x2e0
[  164.061636][T11196]  genl_rcv_msg+0x60e/0x790
[  164.061652][T11196]  ? __pfx_genl_rcv_msg+0x10/0x10
[  164.061663][T11196]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  164.061684][T11196]  netlink_rcv_skb+0x208/0x470
[  164.061698][T11196]  ? __lock_acquire+0xab9/0xd20
[  164.061713][T11196]  ? __pfx_genl_rcv_msg+0x10/0x10
[  164.061726][T11196]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  164.061752][T11196]  ? down_read+0x1ad/0x2e0
[  164.061764][T11196]  genl_rcv+0x28/0x40
[  164.061774][T11196]  netlink_unicast+0x82f/0x9e0
[  164.061819][T11196]  ? __pfx_netlink_unicast+0x10/0x10
[  164.061835][T11196]  ? netlink_sendmsg+0x642/0xb30
[  164.061842][T11196]  ? skb_put+0x11b/0x210
[  164.061854][T11196]  netlink_sendmsg+0x805/0xb30
[  164.061868][T11196]  ? __pfx_netlink_sendmsg+0x10/0x10
[  164.061880][T11196]  ? aa_sock_msg_perm+0xf1/0x1d0
[  164.061891][T11196]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  164.061902][T11196]  ? __pfx_netlink_sendmsg+0x10/0x10
[  164.061912][T11196]  __sock_sendmsg+0x21c/0x270
[  164.061928][T11196]  ____sys_sendmsg+0x505/0x830
[  164.061964][T11196]  ? __pfx_____sys_sendmsg+0x10/0x10
[  164.061982][T11196]  ? import_iovec+0x74/0xa0
[  164.061998][T11196]  ___sys_sendmsg+0x21f/0x2a0
[  164.062011][T11196]  ? __pfx____sys_sendmsg+0x10/0x10
[  164.062044][T11196]  ? __fget_files+0x2a/0x420
[  164.062052][T11196]  ? __fget_files+0x3a0/0x420
[  164.062067][T11196]  __x64_sys_sendmsg+0x19b/0x260
[  164.062080][T11196]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  164.062099][T11196]  ? rcu_is_watching+0x15/0xb0
[  164.062113][T11196]  ? do_syscall_64+0xbe/0x3b0
[  164.062125][T11196]  do_syscall_64+0xfa/0x3b0
[  164.062133][T11196]  ? lockdep_hardirqs_on+0x9c/0x150
[  164.062150][T11196]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.062159][T11196]  ? exc_page_fault+0x9f/0xf0
[  164.062175][T11196]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.062184][T11196] RIP: 0033:0x7fa45498ebe9
[  164.062194][T11196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  164.062204][T11196] RSP: 002b:00007fa4557b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  164.062216][T11196] RAX: ffffffffffffffda RBX: 00007fa454bc5fa0 RCX: 00007fa45498ebe9
[  164.062224][T11196] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  164.062231][T11196] RBP: 00007fa454a11e19 R08: 0000000000000000 R09: 0000000000000000
[  164.062236][T11196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  164.062242][T11196] R13: 00007fa454bc6038 R14: 00007fa454bc5fa0 R15: 00007fff0f825118
[  164.062259][T11196]  </TASK>
[  164.303662][T11202] lo speed is unknown, defaulting to 1000
[  164.307554][T11202] lo speed is unknown, defaulting to 1000
[  164.358565][T11208] netem: change failed
[  164.393600][T11212] bond0: option mode: unable to set because the bond device has slaves
[  164.401071][T11214] bond0: (slave ip6gretap3): Releasing backup interface
[  164.443317][T11202] netlink: 'syz.2.1623': attribute type 2 has an invalid length.
[  164.713973][T11233] lo speed is unknown, defaulting to 1000
[  164.718118][T11233] lo speed is unknown, defaulting to 1000
[  165.013525][T11251] tipc: Resetting bearer <ib:wlan0>
[  165.016053][T11251] mac80211_hwsim hwsim242 wlan0: entered promiscuous mode
[  165.019010][T11251] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  165.065014][T11253] mac80211_hwsim hwsim242 wlan0: left promiscuous mode
[  165.100463][T11255] bond4: (slave macvlan3): Error -22 calling dev_set_mtu
[  165.262464][T11262] netlink: 'syz.0.1640': attribute type 9 has an invalid length.
[  165.690722][T11279] netlink: 'syz.1.1643': attribute type 1 has an invalid length.
[  165.696041][T11279] netlink: 'syz.1.1643': attribute type 1 has an invalid length.
[  165.791389][T11279] netlink: 'syz.1.1643': attribute type 1 has an invalid length.
[  165.819189][T11279] 8021q: adding VLAN 0 to HW filter on device bond14
[  165.826511][T11279] bond14: (slave wlan0): Opening slave failed
[  166.040401][T11300] netlink: 'syz.2.1649': attribute type 11 has an invalid length.
[  166.622626][T11341] netlink: 'syz.0.1664': attribute type 1 has an invalid length.
[  166.627868][T11341] netlink: 'syz.0.1664': attribute type 1 has an invalid length.
[  166.743612][T11341] 8021q: adding VLAN 0 to HW filter on device bond12
[  166.748525][T11347] __nla_validate_parse: 12 callbacks suppressed
[  166.748537][T11347] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1666'.
[  166.756705][T11341] tipc: Resetting bearer <ib:wlan0>
[  166.759782][T11341] tipc: Resetting bearer <ib:wlan0>
[  166.761584][T11341] bond12: (slave wlan0): Opening slave failed
[  166.764111][T11341] tipc: Resetting bearer <ib:wlan0>
[  166.766786][T11341] tipc: Resetting bearer <ib:wlan0>
[  166.903999][T11353] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1669'.
[  167.008408][T11360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1670'.
[  167.128249][T11369] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1674'.
[  167.132340][T11369] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1674'.
[  167.341986][T11388] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1679'.
[  167.429081][T11396] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1682'.
[  167.594282][T11405] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  167.597164][T11405] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  167.742308][T11416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1690'.
[  167.760020][T11417] lo speed is unknown, defaulting to 1000
[  167.776462][T11417] lo speed is unknown, defaulting to 1000
[  167.825007][T11420] lo speed is unknown, defaulting to 1000
[  167.898303][T11420] lo speed is unknown, defaulting to 1000
[  168.050243][T11417] validate_nla: 7 callbacks suppressed
[  168.050257][T11417] netlink: 'syz.2.1689': attribute type 2 has an invalid length.
[  168.148973][T11417] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1689'.
[  168.389709][T11444] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  168.393582][T11444] syzkaller0: entered promiscuous mode
[  168.397389][T11444] syzkaller0: entered allmulticast mode
[  168.414354][T11444] bond0: mtu less than device minimum
[  168.674368][T11463] netlink: 'syz.2.1702': attribute type 6 has an invalid length.
[  168.674985][T11465] netlink: 'syz.0.1704': attribute type 10 has an invalid length.
[  168.741437][T11473] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  168.744258][T11473] CPU: 0 UID: 0 PID: 11473 Comm: syz.2.1706 Not tainted syzkaller #0 PREEMPT(full) 
[  168.744269][T11473] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  168.744275][T11473] Call Trace:
[  168.744278][T11473]  <TASK>
[  168.744281][T11473]  dump_stack_lvl+0x189/0x250
[  168.744297][T11473]  ? __pfx_dump_stack_lvl+0x10/0x10
[  168.744306][T11473]  ? __pfx__printk+0x10/0x10
[  168.744321][T11473]  ? kernfs_path_from_node+0x2f/0x290
[  168.744333][T11473]  ? kernfs_path_from_node+0x250/0x290
[  168.744343][T11473]  ? kernfs_path_from_node+0x2f/0x290
[  168.744356][T11473]  sysfs_warn_dup+0x8e/0xa0
[  168.744367][T11473]  sysfs_do_create_link_sd+0xc0/0x110
[  168.744380][T11473]  device_add_class_symlinks+0x1cf/0x240
[  168.744397][T11473]  device_add+0x475/0xb50
[  168.744413][T11473]  wiphy_register+0x1ba6/0x28d0
[  168.744441][T11473]  ? __pfx_wiphy_register+0x10/0x10
[  168.744459][T11473]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  168.744476][T11473]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  168.744486][T11473]  ieee80211_register_hw+0x3425/0x4080
[  168.744500][T11473]  ? ieee80211_register_hw+0x1461/0x4080
[  168.744511][T11473]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  168.744520][T11473]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  168.744532][T11473]  ? __hrtimer_setup+0x187/0x210
[  168.744539][T11473]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  168.744550][T11473]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  168.744577][T11473]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  168.744585][T11473]  ? trace_kmalloc+0x1f/0xd0
[  168.744593][T11473]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  168.744603][T11473]  ? kstrndup+0xbf/0x160
[  168.744615][T11473]  hwsim_new_radio_nl+0xea4/0x1b10
[  168.744625][T11473]  ? __pfx___nla_validate_parse+0x10/0x10
[  168.744642][T11473]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  168.744656][T11473]  ? __nla_parse+0x40/0x60
[  168.744668][T11473]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  168.744680][T11473]  genl_family_rcv_msg_doit+0x215/0x300
[  168.744692][T11473]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  168.744705][T11473]  ? bpf_lsm_capable+0x9/0x20
[  168.744713][T11473]  ? security_capable+0x7e/0x2e0
[  168.744725][T11473]  genl_rcv_msg+0x60e/0x790
[  168.744768][T11473]  ? __pfx_genl_rcv_msg+0x10/0x10
[  168.744781][T11473]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  168.744797][T11473]  netlink_rcv_skb+0x208/0x470
[  168.744809][T11473]  ? __lock_acquire+0xab9/0xd20
[  168.744820][T11473]  ? __pfx_genl_rcv_msg+0x10/0x10
[  168.744829][T11473]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  168.744846][T11473]  ? down_read+0x1ad/0x2e0
[  168.744854][T11473]  genl_rcv+0x28/0x40
[  168.744861][T11473]  netlink_unicast+0x82f/0x9e0
[  168.744873][T11473]  ? __pfx_netlink_unicast+0x10/0x10
[  168.744883][T11473]  ? netlink_sendmsg+0x642/0xb30
[  168.744888][T11473]  ? skb_put+0x11b/0x210
[  168.744896][T11473]  netlink_sendmsg+0x805/0xb30
[  168.744906][T11473]  ? __pfx_netlink_sendmsg+0x10/0x10
[  168.744914][T11473]  ? aa_sock_msg_perm+0xf1/0x1d0
[  168.744921][T11473]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  168.744928][T11473]  ? __pfx_netlink_sendmsg+0x10/0x10
[  168.744934][T11473]  __sock_sendmsg+0x21c/0x270
[  168.744945][T11473]  ____sys_sendmsg+0x505/0x830
[  168.744954][T11473]  ? __pfx_____sys_sendmsg+0x10/0x10
[  168.744965][T11473]  ? import_iovec+0x74/0xa0
[  168.744975][T11473]  ___sys_sendmsg+0x21f/0x2a0
[  168.744983][T11473]  ? __pfx____sys_sendmsg+0x10/0x10
[  168.745005][T11473]  ? __fget_files+0x2a/0x420
[  168.745011][T11473]  ? __fget_files+0x3a0/0x420
[  168.745021][T11473]  __x64_sys_sendmsg+0x19b/0x260
[  168.745029][T11473]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  168.745044][T11473]  ? do_syscall_64+0xbe/0x3b0
[  168.745052][T11473]  do_syscall_64+0xfa/0x3b0
[  168.745057][T11473]  ? lockdep_hardirqs_on+0x9c/0x150
[  168.745066][T11473]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.745072][T11473]  ? exc_page_fault+0x9f/0xf0
[  168.745082][T11473]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.745089][T11473] RIP: 0033:0x7fa45498ebe9
[  168.745096][T11473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  168.745102][T11473] RSP: 002b:00007fa4557b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  168.745111][T11473] RAX: ffffffffffffffda RBX: 00007fa454bc5fa0 RCX: 00007fa45498ebe9
[  168.745116][T11473] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  168.745120][T11473] RBP: 00007fa454a11e19 R08: 0000000000000000 R09: 0000000000000000
[  168.745124][T11473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  168.745128][T11473] R13: 00007fa454bc6038 R14: 00007fa454bc5fa0 R15: 00007fff0f825118
[  168.745140][T11473]  </TASK>
[  169.421713][T11497] : renamed from wg2
[  169.427452][T11497] netlink: 'syz.2.1713': attribute type 10 has an invalid length.
[  169.480974][T11499] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  169.484163][T11499] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  169.586946][T11503] vlan0: left promiscuous mode
[  169.590461][T11503] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  169.598850][T11503] veth5: left promiscuous mode
[  169.603368][T11503] veth7: left promiscuous mode
[  169.761188][T11515] bond4: (slave macvlan3): Error -22 calling dev_set_mtu
[  169.789453][T11513] lo speed is unknown, defaulting to 1000
[  169.793517][T11513] lo speed is unknown, defaulting to 1000
[  169.841658][T11520] netlink: 'syz.0.1722': attribute type 6 has an invalid length.
[  169.863963][T11517] lo speed is unknown, defaulting to 1000
[  169.870319][T11520] netlink: 'syz.0.1722': attribute type 12 has an invalid length.
[  169.873481][T11520] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.1722'.
[  169.877833][T11517] lo speed is unknown, defaulting to 1000
[  170.172991][T11531] netlink: 'syz.2.1725': attribute type 10 has an invalid length.
[  170.213080][T11517] netlink: 'syz.1.1721': attribute type 2 has an invalid length.
[  170.747426][T11566] netlink: 'syz.0.1734': attribute type 9 has an invalid length.
[  171.202580][T11580] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  171.209903][T11580] syzkaller0: entered promiscuous mode
[  171.211909][T11580] syzkaller0: entered allmulticast mode
[  171.225592][T11580] tipc: Resetting bearer <eth:syzkaller0>
[  171.312836][T11579] tipc: Resetting bearer <eth:syzkaller0>
[  171.324608][T11579] tipc: Disabling bearer <eth:syzkaller0>
[  171.332015][T11584] 8021q: adding VLAN 0 to HW filter on device bond1
[  171.344922][T11584] 8021q: adding VLAN 0 to HW filter on device macvlan6
[  171.349902][T11584] bond1: (slave macvlan6): Enslaving as a backup interface with a down link
[  171.357876][T11584] bond1: (slave macvlan6): Releasing backup interface
[  171.447965][T11590] openvswitch: netlink: EtherType 0 is less than min 600
[  171.558342][T11600] netlink: 'syz.2.1746': attribute type 1 has an invalid length.
[  171.622180][T11597] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  172.450223][T11628] ieee802154 phy1 wpan1: encryption failed: -22
[  172.465834][T11624] team0: Mode changed to "loadbalance"
[  172.514352][T11630] __nla_validate_parse: 10 callbacks suppressed
[  172.514365][T11630] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1754'.
[  172.525284][T11630] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1754'.
[  172.535064][T11631] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1753'.
[  172.724333][T11653] bond0: (slave macvlan5): Error -22 calling dev_set_mtu
[  172.832159][T11658] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1760'.
[  172.839034][T11658] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1760'.
[  172.843962][T11658] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1760'.
[  172.861544][T11658] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.091887][T11673] validate_nla: 5 callbacks suppressed
[  173.091901][T11673] netlink: 'syz.2.1765': attribute type 10 has an invalid length.
[  173.374245][T11685] netlink: 'syz.2.1770': attribute type 6 has an invalid length.
[  173.393075][T11686] netlink: 'syz.2.1770': attribute type 12 has an invalid length.
[  173.397004][T11686] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1770'.
[  173.638269][T11691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1772'.
[  173.653676][T11697] netlink: 'syz.2.1773': attribute type 12 has an invalid length.
[  173.665609][T11697] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1773'.
[  173.931113][T11718] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1780'.
[  173.935615][T11717] netlink: 'syz.2.1779': attribute type 10 has an invalid length.
[  174.038093][T11748] netlink: 'syz.2.1784': attribute type 1 has an invalid length.
[  174.041739][T11748] netlink: 'syz.2.1784': attribute type 1 has an invalid length.
[  174.104313][T11762] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  174.114119][T11762] syzkaller0: entered promiscuous mode
[  174.119961][T11762] syzkaller0: entered allmulticast mode
[  174.147294][T11763] netlink: 'syz.2.1784': attribute type 1 has an invalid length.
[  174.184762][T11763] 8021q: adding VLAN 0 to HW filter on device bond10
[  174.201225][T11748] tipc: Resetting bearer <ib:wlan0>
[  174.205214][T11748] tipc: Resetting bearer <ib:wlan0>
[  174.216800][T11748] bond10: (slave wlan0): Opening slave failed
[  174.219795][T11748] tipc: Resetting bearer <ib:wlan0>
[  174.223230][T11748] tipc: Resetting bearer <ib:wlan0>
[  174.246204][T11762] tipc: Resetting bearer <eth:syzkaller0>
[  174.255189][T11748] vlan2: entered allmulticast mode
[  174.259706][T11748] bond10: (slave vlan2): Opening slave failed
[  174.272728][T11761] tipc: Resetting bearer <eth:syzkaller0>
[  174.282898][T11761] tipc: Disabling bearer <eth:syzkaller0>
[  174.871398][T11786] bond11 (unregistering): Released all slaves
[  175.042506][T11796] lo speed is unknown, defaulting to 1000
[  175.056576][T11796] lo speed is unknown, defaulting to 1000
[  175.356587][T11822] netlink: 'syz.2.1802': attribute type 1 has an invalid length.
[  175.359233][T11822] netlink: 'syz.2.1802': attribute type 1 has an invalid length.
[  175.477782][T11822] 8021q: adding VLAN 0 to HW filter on device bond11
[  175.483890][T11822] tipc: Resetting bearer <ib:wlan0>
[  175.486503][T11822] tipc: Resetting bearer <ib:wlan0>
[  175.488828][T11822] bond11: (slave wlan0): Opening slave failed
[  175.491754][T11822] tipc: Resetting bearer <ib:wlan0>
[  175.494702][T11822] tipc: Resetting bearer <ib:wlan0>
[  175.568527][T11833] openvswitch: netlink: Flow key attr not present in new flow.
[  175.573128][T11832] openvswitch: netlink: Flow key attr not present in new flow.
[  175.615615][T11833] mac80211_hwsim hwsim260 wlan1: entered allmulticast mode
[  175.741161][T11857] tun0: tun_chr_ioctl cmd 1074025675
[  175.744949][T11857] tun0: persist enabled
[  175.757355][T11857] tun0: tun_chr_ioctl cmd 1074025675
[  175.760307][T11857] tun0: persist enabled
[  175.835836][T11861] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  175.838979][T11861] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  176.003750][T11873] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  176.010307][T11873] CPU: 0 UID: 0 PID: 11873 Comm: syz.1.1818 Not tainted syzkaller #0 PREEMPT(full) 
[  176.010321][T11873] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  176.010326][T11873] Call Trace:
[  176.010329][T11873]  <TASK>
[  176.010333][T11873]  dump_stack_lvl+0x189/0x250
[  176.010348][T11873]  ? __pfx_dump_stack_lvl+0x10/0x10
[  176.010357][T11873]  ? __pfx__printk+0x10/0x10
[  176.010370][T11873]  ? kernfs_path_from_node+0x2f/0x290
[  176.010379][T11873]  ? kernfs_path_from_node+0x250/0x290
[  176.010386][T11873]  ? kernfs_path_from_node+0x2f/0x290
[  176.010395][T11873]  sysfs_warn_dup+0x8e/0xa0
[  176.010402][T11873]  sysfs_do_create_link_sd+0xc0/0x110
[  176.010411][T11873]  device_add_class_symlinks+0x1cf/0x240
[  176.010420][T11873]  device_add+0x475/0xb50
[  176.010429][T11873]  wiphy_register+0x1ba6/0x28d0
[  176.010447][T11873]  ? __pfx_wiphy_register+0x10/0x10
[  176.010463][T11873]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  176.010475][T11873]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  176.010485][T11873]  ieee80211_register_hw+0x3425/0x4080
[  176.010500][T11873]  ? ieee80211_register_hw+0x1461/0x4080
[  176.010513][T11873]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  176.010524][T11873]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  176.010537][T11873]  ? __hrtimer_setup+0x187/0x210
[  176.010544][T11873]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  176.010556][T11873]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  176.010576][T11873]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  176.010584][T11873]  ? trace_kmalloc+0x1f/0xd0
[  176.010592][T11873]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  176.010601][T11873]  ? kstrndup+0xbf/0x160
[  176.010613][T11873]  hwsim_new_radio_nl+0xea4/0x1b10
[  176.010624][T11873]  ? __pfx___nla_validate_parse+0x10/0x10
[  176.010641][T11873]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  176.010681][T11873]  ? __nla_parse+0x40/0x60
[  176.010695][T11873]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  176.010710][T11873]  genl_family_rcv_msg_doit+0x215/0x300
[  176.010722][T11873]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  176.010735][T11873]  ? bpf_lsm_capable+0x9/0x20
[  176.010744][T11873]  ? security_capable+0x7e/0x2e0
[  176.010756][T11873]  genl_rcv_msg+0x60e/0x790
[  176.010767][T11873]  ? __pfx_genl_rcv_msg+0x10/0x10
[  176.010774][T11873]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  176.010788][T11873]  netlink_rcv_skb+0x208/0x470
[  176.010798][T11873]  ? __lock_acquire+0xab9/0xd20
[  176.010807][T11873]  ? __pfx_genl_rcv_msg+0x10/0x10
[  176.010816][T11873]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  176.010833][T11873]  ? down_read+0x1ad/0x2e0
[  176.010841][T11873]  genl_rcv+0x28/0x40
[  176.010848][T11873]  netlink_unicast+0x82f/0x9e0
[  176.010861][T11873]  ? __pfx_netlink_unicast+0x10/0x10
[  176.010870][T11873]  ? netlink_sendmsg+0x642/0xb30
[  176.010875][T11873]  ? skb_put+0x11b/0x210
[  176.010884][T11873]  netlink_sendmsg+0x805/0xb30
[  176.010894][T11873]  ? __pfx_netlink_sendmsg+0x10/0x10
[  176.010901][T11873]  ? aa_sock_msg_perm+0xf1/0x1d0
[  176.010908][T11873]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  176.010915][T11873]  ? __pfx_netlink_sendmsg+0x10/0x10
[  176.010922][T11873]  __sock_sendmsg+0x21c/0x270
[  176.010932][T11873]  ____sys_sendmsg+0x505/0x830
[  176.010942][T11873]  ? __pfx_____sys_sendmsg+0x10/0x10
[  176.010953][T11873]  ? import_iovec+0x74/0xa0
[  176.010962][T11873]  ___sys_sendmsg+0x21f/0x2a0
[  176.010971][T11873]  ? __pfx____sys_sendmsg+0x10/0x10
[  176.010992][T11873]  ? __fget_files+0x2a/0x420
[  176.010998][T11873]  ? __fget_files+0x3a0/0x420
[  176.011008][T11873]  __x64_sys_sendmsg+0x19b/0x260
[  176.011017][T11873]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  176.011028][T11873]  ? rcu_is_watching+0x15/0xb0
[  176.011038][T11873]  ? do_syscall_64+0xbe/0x3b0
[  176.011046][T11873]  do_syscall_64+0xfa/0x3b0
[  176.011051][T11873]  ? lockdep_hardirqs_on+0x9c/0x150
[  176.011060][T11873]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.011067][T11873]  ? exc_page_fault+0x9f/0xf0
[  176.011076][T11873]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.011083][T11873] RIP: 0033:0x7f8c2618ebe9
[  176.011091][T11873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  176.011097][T11873] RSP: 002b:00007f8c26fda038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  176.011105][T11873] RAX: ffffffffffffffda RBX: 00007f8c263c5fa0 RCX: 00007f8c2618ebe9
[  176.011110][T11873] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a
[  176.011114][T11873] RBP: 00007f8c26211e19 R08: 0000000000000000 R09: 0000000000000000
[  176.011119][T11873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  176.011122][T11873] R13: 00007f8c263c6038 R14: 00007f8c263c5fa0 R15: 00007ffd797e15a8
[  176.011134][T11873]  </TASK>
[  176.625066][T11910] mac80211_hwsim hwsim260 wlan1: left allmulticast mode
[  177.672664][T11987] __nla_validate_parse: 18 callbacks suppressed
[  177.672680][T11987] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1850'.
[  177.740753][T11982] lo speed is unknown, defaulting to 1000
[  177.747444][T11982] lo speed is unknown, defaulting to 1000
[  177.964127][T11999] syz_tun: entered allmulticast mode
[  178.024662][T12008] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  178.137101][T12017] 8021q: adding VLAN 0 to HW filter on device bond16
[  178.180205][T12022] validate_nla: 8 callbacks suppressed
[  178.180221][T12022] netlink: 'syz.0.1859': attribute type 1 has an invalid length.
[  178.186252][T12022] netlink: 'syz.0.1859': attribute type 1 has an invalid length.
[  178.231968][T12028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1861'.
[  178.280621][T12022] netlink: 'syz.0.1859': attribute type 1 has an invalid length.
[  178.329523][T12022] 8021q: adding VLAN 0 to HW filter on device bond11
[  178.349263][T12029] tipc: Resetting bearer <ib:wlan0>
[  178.352275][T12029] tipc: Resetting bearer <ib:wlan0>
[  178.356337][T12029] tipc: Resetting bearer <ib:wlan0>
[  178.359406][T12029] bond11: (slave wlan0): Enslaving as an active interface with a down link
[  178.401540][T12036] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  178.407250][T12036] syzkaller0: entered promiscuous mode
[  178.409583][T12036] syzkaller0: entered allmulticast mode
[  178.623115][T12059] lo speed is unknown, defaulting to 1000
[  178.627349][T12059] lo speed is unknown, defaulting to 1000
[  178.696674][T12066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1870'.
[  178.816206][T12072] bond0: (slave macvlan6): Error -22 calling dev_set_mtu
[  178.861949][T12074] 8021q: adding VLAN 0 to HW filter on device bond4
[  178.870110][T12074] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1873'.
[  178.875558][T12059] netlink: 'syz.2.1869': attribute type 2 has an invalid length.
[  178.881257][T12074] bond11: (slave wlan0): Releasing active interface
[  178.885576][T12074] tipc: Resetting bearer <ib:wlan0>
[  178.900932][T12074] tipc: Resetting bearer <ib:wlan0>
[  178.904003][T12074] tipc: Resetting bearer <ib:wlan0>
[  178.934983][T12059] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1869'.
[  179.006200][T12081] 8021q: adding VLAN 0 to HW filter on device bond0
[  179.015606][T12081] bond0: (slave macvlan6): Opening slave failed
[  179.020256][T12082] netlink: 'syz.0.1875': attribute type 6 has an invalid length.
[  179.037175][T12082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1875'.
[  179.276062][T12091] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  179.723580][T12114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1887'.
[  179.729026][T12114] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1887'.
[  179.735371][T12117] bond0: entered promiscuous mode
[  179.742767][T12117] bond0: entered allmulticast mode
[  179.757691][T12121] netlink: 'syz.0.1888': attribute type 1 has an invalid length.
[  179.761086][T12121] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1888'.
[  179.764893][T12121] netlink: 'syz.0.1888': attribute type 2 has an invalid length.
[  179.768533][T12121] netlink: 'syz.0.1888': attribute type 1 has an invalid length.
[  179.920709][T12132] bond4: (slave macvlan3): Error -22 calling dev_set_mtu
[  180.051050][T12145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1892'.
[  180.130109][T12148] lo speed is unknown, defaulting to 1000
[  180.132663][T12148] lo speed is unknown, defaulting to 1000
[  180.198019][ T5911] IPVS: starting estimator thread 0...
[  180.253027][T12148] netlink: 'syz.1.1896': attribute type 2 has an invalid length.
[  180.286227][T12153] IPVS: using max 50 ests per chain, 120000 per kthread
[  180.520454][T12171] 8021q: adding VLAN 0 to HW filter on device batadv0
[  180.602076][T12171] 8021q: adding VLAN 0 to HW filter on device team0
[  180.605099][T12171] tipc: Resetting bearer <eth:team0>
[  180.609480][T12171] tipc: Resetting bearer <eth:team0>
[  180.614635][T12171] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  180.628126][  T792] lo speed is unknown, defaulting to 1000
[  180.638089][  T792] syz1: Port: 1 Link ACTIVE
[  180.674801][T12182] netlink: 'syz.0.1906': attribute type 1 has an invalid length.
[  180.681500][T12171] netlink: 'syz.2.1903': attribute type 11 has an invalid length.
[  180.747781][T12182] 8021q: adding VLAN 0 to HW filter on device bond13
[  180.823185][T12196] tipc: Resetting bearer <eth:team0>
[  180.900637][T12198] ieee802154 phy1 wpan1: encryption failed: -22
[  180.917595][T12210] lo speed is unknown, defaulting to 1000
[  180.923475][T12210] lo speed is unknown, defaulting to 1000
[  181.221632][T12236] lo speed is unknown, defaulting to 1000
[  181.224406][T12236] lo speed is unknown, defaulting to 1000
[  181.355522][T12252] bond0: Device is already in use.
[  181.389251][T11735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  181.392019][T11735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  181.475369][T12258] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  181.479037][T12258] CPU: 0 UID: 0 PID: 12258 Comm: syz.1.1927 Not tainted syzkaller #0 PREEMPT(full) 
[  181.479052][T12258] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  181.479058][T12258] Call Trace:
[  181.479063][T12258]  <TASK>
[  181.479068][T12258]  dump_stack_lvl+0x189/0x250
[  181.479089][T12258]  ? __pfx_dump_stack_lvl+0x10/0x10
[  181.479102][T12258]  ? __pfx__printk+0x10/0x10
[  181.479121][T12258]  ? kernfs_path_from_node+0x2f/0x290
[  181.479134][T12258]  ? kernfs_path_from_node+0x250/0x290
[  181.479144][T12258]  ? kernfs_path_from_node+0x2f/0x290
[  181.479157][T12258]  sysfs_warn_dup+0x8e/0xa0
[  181.479169][T12258]  sysfs_do_create_link_sd+0xc0/0x110
[  181.479182][T12258]  device_add_class_symlinks+0x1cf/0x240
[  181.479197][T12258]  device_add+0x475/0xb50
[  181.479212][T12258]  wiphy_register+0x1ba6/0x28d0
[  181.479239][T12258]  ? __pfx_wiphy_register+0x10/0x10
[  181.479253][T12258]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  181.479272][T12258]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  181.479288][T12258]  ieee80211_register_hw+0x3425/0x4080
[  181.479313][T12258]  ? ieee80211_register_hw+0x1461/0x4080
[  181.479333][T12258]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  181.479349][T12258]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  181.479369][T12258]  ? __hrtimer_setup+0x187/0x210
[  181.479380][T12258]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  181.479399][T12258]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  181.479436][T12258]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  181.479459][T12258]  ? trace_kmalloc+0x1f/0xd0
[  181.479472][T12258]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  181.479486][T12258]  ? kstrndup+0xbf/0x160
[  181.479506][T12258]  hwsim_new_radio_nl+0xea4/0x1b10
[  181.479523][T12258]  ? __pfx___nla_validate_parse+0x10/0x10
[  181.479552][T12258]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  181.479576][T12258]  ? __nla_parse+0x40/0x60
[  181.479626][T12258]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  181.479649][T12258]  genl_family_rcv_msg_doit+0x215/0x300
[  181.479669][T12258]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  181.479693][T12258]  ? bpf_lsm_capable+0x9/0x20
[  181.479706][T12258]  ? security_capable+0x7e/0x2e0
[  181.479727][T12258]  genl_rcv_msg+0x60e/0x790
[  181.479746][T12258]  ? __pfx_genl_rcv_msg+0x10/0x10
[  181.479759][T12258]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  181.479785][T12258]  netlink_rcv_skb+0x208/0x470
[  181.479800][T12258]  ? __lock_acquire+0xab9/0xd20
[  181.479816][T12258]  ? __pfx_genl_rcv_msg+0x10/0x10
[  181.479831][T12258]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  181.479862][T12258]  ? down_read+0x1ad/0x2e0
[  181.479876][T12258]  genl_rcv+0x28/0x40
[  181.479889][T12258]  netlink_unicast+0x82f/0x9e0
[  181.479911][T12258]  ? __pfx_netlink_unicast+0x10/0x10
[  181.479928][T12258]  ? netlink_sendmsg+0x642/0xb30
[  181.479937][T12258]  ? skb_put+0x11b/0x210
[  181.479952][T12258]  netlink_sendmsg+0x805/0xb30
[  181.479970][T12258]  ? __pfx_netlink_sendmsg+0x10/0x10
[  181.479984][T12258]  ? aa_sock_msg_perm+0xf1/0x1d0
[  181.479997][T12258]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  181.480008][T12258]  ? __pfx_netlink_sendmsg+0x10/0x10
[  181.480018][T12258]  __sock_sendmsg+0x21c/0x270
[  181.480036][T12258]  ____sys_sendmsg+0x505/0x830
[  181.480054][T12258]  ? __pfx_____sys_sendmsg+0x10/0x10
[  181.480074][T12258]  ? import_iovec+0x74/0xa0
[  181.480091][T12258]  ___sys_sendmsg+0x21f/0x2a0
[  181.480106][T12258]  ? __pfx____sys_sendmsg+0x10/0x10
[  181.480152][T12258]  ? __fget_files+0x2a/0x420
[  181.480161][T12258]  ? __fget_files+0x3a0/0x420
[  181.480178][T12258]  __x64_sys_sendmsg+0x19b/0x260
[  181.480193][T12258]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  181.480213][T12258]  ? rcu_is_watching+0x15/0xb0
[  181.480229][T12258]  ? do_syscall_64+0xbe/0x3b0
[  181.480243][T12258]  do_syscall_64+0xfa/0x3b0
[  181.480252][T12258]  ? lockdep_hardirqs_on+0x9c/0x150
[  181.480267][T12258]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.480279][T12258]  ? exc_page_fault+0x9f/0xf0
[  181.480296][T12258]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.480307][T12258] RIP: 0033:0x7f8c2618ebe9
[  181.480319][T12258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  181.480328][T12258] RSP: 002b:00007f8c26f98038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  181.480341][T12258] RAX: ffffffffffffffda RBX: 00007f8c263c6180 RCX: 00007f8c2618ebe9
[  181.480349][T12258] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  181.480356][T12258] RBP: 00007f8c26211e19 R08: 0000000000000000 R09: 0000000000000000
[  181.480363][T12258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  181.480369][T12258] R13: 00007f8c263c6218 R14: 00007f8c263c6180 R15: 00007ffd797e15a8
[  181.480389][T12258]  </TASK>
[  181.705496][T12260] lo speed is unknown, defaulting to 1000
[  181.709010][T12260] lo speed is unknown, defaulting to 1000
[  181.836409][T11735] tipc: Resetting bearer <ib:wlan0>
[  182.398962][T12311] lo speed is unknown, defaulting to 1000
[  182.402745][T12311] lo speed is unknown, defaulting to 1000
[  182.819732][T12331] syzkaller0: entered promiscuous mode
[  182.822098][T12331] syzkaller0: entered allmulticast mode
[  183.237331][T12340] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  183.885903][T12343] lo speed is unknown, defaulting to 1000
[  183.890323][T12343] lo speed is unknown, defaulting to 1000
[  183.998237][T12343] validate_nla: 5 callbacks suppressed
[  183.998249][T12343] netlink: 'syz.1.1951': attribute type 2 has an invalid length.
[  184.047684][ T8076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  184.050754][ T8076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  184.147475][T12366] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  184.151527][T12366] CPU: 0 UID: 0 PID: 12366 Comm: syz.0.1958 Not tainted syzkaller #0 PREEMPT(full) 
[  184.151537][T12366] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  184.151542][T12366] Call Trace:
[  184.151546][T12366]  <TASK>
[  184.151550][T12366]  dump_stack_lvl+0x189/0x250
[  184.151587][T12366]  ? __pfx_dump_stack_lvl+0x10/0x10
[  184.151597][T12366]  ? __pfx__printk+0x10/0x10
[  184.151610][T12366]  ? kernfs_path_from_node+0x2f/0x290
[  184.151619][T12366]  ? kernfs_path_from_node+0x250/0x290
[  184.151626][T12366]  ? kernfs_path_from_node+0x2f/0x290
[  184.151635][T12366]  sysfs_warn_dup+0x8e/0xa0
[  184.151643][T12366]  sysfs_do_create_link_sd+0xc0/0x110
[  184.151652][T12366]  device_add_class_symlinks+0x1cf/0x240
[  184.151663][T12366]  device_add+0x475/0xb50
[  184.151672][T12366]  wiphy_register+0x1ba6/0x28d0
[  184.151691][T12366]  ? __pfx_wiphy_register+0x10/0x10
[  184.151700][T12366]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  184.151712][T12366]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  184.151722][T12366]  ieee80211_register_hw+0x3425/0x4080
[  184.151738][T12366]  ? ieee80211_register_hw+0x1461/0x4080
[  184.151750][T12366]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  184.151760][T12366]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  184.151772][T12366]  ? __hrtimer_setup+0x187/0x210
[  184.151779][T12366]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  184.151790][T12366]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  184.151812][T12366]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  184.151820][T12366]  ? trace_kmalloc+0x1f/0xd0
[  184.151828][T12366]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  184.151836][T12366]  ? kstrndup+0xbf/0x160
[  184.151848][T12366]  hwsim_new_radio_nl+0xea4/0x1b10
[  184.151859][T12366]  ? __pfx___nla_validate_parse+0x10/0x10
[  184.151876][T12366]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  184.151891][T12366]  ? __nla_parse+0x40/0x60
[  184.151902][T12366]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  184.151915][T12366]  genl_family_rcv_msg_doit+0x215/0x300
[  184.151925][T12366]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  184.151939][T12366]  ? bpf_lsm_capable+0x9/0x20
[  184.151947][T12366]  ? security_capable+0x7e/0x2e0
[  184.151960][T12366]  genl_rcv_msg+0x60e/0x790
[  184.151971][T12366]  ? __pfx_genl_rcv_msg+0x10/0x10
[  184.151978][T12366]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  184.151993][T12366]  netlink_rcv_skb+0x208/0x470
[  184.152002][T12366]  ? __lock_acquire+0xab9/0xd20
[  184.152011][T12366]  ? __pfx_genl_rcv_msg+0x10/0x10
[  184.152020][T12366]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  184.152038][T12366]  ? down_read+0x1ad/0x2e0
[  184.152045][T12366]  genl_rcv+0x28/0x40
[  184.152052][T12366]  netlink_unicast+0x82f/0x9e0
[  184.152066][T12366]  ? __pfx_netlink_unicast+0x10/0x10
[  184.152075][T12366]  ? netlink_sendmsg+0x642/0xb30
[  184.152080][T12366]  ? skb_put+0x11b/0x210
[  184.152089][T12366]  netlink_sendmsg+0x805/0xb30
[  184.152099][T12366]  ? __pfx_netlink_sendmsg+0x10/0x10
[  184.152107][T12366]  ? aa_sock_msg_perm+0xf1/0x1d0
[  184.152114][T12366]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  184.152121][T12366]  ? __pfx_netlink_sendmsg+0x10/0x10
[  184.152128][T12366]  __sock_sendmsg+0x21c/0x270
[  184.152138][T12366]  ____sys_sendmsg+0x505/0x830
[  184.152148][T12366]  ? __pfx_____sys_sendmsg+0x10/0x10
[  184.152160][T12366]  ? import_iovec+0x74/0xa0
[  184.152170][T12366]  ___sys_sendmsg+0x21f/0x2a0
[  184.152178][T12366]  ? __pfx____sys_sendmsg+0x10/0x10
[  184.152201][T12366]  ? __fget_files+0x2a/0x420
[  184.152207][T12366]  ? __fget_files+0x3a0/0x420
[  184.152217][T12366]  __x64_sys_sendmsg+0x19b/0x260
[  184.152226][T12366]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  184.152238][T12366]  ? rcu_is_watching+0x15/0xb0
[  184.152247][T12366]  ? do_syscall_64+0xbe/0x3b0
[  184.152255][T12366]  do_syscall_64+0xfa/0x3b0
[  184.152260][T12366]  ? lockdep_hardirqs_on+0x9c/0x150
[  184.152269][T12366]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.152276][T12366]  ? exc_page_fault+0x9f/0xf0
[  184.152286][T12366]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.152292][T12366] RIP: 0033:0x7fc2ed38ebe9
[  184.152300][T12366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  184.152305][T12366] RSP: 002b:00007fc2ee125038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  184.152314][T12366] RAX: ffffffffffffffda RBX: 00007fc2ed5c5fa0 RCX: 00007fc2ed38ebe9
[  184.152319][T12366] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  184.152323][T12366] RBP: 00007fc2ed411e19 R08: 0000000000000000 R09: 0000000000000000
[  184.152327][T12366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  184.152331][T12366] R13: 00007fc2ed5c6038 R14: 00007fc2ed5c5fa0 R15: 00007ffc02534508
[  184.152343][T12366]  </TASK>
[  184.347969][T12368] netlink: 'syz.1.1959': attribute type 1 has an invalid length.
[  184.352589][T12368] netlink: 'syz.1.1959': attribute type 1 has an invalid length.
[  184.447476][T12373] netlink: 'syz.0.1960': attribute type 1 has an invalid length.
[  184.451006][T12373] __nla_validate_parse: 8 callbacks suppressed
[  184.451017][T12373] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1960'.
[  184.454408][T12368] netlink: 'syz.1.1959': attribute type 1 has an invalid length.
[  184.458616][T12373] netlink: 'syz.0.1960': attribute type 8 has an invalid length.
[  184.471953][T12368] 8021q: adding VLAN 0 to HW filter on device bond17
[  184.497278][T12368] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  184.502068][T12368] bond17: (slave wlan0): Opening slave failed
[  184.510351][T12368] vlan4: entered allmulticast mode
[  184.512737][T12368] bond17: (slave vlan4): Opening slave failed
[  184.580048][T12384] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  184.582649][T12384] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  184.603673][T12384] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  184.677601][T12395] netlink: 'syz.2.1967': attribute type 10 has an invalid length.
[  184.832371][ T8076] tipc: Resetting bearer <ib:wlan0>
[  184.848772][T12408] netlink: 14212 bytes leftover after parsing attributes in process `syz.1.1968'.
[  184.853671][T12413] tipc: Resetting bearer <eth:gre0>
[  184.880831][T12413] tipc: Resetting bearer <eth:team0>
[  184.890978][T12413] tipc: Resetting bearer <ib:wlan0>
[  184.904817][   T51] lo speed is unknown, defaulting to 1000
[  184.907443][   T51] syz1: Port: 1 Link DOWN
[  185.049857][T12428] 8021q: adding VLAN 0 to HW filter on device bond12
[  185.241772][T12453] netlink: 'syz.0.1982': attribute type 9 has an invalid length.
[  185.349549][T12462] netlink: 'syz.1.1984': attribute type 12 has an invalid length.
[  185.356425][T12462] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.1984'.
[  185.369033][T12472] netlink: 'syz.2.1987': attribute type 8 has an invalid length.
[  185.506039][T12478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1990'.
[  185.700259][T12493] lo speed is unknown, defaulting to 1000
[  185.702840][T12495] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1996'.
[  185.706946][T12495] bridge0: entered promiscuous mode
[  185.709165][T12493] lo speed is unknown, defaulting to 1000
[  185.710315][T12495] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1996'.
[  186.021353][T12520] lo speed is unknown, defaulting to 1000
[  186.024567][T12520] lo speed is unknown, defaulting to 1000
[  186.031226][T12493] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1995'.
[  186.035822][T12492] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1995'.
[  186.127231][T12530] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  186.130472][T12530] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  186.352051][T12539] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2008'.
[  186.400854][T12546] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2011'.
[  186.455129][T12550] 8021q: adding VLAN 0 to HW filter on device bond14
[  186.471151][T12551] veth9: entered promiscuous mode
[  186.517233][T12554] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  186.519829][T12554] bond0: left promiscuous mode
[  186.521425][T12554] bond0: left allmulticast mode
[  186.527229][T12554] bridge0: left promiscuous mode
[  186.617685][T11735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  186.620390][T11735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  187.094781][T12573] tipc: Resetting bearer <ib:wlan0>
[  187.439281][T12583] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  187.472803][T12583] 8021q: adding VLAN 0 to HW filter on device bond13
[  187.477859][T12583] tipc: Resetting bearer <ib:wlan0>
[  187.480561][T12583] tipc: Resetting bearer <ib:wlan0>
[  187.482686][T12583] bond13: (slave wlan0): Opening slave failed
[  187.485044][T12583] tipc: Resetting bearer <ib:wlan0>
[  187.488617][T12583] tipc: Resetting bearer <ib:wlan0>
[  187.512159][T12589] mac80211_hwsim hwsim244 wlan1: entered allmulticast mode
[  187.533142][T12589] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  187.538958][T12589] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  187.563783][T12593] netlink: 'syz.2.2024': attribute type 11 has an invalid length.
[  187.654464][T12598] team0: Unable to change to the same mode the team is in
[  187.658464][T12598] vlan0: entered promiscuous mode
[  187.661332][T12598] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  188.079609][T12617] 8021q: adding VLAN 0 to HW filter on device bond18
[  188.086656][T12617] bond18: (slave wlan0): Opening slave failed
[  188.097470][T12617] vlan4: entered allmulticast mode
[  188.100419][T12617] bond18: (slave vlan4): Opening slave failed
[  188.232976][T12627] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  188.236504][T12627] CPU: 0 UID: 0 PID: 12627 Comm: syz.1.2034 Not tainted syzkaller #0 PREEMPT(full) 
[  188.236545][T12627] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  188.236553][T12627] Call Trace:
[  188.236558][T12627]  <TASK>
[  188.236570][T12627]  dump_stack_lvl+0x189/0x250
[  188.236590][T12627]  ? __pfx_dump_stack_lvl+0x10/0x10
[  188.236602][T12627]  ? __pfx__printk+0x10/0x10
[  188.236621][T12627]  ? kernfs_path_from_node+0x2f/0x290
[  188.236633][T12627]  ? kernfs_path_from_node+0x250/0x290
[  188.236643][T12627]  ? kernfs_path_from_node+0x2f/0x290
[  188.236656][T12627]  sysfs_warn_dup+0x8e/0xa0
[  188.236669][T12627]  sysfs_do_create_link_sd+0xc0/0x110
[  188.236682][T12627]  device_add_class_symlinks+0x1cf/0x240
[  188.236698][T12627]  device_add+0x475/0xb50
[  188.236713][T12627]  wiphy_register+0x1ba6/0x28d0
[  188.236743][T12627]  ? __pfx_wiphy_register+0x10/0x10
[  188.236756][T12627]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  188.236775][T12627]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  188.236789][T12627]  ieee80211_register_hw+0x3425/0x4080
[  188.236814][T12627]  ? ieee80211_register_hw+0x1461/0x4080
[  188.236832][T12627]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  188.236847][T12627]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  188.236868][T12627]  ? __hrtimer_setup+0x187/0x210
[  188.236879][T12627]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  188.236896][T12627]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  188.236931][T12627]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  188.236945][T12627]  ? trace_kmalloc+0x1f/0xd0
[  188.236958][T12627]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  188.236972][T12627]  ? kstrndup+0xbf/0x160
[  188.236992][T12627]  hwsim_new_radio_nl+0xea4/0x1b10
[  188.237009][T12627]  ? __pfx___nla_validate_parse+0x10/0x10
[  188.237037][T12627]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  188.237061][T12627]  ? __nla_parse+0x40/0x60
[  188.237081][T12627]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  188.237102][T12627]  genl_family_rcv_msg_doit+0x215/0x300
[  188.237121][T12627]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  188.237145][T12627]  ? bpf_lsm_capable+0x9/0x20
[  188.237158][T12627]  ? security_capable+0x7e/0x2e0
[  188.237182][T12627]  genl_rcv_msg+0x60e/0x790
[  188.237200][T12627]  ? __pfx_genl_rcv_msg+0x10/0x10
[  188.237213][T12627]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  188.237239][T12627]  netlink_rcv_skb+0x208/0x470
[  188.237254][T12627]  ? __lock_acquire+0xab9/0xd20
[  188.237269][T12627]  ? __pfx_genl_rcv_msg+0x10/0x10
[  188.237282][T12627]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  188.237310][T12627]  ? down_read+0x1ad/0x2e0
[  188.237323][T12627]  genl_rcv+0x28/0x40
[  188.237334][T12627]  netlink_unicast+0x82f/0x9e0
[  188.237354][T12627]  ? __pfx_netlink_unicast+0x10/0x10
[  188.237367][T12627]  ? netlink_sendmsg+0x642/0xb30
[  188.237375][T12627]  ? skb_put+0x11b/0x210
[  188.237390][T12627]  netlink_sendmsg+0x805/0xb30
[  188.237407][T12627]  ? __pfx_netlink_sendmsg+0x10/0x10
[  188.237421][T12627]  ? aa_sock_msg_perm+0xf1/0x1d0
[  188.237433][T12627]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  188.237445][T12627]  ? __pfx_netlink_sendmsg+0x10/0x10
[  188.237456][T12627]  __sock_sendmsg+0x21c/0x270
[  188.237473][T12627]  ____sys_sendmsg+0x505/0x830
[  188.237489][T12627]  ? __pfx_____sys_sendmsg+0x10/0x10
[  188.237510][T12627]  ? import_iovec+0x74/0xa0
[  188.237566][T12627]  ___sys_sendmsg+0x21f/0x2a0
[  188.237581][T12627]  ? __pfx____sys_sendmsg+0x10/0x10
[  188.237622][T12627]  ? __fget_files+0x2a/0x420
[  188.237632][T12627]  ? __fget_files+0x3a0/0x420
[  188.237650][T12627]  __x64_sys_sendmsg+0x19b/0x260
[  188.237665][T12627]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  188.237686][T12627]  ? do_user_addr_fault+0xc8a/0x1390
[  188.237707][T12627]  ? do_syscall_64+0xbe/0x3b0
[  188.237721][T12627]  do_syscall_64+0xfa/0x3b0
[  188.237730][T12627]  ? lockdep_hardirqs_on+0x9c/0x150
[  188.237743][T12627]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.237754][T12627]  ? exc_page_fault+0x9f/0xf0
[  188.237770][T12627]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.237780][T12627] RIP: 0033:0x7f8c2618ebe9
[  188.237790][T12627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  188.237799][T12627] RSP: 002b:00007f8c26fb9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  188.237813][T12627] RAX: ffffffffffffffda RBX: 00007f8c263c6090 RCX: 00007f8c2618ebe9
[  188.237821][T12627] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  188.237828][T12627] RBP: 00007f8c26211e19 R08: 0000000000000000 R09: 0000000000000000
[  188.237835][T12627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  188.237841][T12627] R13: 00007f8c263c6128 R14: 00007f8c263c6090 R15: 00007ffd797e15a8
[  188.237861][T12627]  </TASK>
[  188.838509][T12645] ieee802154 phy1 wpan1: encryption failed: -22
[  188.878422][T12648] xt_limit: Overflow, try lower: 604147548/4200216962
[  188.926142][T12651] syz_tun: entered allmulticast mode
[  189.105248][T12673] vlan0: left promiscuous mode
[  189.227940][T12677] lo speed is unknown, defaulting to 1000
[  189.231702][T12677] lo speed is unknown, defaulting to 1000
[  189.304845][T12686] bond4: (slave macvlan3): Error -22 calling dev_set_mtu
[  189.380644][T12688] validate_nla: 23 callbacks suppressed
[  189.380657][T12688] netlink: 'syz.2.2052': attribute type 9 has an invalid length.
[  189.457409][T12696] __nla_validate_parse: 19 callbacks suppressed
[  189.457419][T12696] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2054'.
[  189.518636][T12694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2053'.
[  189.558162][T12705] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2057'.
[  189.638306][T12709] tipc: Disabling bearer <ib:wlan0>
[  189.745122][T12717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2061'.
[  189.881464][T12714] lo speed is unknown, defaulting to 1000
[  189.884850][T12714] lo speed is unknown, defaulting to 1000
[  190.078234][T12730] netlink: 'syz.0.2064': attribute type 10 has an invalid length.
[  190.091297][T12730] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  190.098076][T12730] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  190.307403][T12734] syzkaller1: entered promiscuous mode
[  190.309915][T12734] syzkaller1: entered allmulticast mode
[  190.313834][T12734] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  190.453812][T12736] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  190.457687][T12736] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  190.461132][T12736] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  190.647674][T12746] lo speed is unknown, defaulting to 1000
[  190.651393][T12746] lo speed is unknown, defaulting to 1000
[  190.740123][T12746] netlink: 'syz.2.2068': attribute type 2 has an invalid length.
[  190.748229][T12746] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2068'.
[  190.952269][T12754] netlink: 'syz.2.2070': attribute type 21 has an invalid length.
[  190.955633][T12754] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2070'.
[  191.254997][T12769] netlink: 'syz.2.2072': attribute type 1 has an invalid length.
[  191.262539][T12769] netlink: 'syz.2.2072': attribute type 1 has an invalid length.
[  191.328347][T12774] netlink: 'syz.2.2074': attribute type 1 has an invalid length.
[  191.331518][T12774] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2074'.
[  191.362353][T12775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2075'.
[  191.470536][T12783] netlink: 'syz.2.2077': attribute type 1 has an invalid length.
[  191.478124][T12783] netlink: 'syz.2.2077': attribute type 1 has an invalid length.
[  191.568086][T12794] syzkaller1: entered allmulticast mode
[  191.628966][T12801] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  191.632204][T12800] tipc: Resetting bearer <eth:syzkaller0>
[  191.919088][T12824] netlink: 'syz.0.2086': attribute type 10 has an invalid length.
[  192.637732][T12800] tipc: Disabling bearer <eth:syzkaller0>
[  192.643045][T12806] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  192.648077][T12806] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  192.654939][T12810] mac80211_hwsim hwsim244 wlan1: left allmulticast mode
[  192.663557][T12828] mac80211_hwsim hwsim244 wlan1: entered allmulticast mode
[  192.734469][T12843] lo speed is unknown, defaulting to 1000
[  192.742329][T12843] lo speed is unknown, defaulting to 1000
[  192.753875][T12850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2090'.
[  192.758142][T12850] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2090'.
[  192.772545][T12850] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  193.005286][T12860] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  193.105531][T12862] lo speed is unknown, defaulting to 1000
[  193.111617][T12862] lo speed is unknown, defaulting to 1000
[  193.298504][T12880] ieee802154 phy1 wpan1: encryption failed: -22
[  193.842373][T12914] openvswitch: netlink: Key type 251 is out of range max 32
[  194.007359][T12921] lo speed is unknown, defaulting to 1000
[  194.012708][T12921] lo speed is unknown, defaulting to 1000
[  194.110720][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  194.605286][T12956] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  194.678177][T12959] __nla_validate_parse: 11 callbacks suppressed
[  194.678192][T12959] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2125'.
[  194.687611][T12959] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  194.692598][T12959] CPU: 1 UID: 0 PID: 12959 Comm: syz.1.2125 Not tainted syzkaller #0 PREEMPT(full) 
[  194.692609][T12959] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  194.692614][T12959] Call Trace:
[  194.692618][T12959]  <TASK>
[  194.692622][T12959]  dump_stack_lvl+0x189/0x250
[  194.692637][T12959]  ? __pfx_dump_stack_lvl+0x10/0x10
[  194.692646][T12959]  ? __pfx__printk+0x10/0x10
[  194.692659][T12959]  ? kernfs_path_from_node+0x2f/0x290
[  194.692668][T12959]  ? kernfs_path_from_node+0x250/0x290
[  194.692676][T12959]  ? kernfs_path_from_node+0x2f/0x290
[  194.692686][T12959]  sysfs_warn_dup+0x8e/0xa0
[  194.692694][T12959]  sysfs_do_create_link_sd+0xc0/0x110
[  194.692703][T12959]  device_add_class_symlinks+0x1cf/0x240
[  194.692713][T12959]  device_add+0x475/0xb50
[  194.692721][T12959]  wiphy_register+0x1ba6/0x28d0
[  194.692739][T12959]  ? __pfx_wiphy_register+0x10/0x10
[  194.692749][T12959]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  194.692762][T12959]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  194.692772][T12959]  ieee80211_register_hw+0x3425/0x4080
[  194.692788][T12959]  ? ieee80211_register_hw+0x1461/0x4080
[  194.692798][T12959]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  194.692808][T12959]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  194.692820][T12959]  ? __hrtimer_setup+0x187/0x210
[  194.692827][T12959]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  194.692838][T12959]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  194.692859][T12959]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  194.692866][T12959]  ? trace_kmalloc+0x1f/0xd0
[  194.692876][T12959]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  194.692884][T12959]  ? kstrndup+0xbf/0x160
[  194.692895][T12959]  hwsim_new_radio_nl+0xea4/0x1b10
[  194.692905][T12959]  ? __pfx___nla_validate_parse+0x10/0x10
[  194.692922][T12959]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  194.692935][T12959]  ? __nla_parse+0x40/0x60
[  194.692946][T12959]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  194.692958][T12959]  genl_family_rcv_msg_doit+0x215/0x300
[  194.692969][T12959]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  194.692982][T12959]  ? bpf_lsm_capable+0x9/0x20
[  194.692990][T12959]  ? security_capable+0x7e/0x2e0
[  194.693002][T12959]  genl_rcv_msg+0x60e/0x790
[  194.693013][T12959]  ? __pfx_genl_rcv_msg+0x10/0x10
[  194.693020][T12959]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  194.693034][T12959]  netlink_rcv_skb+0x208/0x470
[  194.693043][T12959]  ? __lock_acquire+0xab9/0xd20
[  194.693053][T12959]  ? __pfx_genl_rcv_msg+0x10/0x10
[  194.693061][T12959]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  194.693078][T12959]  ? down_read+0x1ad/0x2e0
[  194.693086][T12959]  genl_rcv+0x28/0x40
[  194.693093][T12959]  netlink_unicast+0x82f/0x9e0
[  194.693105][T12959]  ? __pfx_netlink_unicast+0x10/0x10
[  194.693115][T12959]  ? netlink_sendmsg+0x642/0xb30
[  194.693120][T12959]  ? skb_put+0x11b/0x210
[  194.693128][T12959]  netlink_sendmsg+0x805/0xb30
[  194.693138][T12959]  ? __pfx_netlink_sendmsg+0x10/0x10
[  194.693146][T12959]  ? aa_sock_msg_perm+0xf1/0x1d0
[  194.693154][T12959]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  194.693161][T12959]  ? __pfx_netlink_sendmsg+0x10/0x10
[  194.693167][T12959]  __sock_sendmsg+0x21c/0x270
[  194.693178][T12959]  ____sys_sendmsg+0x505/0x830
[  194.693188][T12959]  ? __pfx_____sys_sendmsg+0x10/0x10
[  194.693199][T12959]  ? import_iovec+0x74/0xa0
[  194.693208][T12959]  ___sys_sendmsg+0x21f/0x2a0
[  194.693216][T12959]  ? __pfx____sys_sendmsg+0x10/0x10
[  194.693238][T12959]  ? __fget_files+0x2a/0x420
[  194.693244][T12959]  ? __fget_files+0x3a0/0x420
[  194.693256][T12959]  __x64_sys_sendmsg+0x19b/0x260
[  194.693265][T12959]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  194.693277][T12959]  ? rcu_is_watching+0x15/0xb0
[  194.693285][T12959]  ? do_syscall_64+0xbe/0x3b0
[  194.693293][T12959]  do_syscall_64+0xfa/0x3b0
[  194.693299][T12959]  ? lockdep_hardirqs_on+0x9c/0x150
[  194.693308][T12959]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  194.693314][T12959]  ? exc_page_fault+0x9f/0xf0
[  194.693325][T12959]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  194.693332][T12959] RIP: 0033:0x7f8c2618ebe9
[  194.693340][T12959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  194.693346][T12959] RSP: 002b:00007f8c26fda038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  194.693354][T12959] RAX: ffffffffffffffda RBX: 00007f8c263c5fa0 RCX: 00007f8c2618ebe9
[  194.693359][T12959] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  194.693363][T12959] RBP: 00007f8c26211e19 R08: 0000000000000000 R09: 0000000000000000
[  194.693367][T12959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  194.693371][T12959] R13: 00007f8c263c6038 R14: 00007f8c263c5fa0 R15: 00007ffd797e15a8
[  194.693382][T12959]  </TASK>
[  194.700023][T12961] validate_nla: 10 callbacks suppressed
[  194.700036][T12961] netlink: 'syz.2.2126': attribute type 10 has an invalid length.
[  194.758187][T12964] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2126'.
[  194.835537][T12961] team0: Cannot enslave team device to itself
[  194.910107][T12972] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2128'.
[  194.924929][T12974] netlink: 'syz.0.2129': attribute type 1 has an invalid length.
[  194.929372][T12974] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2129'.
[  194.932660][T12974] netlink: 'syz.0.2129': attribute type 2 has an invalid length.
[  194.935224][T12974] netlink: 'syz.0.2129': attribute type 1 has an invalid length.
[  194.975594][T12978] netlink: 'syz.2.2132': attribute type 9 has an invalid length.
[  194.980397][T12976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2130'.
[  195.221973][T13001] syzkaller0: entered promiscuous mode
[  195.223932][T13001] syzkaller0: entered allmulticast mode
[  195.255476][T13005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2136'.
[  195.559128][T13020] netlink: 'syz.1.2141': attribute type 10 has an invalid length.
[  195.566247][T13020] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  195.570411][T13020] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  196.091914][T13025] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  196.907741][T13032] lo speed is unknown, defaulting to 1000
[  196.911366][T13032] lo speed is unknown, defaulting to 1000
[  197.007784][T13032] netlink: 'syz.2.2145': attribute type 2 has an invalid length.
[  197.187418][T13051] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2149'.
[  197.390241][T13060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2152'.
[  197.408247][T13062] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  197.560246][T13069] IPVS: Scheduler module ip_vs_sip not found
[  197.670316][T13079] netlink: 'syz.2.2158': attribute type 12 has an invalid length.
[  197.832760][T13087] netlink: 'syz.0.2161': attribute type 8 has an invalid length.
[  197.877993][T13094] netlink: 'syz.0.2165': attribute type 6 has an invalid length.
[  198.016291][T13108] bond0: (slave macvlan6): Error -22 calling dev_set_mtu
[  198.034029][T13112] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2170'.
[  198.039258][T13112] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2170'.
[  198.150672][T13116] 8021q: adding VLAN 0 to HW filter on device bond0
[  198.169524][T13116] bond0: (slave macvlan6): Opening slave failed
[  198.257539][T13118] tipc: Resetting bearer <eth:gre0>
[  198.260923][T13118] tipc: Resetting bearer <eth:team0>
[  198.434700][T13129] lo speed is unknown, defaulting to 1000
[  198.440098][T13129] lo speed is unknown, defaulting to 1000
[  198.856568][T13157] lo speed is unknown, defaulting to 1000
[  198.860148][T13157] lo speed is unknown, defaulting to 1000
[  198.994868][T13173] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  199.000551][T13174] syzkaller0: entered promiscuous mode
[  199.005960][T13174] syzkaller0: entered allmulticast mode
[  199.008900][T13173] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  199.062968][T13173] tipc: Resetting bearer <eth:syzkaller0>
[  199.084520][T13173] tipc: Disabling bearer <eth:syzkaller0>
[  199.616488][T13216] 8021q: adding VLAN 0 to HW filter on device bond1
[  199.639285][T13216] 8021q: adding VLAN 0 to HW filter on device macvlan8
[  199.644428][T13216] bond1: (slave macvlan8): Enslaving as a backup interface with a down link
[  199.788731][T13219] __nla_validate_parse: 8 callbacks suppressed
[  199.788745][T13219] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2198'.
[  199.800193][T13225] lo speed is unknown, defaulting to 1000
[  199.803931][T13225] lo speed is unknown, defaulting to 1000
[  200.504484][T13244] lo speed is unknown, defaulting to 1000
[  200.509043][T13244] lo speed is unknown, defaulting to 1000
[  200.836959][T13260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2208'.
[  200.840789][T13260] openvswitch: netlink: Flow actions attr not present in new flow.
[  200.988863][T13272] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2210'.
[  200.994295][T13262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2209'.
[  201.000758][T13262] validate_nla: 5 callbacks suppressed
[  201.000767][T13262] netlink: 'syz.1.2209': attribute type 10 has an invalid length.
[  201.050806][T13278] netlink: 'syz.1.2211': attribute type 1 has an invalid length.
[  201.054843][T13278] netlink: 'syz.1.2211': attribute type 1 has an invalid length.
[  201.100803][T13278] netlink: 'syz.1.2211': attribute type 1 has an invalid length.
[  201.132154][T13278] 8021q: adding VLAN 0 to HW filter on device bond20
[  201.139353][T13278] bond20: (slave wlan0): Opening slave failed
[  201.230917][T13284] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  201.434822][T13302] netlink: 'syz.0.2216': attribute type 12 has an invalid length.
[  201.564008][T13305] netlink: 'syz.0.2217': attribute type 10 has an invalid length.
[  201.646628][T13316] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2221'.
[  201.670416][T13322] netlink: 'syz.1.2222': attribute type 11 has an invalid length.
[  201.674287][T13322] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2222'.
[  201.759625][T13327] lo speed is unknown, defaulting to 1000
[  201.762416][T13327] lo speed is unknown, defaulting to 1000
[  201.800440][T13336] bond4: (slave macvlan3): Error -22 calling dev_set_mtu
[  201.886928][T13342] bond0: option xmit_hash_policy: invalid value (8)
[  201.893869][T13342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2228'.
[  201.948041][T13343] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2226'.
[  202.046195][T13327] netlink: 'syz.1.2224': attribute type 2 has an invalid length.
[  202.059961][T13327] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2224'.
[  202.491399][T13367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2235'.
[  202.743262][T13386] bond1: entered allmulticast mode
[  202.745094][T13386] macvlan8: entered allmulticast mode
[  202.747594][T13386] bond0: entered allmulticast mode
[  202.910107][T13400] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  202.912576][T13400] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  203.091606][T13414] lo speed is unknown, defaulting to 1000
[  203.094289][T13414] lo speed is unknown, defaulting to 1000
[  203.328587][T13425] bond4: (slave macvlan3): Error -22 calling dev_set_mtu
[  203.335468][T13427] netlink: 'syz.2.2255': attribute type 1 has an invalid length.
[  203.341476][T13427] netlink: 'syz.2.2255': attribute type 1 has an invalid length.
[  203.406427][T13436] netlink: 'syz.2.2255': attribute type 1 has an invalid length.
[  203.449890][T13436] 8021q: adding VLAN 0 to HW filter on device bond15
[  203.464960][T13436] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  203.477583][T13436] tipc: Resetting bearer <ib:wlan0>
[  203.480930][T13436] tipc: Resetting bearer <ib:wlan0>
[  203.483025][T13436] bond15: (slave wlan0): Opening slave failed
[  203.496662][T13436] tipc: Resetting bearer <ib:wlan0>
[  203.499353][T13436] tipc: Resetting bearer <ib:wlan0>
[  203.529003][T13449] bridge0: port 1(syz_tun) entered blocking state
[  203.541487][T13449] bridge0: port 1(syz_tun) entered disabled state
[  203.571945][T13437] lo speed is unknown, defaulting to 1000
[  203.578611][T13437] lo speed is unknown, defaulting to 1000
[  203.601076][T13457] ieee802154 phy1 wpan1: encryption failed: -22
[  203.783628][T13469] lo speed is unknown, defaulting to 1000
[  203.792517][T13469] lo speed is unknown, defaulting to 1000
[  203.900274][T13477] mac80211_hwsim hwsim391 wlan1: entered allmulticast mode
[  204.210442][T13491] lo speed is unknown, defaulting to 1000
[  204.217383][T13491] lo speed is unknown, defaulting to 1000
[  204.388213][T13504] 8021q: adding VLAN 0 to HW filter on device bond16
[  204.553647][T13513] mac80211_hwsim hwsim406 wlan1: entered allmulticast mode
[  205.044387][T13526] __nla_validate_parse: 83 callbacks suppressed
[  205.044403][T13526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2284'.
[  205.053435][T13526] tipc: New replicast peer: 255.255.255.255
[  205.056809][T13526] tipc: Enabled bearer <udp:syz2>, priority 10
[  205.320188][T13533] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2287'.
[  205.328131][T13533] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  205.332387][T13533] syzkaller0: entered promiscuous mode
[  205.334698][T13533] syzkaller0: entered allmulticast mode
[  205.474165][T13543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2290'.
[  205.730085][T13548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2291'.
[  205.903994][T13553] mac80211_hwsim hwsim406 wlan1: left allmulticast mode
[  205.926945][T13553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2293'.
[  206.050871][T13559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2295'.
[  206.098768][T13561] validate_nla: 7 callbacks suppressed
[  206.098785][T13561] netlink: 'syz.1.2296': attribute type 1 has an invalid length.
[  206.125650][T13561] 8021q: adding VLAN 0 to HW filter on device bond21
[  206.130704][T13561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2296'.
[  206.140175][T13561] veth10: entered promiscuous mode
[  206.149300][T13561] veth11: entered promiscuous mode
[  206.153277][T13561] bridge0: port 1(syz_tun) entered disabled state
[  206.202368][T13565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2297'.
[  206.208815][T13564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2297'.
[  206.341597][T13573] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2300'.
[  206.785176][T13604] netlink: 'syz.1.2307': attribute type 2 has an invalid length.
[  206.814624][T13604] netlink: 'syz.1.2307': attribute type 4 has an invalid length.
[  206.821526][T13606] netlink: 'syz.0.2308': attribute type 1 has an invalid length.
[  206.824794][T13606] netlink: 'syz.0.2308': attribute type 2 has an invalid length.
[  206.829877][T13606] netlink: 'syz.0.2308': attribute type 1 has an invalid length.
[  207.029040][T13630] syzkaller1: entered promiscuous mode
[  207.031681][T13630] syzkaller1: entered allmulticast mode
[  207.295425][T13641] netlink: 'syz.0.2317': attribute type 9 has an invalid length.
[  207.460842][T13655] 8021q: adding VLAN 0 to HW filter on device bond0
[  207.470920][T13655] bond0: (slave macvlan6): Opening slave failed
[  207.779893][T13689] lo speed is unknown, defaulting to 1000
[  207.783702][T13689] lo speed is unknown, defaulting to 1000
[  207.828563][T13691] syzkaller1: entered promiscuous mode
[  207.830903][T13691] syzkaller1: entered allmulticast mode
[  208.129996][T13696] sctp: [Deprecated]: syz.0.2330 (pid 13696) Use of struct sctp_assoc_value in delayed_ack socket option.
[  208.129996][T13696] Use struct sctp_sack_info instead
[  208.139376][T13697] sctp: [Deprecated]: syz.0.2330 (pid 13697) Use of struct sctp_assoc_value in delayed_ack socket option.
[  208.139376][T13697] Use struct sctp_sack_info instead
[  208.248720][T13699] ieee802154 phy1 wpan1: encryption failed: -22
[  208.257474][T13699] team0: Mode changed to "loadbalance"
[  208.293018][T13702] netem: change failed
[  208.759452][T13723] bond1: left allmulticast mode
[  208.761505][T13723] macvlan8: left allmulticast mode
[  208.763411][T13723] bond0: left allmulticast mode
[  208.836986][T13729] netlink: 'syz.2.2340': attribute type 10 has an invalid length.
[  208.883469][T13731] netlink: 'syz.2.2341': attribute type 1 has an invalid length.
[  208.974237][T13733] netlink: 'syz.2.2342': attribute type 1 has an invalid length.
[  209.148918][T13733] 8021q: adding VLAN 0 to HW filter on device bond17
[  209.164202][T13733] tipc: Resetting bearer <ib:wlan0>
[  209.170191][T13733] tipc: Resetting bearer <ib:wlan0>
[  209.172547][T13733] bond17: (slave wlan0): Opening slave failed
[  209.175337][T13733] tipc: Resetting bearer <ib:wlan0>
[  209.178517][T13733] tipc: Resetting bearer <ib:wlan0>
[  209.325524][T13742] 8021q: adding VLAN 0 to HW filter on device bond4
[  209.338740][T13742] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  209.343591][T13742] bond4: (slave macvlan3): Enslaving as a backup interface with a down link
[  209.351054][T13742] bond4: (slave macvlan3): Releasing backup interface
[  209.448645][T13746] bond4: option mode: unable to set because the bond device is up
[  209.457447][T13746] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  209.461398][T13746] bond4: (slave macvlan4): Enslaving as a backup interface with a down link
[  209.467865][T13746] bond4: (slave macvlan4): Releasing backup interface
[  209.719397][T13761] mac80211_hwsim hwsim373 wlan0: entered promiscuous mode
[  210.083595][T13801] __nla_validate_parse: 19 callbacks suppressed
[  210.083609][T13801] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2359'.
[  210.292530][T13811] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  210.295524][T13811] CPU: 1 UID: 0 PID: 13811 Comm: syz.2.2362 Not tainted syzkaller #0 PREEMPT(full) 
[  210.295535][T13811] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  210.295540][T13811] Call Trace:
[  210.295544][T13811]  <TASK>
[  210.295547][T13811]  dump_stack_lvl+0x189/0x250
[  210.295561][T13811]  ? __pfx_dump_stack_lvl+0x10/0x10
[  210.295570][T13811]  ? __pfx__printk+0x10/0x10
[  210.295581][T13811]  ? kernfs_path_from_node+0x2f/0x290
[  210.295589][T13811]  ? kernfs_path_from_node+0x250/0x290
[  210.295595][T13811]  ? kernfs_path_from_node+0x2f/0x290
[  210.295604][T13811]  sysfs_warn_dup+0x8e/0xa0
[  210.295611][T13811]  sysfs_do_create_link_sd+0xc0/0x110
[  210.295620][T13811]  device_add_class_symlinks+0x1cf/0x240
[  210.295629][T13811]  device_add+0x475/0xb50
[  210.295638][T13811]  wiphy_register+0x1ba6/0x28d0
[  210.295672][T13811]  ? __pfx_wiphy_register+0x10/0x10
[  210.295683][T13811]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  210.295695][T13811]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  210.295705][T13811]  ieee80211_register_hw+0x3425/0x4080
[  210.295720][T13811]  ? ieee80211_register_hw+0x1461/0x4080
[  210.295731][T13811]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  210.295741][T13811]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  210.295754][T13811]  ? __hrtimer_setup+0x187/0x210
[  210.295760][T13811]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  210.295788][T13811]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  210.295810][T13811]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  210.295819][T13811]  ? trace_kmalloc+0x1f/0xd0
[  210.295827][T13811]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  210.295836][T13811]  ? kstrndup+0xbf/0x160
[  210.295848][T13811]  hwsim_new_radio_nl+0xea4/0x1b10
[  210.295858][T13811]  ? __pfx___nla_validate_parse+0x10/0x10
[  210.295874][T13811]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  210.295888][T13811]  ? __nla_parse+0x40/0x60
[  210.295899][T13811]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  210.295911][T13811]  genl_family_rcv_msg_doit+0x215/0x300
[  210.295923][T13811]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  210.295936][T13811]  ? bpf_lsm_capable+0x9/0x20
[  210.295945][T13811]  ? security_capable+0x7e/0x2e0
[  210.295958][T13811]  genl_rcv_msg+0x60e/0x790
[  210.295968][T13811]  ? __pfx_genl_rcv_msg+0x10/0x10
[  210.295976][T13811]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  210.295991][T13811]  netlink_rcv_skb+0x208/0x470
[  210.295999][T13811]  ? __lock_acquire+0xab9/0xd20
[  210.296010][T13811]  ? __pfx_genl_rcv_msg+0x10/0x10
[  210.296019][T13811]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  210.296036][T13811]  ? down_read+0x1ad/0x2e0
[  210.296044][T13811]  genl_rcv+0x28/0x40
[  210.296051][T13811]  netlink_unicast+0x82f/0x9e0
[  210.296063][T13811]  ? __pfx_netlink_unicast+0x10/0x10
[  210.296073][T13811]  ? netlink_sendmsg+0x642/0xb30
[  210.296078][T13811]  ? skb_put+0x11b/0x210
[  210.296087][T13811]  netlink_sendmsg+0x805/0xb30
[  210.296097][T13811]  ? __pfx_netlink_sendmsg+0x10/0x10
[  210.296105][T13811]  ? aa_sock_msg_perm+0xf1/0x1d0
[  210.296112][T13811]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  210.296119][T13811]  ? __pfx_netlink_sendmsg+0x10/0x10
[  210.296131][T13811]  __sock_sendmsg+0x21c/0x270
[  210.296142][T13811]  ____sys_sendmsg+0x505/0x830
[  210.296152][T13811]  ? __pfx_____sys_sendmsg+0x10/0x10
[  210.296163][T13811]  ? import_iovec+0x74/0xa0
[  210.296173][T13811]  ___sys_sendmsg+0x21f/0x2a0
[  210.296181][T13811]  ? __pfx____sys_sendmsg+0x10/0x10
[  210.296204][T13811]  ? __fget_files+0x2a/0x420
[  210.296209][T13811]  ? __fget_files+0x3a0/0x420
[  210.296220][T13811]  __x64_sys_sendmsg+0x19b/0x260
[  210.296228][T13811]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  210.296240][T13811]  ? rcu_is_watching+0x15/0xb0
[  210.296250][T13811]  ? do_syscall_64+0xbe/0x3b0
[  210.296258][T13811]  do_syscall_64+0xfa/0x3b0
[  210.296264][T13811]  ? lockdep_hardirqs_on+0x9c/0x150
[  210.296273][T13811]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.296279][T13811]  ? exc_page_fault+0x9f/0xf0
[  210.296311][T13811]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.296318][T13811] RIP: 0033:0x7fa45498ebe9
[  210.296325][T13811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  210.296331][T13811] RSP: 002b:00007fa455796038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  210.296339][T13811] RAX: ffffffffffffffda RBX: 00007fa454bc6090 RCX: 00007fa45498ebe9
[  210.296344][T13811] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  210.296349][T13811] RBP: 00007fa454a11e19 R08: 0000000000000000 R09: 0000000000000000
[  210.296353][T13811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  210.296357][T13811] R13: 00007fa454bc6128 R14: 00007fa454bc6090 R15: 00007fff0f825118
[  210.296368][T13811]  </TASK>
[  210.480496][T13809] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  210.483116][T13809] CPU: 1 UID: 0 PID: 13809 Comm: syz.2.2362 Not tainted syzkaller #0 PREEMPT(full) 
[  210.483128][T13809] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  210.483133][T13809] Call Trace:
[  210.483136][T13809]  <TASK>
[  210.483140][T13809]  dump_stack_lvl+0x189/0x250
[  210.483153][T13809]  ? __pfx_dump_stack_lvl+0x10/0x10
[  210.483161][T13809]  ? __pfx__printk+0x10/0x10
[  210.483173][T13809]  ? kernfs_path_from_node+0x2f/0x290
[  210.483180][T13809]  ? kernfs_path_from_node+0x250/0x290
[  210.483187][T13809]  ? kernfs_path_from_node+0x2f/0x290
[  210.483195][T13809]  sysfs_warn_dup+0x8e/0xa0
[  210.483203][T13809]  sysfs_do_create_link_sd+0xc0/0x110
[  210.483211][T13809]  device_add_class_symlinks+0x1cf/0x240
[  210.483220][T13809]  device_add+0x475/0xb50
[  210.483229][T13809]  wiphy_register+0x1ba6/0x28d0
[  210.483246][T13809]  ? __pfx_wiphy_register+0x10/0x10
[  210.483255][T13809]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  210.483267][T13809]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  210.483276][T13809]  ieee80211_register_hw+0x3425/0x4080
[  210.483317][T13809]  ? ieee80211_register_hw+0x1461/0x4080
[  210.483329][T13809]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  210.483342][T13809]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  210.483355][T13809]  ? __hrtimer_setup+0x187/0x210
[  210.483362][T13809]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  210.483377][T13809]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  210.483398][T13809]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  210.483406][T13809]  ? trace_kmalloc+0x1f/0xd0
[  210.483415][T13809]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  210.483424][T13809]  ? kstrndup+0xbf/0x160
[  210.483435][T13809]  hwsim_new_radio_nl+0xea4/0x1b10
[  210.483445][T13809]  ? __pfx___nla_validate_parse+0x10/0x10
[  210.483462][T13809]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  210.483475][T13809]  ? __nla_parse+0x40/0x60
[  210.483487][T13809]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  210.483499][T13809]  genl_family_rcv_msg_doit+0x215/0x300
[  210.483510][T13809]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  210.483523][T13809]  ? bpf_lsm_capable+0x9/0x20
[  210.483532][T13809]  ? security_capable+0x7e/0x2e0
[  210.483544][T13809]  genl_rcv_msg+0x60e/0x790
[  210.483555][T13809]  ? __pfx_genl_rcv_msg+0x10/0x10
[  210.483562][T13809]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  210.483576][T13809]  netlink_rcv_skb+0x208/0x470
[  210.483585][T13809]  ? __lock_acquire+0xab9/0xd20
[  210.483595][T13809]  ? __pfx_genl_rcv_msg+0x10/0x10
[  210.483604][T13809]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  210.483620][T13809]  ? down_read+0x1ad/0x2e0
[  210.483628][T13809]  genl_rcv+0x28/0x40
[  210.483635][T13809]  netlink_unicast+0x82f/0x9e0
[  210.483648][T13809]  ? __pfx_netlink_unicast+0x10/0x10
[  210.483657][T13809]  ? netlink_sendmsg+0x642/0xb30
[  210.483663][T13809]  ? skb_put+0x11b/0x210
[  210.483671][T13809]  netlink_sendmsg+0x805/0xb30
[  210.483681][T13809]  ? __pfx_netlink_sendmsg+0x10/0x10
[  210.483689][T13809]  ? aa_sock_msg_perm+0xf1/0x1d0
[  210.483696][T13809]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  210.483703][T13809]  ? __pfx_netlink_sendmsg+0x10/0x10
[  210.483709][T13809]  __sock_sendmsg+0x21c/0x270
[  210.483719][T13809]  ____sys_sendmsg+0x505/0x830
[  210.483729][T13809]  ? __pfx_____sys_sendmsg+0x10/0x10
[  210.483740][T13809]  ? import_iovec+0x74/0xa0
[  210.483749][T13809]  ___sys_sendmsg+0x21f/0x2a0
[  210.483758][T13809]  ? __pfx____sys_sendmsg+0x10/0x10
[  210.483779][T13809]  ? __fget_files+0x2a/0x420
[  210.483785][T13809]  ? __fget_files+0x3a0/0x420
[  210.483795][T13809]  __x64_sys_sendmsg+0x19b/0x260
[  210.483804][T13809]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  210.483815][T13809]  ? rcu_is_watching+0x15/0xb0
[  210.483824][T13809]  ? do_syscall_64+0xbe/0x3b0
[  210.483832][T13809]  do_syscall_64+0xfa/0x3b0
[  210.483837][T13809]  ? lockdep_hardirqs_on+0x9c/0x150
[  210.483846][T13809]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.483853][T13809]  ? exc_page_fault+0x9f/0xf0
[  210.483863][T13809]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.483869][T13809] RIP: 0033:0x7fa45498ebe9
[  210.483876][T13809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  210.483882][T13809] RSP: 002b:00007fa4557b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  210.483892][T13809] RAX: ffffffffffffffda RBX: 00007fa454bc5fa0 RCX: 00007fa45498ebe9
[  210.483896][T13809] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  210.483900][T13809] RBP: 00007fa454a11e19 R08: 0000000000000000 R09: 0000000000000000
[  210.483921][T13809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  210.483926][T13809] R13: 00007fa454bc6038 R14: 00007fa454bc5fa0 R15: 00007fff0f825118
[  210.483938][T13809]  </TASK>
[  210.903820][T13826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2368'.
[  210.919483][T13828] bond1: (slave macvlan8): Releasing backup interface
[  210.934151][T13828] ieee802154 phy1 wpan1: encryption failed: -22
[  210.948656][T13828] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2369'.
[  211.046396][T13836] openvswitch: netlink: Unknown key attributes 2
[  211.050110][T13836] syzkaller0: entered promiscuous mode
[  211.052516][T13836] syzkaller0: entered allmulticast mode
[  211.181984][T13839] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2374'.
[  211.345060][T13847] validate_nla: 3 callbacks suppressed
[  211.345074][T13847] netlink: 'syz.2.2376': attribute type 12 has an invalid length.
[  211.350650][T13847] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.2376'.
[  211.592935][T13866] mac80211_hwsim hwsim373 wlan0: left promiscuous mode
[  211.612775][T13866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2380'.
[  211.625304][T13872] netlink: 'syz.2.2383': attribute type 4 has an invalid length.
[  211.629372][T13873] netlink: 'syz.2.2383': attribute type 4 has an invalid length.
[  211.711717][T13865] netlink: 'syz.1.2382': attribute type 10 has an invalid length.
[  211.874680][T13883] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2385'.
[  211.993511][T13891] lo speed is unknown, defaulting to 1000
[  211.996435][T13891] lo speed is unknown, defaulting to 1000
[  212.188331][T13892] netlink: 'syz.1.2387': attribute type 2 has an invalid length.
[  212.190120][T13891] netlink: 'syz.1.2387': attribute type 2 has an invalid length.
[  212.201829][T13891] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2387'.
[  212.357854][T13902] rdma_op ffff88803e2f81f0 conn xmit_rdma 0000000000000000
[  212.360428][T13902] rdma_op ffff88803e2fa1f0 conn xmit_rdma 0000000000000000
[  212.363030][T13902] rdma_op ffff88803f4959f0 conn xmit_rdma 0000000000000000
[  212.369300][T13902] rdma_op ffff8880390829f0 conn xmit_rdma 0000000000000000
[  212.371653][T13902] rdma_op ffff8880442bf9f0 conn xmit_rdma 0000000000000000
[  212.374299][T13902] rdma_op ffff8880442b99f0 conn xmit_rdma 0000000000000000
[  212.377169][T13902] rdma_op ffff8880442ba9f0 conn xmit_rdma 0000000000000000
[  212.379895][T13902] rdma_op ffff8880442b81f0 conn xmit_rdma 0000000000000000
[  212.388326][T13902] rdma_op ffff88804190b9f0 conn xmit_rdma 0000000000000000
[  212.391549][T13902] rdma_op ffff88804190a1f0 conn xmit_rdma 0000000000000000
[  212.407625][T13905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2391'.
[  212.527027][T13913] wg1: entered promiscuous mode
[  212.776188][T13935] lo speed is unknown, defaulting to 1000
[  212.779197][T13935] lo speed is unknown, defaulting to 1000
[  212.786844][T13936] lo speed is unknown, defaulting to 1000
[  212.796363][T13933] netlink: 'syz.1.2399': attribute type 2 has an invalid length.
[  212.799529][T13936] lo speed is unknown, defaulting to 1000
[  212.824665][T13938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2400'.
[  212.991630][T13948] netlink: 'syz.0.2403': attribute type 10 has an invalid length.
[  213.107999][T13955] netlink: 'syz.0.2405': attribute type 10 has an invalid length.
[  213.111518][T13955] mac80211_hwsim hwsim423 wlan1: entered allmulticast mode
[  213.123120][T13958] netlink: 'syz.2.2406': attribute type 10 has an invalid length.
[  213.130067][T13958] mac80211_hwsim hwsim388 wlan1: entered allmulticast mode
[  213.134467][T13959] netlink: 'syz.1.2404': attribute type 11 has an invalid length.
[  213.479180][T13980] can: request_module (can-proto-0) failed.
[  214.339054][T14011] ieee802154 phy1 wpan1: encryption failed: -22
[  214.353845][T14011] team0: Mode changed to "loadbalance"
[  214.416848][T14018] mac80211_hwsim hwsim406 wlan1: entered allmulticast mode
[  214.621735][T14038] bond18: entered promiscuous mode
[  214.623906][T14038] bond18: entered allmulticast mode
[  214.626894][T14038] 8021q: adding VLAN 0 to HW filter on device bond18
[  215.024176][T14061] team0: Mode changed to "broadcast"
[  215.028090][T14064] team0: Unable to change to the same mode the team is in
[  215.037195][T14061] vlan0: entered promiscuous mode
[  215.460111][    C0] ==================================================================
[  215.463636][    C0] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  215.467067][    C0] Write of size 8 at addr ffff8881127d6d30 by task syz-executor/5844
[  215.471545][    C0] 
[  215.472613][    C0] CPU: 0 UID: 0 PID: 5844 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  215.472630][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  215.472639][    C0] Call Trace:
[  215.472645][    C0]  <IRQ>
[  215.472650][    C0]  dump_stack_lvl+0x189/0x250
[  215.472667][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  215.472681][    C0]  ? rcu_is_watching+0x15/0xb0
[  215.472690][    C0]  ? __kasan_check_byte+0x12/0x40
[  215.472704][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  215.472716][    C0]  ? rcu_is_watching+0x15/0xb0
[  215.472725][    C0]  ? lock_release+0x4b/0x3e0
[  215.472741][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  215.472751][    C0]  ? __virt_addr_valid+0x4a5/0x5c0
[  215.472765][    C0]  print_report+0xca/0x240
[  215.472776][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  215.472788][    C0]  kasan_report+0x118/0x150
[  215.472803][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  215.472815][    C0]  __xfrm_state_delete+0x696/0xca0
[  215.472828][    C0]  xfrm_timer_handler+0x18f/0xa00
[  215.472841][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  215.472850][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  215.472863][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  215.472878][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  215.472891][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  215.472907][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  215.472917][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  215.472926][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  215.472942][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  215.472952][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  215.472964][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  215.472977][    C0]  handle_softirqs+0x286/0x870
[  215.472988][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  215.473000][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  215.473012][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  215.473026][    C0]  __irq_exit_rcu+0xca/0x1f0
[  215.473037][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  215.473050][    C0]  irq_exit_rcu+0x9/0x30
[  215.473069][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  215.473086][    C0]  </IRQ>
[  215.473090][    C0]  <TASK>
[  215.473094][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  215.473106][    C0] RIP: 0010:_raw_write_unlock_irq+0x29/0x50
[  215.473122][    C0] Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 0a 04 21 f6 48 89 df e8 42 a4 21 f6 e8 bd ed 4a f6 fb bf 01 00 00 00 <e8> 42 93 13 f6 65 8b 05 fb 15 24 07 85 c0 74 07 5b c3 cc cc cc cc
[  215.473132][    C0] RSP: 0018:ffffc9000341f810 EFLAGS: 00000282
[  215.473144][    C0] RAX: 037d4f01866a3500 RBX: ffffffff8de0c040 RCX: 037d4f01866a3500
[  215.473153][    C0] RDX: 0000000000000000 RSI: ffffffff8d9b8241 RDI: 0000000000000001
[  215.473161][    C0] RBP: ffffc9000341f9d0 R08: ffffffff8fa39037 R09: 1ffffffff1f47206
[  215.473168][    C0] R10: dffffc0000000000 R11: fffffbfff1f47207 R12: 0000000000000000
[  215.473176][    C0] R13: ffffc9000341f940 R14: ffff888108ced410 R15: ffff888119773980
[  215.473190][    C0]  release_task+0x12f9/0x17f0
[  215.473206][    C0]  ? wait_consider_task+0x1944/0x2e10
[  215.473223][    C0]  ? __pfx_release_task+0x10/0x10
[  215.473264][    C0]  ? __do_wait+0x153/0x740
[  215.473278][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  215.473292][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  215.473306][    C0]  wait_consider_task+0x1944/0x2e10
[  215.473323][    C0]  ? __do_wait+0x153/0x740
[  215.473341][    C0]  ? __pfx_wait_consider_task+0x10/0x10
[  215.473355][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  215.473371][    C0]  __do_wait+0x153/0x740
[  215.473387][    C0]  do_wait+0x1f8/0x520
[  215.473401][    C0]  ? do_wait+0x18e/0x520
[  215.473416][    C0]  kernel_wait4+0x1af/0x280
[  215.473431][    C0]  ? __pfx_kernel_wait4+0x10/0x10
[  215.473445][    C0]  ? restore_signal_shadow_stack+0x3b7/0x480
[  215.473460][    C0]  ? __pfx_child_wait_callback+0x10/0x10
[  215.473479][    C0]  __x64_sys_wait4+0x133/0x1e0
[  215.473494][    C0]  ? __pfx___x64_sys_wait4+0x10/0x10
[  215.473516][    C0]  ? do_syscall_64+0xbe/0x3b0
[  215.473527][    C0]  do_syscall_64+0xfa/0x3b0
[  215.473536][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  215.473549][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.473560][    C0]  ? exc_page_fault+0x9f/0xf0
[  215.473574][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.473583][    C0] RIP: 0033:0x7fc2ed384e57
[  215.473595][    C0] Code: 89 7c 24 10 48 89 4c 24 18 e8 45 1b 03 00 4c 8b 54 24 18 8b 54 24 14 41 89 c0 48 8b 74 24 08 8b 7c 24 10 b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 89 44 24 10 e8 95 1b 03 00 8b 44
[  215.473605][    C0] RSP: 002b:00007ffc02534860 EFLAGS: 00000293 ORIG_RAX: 000000000000003d
[  215.473616][    C0] RAX: ffffffffffffffda RBX: 000000000000098c RCX: 00007fc2ed384e57
[  215.473624][    C0] RDX: 0000000040000001 RSI: 00007ffc025348cc RDI: 00000000ffffffff
[  215.473632][    C0] RBP: 00007ffc025348cc R08: 0000000000000000 R09: 0000000000000000
[  215.473639][    C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388
[  215.473646][    C0] R13: 00000000000927c0 R14: 00000000000348e0 R15: 00007ffc02534920
[  215.473659][    C0]  </TASK>
[  215.473663][    C0] 
[  215.670312][    C0] Allocated by task 11897:
[  215.672204][    C0]  kasan_save_track+0x3e/0x80
[  215.674220][    C0]  __kasan_slab_alloc+0x6c/0x80
[  215.676305][    C0]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  215.678588][    C0]  xfrm_state_alloc+0x24/0x2f0
[  215.680577][    C0]  __find_acq_core+0x8a7/0x1c00
[  215.682617][    C0]  xfrm_find_acq+0x78/0xa0
[  215.684500][    C0]  xfrm_alloc_userspi+0x6b3/0xc90
[  215.686586][    C0]  xfrm_user_rcv_msg+0x7a3/0xab0
[  215.688645][    C0]  netlink_rcv_skb+0x208/0x470
[  215.690431][    C0]  xfrm_netlink_rcv+0x79/0x90
[  215.692162][    C0]  netlink_unicast+0x82f/0x9e0
[  215.693895][    C0]  netlink_sendmsg+0x805/0xb30
[  215.696000][    C0]  __sock_sendmsg+0x21c/0x270
[  215.698117][    C0]  ____sys_sendmsg+0x505/0x830
[  215.700219][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  215.702293][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  215.704133][    C0]  do_syscall_64+0xfa/0x3b0
[  215.705965][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.708286][    C0] 
[  215.709136][    C0] Freed by task 51:
[  215.710460][    C0]  kasan_save_track+0x3e/0x80
[  215.712128][    C0]  kasan_save_free_info+0x46/0x50
[  215.714220][    C0]  __kasan_slab_free+0x5b/0x80
[  215.716251][    C0]  kmem_cache_free+0x18f/0x400
[  215.718278][    C0]  xfrm_state_gc_task+0x52d/0x6b0
[  215.720394][    C0]  process_scheduled_works+0xae1/0x17b0
[  215.722686][    C0]  worker_thread+0x8a0/0xda0
[  215.724518][    C0]  kthread+0x711/0x8a0
[  215.726137][    C0]  ret_from_fork+0x3fc/0x770
[  215.728029][    C0]  ret_from_fork_asm+0x1a/0x30
[  215.730030][    C0] 
[  215.730886][    C0] The buggy address belongs to the object at ffff8881127d6d00
[  215.730886][    C0]  which belongs to the cache xfrm_state of size 928
[  215.735765][    C0] The buggy address is located 48 bytes inside of
[  215.735765][    C0]  freed 928-byte region [ffff8881127d6d00, ffff8881127d70a0)
[  215.740367][    C0] 
[  215.741377][    C0] The buggy address belongs to the physical page:
[  215.744014][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8881127d7a80 pfn:0x1127d4
[  215.748179][    C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  215.751482][    C0] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  215.754456][    C0] page_type: f5(slab)
[  215.756072][    C0] raw: 057ff00000000040 ffff888104b2ac80 dead000000000122 0000000000000000
[  215.759763][    C0] raw: ffff8881127d7a80 00000000800e0003 00000000f5000000 0000000000000000
[  215.763541][    C0] head: 057ff00000000040 ffff888104b2ac80 dead000000000122 0000000000000000
[  215.767346][    C0] head: ffff8881127d7a80 00000000800e0003 00000000f5000000 0000000000000000
[  215.771018][    C0] head: 057ff00000000002 ffffea000449f501 00000000ffffffff 00000000ffffffff
[  215.774662][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  215.778252][    C0] page dumped because: kasan: bad access detected
[  215.780934][    C0] page_owner tracks the page as allocated
[  215.783448][    C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6264, tgid 6263 (syz.1.89), ts 66172204952, free_ts 66071550498
[  215.791375][    C0]  post_alloc_hook+0x240/0x2a0
[  215.793416][    C0]  get_page_from_freelist+0x21e4/0x22c0
[  215.795817][    C0]  __alloc_frozen_pages_noprof+0x181/0x370
[  215.798402][    C0]  alloc_pages_mpol+0x232/0x4a0
[  215.800481][    C0]  allocate_slab+0x8a/0x370
[  215.802507][    C0]  ___slab_alloc+0xbeb/0x1410
[  215.804609][    C0]  kmem_cache_alloc_noprof+0x283/0x3c0
[  215.807001][    C0]  xfrm_state_alloc+0x24/0x2f0
[  215.809149][    C0]  xfrm_add_sa+0x17d1/0x4070
[  215.811170][    C0]  xfrm_user_rcv_msg+0x7a3/0xab0
[  215.813378][    C0]  netlink_rcv_skb+0x208/0x470
[  215.815532][    C0]  xfrm_netlink_rcv+0x79/0x90
[  215.817605][    C0]  netlink_unicast+0x82f/0x9e0
[  215.819631][    C0]  netlink_sendmsg+0x805/0xb30
[  215.821601][    C0]  __sock_sendmsg+0x21c/0x270
[  215.823690][    C0]  ____sys_sendmsg+0x505/0x830
[  215.825728][    C0] page last free pid 5297 tgid 5297 stack trace:
[  215.828498][    C0]  __free_frozen_pages+0xbc4/0xd30
[  215.830701][    C0]  __slab_free+0x303/0x3c0
[  215.832678][    C0]  qlist_free_all+0x97/0x140
[  215.834728][    C0]  kasan_quarantine_reduce+0x148/0x160
[  215.837056][    C0]  __kasan_slab_alloc+0x22/0x80
[  215.839195][    C0]  __kmalloc_noprof+0x224/0x4f0
[  215.841367][    C0]  tomoyo_realpath_from_path+0xe3/0x5d0
[  215.843797][    C0]  tomoyo_path_perm+0x213/0x4b0
[  215.845961][    C0]  security_inode_getattr+0x12f/0x330
[  215.848341][    C0]  vfs_fstatat+0xb1/0x170
[  215.850280][    C0]  __x64_sys_newfstatat+0x116/0x190
[  215.852585][    C0]  do_syscall_64+0xfa/0x3b0
[  215.854614][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.857218][    C0] 
[  215.858343][    C0] Memory state around the buggy address:
[  215.860316][    C0]  ffff8881127d6c00: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  215.863005][    C0]  ffff8881127d6c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  215.865719][    C0] >ffff8881127d6d00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  215.868814][    C0]                                      ^
[  215.871328][    C0]  ffff8881127d6d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  215.874181][    C0]  ffff8881127d6e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  215.877577][    C0] ==================================================================
[  215.881195][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  215.884264][    C0] CPU: 0 UID: 0 PID: 5844 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  215.888252][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  215.892205][    C0] Call Trace:
[  215.893579][    C0]  <IRQ>
[  215.894742][    C0]  dump_stack_lvl+0x99/0x250
[  215.896529][    C0]  ? __asan_memcpy+0x40/0x70
[  215.898257][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  215.900329][    C0]  ? __pfx__printk+0x10/0x10
[  215.905269][    C0]  vpanic+0x281/0x750
[  215.906887][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  215.912009][    C0]  ? __pfx_vpanic+0x10/0x10
[  215.913855][    C0]  ? irqentry_exit+0x74/0x90
[  215.915654][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  215.917702][    C0]  panic+0xb9/0xc0
[  215.919171][    C0]  ? __pfx_panic+0x10/0x10
[  215.920876][    C0]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  215.923163][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  215.925530][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  215.932472][    C0]  check_panic_on_warn+0x89/0xb0
[  215.934561][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  215.936619][    C0]  end_report+0x78/0x160
[  215.938376][    C0]  kasan_report+0x129/0x150
[  215.940211][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  215.942517][    C0]  __xfrm_state_delete+0x696/0xca0
[  215.944729][    C0]  xfrm_timer_handler+0x18f/0xa00
[  215.946947][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  215.949370][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  215.951886][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  215.954117][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  215.956617][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  215.959282][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  215.961590][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  215.963917][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  215.966069][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  215.968589][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  215.971097][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  215.973317][    C0]  handle_softirqs+0x286/0x870
[  215.975849][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  215.977756][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  215.979965][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  215.982186][    C0]  __irq_exit_rcu+0xca/0x1f0
[  215.984205][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  215.986521][    C0]  irq_exit_rcu+0x9/0x30
[  215.988373][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  215.990797][    C0]  </IRQ>
[  215.992100][    C0]  <TASK>
[  215.993398][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  215.995975][    C0] RIP: 0010:_raw_write_unlock_irq+0x29/0x50
[  215.998459][    C0] Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 0a 04 21 f6 48 89 df e8 42 a4 21 f6 e8 bd ed 4a f6 fb bf 01 00 00 00 <e8> 42 93 13 f6 65 8b 05 fb 15 24 07 85 c0 74 07 5b c3 cc cc cc cc
[  216.006333][    C0] RSP: 0018:ffffc9000341f810 EFLAGS: 00000282
[  216.008942][    C0] RAX: 037d4f01866a3500 RBX: ffffffff8de0c040 RCX: 037d4f01866a3500
[  216.012218][    C0] RDX: 0000000000000000 RSI: ffffffff8d9b8241 RDI: 0000000000000001
[  216.015500][    C0] RBP: ffffc9000341f9d0 R08: ffffffff8fa39037 R09: 1ffffffff1f47206
[  216.018810][    C0] R10: dffffc0000000000 R11: fffffbfff1f47207 R12: 0000000000000000
[  216.022064][    C0] R13: ffffc9000341f940 R14: ffff888108ced410 R15: ffff888119773980
[  216.025345][    C0]  release_task+0x12f9/0x17f0
[  216.027345][    C0]  ? wait_consider_task+0x1944/0x2e10
[  216.029640][    C0]  ? __pfx_release_task+0x10/0x10
[  216.031803][    C0]  ? __do_wait+0x153/0x740
[  216.033785][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  216.035952][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  216.038185][    C0]  wait_consider_task+0x1944/0x2e10
[  216.040407][    C0]  ? __do_wait+0x153/0x740
[  216.042369][    C0]  ? __pfx_wait_consider_task+0x10/0x10
[  216.044661][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  216.046816][    C0]  __do_wait+0x153/0x740
[  216.048602][    C0]  do_wait+0x1f8/0x520
[  216.050337][    C0]  ? do_wait+0x18e/0x520
[  216.052199][    C0]  kernel_wait4+0x1af/0x280
[  216.054158][    C0]  ? __pfx_kernel_wait4+0x10/0x10
[  216.056277][    C0]  ? restore_signal_shadow_stack+0x3b7/0x480
[  216.058732][    C0]  ? __pfx_child_wait_callback+0x10/0x10
[  216.061033][    C0]  __x64_sys_wait4+0x133/0x1e0
[  216.062641][    C0]  ? __pfx___x64_sys_wait4+0x10/0x10
[  216.064490][    C0]  ? do_syscall_64+0xbe/0x3b0
[  216.066437][    C0]  do_syscall_64+0xfa/0x3b0
[  216.068398][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  216.070561][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.073086][    C0]  ? exc_page_fault+0x9f/0xf0
[  216.074996][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.077418][    C0] RIP: 0033:0x7fc2ed384e57
[  216.079291][    C0] Code: 89 7c 24 10 48 89 4c 24 18 e8 45 1b 03 00 4c 8b 54 24 18 8b 54 24 14 41 89 c0 48 8b 74 24 08 8b 7c 24 10 b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 89 44 24 10 e8 95 1b 03 00 8b 44
[  216.087306][    C0] RSP: 002b:00007ffc02534860 EFLAGS: 00000293 ORIG_RAX: 000000000000003d
[  216.090820][    C0] RAX: ffffffffffffffda RBX: 000000000000098c RCX: 00007fc2ed384e57
[  216.094284][    C0] RDX: 0000000040000001 RSI: 00007ffc025348cc RDI: 00000000ffffffff
[  216.097656][    C0] RBP: 00007ffc025348cc R08: 0000000000000000 R09: 0000000000000000
[  216.101077][    C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388
[  216.104479][    C0] R13: 00000000000927c0 R14: 00000000000348e0 R15: 00007ffc02534920
[  216.107911][    C0]  </TASK>
[  216.110116][    C0] Kernel Offset: disabled
[  216.111969][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:52:07  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000073b0
R8 =ffff888021460237 R9 =1ffff1100428c046 R10=dffffc0000000000 R11=ffffffff854f3b00
R12=dffffc0000000000 R13=ffffffff99afd8ef R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f3b7c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055557415d500 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000007380 CR3=000000010d732000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fc2ed412e53
XMM06=0000000000000000 00007fc2ed412e4d XMM07=0000000000000000 00007fc2ed412e61
XMM08=0000000000000000 00007fc2ed412ee7 XMM09=0000000000000000 00007fc2ed412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff8acb4ff9 RBX=ffff88803b3db200 RCX=0000000000000002 RDX=ffff888023369cc0
RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000032 RSP=ffffc90007c26b40
R8 =0000000000000000 R9 =ffffffff8aca9a05 R10=dffffc0000000000 R11=fffffbfff1ea717d
R12=ffff88803b3dc0b8 R13=0000000000000031 R14=0000000000000c70 R15=dffffc0000000000
RIP=ffffffff81bfb2d3 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f8c26fda6c0 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000562b49bdc000 CR3=000000010d636000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
