last executing test programs:

1.625886869s ago: executing program 1 (id=3326):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)="230000000100", 0x6)
socket$nl_route(0x10, 0x3, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f00000000c0)=0x6, 0x4)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0)

1.090691308s ago: executing program 1 (id=3334):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x8}, 0x48) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x8}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x2}, {}, {0x4}}}, &(0x7f0000000200)='syzkaller\x00', 0x6}, 0x90)
bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0) (async)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x889, 0x8044}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) (async)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x889, 0x8044}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r11 = socket(0x400000000010, 0x3, 0x0)
r12 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@gettfilter={0x24, 0x2e, 0x4, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x4, 0xd}, {0x2, 0x8}, {0x2, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48848}, 0x80)
close(0x3) (async)
close(0x3)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44800)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

1.014249604s ago: executing program 1 (id=3337):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$l2tp6(0xa, 0x2, 0x73) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r6=>0x0})
ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r6}) (async)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r8=>0x0})
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r8})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}}, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, 0x0, 0x4040)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xffffd000) (async)
r11 = socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000568000/0x2000)=nil, 0x2000, 0x5, 0x11, r11, 0x487d0000) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="090000000000000000000200000008000300", @ANYRES32=r12, @ANYBLOB="0800250004"], 0x24}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0)
syz_genetlink_get_family_id$devlink(0x0, r1) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$kcm(0x11, 0xa, 0x300)

1.013572283s ago: executing program 0 (id=3338):
r0 = socket$inet6(0xa, 0x5, 0x0)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000400)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000005000000065222d64ba18c09728965de23698c3385f572b4fef7cecb1e7bafc8c2485c0f4168650ea180b542e0c1e1d98218698b5794ec4310902f20e43142ba224e98aa1dcb4db79909d0e4d6e05d77082050122576b954aa5965a0ddfffbbe1d6e98e7d"], &(0x7f00000002c0)=0x74)
setsockopt$inet_opts(r1, 0x0, 0x2, 0x0, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002d0001000000ea001000000005000080050011802eff"], 0x20}], 0x1}, 0x300)
r3 = socket$pppoe(0x18, 0x1, 0x0)
recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bind$inet6(r4, 0x0, 0x0)
sendmsg$kcm(r4, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000180)="e44e521c29db3a588603e4dc6fb666d20cda14becf69b45463a67d643592fdb68a7c3960b6c5789d8adb6d8ff9a729adddafd03fc1aace9ee4f8f0303138f87b756e74b5710815139a56fb73eece7db3e7dbc224559d68ee76256b5a1cac59455b4dd43d8498017d84af", 0x6a}, {0x0}, {&(0x7f0000000300)="ac1d84fb209e633ee8d14e9ae2ff3eb44af37dcac691124552dfb4b9a1b87eef87fd9abec6a07c732aaf0eda2e627db4d0431c3a51339c05c3e5cd02e3cced58d1acfed286f7385ec91114752d209e917b9ccf5596fd68fa177685ceca6d6c722de5f53428aea729b44e7013f0aaa8e83e3cc30e65deab1eb528ec5103d99f7189e36d4f3b90a1e9a2e8e3f1a880189e882113c8667be6978b90a3ba1a8a24ef8a670a45edfb56fb41c4481b41e317bb173cd54f682871d502d88aa1f4ca7275852901c60c4cca", 0xc7}, {0x0}], 0x4}, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000001200010026bd7000fedbdf250ba3049b4e204e1f070000000000000000000040070000000d0000000400000006000000d60b0000", @ANYRES32=0x0, @ANYBLOB="14d907c0040000000300000004000000e0034011480ed6035de74778d83033f6f5da558ccd5d5028e685528bb34a2307d9f700981c4885f5e24992b0bd889d9dfda658202a8b6f603b23cf"], 0x4c}, 0x1, 0x0, 0x0, 0x40000880}, 0x20008000)

959.660886ms ago: executing program 0 (id=3339):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000640)={'vxcan1\x00', <r4=>0x0})
connect$can_bcm(r3, &(0x7f0000000140)={0x1d, r4}, 0x10)
sendmsg$can_bcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x10)
sendmsg$can_bcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0)
sendmsg$can_bcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x2004c800)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r5=>0x0})
r6 = socket$tipc(0x1e, 0x5, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_DEL_STATION(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={0xb4, r9, 0xf01, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x96, 0xbe, "eb67cad81903669941bd0f91ee68f61a72ef071926df920b2b713a2570484e5e841ec02065c75d9bccefba149fe77501ea9378ca8c6c7f6bbb3c997b380429e187fa321500437272e42fc316abf80fcba2568215f93fe8e55d9460f78d2c772d0cbbc350ffada4c384dc9b2d500f3da05a6df4dd58dea44e800dbbda8801b84bc25f8249dfc18470253084dc8c02b45e1877"}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24048804}, 0x804)
bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0xfffffffc}}, 0x2f)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x2, 0x1}, 0x10)
r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r11)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r13, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632c77fbac141416ac14141683029f034d2f87e5890c6aab845013f2325f1a39018303178da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c)
sendmsg$TIPC_CMD_GET_NODES(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x1c, r12, 0x1, 0x1d, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0xc000000)

959.023034ms ago: executing program 1 (id=3340):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'hsr0\x00', 0x4801})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socket$kcm(0x10, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="11ffc3000002"})
r3 = socket$tipc(0x1e, 0x0, 0x0)
bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r4 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0xfffffffffffffe95)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x3}, 0x10)
bind$tipc(r3, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b79d00000000000085000000c300000095360265a488f54e4c"], 0x0, 0xfffffffc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r7}, 0x10)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4884a)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r9)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r10, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00'})
sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c000000", @ANYRESHEX=r0, @ANYBLOB="10042bbd7000fbdbdf25170000000c009900020000002a0000000a00060008021100000000000a00060008021100000000000a00170008021100000000000a00060008021100000000000a001a0008021100000100000a001a0008021100000100000a0006000802111b98a44435cf1de022f9b19dca00000100000a001a0008021100000100000a0006000802110000010000"], 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x368)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r11, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50)

900.603493ms ago: executing program 1 (id=3342):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00'})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7100fedbdf27070000000803000034278a274ff2bd7e4197b1e12352c233b0a091150f8045d16747dda8f3a88671b0f359da22b4f192063280c38952cda5b3521ce5af4ebbf2f1f3a9aaaacbc9cd4626ca8aed8ca4e0daf384995abf63442aa5cb2c69f4248917de660263d237680bcc3c29cc074e9befcc4ccbd97e8b", @ANYRES32=r0, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c65723000000000000008000500180000000500530001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044084)

813.302609ms ago: executing program 1 (id=3344):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)="230000000100", 0x6)
socket$nl_route(0x10, 0x3, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x11, 0xc0}, [@call={0x85, 0x0, 0x0, 0x85}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfe01, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x21)
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9862144e", @ANYRES16=r3, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r5, @ANYBLOB="08002600940900000800b70099000000"], 0x2c}}, 0x0)

812.89339ms ago: executing program 0 (id=3345):
socketpair(0x1d, 0x80000, 0x1000, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000180)=0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010003000000000000000a00000008000300", @ANYRES32=r3, @ANYBLOB="10005080040005000500020040"], 0x2c}, 0x1, 0x0, 0x0, 0x48881}, 0x40)

730.655798ms ago: executing program 0 (id=3347):
r0 = socket(0x2b, 0x80801, 0x1)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ppoll(&(0x7f0000000580)=[{r1, 0x2000}], 0x1, &(0x7f00000005c0)={0x77359400}, &(0x7f0000000600)={[0x3]}, 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4, 0x3fc, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)
r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf)
getpeername$ax25(r2, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="2cd889b7e27b288f00c90000280012800914010076657468000000001800028014000100", @ANYRES32=0x0, @ANYBLOB="0d0202000000000008000400ff070000"], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0)
connect$rose(r4, 0x0, 0x0)
setsockopt$inet6_mreq(r3, 0x29, 0x1b, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000240)=[{&(0x7f0000000340)="8c560a067f020000000000000000000058000b4824ca945f640094c2ff0325010ebc000000000000050000000000000009005300cfe38fb05c982d673db69cf39e476887afa136da35e5a7cc04368cf4b7fa110340e3d06eb1132495c84af19419499d288591fb6d9516d4a6aa17d4b90000000000006a4247fd23be0f1f668de1e113bb134f0fddda1b132ef56917d02f42d9c922cf86816b3aa138f06ccaf0eaeb6d4efa6a6267e63685ac3ff02078bed4d34689a64e929bba7de4d99e906066478bf0174df50b3ad3e1bccd0b83ed14d287f0", 0xd4}], 0x1)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r7, 0x29, 0x14, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14)
socket$netlink(0x10, 0x3, 0x9)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000180)={0x84, @rand_addr=0x64010102, 0x4e23, 0x2, 'dh\x00', 0x17, 0x5, 0x4a}, 0xfffffffffffffdaa)
r9 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_mtu(r9, 0x29, 0x17, &(0x7f0000000840)=0x5, 0x4)
sendto$inet6(r9, 0x0, 0x0, 0x2400ed80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c)
writev(r9, &(0x7f0000001180)=[{&(0x7f0000001240)="06", 0x1}], 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000140)={'ip6erspan0\x00', 0x2})
ioctl$VFAT_IOCTL_READDIR_BOTH(r8, 0x82187201, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r10, 0x400448ca, 0x0)
syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000040)=ANY=[@ANYRES8=r6], 0x36)

729.05594ms ago: executing program 2 (id=3348):
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r0=>0x0})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x22, 0x2, 0x3)
recvmmsg(r2, &(0x7f0000003a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2062, 0x0)
r3 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r5, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4)
setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000080)={0x1f, 0x4, 0x3f, 0x3202, @vifc_lcl_addr=@private=0xa010101, @private=0xa010101}, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x1d, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x5, 0xc}, {0xb, 0xe}}}, 0x24}}, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000001640)=@ll={0x11, 0xb, r6, 0x1, 0x80, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000200)="270502001a0014000600a5cbcc19a9905c8647002fb96dbcf706013c9aa1f82fa00956725faf2f61952a03060000d4c6e9c07f0f7b68d90540739b0086ddffff", 0x40}, {&(0x7f0000000400)="f03d07bd2b9caa8fa56d", 0xa}], 0x2}, 0x8881)
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r0, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}, 0x1, 0x0, 0x0, 0x2008c050}, 0x0)

650.763616ms ago: executing program 2 (id=3349):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'vlan0\x00', @multicast})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r3)
r4 = socket(0x26, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000004c0), 0x4)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback, 0xa77}, 0x1c)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e0000000500"})
close(r5)
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$SIOCSIFHWADDR(r5, 0x8b26, &(0x7f0000000100)={'wlan1\x00', @random='\x00\x00\x00\v\x00'})
r7 = socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r8=>0x0})
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="02180000020000000000000000004000"], 0x10}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=@getchain={0x64, 0x66, 0x20, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x2, 0xf}, {0xfff1, 0xffe0}, {0x2, 0x1}}, [{0x8, 0xb, 0x35e2}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x200}, {0x8, 0xb, 0xe}, {0x8, 0xb, 0x401}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x7fff}]}, 0x64}, 0x1, 0x0, 0x0, 0x4800}, 0x40001)
socket$nl_route(0x10, 0x3, 0x0)
r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[], 0x0, 0x26, 0x0, 0x3, 0x1}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="38000200000000002010000b33ead3f8fb68e50000000000"], &(0x7f0000000080)='GPL\x00', 0xa, 0x10, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r10, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000480)=ANY=[@ANYRES32=r4], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x2}, 0x0)

470.737733ms ago: executing program 2 (id=3350):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r0, 0x0, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYRESHEX=r1], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

469.255562ms ago: executing program 2 (id=3351):
socket$nl_rdma(0x10, 0x3, 0x14)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x50bd26, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r2}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x24, r4, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8, 0x3, r6}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000a0}, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x1, @private0, 0x6}, 0x1c, &(0x7f0000001600)=[{&(0x7f00000002c0)="ae091f89cd41fb13d6352aebc5427aede0949bb4c46f51f783353cc666663e10e6773577b6b766d07696eba7807b301ab6792c6d007165b6149ed6d489a6ea5d2524a58e2cd266861362b5dc5d404c1159ef3d249c9aa5e33acb90b86f1219e3215d27bb1bc1eedae1437b5bbbd93a4efefeac07af9f964c044fc332680c19e0170189a4a14c6be484d0a1df71a8d8d1a7d6a1778fa45e5b814c64fb06f70b11aea82b6ccd456b106968187c6b6dd6b990e6bf617da75e3022659b5311a24741ab79b138", 0xc4}, {&(0x7f0000000140)="295ae31492cbbe121db6d4cabb038f82e6cf843454993d5a5d78ddac9d84810b9fe385ccbba841766b4e8a8909a8de9f0d3a7eaabae393f7be3d569fc42c430f110a486f01678f15469cb61118585e4f91dff642fb7b926aab49e47aec5b77f9858fb6b7a0fda53a4e9e4dc96097121d42fd3c227e55333c2b0f830766e9ae3f526bb8a7b6c3d6a2d08e18c9ed7484b9dd24be3f", 0x94}, {&(0x7f0000000440)="39f9eaba310369ed06b05114561c6453668bd74e6745b4892247b155493c169d1ba5d3efee58b039884b746a8743aa16f0d4bdcaa737d716cf81775f41dfd2d6a5965db84f075006e396d75e1e4fbd330c3353a119ca16190813c45e62b21cee9200e1fdce952adab306e6250587964e1dee4a4739370868a09dd231f655c9c6b68a9c8b0c9b23958f5393783a89c06a948fcce4908238fdaeee9be8c52e9afa25b6c870fdd5c3cbbee6a72d2a77ba38", 0xb0}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000000240)="f71a1b9c1c67a24a7ade7e540928", 0xe}, {&(0x7f0000001540)="9be791facbd0491aa1d1bbc55878208a101872186b91f7fbb67cc19bb5a067a4c08bb42b88cbb3d3fefe26954415e61adb624997774064950f66e465cf7b04ad9be730ec7d3644547e945b21ce32d698884431b85a4ffa0c73f3ffbc81f42670ab159cbe63db955f123244833ddf104d259d8b58cc14b3aee346f10a65b66c31b3927188a9bed2cf7e1ab4b29ebca0a983b519662a", 0x95}], 0x6, &(0x7f0000001680)=[@hopopts_2292={{0x90, 0x29, 0x36, {0x2b, 0xf, '\x00', [@ra={0x5, 0x2, 0x895}, @pad1, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xf}, @calipso={0x7, 0x58, {0x1, 0x14, 0x3, 0x1, [0x3, 0x4, 0x5, 0x1, 0x8, 0x4, 0x0, 0x3, 0x7f, 0x3]}}, @padn, @pad1]}}}], 0x90}}, {{&(0x7f00000003c0)={0xa, 0x4e21, 0x4, @private2, 0x7}, 0x1c, &(0x7f0000001ac0)=[{&(0x7f0000001740)="e6e239667e145c235d0a", 0xa}, {&(0x7f0000001780)="f86d21d1793a1828c953ab86bec993", 0xf}, {&(0x7f00000017c0)="48827435842f3b3317ba8d5d8adc090d698c03d2ac324d3dafdf77fafd892bd5e1", 0x21}, {&(0x7f0000001800)="3040a445dfab2baef9ae2688047277f8e2ca142ae30aea61da5f6bf17d437d7e3a2cea3afbbb3dffe4b95ace5fae33e947ad102218272b8ac80eb468395051c89607ee52e7371d0d5035bc515490bd2b4e5b89b142b7952c91fc2bbd6e85b9c65ae35d3303647849f7b02904a4d03372c1066b0ab2b556024594a14acf1ea42a543792f35981a7b7330e4227fd7928860778e3703571a49708b34c54770761b73939c95764f8972037f52fc3e2966d9a7de22eb9dd4a243438cf43b13282dc4c49e057fe43c9aa62e365d2a945601bd9", 0xd0}, {&(0x7f0000001900)="bdd7b6a6efecaa343c16a3b2b95429f7a5b842d52251c7fbddbf6896e7968b2e156866a6ab6c81f725aa86f4a61d2610cc91b908cd9892241367dc9a421a4ae27500a504a3ce84bf3ffb1cde08f0de8190ec7ec08bc87e20", 0x58}, {&(0x7f0000001980)="cc48310d2ae860910052e6fe94bd18f725744edcbd76067ef6a68f75aa9c9926cd880dea8583ad080550e3e8bd00820deb0c265ace7cb0ff39895202a740592ce9955bb9f58f7786a2575945d5c690fd9d47256feab2fbbd1b0c6f764833bb57c863fd24b5ada80b1f6357dd91f74164a3a11754d45f067f42e98ccb4d9ba9e0f8a63b1214f38caa34c099dff45d0243838211d88a29b3c42aebc5b0d181a8ffdf70bee6897e1244", 0xa8}, {&(0x7f0000001a40)="363d3b2ae2b2397b1277f414a05816efdd0d5a7ebb530f886950a50273b7aae0a721c4375befe7f0035cb82b7f5b7f8362a37dfe979eaaae24d47c4bd0a230a4b34d2ff9491500c02fa605d30b3870b3c7f1e0", 0x53}], 0x7, &(0x7f0000001b40)=[@tclass={{0x14, 0x29, 0x43, 0x2ff}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}], 0x48}}, {{&(0x7f0000001bc0)={0xa, 0x4e22, 0xc5da, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x81}, 0x1c, &(0x7f0000001fc0)=[{&(0x7f0000001c00)="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", 0xff}, {&(0x7f0000001d00)="ceb268054e1148ab27300a337b8584bd496cde5103f6ab58ca72304726299209b599ce501edc31ec2e54834b076d85a5722b2c9a3936c0b2ac9881d0cdd759c5c078a852962d49ef6f24a5ea16fc595614b1f3730a", 0x55}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)="5026fed58df8e2e80af8020b8029bd9ef95c4d71468a", 0x16}, {&(0x7f0000001e00)="7ddab4732fddfafa1536e6c89ab6f768af28585dfe83ee201d538f558da09f58f4800e86be892ca8a2c42c17d8db655987af9f5d444c5fd15a2dce946e6e47de270845544870fe2d3b79442047bcd4de4aa2ce1484345cc4ab86bcd3b28775424d9ff4040d011f1490ea03284282c4d8d3b51571ce605d2696ae413c7cccbbc1f7f278385fae2a04c81cbeafa3134d22e8710bcd34b47cc790f0c4d384c7fc7e060e40efb1fb3c42a32f4c769e5ae0364834afdd84e11d789be2e032712fb3aca0964a722fd04272d5365c", 0xcb}, {&(0x7f0000001f00)="47f66ce0d2db1e0316f9c4fd92a4512b849f505fe079549efd5cea1407ca1888abfa40e2f1d27da45177640fbdc9b27db9932dba48fe72757124806c01847cff397db072104676090443dd305ac64b1ec417c61a14cffae2490890b667bd3b159e304af020149ed526d87b887cb5d3f93e0cab1149e5759c5052fecbf1b32e9ca4fc22b18627922779c59ebce03ec0e808ff12f2f3a9f785ee58766f1b1a0e66dadefc00fe77b173bb5774592735ada36238651c07d5266bfaf015", 0xbb}], 0x6}}], 0x3, 0x4008810)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, r7, 0x1, 0x0, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x101, 0xd}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x15}, 0x2004c088)

360.66226ms ago: executing program 2 (id=3352):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0), 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x3d)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket(0xa, 0x3, 0x3a)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x20, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000804)

229.417471ms ago: executing program 2 (id=3353):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, 0x0, 0x0) (async)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)="230000000100", 0x6)
socket$nl_route(0x10, 0x3, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[], 0x1ec}}, 0x10)
sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x5, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x4004000) (async)
sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x5, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x4004000)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x13, &(0x7f0000000b40)=ANY=[@ANYBLOB="180000000100000000000000070000001801000020646c"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x13, &(0x7f0000000b40)=ANY=[@ANYBLOB="180000000100000000000000070000001801000020646c"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef)
pipe(0x0) (async)
pipe(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0)

127.834107ms ago: executing program 0 (id=3354):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
write$tun(r1, &(0x7f0000000340)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100, @val=0x70}}}}}}}}}, 0x4a)

0s ago: executing program 0 (id=3355):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r7=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800e50000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = socket(0x2b, 0x80801, 0x1)
setsockopt$inet6_mtu(r8, 0x29, 0x17, 0x0, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r10}, 0x10)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r11}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50)
sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000004000ffffffff0200000008000300", @ANYRES32=r7, @ANYBLOB="080002002e"], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r5, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}}, 0x800)
r12 = socket$inet_udplite(0x2, 0x2, 0x88)
pwritev(r12, &(0x7f0000000180), 0x0, 0x8, 0x2)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'bond0\x00', <r13=>0x0})
syz_emit_ethernet(0x1da, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000b401002400128009000100626f6e6400000000140002800500010006000000080003000000000008000a00", @ANYRES32=r13, @ANYBLOB="24c1dae4e5ca8c679fc72748b700cb98a7889e79735e53facfe1e75f3be45b8ccb5dfd2d29200e"], 0x4c}}, 0x0)

kernel console output (not intermixed with test programs):

][T11588]  genl_rcv+0x28/0x40
[  158.985291][T11588]  netlink_unicast+0x82f/0x9e0
[  158.985304][T11588]  ? __pfx_netlink_unicast+0x10/0x10
[  158.985314][T11588]  ? netlink_sendmsg+0x642/0xb30
[  158.985323][T11588]  ? skb_put+0x11b/0x210
[  158.985335][T11588]  netlink_sendmsg+0x805/0xb30
[  158.985350][T11588]  ? __pfx_netlink_sendmsg+0x10/0x10
[  158.985361][T11588]  ? aa_sock_msg_perm+0xf1/0x1d0
[  158.985373][T11588]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  158.985381][T11588]  ? __pfx_netlink_sendmsg+0x10/0x10
[  158.985391][T11588]  __sock_sendmsg+0x21c/0x270
[  158.985402][T11588]  ____sys_sendmsg+0x505/0x830
[  158.985416][T11588]  ? __pfx_____sys_sendmsg+0x10/0x10
[  158.985432][T11588]  ? import_iovec+0x74/0xa0
[  158.985442][T11588]  ___sys_sendmsg+0x21f/0x2a0
[  158.985454][T11588]  ? __pfx____sys_sendmsg+0x10/0x10
[  158.985483][T11588]  ? __fget_files+0x2a/0x420
[  158.985495][T11588]  ? __fget_files+0x3a0/0x420
[  158.985512][T11588]  __x64_sys_sendmsg+0x19b/0x260
[  158.985525][T11588]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  158.985541][T11588]  ? rcu_is_watching+0x15/0xb0
[  158.985552][T11588]  ? do_syscall_64+0xbe/0x3b0
[  158.985564][T11588]  do_syscall_64+0xfa/0x3b0
[  158.985573][T11588]  ? lockdep_hardirqs_on+0x9c/0x150
[  158.985582][T11588]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.985590][T11588]  ? exc_page_fault+0x9f/0xf0
[  158.985602][T11588]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.985611][T11588] RIP: 0033:0x7f8495d8ebe9
[  158.985621][T11588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  158.985628][T11588] RSP: 002b:00007f8496b7c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  158.985638][T11588] RAX: ffffffffffffffda RBX: 00007f8495fb5fa0 RCX: 00007f8495d8ebe9
[  158.985645][T11588] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000a
[  158.985650][T11588] RBP: 00007f8495e11e19 R08: 0000000000000000 R09: 0000000000000000
[  158.985656][T11588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  158.985661][T11588] R13: 00007f8495fb6038 R14: 00007f8495fb5fa0 R15: 00007ffde863a8a8
[  158.985676][T11588]  </TASK>
[  159.290072][T11608] netlink: 'syz.1.1443': attribute type 1 has an invalid length.
[  159.301012][T11605] mac80211_hwsim hwsim140 wlan0: left promiscuous mode
[  159.312736][T11608] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  159.548600][T11626] netlink: 'syz.2.1449': attribute type 10 has an invalid length.
[  159.648194][T11632] netlink: 'syz.2.1451': attribute type 13 has an invalid length.
[  159.676330][T11632] netlink: 'syz.2.1451': attribute type 17 has an invalid length.
[  159.697326][T11632] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  159.772662][T11647] netlink: 'syz.0.1455': attribute type 10 has an invalid length.
[  159.851076][T11650] tipc: Enabled bearer <eth:gre0>, priority 10
[  160.002256][T11666] mac80211_hwsim hwsim156 wlan1: entered allmulticast mode
[  160.045055][T11666] netlink: 'syz.1.1461': attribute type 10 has an invalid length.
[  160.116868][T11675] netlink: 'syz.0.1465': attribute type 1 has an invalid length.
[  160.147392][T11675] 8021q: adding VLAN 0 to HW filter on device bond8
[  160.154958][T11675] netlink: 'syz.0.1465': attribute type 18 has an invalid length.
[  160.288544][T11689] netlink: 'syz.1.1470': attribute type 23 has an invalid length.
[  160.455661][T11694] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  160.467484][   T12] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  160.468520][T11694] 8021q: adding VLAN 0 to HW filter on device bond0
[  160.583394][   T13] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  161.058906][T11718] __nla_validate_parse: 11 callbacks suppressed
[  161.058952][T11718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1477'.
[  161.299462][T11730] 8021q: adding VLAN 0 to HW filter on device bond14
[  161.319123][T11730] vlan2: entered allmulticast mode
[  161.321234][T11730] mac80211_hwsim hwsim24 wlan0: entered allmulticast mode
[  161.326095][T11730] bond14: (slave vlan2): Opening slave failed
[  161.500588][T11738] 8021q: adding VLAN 0 to HW filter on device bond9
[  161.510008][T11738] bond0: (slave bond9): Enslaving as an active interface with a down link
[  161.582705][T11744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1483'.
[  161.629042][T11746] pim6reg1: entered promiscuous mode
[  161.631148][T11746] pim6reg1: entered allmulticast mode
[  161.696442][T11749] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1484'.
[  161.712480][T11749] 8021q: adding VLAN 0 to HW filter on device bond10
[  161.717360][T11749] team0: Port device bond10 added
[  161.722633][T11752] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1486'.
[  161.729188][T11752] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1486'.
[  161.766201][T11752] lo speed is unknown, defaulting to 1000
[  161.891037][T11752] lo speed is unknown, defaulting to 1000
[  162.211123][T11775] netlink: 'syz.2.1495': attribute type 11 has an invalid length.
[  162.258066][T11777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1496'.
[  162.365479][T11784] gtp1: entered promiscuous mode
[  162.429200][T11786] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1499'.
[  162.656639][T11807] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1502'.
[  162.715455][T11813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1504'.
[  162.775530][T11814] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1503'.
[  162.828201][T11824] bond3: (slave macvlan5): Releasing backup interface
[  162.919845][T11831] bond0: (slave bond9): Releasing active interface
[  162.928737][T11831] team0: Port device bond10 removed
[  162.948652][T11831] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  162.952495][T11831] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  163.917540][T11877] validate_nla: 4 callbacks suppressed
[  163.917559][T11877] netlink: 'syz.2.1519': attribute type 3 has an invalid length.
[  164.784687][T11897] ieee802154 phy0 wpan0: encryption failed: -22
[  164.864186][T11899] netlink: 'syz.0.1529': attribute type 13 has an invalid length.
[  165.098054][T11915] lo speed is unknown, defaulting to 1000
[  165.262458][T11915] lo speed is unknown, defaulting to 1000
[  165.293292][T11927] netlink: 'syz.1.1539': attribute type 16 has an invalid length.
[  165.296018][T11927] netlink: 'syz.1.1539': attribute type 17 has an invalid length.
[  165.660258][T11944] pim6reg1: entered promiscuous mode
[  165.669181][T11944] pim6reg1: entered allmulticast mode
[  165.716604][T11945] 8021q: adding VLAN 0 to HW filter on device bond15
[  165.720581][T11945] team0: Port device bond15 added
[  165.842715][T11954] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  165.894086][T11967] netlink: 'syz.0.1548': attribute type 12 has an invalid length.
[  166.103860][T11986] __nla_validate_parse: 15 callbacks suppressed
[  166.103873][T11986] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1553'.
[  166.117096][T11982] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1553'.
[  166.156105][T11987] lo speed is unknown, defaulting to 1000
[  166.351183][T11987] lo speed is unknown, defaulting to 1000
[  166.677670][T12019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1562'.
[  166.790157][T12024] netlink: 'syz.2.1564': attribute type 10 has an invalid length.
[  166.868596][T12036] sctp: [Deprecated]: syz.0.1567 (pid 12036) Use of int in max_burst socket option deprecated.
[  166.868596][T12036] Use struct sctp_assoc_value instead
[  166.897038][   T24] IPVS: starting estimator thread 0...
[  166.908957][T12039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1566'.
[  166.936812][T12044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1567'.
[  166.984954][T12042] IPVS: using max 53 ests per chain, 127200 per kthread
[  167.472485][T12064] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1574'.
[  167.587304][T12070] netlink: 'syz.2.1575': attribute type 12 has an invalid length.
[  167.672607][T12082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1579'.
[  167.684773][T12084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1580'.
[  167.779690][T12096] netlink: 'syz.1.1583': attribute type 1 has an invalid length.
[  167.782440][T12096] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1583'.
[  167.786879][T12096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1583'.
[  167.939620][T12098] netlink: 'syz.2.1584': attribute type 1 has an invalid length.
[  168.093746][T12105] netlink: 'syz.2.1587': attribute type 12 has an invalid length.
[  168.214200][T12107] openvswitch: netlink: Flow actions attr not present in new flow.
[  168.337182][T12109] gretap1: left promiscuous mode
[  168.356514][T12109] veth3: left promiscuous mode
[  168.368148][T12109] mac80211_hwsim hwsim136 wlan1: left allmulticast mode
[  168.375888][T12109] gtp1: left promiscuous mode
[  168.393879][T12114] netlink: zone id is out of range
[  168.395900][T12114] netlink: zone id is out of range
[  168.397611][T12114] netlink: zone id is out of range
[  168.399302][T12114] netlink: zone id is out of range
[  168.401227][T12114] netlink: zone id is out of range
[  168.404983][T12114] netlink: zone id is out of range
[  168.406782][T12114] netlink: zone id is out of range
[  168.408578][T12114] netlink: zone id is out of range
[  168.409050][T12110] lo speed is unknown, defaulting to 1000
[  168.549944][T12110] lo speed is unknown, defaulting to 1000
[  168.570378][T12121] 8021q: adding VLAN 0 to HW filter on device bond11
[  168.679433][T12125] 8021q: adding VLAN 0 to HW filter on device team0
[  168.699792][T12126] lo speed is unknown, defaulting to 1000
[  168.851068][T12126] lo speed is unknown, defaulting to 1000
[  168.976655][T12130] 8021q: adding VLAN 0 to HW filter on device bond4
[  168.981173][T12130] bond0: (slave bond4): Enslaving as a backup interface with a down link
[  169.160602][T12133] validate_nla: 5 callbacks suppressed
[  169.160618][T12133] netlink: 'syz.1.1595': attribute type 4 has an invalid length.
[  169.376028][T12139] lo speed is unknown, defaulting to 1000
[  169.605298][T12139] lo speed is unknown, defaulting to 1000
[  169.724534][T12164] netlink: 'syz.0.1602': attribute type 1 has an invalid length.
[  170.104068][T12177] netlink: 'syz.1.1605': attribute type 2 has an invalid length.
[  170.106874][T12178] netlink: 'syz.1.1605': attribute type 2 has an invalid length.
[  170.110579][T12177] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  170.114949][T12177] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  170.117441][T12177] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  170.801181][T12213] netlink: 'syz.0.1617': attribute type 13 has an invalid length.
[  170.804890][T12213] netlink: 'syz.0.1617': attribute type 17 has an invalid length.
[  170.851757][T12213] lo speed is unknown, defaulting to 1000
[  170.991909][T12213] lo speed is unknown, defaulting to 1000
[  171.509601][T12222] netlink: 'syz.1.1619': attribute type 21 has an invalid length.
[  171.513016][T12222] __nla_validate_parse: 13 callbacks suppressed
[  171.513028][T12222] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1619'.
[  171.519017][T12222] netlink: 'syz.1.1619': attribute type 4 has an invalid length.
[  171.522164][T12222] netlink: 'syz.1.1619': attribute type 3 has an invalid length.
[  171.530395][T12222] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1619'.
[  171.536198][T12222] netlink: 'syz.1.1619': attribute type 13 has an invalid length.
[  171.872323][T12248] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  171.892990][T12242] net_ratelimit: 328 callbacks suppressed
[  171.893004][T12242] syzkaller0: mtu less than device minimum
[  171.910030][T12242] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1623'.
[  172.006435][T12242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1623'.
[  172.558392][T12306] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1633'.
[  172.611705][T12302] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1632'.
[  172.941479][T12336] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1642'.
[  172.975956][T12339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1643'.
[  173.032894][T12342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1645'.
[  173.099003][T12345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1646'.
[  173.151208][T12346] 8021q: adding VLAN 0 to HW filter on device bond5
[  173.156727][T12346] bond0: (slave bond5): Enslaving as a backup interface with a down link
[  173.193429][T12349] nbd0: detected capacity change from 0 to 127
[  173.210451][   T57] block nbd0: Receive control failed (result -32)
[  173.443710][T12378] lo speed is unknown, defaulting to 1000
[  173.611926][T12378] lo speed is unknown, defaulting to 1000
[  173.735264][T12401] veth0: entered promiscuous mode
[  173.753154][T12401] veth0 (unregistering): left promiscuous mode
[  174.038312][T12418] IPVS: Scheduler module ip_vs_sip not found
[  174.127197][T12427] IPVS: length: 139 != 8
[  174.165804][T12430] validate_nla: 7 callbacks suppressed
[  174.165866][T12430] netlink: 'syz.1.1669': attribute type 13 has an invalid length.
[  174.184440][T12430] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.197585][T12430] netlink: 'syz.1.1669': attribute type 3 has an invalid length.
[  174.386759][T12448] netlink: 'syz.2.1675': attribute type 2 has an invalid length.
[  174.412104][T12449] netlink: 'syz.1.1673': attribute type 13 has an invalid length.
[  174.415589][T12449] netlink: 'syz.1.1673': attribute type 17 has an invalid length.
[  174.494429][T12449] 8021q: adding VLAN 0 to HW filter on device team0
[  174.504312][T12449] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  174.510220][ T5311] lo speed is unknown, defaulting to 1000
[  174.512177][ T5311] syz1: Port: 1 Link ACTIVE
[  174.588479][T12454] netlink: 'syz.2.1677': attribute type 1 has an invalid length.
[  174.614878][T12456] unknown channel width for channel at 909000KHz?
[  174.617119][T12456] unknown channel width for channel at 909000KHz?
[  174.619112][T12456] unknown channel width for channel at 909000KHz?
[  174.787886][T12467] lo speed is unknown, defaulting to 1000
[  174.950235][T12467] lo speed is unknown, defaulting to 1000
[  175.266667][T12500] tipc: Resetting bearer <eth:gre0>
[  175.300152][T12500] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  175.302470][T12500] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  175.309416][   T24] lo speed is unknown, defaulting to 1000
[  175.317236][   T24] syz1: Port: 1 Link DOWN
[  175.381327][T12505] netlink: 'syz.1.1695': attribute type 10 has an invalid length.
[  175.529514][T12521] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  175.537492][T12521] CPU: 0 UID: 0 PID: 12521 Comm: syz.1.1701 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  175.537510][T12521] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  175.537518][T12521] Call Trace:
[  175.537524][T12521]  <TASK>
[  175.537531][T12521]  dump_stack_lvl+0x189/0x250
[  175.537556][T12521]  ? __pfx_dump_stack_lvl+0x10/0x10
[  175.537571][T12521]  ? __pfx__printk+0x10/0x10
[  175.537618][T12521]  ? kernfs_path_from_node+0x2f/0x290
[  175.537632][T12521]  ? kernfs_path_from_node+0x250/0x290
[  175.537645][T12521]  ? kernfs_path_from_node+0x2f/0x290
[  175.537664][T12521]  sysfs_warn_dup+0x8e/0xa0
[  175.537678][T12521]  sysfs_do_create_link_sd+0xc0/0x110
[  175.537694][T12521]  device_add_class_symlinks+0x1cf/0x240
[  175.537718][T12521]  device_add+0x475/0xb50
[  175.537740][T12521]  wiphy_register+0x1ba6/0x28d0
[  175.537771][T12521]  ? __pfx_wiphy_register+0x10/0x10
[  175.537786][T12521]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  175.537813][T12521]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  175.537836][T12521]  ieee80211_register_hw+0x3425/0x4080
[  175.537871][T12521]  ? ieee80211_register_hw+0x1401/0x4080
[  175.537898][T12521]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  175.537921][T12521]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  175.537943][T12521]  ? __hrtimer_setup+0x187/0x210
[  175.537955][T12521]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  175.537975][T12521]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  175.538015][T12521]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  175.538028][T12521]  ? trace_kmalloc+0x1f/0xd0
[  175.538044][T12521]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  175.538061][T12521]  ? kstrndup+0xbf/0x160
[  175.538084][T12521]  hwsim_new_radio_nl+0xea4/0x1b10
[  175.538102][T12521]  ? __pfx___nla_validate_parse+0x10/0x10
[  175.538132][T12521]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  175.538158][T12521]  ? __nla_parse+0x40/0x60
[  175.538177][T12521]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  175.538201][T12521]  genl_family_rcv_msg_doit+0x215/0x300
[  175.538226][T12521]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  175.538254][T12521]  ? bpf_lsm_capable+0x9/0x20
[  175.538271][T12521]  ? security_capable+0x7e/0x2e0
[  175.538290][T12521]  genl_rcv_msg+0x60e/0x790
[  175.538317][T12521]  ? __pfx_genl_rcv_msg+0x10/0x10
[  175.538336][T12521]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  175.538361][T12521]  netlink_rcv_skb+0x208/0x470
[  175.538376][T12521]  ? __lock_acquire+0xab9/0xd20
[  175.538395][T12521]  ? __pfx_genl_rcv_msg+0x10/0x10
[  175.538417][T12521]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  175.538448][T12521]  ? down_read+0x1ad/0x2e0
[  175.538469][T12521]  genl_rcv+0x28/0x40
[  175.538486][T12521]  netlink_unicast+0x82f/0x9e0
[  175.538509][T12521]  ? __pfx_netlink_unicast+0x10/0x10
[  175.538546][T12521]  ? netlink_sendmsg+0x642/0xb30
[  175.538560][T12521]  ? skb_put+0x11b/0x210
[  175.538606][T12521]  netlink_sendmsg+0x805/0xb30
[  175.538631][T12521]  ? __pfx_netlink_sendmsg+0x10/0x10
[  175.538650][T12521]  ? aa_sock_msg_perm+0xf1/0x1d0
[  175.538668][T12521]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  175.538683][T12521]  ? __pfx_netlink_sendmsg+0x10/0x10
[  175.538700][T12521]  __sock_sendmsg+0x21c/0x270
[  175.538718][T12521]  ____sys_sendmsg+0x505/0x830
[  175.538741][T12521]  ? __pfx_____sys_sendmsg+0x10/0x10
[  175.538768][T12521]  ? import_iovec+0x74/0xa0
[  175.538783][T12521]  ___sys_sendmsg+0x21f/0x2a0
[  175.538804][T12521]  ? __pfx____sys_sendmsg+0x10/0x10
[  175.538855][T12521]  ? __fget_files+0x2a/0x420
[  175.538874][T12521]  ? __fget_files+0x3a0/0x420
[  175.538901][T12521]  __x64_sys_sendmsg+0x19b/0x260
[  175.538923][T12521]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  175.538950][T12521]  ? rcu_is_watching+0x15/0xb0
[  175.538969][T12521]  ? do_syscall_64+0xbe/0x3b0
[  175.538990][T12521]  do_syscall_64+0xfa/0x3b0
[  175.539005][T12521]  ? lockdep_hardirqs_on+0x9c/0x150
[  175.539020][T12521]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.539033][T12521]  ? exc_page_fault+0x9f/0xf0
[  175.539050][T12521]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.539063][T12521] RIP: 0033:0x7f8495d8ebe9
[  175.539076][T12521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  175.539089][T12521] RSP: 002b:00007f8496b7c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  175.539104][T12521] RAX: ffffffffffffffda RBX: 00007f8495fb5fa0 RCX: 00007f8495d8ebe9
[  175.539114][T12521] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000007
[  175.539122][T12521] RBP: 00007f8495e11e19 R08: 0000000000000000 R09: 0000000000000000
[  175.539130][T12521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  175.539137][T12521] R13: 00007f8495fb6038 R14: 00007f8495fb5fa0 R15: 00007ffde863a8a8
[  175.539160][T12521]  </TASK>
[  175.814204][T12533] 8021q: adding VLAN 0 to HW filter on device bond3
[  175.825195][T12533] 8021q: adding VLAN 0 to HW filter on device macvlan6
[  175.828719][T12533] bond3: (slave macvlan6): Enslaving as a backup interface with a down link
[  175.835733][T12533] team0: Port device bond15 removed
[  175.838435][T12533] bond3: (slave macvlan6): Releasing backup interface
[  176.838863][T12590] __nla_validate_parse: 26 callbacks suppressed
[  176.838882][T12590] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1721'.
[  176.876387][T12592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1722'.
[  177.273789][T12621] pim6reg1: entered promiscuous mode
[  177.275852][T12621] pim6reg1: entered allmulticast mode
[  177.327304][T12623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1732'.
[  177.336212][T12623] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1732'.
[  177.349236][T12624] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1731'.
[  177.383758][T12624] 8021q: adding VLAN 0 to HW filter on device bond16
[  177.387352][T12624] team0: Port device bond16 added
[  177.457266][T12631] netlink: 'syz.0.1734': attribute type 10 has an invalid length.
[  177.513507][T12635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1736'.
[  177.517182][T12635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1736'.
[  177.520730][T12635] netlink: 'syz.0.1736': attribute type 14 has an invalid length.
[  177.602678][T12635] netlink: 'syz.0.1736': attribute type 5 has an invalid length.
[  177.702032][T12657] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1741'.
[  177.819272][T12676] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1744'.
[  177.884037][T12683] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  177.887695][T12683] CPU: 1 UID: 0 PID: 12683 Comm: syz.2.1746 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  177.887707][T12683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  177.887713][T12683] Call Trace:
[  177.887719][T12683]  <TASK>
[  177.887724][T12683]  dump_stack_lvl+0x189/0x250
[  177.887741][T12683]  ? __pfx_dump_stack_lvl+0x10/0x10
[  177.887752][T12683]  ? __pfx__printk+0x10/0x10
[  177.887767][T12683]  ? kernfs_path_from_node+0x2f/0x290
[  177.887777][T12683]  ? kernfs_path_from_node+0x250/0x290
[  177.887785][T12683]  ? kernfs_path_from_node+0x2f/0x290
[  177.887795][T12683]  sysfs_warn_dup+0x8e/0xa0
[  177.887805][T12683]  sysfs_do_create_link_sd+0xc0/0x110
[  177.887815][T12683]  device_add_class_symlinks+0x1cf/0x240
[  177.887831][T12683]  device_add+0x475/0xb50
[  177.887844][T12683]  wiphy_register+0x1ba6/0x28d0
[  177.887866][T12683]  ? __pfx_wiphy_register+0x10/0x10
[  177.887876][T12683]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  177.887892][T12683]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  177.887907][T12683]  ieee80211_register_hw+0x3425/0x4080
[  177.887934][T12683]  ? ieee80211_register_hw+0x1401/0x4080
[  177.887951][T12683]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  177.887966][T12683]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  177.887981][T12683]  ? __hrtimer_setup+0x187/0x210
[  177.887990][T12683]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  177.888002][T12683]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  177.888025][T12683]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  177.888034][T12683]  ? trace_kmalloc+0x1f/0xd0
[  177.888047][T12683]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  177.888060][T12683]  ? kstrndup+0xbf/0x160
[  177.888074][T12683]  hwsim_new_radio_nl+0xea4/0x1b10
[  177.888085][T12683]  ? __pfx___nla_validate_parse+0x10/0x10
[  177.888103][T12683]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  177.888118][T12683]  ? __nla_parse+0x40/0x60
[  177.888130][T12683]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  177.888143][T12683]  genl_family_rcv_msg_doit+0x215/0x300
[  177.888159][T12683]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  177.888177][T12683]  ? bpf_lsm_capable+0x9/0x20
[  177.888188][T12683]  ? security_capable+0x7e/0x2e0
[  177.888202][T12683]  genl_rcv_msg+0x60e/0x790
[  177.888217][T12683]  ? __pfx_genl_rcv_msg+0x10/0x10
[  177.888228][T12683]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  177.888244][T12683]  netlink_rcv_skb+0x208/0x470
[  177.888252][T12683]  ? __lock_acquire+0xab9/0xd20
[  177.888264][T12683]  ? __pfx_genl_rcv_msg+0x10/0x10
[  177.888277][T12683]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  177.888296][T12683]  ? down_read+0x1ad/0x2e0
[  177.888308][T12683]  genl_rcv+0x28/0x40
[  177.888319][T12683]  netlink_unicast+0x82f/0x9e0
[  177.888332][T12683]  ? __pfx_netlink_unicast+0x10/0x10
[  177.888342][T12683]  ? netlink_sendmsg+0x642/0xb30
[  177.888350][T12683]  ? skb_put+0x11b/0x210
[  177.888387][T12683]  netlink_sendmsg+0x805/0xb30
[  177.888404][T12683]  ? __pfx_netlink_sendmsg+0x10/0x10
[  177.888417][T12683]  ? aa_sock_msg_perm+0xf1/0x1d0
[  177.888432][T12683]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  177.888442][T12683]  ? __pfx_netlink_sendmsg+0x10/0x10
[  177.888453][T12683]  __sock_sendmsg+0x21c/0x270
[  177.888463][T12683]  ____sys_sendmsg+0x505/0x830
[  177.888478][T12683]  ? __pfx_____sys_sendmsg+0x10/0x10
[  177.888494][T12683]  ? import_iovec+0x74/0xa0
[  177.888504][T12683]  ___sys_sendmsg+0x21f/0x2a0
[  177.888516][T12683]  ? __pfx____sys_sendmsg+0x10/0x10
[  177.888546][T12683]  ? __fget_files+0x2a/0x420
[  177.888557][T12683]  ? __fget_files+0x3a0/0x420
[  177.888574][T12683]  __x64_sys_sendmsg+0x19b/0x260
[  177.888586][T12683]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  177.888603][T12683]  ? rcu_is_watching+0x15/0xb0
[  177.888614][T12683]  ? do_syscall_64+0xbe/0x3b0
[  177.888627][T12683]  do_syscall_64+0xfa/0x3b0
[  177.888636][T12683]  ? lockdep_hardirqs_on+0x9c/0x150
[  177.888645][T12683]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.888653][T12683]  ? exc_page_fault+0x9f/0xf0
[  177.888663][T12683]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.888672][T12683] RIP: 0033:0x7f258fb8ebe9
[  177.888681][T12683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  177.888688][T12683] RSP: 002b:00007f259098d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  177.888699][T12683] RAX: ffffffffffffffda RBX: 00007f258fdb5fa0 RCX: 00007f258fb8ebe9
[  177.888705][T12683] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000007
[  177.888711][T12683] RBP: 00007f258fc11e19 R08: 0000000000000000 R09: 0000000000000000
[  177.888717][T12683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  177.888722][T12683] R13: 00007f258fdb6038 R14: 00007f258fdb5fa0 R15: 00007ffffb8ef648
[  177.888738][T12683]  </TASK>
[  178.423528][T12724] pim6reg1: entered promiscuous mode
[  178.425436][T12724] pim6reg1: entered allmulticast mode
[  178.447128][T12725] bond6 (unregistering): Released all slaves
[  178.615501][T12729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1759'.
[  178.803467][T12739] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode
[  178.842736][T12741] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  178.957940][T12754] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  178.961010][T12754] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  178.967721][T12754] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  178.974921][T12754] bridge0: entered allmulticast mode
[  179.113474][T12771] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  179.150105][T12769] lo speed is unknown, defaulting to 1000
[  179.266063][T12769] lo speed is unknown, defaulting to 1000
[  179.266408][T12774] lo speed is unknown, defaulting to 1000
[  179.350449][T12779] validate_nla: 4 callbacks suppressed
[  179.350470][T12779] netlink: 'syz.2.1774': attribute type 153 has an invalid length.
[  179.465601][T12774] lo speed is unknown, defaulting to 1000
[  179.735993][T12795] pim6reg1: entered promiscuous mode
[  179.738361][T12795] pim6reg1: entered allmulticast mode
[  180.540935][T12818] netlink: 'syz.2.1785': attribute type 9 has an invalid length.
[  181.294185][T12886] netlink: 'syz.2.1805': attribute type 18 has an invalid length.
[  181.301124][T12886] netlink: 'syz.2.1805': attribute type 18 has an invalid length.
[  181.348789][T12886] netlink: 'syz.2.1805': attribute type 12 has an invalid length.
[  181.366278][T12893] tun0: tun_chr_ioctl cmd 2147767507
[  181.409670][T12895] netlink: 'syz.1.1808': attribute type 12 has an invalid length.
[  181.454668][T12902] sctp: [Deprecated]: syz.0.1810 (pid 12902) Use of int in maxseg socket option.
[  181.454668][T12902] Use struct sctp_assoc_value instead
[  181.582218][T12920] netlink: 'syz.2.1813': attribute type 1 has an invalid length.
[  181.611283][T12926] netlink: 'syz.2.1815': attribute type 28 has an invalid length.
[  181.725922][T12941] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  181.728830][T12941] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  181.940761][T12947] __nla_validate_parse: 24 callbacks suppressed
[  181.940781][T12947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1821'.
[  182.026623][T12965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1824'.
[  182.176031][T12978] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1829'.
[  182.231361][T12981] vxcan0: entered promiscuous mode
[  182.350888][T12983] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1831'.
[  182.356076][T12983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1831'.
[  182.435273][T12993] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1833'.
[  182.442500][T12993] 0: renamed from bond_slave_1
[  182.531048][T12995] tunl0: entered promiscuous mode
[  182.667291][T12995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1834'.
[  182.734677][T13005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1835'.
[  182.878409][T13015] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1837'.
[  182.929952][T13017] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  182.989487][T13019] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1840'.
[  183.888061][T13092] netlink: 'syz.0.1858': attribute type 12 has an invalid length.
[  184.111502][T13107] syz0: rxe_newlink: already configured on lo
[  184.160997][T13116] netlink: 'syz.0.1862': attribute type 10 has an invalid length.
[  184.197685][T13122] 8021q: adding VLAN 0 to HW filter on device bond4
[  184.217924][T13122] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  184.228932][T13122] bond4: (slave macvlan4): Enslaving as a backup interface with a down link
[  184.234706][T13124] netlink: 'syz.1.1865': attribute type 11 has an invalid length.
[  184.434058][T13136] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  184.517971][T13140] netlink: 'syz.0.1872': attribute type 2 has an invalid length.
[  184.520523][T13140] netlink: 'syz.0.1872': attribute type 8 has an invalid length.
[  184.696777][T13152] lo speed is unknown, defaulting to 1000
[  184.712116][T13155] pim6reg1: entered promiscuous mode
[  184.716131][T13155] pim6reg1: entered allmulticast mode
[  184.878588][T13152] lo speed is unknown, defaulting to 1000
[  185.191791][T13179] lo speed is unknown, defaulting to 1000
[  185.311772][T13179] lo speed is unknown, defaulting to 1000
[  185.745750][T13213] bridge0: port 1(syz_tun) entered blocking state
[  185.749392][T13213] bridge0: port 1(syz_tun) entered disabled state
[  185.752302][T13213] syz_tun: entered allmulticast mode
[  185.759985][T13213] syz_tun: left allmulticast mode
[  186.379468][T13260] syzkaller1: entered allmulticast mode
[  186.746795][T13284] delete_channel: no stack
[  186.929086][T13296] bpq0: entered promiscuous mode
[  186.976840][T13302] netlink: 'syz.1.1923': attribute type 1 has an invalid length.
[  186.979238][T13302] __nla_validate_parse: 37 callbacks suppressed
[  186.979309][T13302] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1923'.
[  186.984282][T13302] netlink: 'syz.1.1923': attribute type 1 has an invalid length.
[  187.020931][T13302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1923'.
[  187.047252][T13307] pim6reg1: entered promiscuous mode
[  187.048942][T13307] pim6reg1: entered allmulticast mode
[  187.105078][T13310] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1924'.
[  187.126179][T13310] 8021q: adding VLAN 0 to HW filter on device bond13
[  187.131652][T13310] team0: Port device bond13 added
[  187.134841][T13313] mac80211_hwsim hwsim181 wlan1: entered allmulticast mode
[  187.207675][T13320] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1928'.
[  187.336041][T13328] pim6reg1: entered promiscuous mode
[  187.337898][T13328] pim6reg1: entered allmulticast mode
[  187.395712][T13329] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1931'.
[  187.425546][T13329] 8021q: adding VLAN 0 to HW filter on device bond17
[  187.429711][T13329] team0: Port device bond17 added
[  187.945771][T13371] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1945'.
[  187.988696][T13378] bond4: option mode: unable to set because the bond device has slaves
[  187.996952][T13378] bond4: (slave macvlan5): Error -98 calling set_mac_address
[  188.023823][T13373] nft_compat: unsupported protocol 0
[  188.026157][T13373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1946'.
[  188.032388][T13384] netlink: 'syz.1.1949': attribute type 13 has an invalid length.
[  188.036745][T13384] netlink: 'syz.1.1949': attribute type 17 has an invalid length.
[  188.041324][T13384] tunl0: left promiscuous mode
[  188.077986][T13384] 8021q: adding VLAN 0 to HW filter on device team0
[  188.084832][T13384] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  188.090083][   T10] lo speed is unknown, defaulting to 1000
[  188.092213][   T10] syz1: Port: 1 Link ACTIVE
[  188.112340][T13378] bond4: (slave macvlan4): Releasing backup interface
[  188.134602][T13378] team0: Port device bond13 removed
[  188.166710][T13384] lo speed is unknown, defaulting to 1000
[  188.281792][T13384] lo speed is unknown, defaulting to 1000
[  188.306568][T13397] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1954'.
[  188.491295][T13402] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1955'.
[  188.853294][T13404] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1956'.
[  189.136684][T13418] lo speed is unknown, defaulting to 1000
[  189.506803][T13418] lo speed is unknown, defaulting to 1000
[  189.664069][T13440] netlink: 'syz.1.1964': attribute type 3 has an invalid length.
[  190.629170][T13494] netlink: 'syz.1.1981': attribute type 3 has an invalid length.
[  190.685815][T13499] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  190.689762][T13499] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  190.693073][T13499] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  190.780307][T13511] pim6reg1: entered promiscuous mode
[  190.782041][T13511] pim6reg1: entered allmulticast mode
[  190.979106][T13519] mac80211_hwsim hwsim187 wlan1: entered allmulticast mode
[  191.216367][T13541] netlink: 'syz.1.1994': attribute type 5 has an invalid length.
[  191.242450][T13542] netlink: 'syz.0.1993': attribute type 10 has an invalid length.
[  191.905014][T13555] bridge0: port 1(erspan0) entered blocking state
[  191.907258][T13555] bridge0: port 1(erspan0) entered disabled state
[  191.909914][T13555] erspan0: entered allmulticast mode
[  191.916330][T13555] erspan0: entered promiscuous mode
[  191.925950][T13555] erspan0: left allmulticast mode
[  191.927982][T13555] erspan0: left promiscuous mode
[  191.930797][T13555] bridge0: port 1(erspan0) entered disabled state
[  192.012707][T13560] __nla_validate_parse: 17 callbacks suppressed
[  192.012720][T13560] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1999'.
[  192.045308][T13559] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1999'.
[  192.108777][T13567] mac80211_hwsim hwsim24 wlan0: left promiscuous mode
[  192.119877][T13567] bridge0: left allmulticast mode
[  192.128518][T13567] mac80211_hwsim hwsim181 wlan1: left allmulticast mode
[  192.135248][T13570] mac80211_hwsim hwsim193 wlan1: entered allmulticast mode
[  192.225493][T13574] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  192.529302][T13605] netlink: 'syz.1.2013': attribute type 13 has an invalid length.
[  192.531787][T13604] lo speed is unknown, defaulting to 1000
[  192.532583][T13605] netlink: 'syz.1.2013': attribute type 17 has an invalid length.
[  192.558603][T13605] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  192.746353][T13606] IPVS: set_ctl: invalid protocol: 46 100.1.1.1:20000
[  192.752633][T13606] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2014'.
[  192.832063][T13604] lo speed is unknown, defaulting to 1000
[  193.117459][T13628] lo speed is unknown, defaulting to 1000
[  193.166192][T13629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2020'.
[  193.166234][T13630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2020'.
[  193.202545][T13629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2020'.
[  193.297789][T13637] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2023'.
[  193.320073][T13637] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2023'.
[  193.421916][T13628] lo speed is unknown, defaulting to 1000
[  193.451690][T13645] netlink: 'syz.1.2025': attribute type 1 has an invalid length.
[  193.523845][T13645] veth1: entered promiscuous mode
[  193.530775][T13645] bond6: (slave veth1): Enslaving as a backup interface with a down link
[  193.535684][T13651] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  193.541809][T13651] CPU: 0 UID: 0 PID: 13651 Comm: syz.0.2026 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  193.541824][T13651] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  193.541831][T13651] Call Trace:
[  193.541836][T13651]  <TASK>
[  193.541841][T13651]  dump_stack_lvl+0x189/0x250
[  193.541860][T13651]  ? __pfx_dump_stack_lvl+0x10/0x10
[  193.541871][T13651]  ? __pfx__printk+0x10/0x10
[  193.541886][T13651]  ? kernfs_path_from_node+0x2f/0x290
[  193.541933][T13651]  ? kernfs_path_from_node+0x250/0x290
[  193.541943][T13651]  ? kernfs_path_from_node+0x2f/0x290
[  193.541954][T13651]  sysfs_warn_dup+0x8e/0xa0
[  193.541966][T13651]  sysfs_do_create_link_sd+0xc0/0x110
[  193.541977][T13651]  device_add_class_symlinks+0x1cf/0x240
[  193.541992][T13651]  device_add+0x475/0xb50
[  193.542006][T13651]  wiphy_register+0x1ba6/0x28d0
[  193.542027][T13651]  ? __pfx_wiphy_register+0x10/0x10
[  193.542035][T13651]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  193.542051][T13651]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  193.542065][T13651]  ieee80211_register_hw+0x3425/0x4080
[  193.542085][T13651]  ? ieee80211_register_hw+0x1401/0x4080
[  193.542101][T13651]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  193.542115][T13651]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  193.542129][T13651]  ? __hrtimer_setup+0x187/0x210
[  193.542138][T13651]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  193.542151][T13651]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  193.542175][T13651]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  193.542184][T13651]  ? trace_kmalloc+0x1f/0xd0
[  193.542195][T13651]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  193.542207][T13651]  ? kstrndup+0xbf/0x160
[  193.542223][T13651]  hwsim_new_radio_nl+0xea4/0x1b10
[  193.542234][T13651]  ? __pfx___nla_validate_parse+0x10/0x10
[  193.542252][T13651]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  193.542268][T13651]  ? __nla_parse+0x40/0x60
[  193.542279][T13651]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  193.542293][T13651]  genl_family_rcv_msg_doit+0x215/0x300
[  193.542311][T13651]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  193.542329][T13651]  ? bpf_lsm_capable+0x9/0x20
[  193.542340][T13651]  ? security_capable+0x7e/0x2e0
[  193.542355][T13651]  genl_rcv_msg+0x60e/0x790
[  193.542371][T13651]  ? __pfx_genl_rcv_msg+0x10/0x10
[  193.542382][T13651]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  193.542398][T13651]  netlink_rcv_skb+0x208/0x470
[  193.542407][T13651]  ? __lock_acquire+0xab9/0xd20
[  193.542419][T13651]  ? __pfx_genl_rcv_msg+0x10/0x10
[  193.542432][T13651]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  193.542451][T13651]  ? down_read+0x1ad/0x2e0
[  193.542462][T13651]  genl_rcv+0x28/0x40
[  193.542481][T13651]  netlink_unicast+0x82f/0x9e0
[  193.542494][T13651]  ? __pfx_netlink_unicast+0x10/0x10
[  193.542505][T13651]  ? netlink_sendmsg+0x642/0xb30
[  193.542515][T13651]  ? skb_put+0x11b/0x210
[  193.542530][T13651]  netlink_sendmsg+0x805/0xb30
[  193.542545][T13651]  ? __pfx_netlink_sendmsg+0x10/0x10
[  193.542557][T13651]  ? aa_sock_msg_perm+0xf1/0x1d0
[  193.542570][T13651]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  193.542578][T13651]  ? __pfx_netlink_sendmsg+0x10/0x10
[  193.542588][T13651]  __sock_sendmsg+0x21c/0x270
[  193.542599][T13651]  ____sys_sendmsg+0x505/0x830
[  193.542613][T13651]  ? __pfx_____sys_sendmsg+0x10/0x10
[  193.542629][T13651]  ? import_iovec+0x74/0xa0
[  193.542639][T13651]  ___sys_sendmsg+0x21f/0x2a0
[  193.542651][T13651]  ? __pfx____sys_sendmsg+0x10/0x10
[  193.542681][T13651]  ? __fget_files+0x2a/0x420
[  193.542693][T13651]  ? __fget_files+0x3a0/0x420
[  193.542709][T13651]  __x64_sys_sendmsg+0x19b/0x260
[  193.542722][T13651]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  193.542738][T13651]  ? rcu_is_watching+0x15/0xb0
[  193.542769][T13651]  ? do_syscall_64+0xbe/0x3b0
[  193.542783][T13651]  do_syscall_64+0xfa/0x3b0
[  193.542793][T13651]  ? lockdep_hardirqs_on+0x9c/0x150
[  193.542804][T13651]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.542813][T13651]  ? exc_page_fault+0x9f/0xf0
[  193.542823][T13651]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.542831][T13651] RIP: 0033:0x7f9fb8d8ebe9
[  193.542840][T13651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  193.542848][T13651] RSP: 002b:00007f9fb9bea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  193.542857][T13651] RAX: ffffffffffffffda RBX: 00007f9fb8fb5fa0 RCX: 00007f9fb8d8ebe9
[  193.542863][T13651] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  193.542869][T13651] RBP: 00007f9fb8e11e19 R08: 0000000000000000 R09: 0000000000000000
[  193.542874][T13651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  193.542879][T13651] R13: 00007f9fb8fb6038 R14: 00007f9fb8fb5fa0 R15: 00007ffebef92ff8
[  193.542894][T13651]  </TASK>
[  193.829206][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  193.831691][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  194.008447][T13671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2033'.
[  194.012091][T13671] netlink: 'syz.1.2033': attribute type 1 has an invalid length.
[  194.029410][T13672] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2031'.
[  194.632888][T13704] tun0: tun_chr_ioctl cmd 1074025681
[  195.154116][T13720] netlink: 'syz.0.2047': attribute type 1 has an invalid length.
[  195.190311][T13723] netlink: 'syz.1.2048': attribute type 1 has an invalid length.
[  195.234480][T13725] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  195.276819][T13728] netlink: zone id is out of range
[  195.278513][T13728] netlink: zone id is out of range
[  195.280044][T13728] netlink: zone id is out of range
[  195.281629][T13728] netlink: zone id is out of range
[  195.285206][T13728] netlink: zone id is out of range
[  195.286800][T13728] netlink: zone id is out of range
[  195.288337][T13728] netlink: zone id is out of range
[  195.289974][T13728] netlink: zone id is out of range
[  195.789775][T13741] netlink: 'syz.2.2055': attribute type 1 has an invalid length.
[  195.941929][T13753] netlink: 'syz.1.2058': attribute type 1 has an invalid length.
[  196.027275][T13759] gretap1: entered promiscuous mode
[  196.036807][T13759] bond7: (slave gretap1): making interface the new active one
[  196.042554][T13759] bond7: (slave gretap1): Enslaving as an active interface with an up link
[  196.147757][T13762] netlink: 'syz.2.2059': attribute type 9 has an invalid length.
[  196.151102][T13762] netlink: 'syz.2.2059': attribute type 6 has an invalid length.
[  196.280241][T13774] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  197.067722][T13792] __nla_validate_parse: 9 callbacks suppressed
[  197.067736][T13792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2064'.
[  197.079644][T13792] netlink: 'syz.1.2064': attribute type 1 has an invalid length.
[  197.133882][T13794] netlink: 'syz.0.2065': attribute type 10 has an invalid length.
[  197.139343][T13794] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2065'.
[  197.271360][   T55] Bluetooth: hci0: command tx timeout
[  197.294332][T13801] pim6reg1: entered promiscuous mode
[  197.296075][T13801] pim6reg1: entered allmulticast mode
[  197.328008][T13803] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig
[  197.374270][T13805] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2066'.
[  197.381362][T13805] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2066'.
[  197.446939][T13805] 8021q: adding VLAN 0 to HW filter on device bond14
[  197.450020][T13805] team0: Port device bond14 added
[  197.631271][T13826] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2074'.
[  197.888717][T13845] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2077'.
[  198.076270][T13851] lo speed is unknown, defaulting to 1000
[  198.199681][T13872] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  198.211641][T13872] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2084'.
[  198.226766][T13851] lo speed is unknown, defaulting to 1000
[  199.175855][T13912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2091'.
[  199.180492][T13912] netlink: 'syz.1.2091': attribute type 1 has an invalid length.
[  199.776583][T13939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2096'.
[  199.850890][T13944] netlink: 252 bytes leftover after parsing attributes in process `syz.0.2097'.
[  200.558878][T13989] netlink: 'syz.1.2108': attribute type 1 has an invalid length.
[  200.870824][T14016] netlink: 'syz.2.2116': attribute type 4 has an invalid length.
[  201.027874][T14011] netlink: 'syz.1.2115': attribute type 10 has an invalid length.
[  201.194019][T14035] netlink: 'syz.2.2121': attribute type 23 has an invalid length.
[  201.308795][T14039] netlink: 'syz.2.2123': attribute type 4 has an invalid length.
[  201.649564][T14051] netlink: 'syz.1.2128': attribute type 1 has an invalid length.
[  201.749453][T14064] mac80211_hwsim hwsim205 wlan1: entered allmulticast mode
[  201.770779][T14064] team0: Port device bond14 removed
[  201.777440][T14064] netlink: 'syz.0.2131': attribute type 10 has an invalid length.
[  201.930050][T14071] netlink: 'syz.0.2135': attribute type 12 has an invalid length.
[  202.078328][T14083] __nla_validate_parse: 8 callbacks suppressed
[  202.078346][T14083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2139'.
[  202.090509][T14083] net_ratelimit: 8 callbacks suppressed
[  202.090525][T14083] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  202.342982][T14108] netlink: 'syz.0.2145': attribute type 12 has an invalid length.
[  202.353019][T14108] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.2145'.
[  202.739558][T14152] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2154'.
[  202.995535][T14164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2156'.
[  203.000169][T14168] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2157'.
[  203.064283][T14172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2159'.
[  203.068688][T14172] netlink: 'syz.2.2159': attribute type 1 has an invalid length.
[  203.138445][T14180] lo speed is unknown, defaulting to 1000
[  203.192518][T14183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2162'.
[  203.335387][T14189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2162'.
[  203.346113][T14180] lo speed is unknown, defaulting to 1000
[  203.353313][T14191] batadv_slave_0: entered promiscuous mode
[  203.364471][T14191] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2163'.
[  203.397310][T14185] batadv_slave_0: left promiscuous mode
[  203.498472][T14193] tipc: Resetting bearer <eth:gre0>
[  203.595166][T14203] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2165'.
[  203.623204][   T95] lo speed is unknown, defaulting to 1000
[  203.635158][   T95] syz1: Port: 1 Link DOWN
[  203.670354][T14204] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  203.674746][T14204] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  203.682254][T14204] veth1: left promiscuous mode
[  203.687881][T14204] gretap1: left promiscuous mode
[  204.005878][T14227] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  204.010104][T14227] CPU: 0 UID: 0 PID: 14227 Comm: syz.1.2173 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  204.010127][T14227] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  204.010136][T14227] Call Trace:
[  204.010143][T14227]  <TASK>
[  204.010151][T14227]  dump_stack_lvl+0x189/0x250
[  204.010180][T14227]  ? __pfx_dump_stack_lvl+0x10/0x10
[  204.010198][T14227]  ? __pfx__printk+0x10/0x10
[  204.010227][T14227]  ? kernfs_path_from_node+0x2f/0x290
[  204.010266][T14227]  ? kernfs_path_from_node+0x250/0x290
[  204.010283][T14227]  ? kernfs_path_from_node+0x2f/0x290
[  204.010300][T14227]  sysfs_warn_dup+0x8e/0xa0
[  204.010314][T14227]  sysfs_do_create_link_sd+0xc0/0x110
[  204.010332][T14227]  device_add_class_symlinks+0x1cf/0x240
[  204.010357][T14227]  device_add+0x475/0xb50
[  204.010381][T14227]  wiphy_register+0x1ba6/0x28d0
[  204.010415][T14227]  ? __pfx_wiphy_register+0x10/0x10
[  204.010427][T14227]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  204.010451][T14227]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  204.010473][T14227]  ieee80211_register_hw+0x3425/0x4080
[  204.010510][T14227]  ? ieee80211_register_hw+0x1401/0x4080
[  204.010534][T14227]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  204.010555][T14227]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  204.010577][T14227]  ? __hrtimer_setup+0x187/0x210
[  204.010592][T14227]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  204.010615][T14227]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  204.010651][T14227]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  204.010666][T14227]  ? trace_kmalloc+0x1f/0xd0
[  204.010683][T14227]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  204.010702][T14227]  ? kstrndup+0xbf/0x160
[  204.010727][T14227]  hwsim_new_radio_nl+0xea4/0x1b10
[  204.010744][T14227]  ? __pfx___nla_validate_parse+0x10/0x10
[  204.010769][T14227]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  204.010796][T14227]  ? __nla_parse+0x40/0x60
[  204.010818][T14227]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  204.010842][T14227]  genl_family_rcv_msg_doit+0x215/0x300
[  204.010865][T14227]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  204.010895][T14227]  ? bpf_lsm_capable+0x9/0x20
[  204.010914][T14227]  ? security_capable+0x7e/0x2e0
[  204.010939][T14227]  genl_rcv_msg+0x60e/0x790
[  204.010994][T14227]  ? __pfx_genl_rcv_msg+0x10/0x10
[  204.011015][T14227]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  204.011042][T14227]  netlink_rcv_skb+0x208/0x470
[  204.011058][T14227]  ? __lock_acquire+0xab9/0xd20
[  204.011081][T14227]  ? __pfx_genl_rcv_msg+0x10/0x10
[  204.011097][T14227]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  204.011131][T14227]  ? down_read+0x1ad/0x2e0
[  204.011154][T14227]  genl_rcv+0x28/0x40
[  204.011176][T14227]  netlink_unicast+0x82f/0x9e0
[  204.011191][T14227]  ? __pfx_netlink_unicast+0x10/0x10
[  204.011214][T14227]  ? netlink_sendmsg+0x642/0xb30
[  204.011231][T14227]  ? skb_put+0x11b/0x210
[  204.011257][T14227]  netlink_sendmsg+0x805/0xb30
[  204.011285][T14227]  ? __pfx_netlink_sendmsg+0x10/0x10
[  204.011303][T14227]  ? aa_sock_msg_perm+0xf1/0x1d0
[  204.011320][T14227]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  204.011336][T14227]  ? __pfx_netlink_sendmsg+0x10/0x10
[  204.011355][T14227]  __sock_sendmsg+0x21c/0x270
[  204.011376][T14227]  ____sys_sendmsg+0x505/0x830
[  204.011397][T14227]  ? __pfx_____sys_sendmsg+0x10/0x10
[  204.011421][T14227]  ? import_iovec+0x74/0xa0
[  204.011439][T14227]  ___sys_sendmsg+0x21f/0x2a0
[  204.011459][T14227]  ? __pfx____sys_sendmsg+0x10/0x10
[  204.011513][T14227]  ? __fget_files+0x2a/0x420
[  204.011530][T14227]  ? __fget_files+0x3a0/0x420
[  204.011556][T14227]  __x64_sys_sendmsg+0x19b/0x260
[  204.011580][T14227]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  204.011610][T14227]  ? rcu_is_watching+0x15/0xb0
[  204.011623][T14227]  ? do_syscall_64+0xbe/0x3b0
[  204.011644][T14227]  do_syscall_64+0xfa/0x3b0
[  204.011661][T14227]  ? lockdep_hardirqs_on+0x9c/0x150
[  204.011679][T14227]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.011694][T14227]  ? exc_page_fault+0x9f/0xf0
[  204.011709][T14227]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.011717][T14227] RIP: 0033:0x7f8495d8ebe9
[  204.011727][T14227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  204.011734][T14227] RSP: 002b:00007f8496b7c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  204.011744][T14227] RAX: ffffffffffffffda RBX: 00007f8495fb5fa0 RCX: 00007f8495d8ebe9
[  204.011750][T14227] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000a
[  204.011756][T14227] RBP: 00007f8495e11e19 R08: 0000000000000000 R09: 0000000000000000
[  204.011762][T14227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  204.011768][T14227] R13: 00007f8495fb6038 R14: 00007f8495fb5fa0 R15: 00007ffde863a8a8
[  204.011782][T14227]  </TASK>
[  204.475106][T14250] sctp: [Deprecated]: syz.2.2181 (pid 14250) Use of struct sctp_assoc_value in delayed_ack socket option.
[  204.475106][T14250] Use struct sctp_sack_info instead
[  204.491902][T14253] lo speed is unknown, defaulting to 1000
[  204.509476][T14252] syzkaller1: entered promiscuous mode
[  204.511691][T14252] syzkaller1: entered allmulticast mode
[  204.694937][T14253] lo speed is unknown, defaulting to 1000
[  205.087408][T14283] 8021q: adding VLAN 0 to HW filter on device bond18
[  205.091016][T14283] bond0: (slave bond18): Enslaving as an active interface with an up link
[  205.563619][T14308] 8021q: adding VLAN 0 to HW filter on device bond15
[  205.568935][T14308] bond0: (slave bond15): Enslaving as an active interface with a down link
[  205.730202][T14325] mac80211_hwsim hwsim177 wlan0: entered promiscuous mode
[  205.733858][T14325] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  205.738515][T14315] lo speed is unknown, defaulting to 1000
[  205.860644][T14315] lo speed is unknown, defaulting to 1000
[  205.890179][T14338] validate_nla: 4 callbacks suppressed
[  205.890192][T14338] netlink: 'syz.0.2204': attribute type 1 has an invalid length.
[  206.125675][T14344] netlink: 'syz.2.2206': attribute type 13 has an invalid length.
[  206.128733][T14344] netlink: 'syz.2.2206': attribute type 17 has an invalid length.
[  206.152498][T14346] netlink: 'syz.0.2205': attribute type 10 has an invalid length.
[  206.253133][T14347] netlink: 'syz.0.2205': attribute type 10 has an invalid length.
[  206.297768][T14344] 8021q: adding VLAN 0 to HW filter on device team0
[  206.313394][T14344] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  206.336607][T14346] team0: Port device 0! added
[  206.380722][T14347] team0: Port device 0! removed
[  206.398943][T14348] lo speed is unknown, defaulting to 1000
[  206.425047][T14352] netlink: 'syz.1.2207': attribute type 13 has an invalid length.
[  206.428292][T14352] netlink: 'syz.1.2207': attribute type 17 has an invalid length.
[  206.455862][T14352] 8021q: adding VLAN 0 to HW filter on device team0
[  206.466789][T14352] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  206.478181][ T1271] lo speed is unknown, defaulting to 1000
[  206.479924][ T1271] syz1: Port: 1 Link ACTIVE
[  206.678929][T14348] lo speed is unknown, defaulting to 1000
[  206.969865][T14365] netlink: 'syz.0.2209': attribute type 1 has an invalid length.
[  207.118481][T14369] __nla_validate_parse: 12 callbacks suppressed
[  207.118494][T14369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2211'.
[  207.124839][T14369] netlink: 'syz.2.2211': attribute type 1 has an invalid length.
[  207.317951][T14386] netlink: 'syz.2.2216': attribute type 23 has an invalid length.
[  207.379349][T14387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2214'.
[  207.442244][T14396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2219'.
[  207.501452][T14399] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  207.679511][T14413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2224'.
[  207.775500][T14428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2227'.
[  207.814260][T14431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2230'.
[  207.819927][T14431] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2230'.
[  207.875342][T14437] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0001
[  207.878578][T14437] tipc: Enabled bearer <udp:syz0>, priority 10
[  207.985187][T14450] mac80211_hwsim hwsim177 wlan0: left promiscuous mode
[  207.987891][T14450] mac80211_hwsim hwsim205 wlan1: left allmulticast mode
[  208.011727][T14452] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  208.021653][T14450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2233'.
[  208.031824][T14450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2233'.
[  208.222285][T14474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2240'.
[  208.542038][T14505] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  208.544693][T14505] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  208.590358][T14509] tipc: Resetting bearer <eth:gre0>
[  208.636996][   T24] lo speed is unknown, defaulting to 1000
[  208.638922][   T24] syz1: Port: 1 Link DOWN
[  209.021290][T14552] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  209.024602][T14552] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  209.026999][T14552] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  210.171414][T14620] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  210.175355][T14620] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  211.251963][T14676] validate_nla: 15 callbacks suppressed
[  211.251977][T14676] netlink: 'syz.2.2289': attribute type 13 has an invalid length.
[  211.257345][T14676] netlink: 'syz.2.2289': attribute type 17 has an invalid length.
[  211.262919][T14676] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  211.306253][T14679] netlink: 'syz.0.2290': attribute type 1 has an invalid length.
[  212.028106][T14697] netlink: 'syz.2.2294': attribute type 10 has an invalid length.
[  212.274743][T14706] __nla_validate_parse: 19 callbacks suppressed
[  212.274757][T14706] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.2296'.
[  212.535542][T14715] 8021q: adding VLAN 0 to HW filter on device bond16
[  212.547121][T14715] bond0: (slave bond16): Enslaving as an active interface with a down link
[  212.710835][T14733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2300'.
[  212.805224][T14741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2301'.
[  212.808900][T14741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2301'.
[  212.812484][T14741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2301'.
[  212.836778][T14741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2301'.
[  212.841057][T14741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2301'.
[  212.841524][T14743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2302'.
[  212.848536][T14741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2301'.
[  212.850686][T14743] netlink: 'syz.2.2302': attribute type 1 has an invalid length.
[  212.879933][T14743] 8021q: adding VLAN 0 to HW filter on device bond19
[  212.884283][T14741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2301'.
[  213.255155][T14756] netlink: 'syz.2.2304': attribute type 39 has an invalid length.
[  213.301132][T14768] netlink: 'syz.1.2306': attribute type 10 has an invalid length.
[  213.629008][T14785] netlink: 'syz.2.2310': attribute type 1 has an invalid length.
[  213.676310][T14785] 8021q: adding VLAN 0 to HW filter on device bond20
[  214.107872][T14814] lo speed is unknown, defaulting to 1000
[  214.276418][T14814] lo speed is unknown, defaulting to 1000
[  214.397730][T14831] netlink: 'syz.2.2320': attribute type 1 has an invalid length.
[  214.423490][T14831] 8021q: adding VLAN 0 to HW filter on device bond21
[  214.644300][T14846] bpq0: left promiscuous mode
[  214.730636][T14853] netlink: 'syz.2.2325': attribute type 9 has an invalid length.
[  214.898572][T14863] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  214.902601][T14863] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  214.906157][T14863] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  215.067715][T14873] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check.
[  215.080010][T14873] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  215.459543][T14894] batadv_slave_0: entered promiscuous mode
[  215.473460][T14894] batadv_slave_0: left promiscuous mode
[  215.662632][T14902] lo speed is unknown, defaulting to 1000
[  215.910566][T14915] bond17: (slave vxcan7): The slave device specified does not support setting the MAC address
[  215.916474][T14915] bond17: (slave vxcan7): Error -95 calling set_mac_address
[  215.933585][T14902] lo speed is unknown, defaulting to 1000
[  216.322027][T14926] bond0: (slave bond15): Releasing active interface
[  216.337713][T14926] bond0: (slave bond15): the permanent HWaddr of slave - 4a:92:d7:11:fe:93 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  216.421245][T14926] bond0: (slave bond16): Releasing active interface
[  216.694732][T14953] veth0_virt_wifi: renamed from veth0_vlan
[  216.769806][T14933] lo speed is unknown, defaulting to 1000
[  216.940430][T14967] validate_nla: 1 callbacks suppressed
[  216.940444][T14967] netlink: 'syz.0.2353': attribute type 1 has an invalid length.
[  216.965352][T14967] 8021q: adding VLAN 0 to HW filter on device bond18
[  217.016277][T14967] vlan2: entered allmulticast mode
[  217.027871][T14967] mac80211_hwsim hwsim177 wlan0: entered allmulticast mode
[  217.031878][T14967] bond18: (slave vlan2): Error -34 calling dev_set_mtu
[  217.040416][T14933] lo speed is unknown, defaulting to 1000
[  217.299311][T14982] __nla_validate_parse: 109 callbacks suppressed
[  217.299325][T14982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2359'.
[  217.386409][T14982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2359'.
[  217.445681][T14993] lo speed is unknown, defaulting to 1000
[  217.477082][T14995] netlink: 'syz.1.2362': attribute type 1 has an invalid length.
[  217.479488][T14995] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.2362'.
[  217.546970][T14997] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  217.679487][T14993] lo speed is unknown, defaulting to 1000
[  217.820844][T15001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2370'.
[  217.977698][T15012] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  217.993723][T15015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2367'.
[  218.004155][T15015] netlink: 'syz.2.2367': attribute type 1 has an invalid length.
[  218.275018][T15039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2373'.
[  218.341498][T15047] netlink: 'syz.1.2373': attribute type 11 has an invalid length.
[  218.377374][T15049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2374'.
[  218.383070][T15049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2374'.
[  218.500601][T15061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2378'.
[  218.506965][T15055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2377'.
[  218.510348][T15055] veth1: entered promiscuous mode
[  218.512420][T15055] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  218.521889][T15061] netlink: 'syz.0.2378': attribute type 1 has an invalid length.
[  218.542322][T15055] nbd: must specify at least one socket
[  218.974707][T15095] netlink: 'syz.1.2388': attribute type 1 has an invalid length.
[  219.167798][T15109] netlink: 'syz.0.2392': attribute type 10 has an invalid length.
[  219.288657][T15117] netlink: 'syz.1.2394': attribute type 1 has an invalid length.
[  219.351675][T15125] netlink: 'syz.1.2396': attribute type 1 has an invalid length.
[  219.463354][T15128] lo speed is unknown, defaulting to 1000
[  219.511297][T15134] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  219.516629][T15134] CPU: 0 UID: 0 PID: 15134 Comm: syz.1.2400 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  219.516645][T15134] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  219.516651][T15134] Call Trace:
[  219.516656][T15134]  <TASK>
[  219.516661][T15134]  dump_stack_lvl+0x189/0x250
[  219.516696][T15134]  ? __pfx_dump_stack_lvl+0x10/0x10
[  219.516707][T15134]  ? __pfx__printk+0x10/0x10
[  219.516723][T15134]  ? kernfs_path_from_node+0x2f/0x290
[  219.516733][T15134]  ? kernfs_path_from_node+0x250/0x290
[  219.516742][T15134]  ? kernfs_path_from_node+0x2f/0x290
[  219.516753][T15134]  sysfs_warn_dup+0x8e/0xa0
[  219.516777][T15134]  sysfs_do_create_link_sd+0xc0/0x110
[  219.516788][T15134]  device_add_class_symlinks+0x1cf/0x240
[  219.516806][T15134]  device_add+0x475/0xb50
[  219.516820][T15134]  wiphy_register+0x1ba6/0x28d0
[  219.516840][T15134]  ? __pfx_wiphy_register+0x10/0x10
[  219.516850][T15134]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  219.516866][T15134]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  219.516880][T15134]  ieee80211_register_hw+0x3425/0x4080
[  219.516901][T15134]  ? ieee80211_register_hw+0x1401/0x4080
[  219.516916][T15134]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  219.516930][T15134]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  219.516944][T15134]  ? __hrtimer_setup+0x187/0x210
[  219.516952][T15134]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  219.516965][T15134]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  219.516988][T15134]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  219.517000][T15134]  ? trace_kmalloc+0x1f/0xd0
[  219.517012][T15134]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  219.517024][T15134]  ? kstrndup+0xbf/0x160
[  219.517044][T15134]  hwsim_new_radio_nl+0xea4/0x1b10
[  219.517056][T15134]  ? __pfx___nla_validate_parse+0x10/0x10
[  219.517077][T15134]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  219.517093][T15134]  ? __nla_parse+0x40/0x60
[  219.517105][T15134]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  219.517120][T15134]  genl_family_rcv_msg_doit+0x215/0x300
[  219.517138][T15134]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  219.517157][T15134]  ? bpf_lsm_capable+0x9/0x20
[  219.517167][T15134]  ? security_capable+0x7e/0x2e0
[  219.517181][T15134]  genl_rcv_msg+0x60e/0x790
[  219.517196][T15134]  ? __pfx_genl_rcv_msg+0x10/0x10
[  219.517207][T15134]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  219.517223][T15134]  netlink_rcv_skb+0x208/0x470
[  219.517232][T15134]  ? __lock_acquire+0xab9/0xd20
[  219.517244][T15134]  ? __pfx_genl_rcv_msg+0x10/0x10
[  219.517257][T15134]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  219.517276][T15134]  ? down_read+0x1ad/0x2e0
[  219.517288][T15134]  genl_rcv+0x28/0x40
[  219.517299][T15134]  netlink_unicast+0x82f/0x9e0
[  219.517312][T15134]  ? __pfx_netlink_unicast+0x10/0x10
[  219.517323][T15134]  ? netlink_sendmsg+0x642/0xb30
[  219.517332][T15134]  ? skb_put+0x11b/0x210
[  219.517346][T15134]  netlink_sendmsg+0x805/0xb30
[  219.517360][T15134]  ? __pfx_netlink_sendmsg+0x10/0x10
[  219.517372][T15134]  ? aa_sock_msg_perm+0xf1/0x1d0
[  219.517384][T15134]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  219.517392][T15134]  ? __pfx_netlink_sendmsg+0x10/0x10
[  219.517402][T15134]  __sock_sendmsg+0x21c/0x270
[  219.517413][T15134]  ____sys_sendmsg+0x505/0x830
[  219.517427][T15134]  ? __pfx_____sys_sendmsg+0x10/0x10
[  219.517443][T15134]  ? import_iovec+0x74/0xa0
[  219.517453][T15134]  ___sys_sendmsg+0x21f/0x2a0
[  219.517465][T15134]  ? __pfx____sys_sendmsg+0x10/0x10
[  219.517494][T15134]  ? __fget_files+0x2a/0x420
[  219.517506][T15134]  ? __fget_files+0x3a0/0x420
[  219.517549][T15134]  __x64_sys_sendmsg+0x19b/0x260
[  219.517563][T15134]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  219.517581][T15134]  ? rcu_is_watching+0x15/0xb0
[  219.517594][T15134]  ? do_syscall_64+0xbe/0x3b0
[  219.517608][T15134]  do_syscall_64+0xfa/0x3b0
[  219.517619][T15134]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.517627][T15134]  ? asm_sysvec_call_function_single+0x1a/0x20
[  219.517638][T15134]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.517646][T15134] RIP: 0033:0x7f8495d8ebe9
[  219.517655][T15134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  219.517663][T15134] RSP: 002b:00007f8496b7c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  219.517673][T15134] RAX: ffffffffffffffda RBX: 00007f8495fb5fa0 RCX: 00007f8495d8ebe9
[  219.517681][T15134] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000b
[  219.517687][T15134] RBP: 00007f8495e11e19 R08: 0000000000000000 R09: 0000000000000000
[  219.517693][T15134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  219.517698][T15134] R13: 00007f8495fb6038 R14: 00007f8495fb5fa0 R15: 00007ffde863a8a8
[  219.517712][T15134]  </TASK>
[  219.669000][T15128] lo speed is unknown, defaulting to 1000
[  219.793556][T15140] unknown channel width for channel at 909000KHz?
[  219.959241][T15154] netlink: 'syz.2.2406': attribute type 1 has an invalid length.
[  220.343243][T15165] veth0_virt_wifi: renamed from veth0_vlan
[  220.517240][T15177] netlink: 'syz.2.2413': attribute type 1 has an invalid length.
[  221.997256][T15210] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  222.403749][T15231] validate_nla: 1 callbacks suppressed
[  222.403770][T15231] netlink: 'syz.1.2425': attribute type 13 has an invalid length.
[  223.080163][T15245] __nla_validate_parse: 24 callbacks suppressed
[  223.080182][T15245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2428'.
[  223.110702][T15244] netlink: 'syz.2.2428': attribute type 1 has an invalid length.
[  223.508231][T15251] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  223.685495][T15270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2436'.
[  223.689128][T15270] netlink: 'syz.0.2436': attribute type 1 has an invalid length.
[  223.703224][T15273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2437'.
[  223.706259][T15273] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2437'.
[  223.718118][T15273] netlink: 344 bytes leftover after parsing attributes in process `syz.2.2437'.
[  223.725982][T15273] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2437'.
[  223.728875][T15273] netlink: 'syz.2.2437': attribute type 10 has an invalid length.
[  223.865865][T15289] pim6reg1: entered promiscuous mode
[  223.867696][T15289] pim6reg1: entered allmulticast mode
[  223.872658][T15285] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2440'.
[  224.091134][T15307] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2445'.
[  224.266459][T15328] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2449'.
[  224.571340][T15341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2453'.
[  224.577910][T15341] netlink: 'syz.1.2453': attribute type 1 has an invalid length.
[  224.804477][T15351] netlink: 'syz.2.2456': attribute type 4 has an invalid length.
[  224.824429][T15351] netlink: 'syz.2.2456': attribute type 1 has an invalid length.
[  225.062606][T15367] can: request_module (can-proto-0) failed.
[  225.160942][T15368] syzkaller1: entered allmulticast mode
[  225.331521][T15394] netlink: 'syz.2.2465': attribute type 1 has an invalid length.
[  225.374299][T15394] 8021q: adding VLAN 0 to HW filter on device bond22
[  225.500710][T15400] mac80211_hwsim hwsim177 wlan0: entered promiscuous mode
[  225.503699][T15400] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  225.988571][T15436] netlink: 'syz.0.2473': attribute type 10 has an invalid length.
[  225.999020][T15438] netlink: 'syz.2.2474': attribute type 1 has an invalid length.
[  226.029395][T15438] 8021q: adding VLAN 0 to HW filter on device bond23
[  226.241633][T15462] rdma_rxe: rxe_newlink: failed to add lo
[  226.337602][T15466] rdma_rxe: rxe_newlink: failed to add lo
[  226.600605][T15477] 8021q: adding VLAN 0 to HW filter on device bond8
[  226.612738][T15477] bond8: (slave gretap2): making interface the new active one
[  226.618116][T15477] bond8: (slave gretap2): Enslaving as an active interface with an up link
[  226.850146][T15489] pim6reg1: entered promiscuous mode
[  226.851944][T15489] pim6reg1: entered allmulticast mode
[  226.967493][T15494] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  226.969940][T15494] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  226.998653][T15494] 8021q: adding VLAN 0 to HW filter on device bond24
[  227.001614][T15494] team0: Port device bond24 added
[  227.085148][T15512] sctp: [Deprecated]: syz.1.2492 (pid 15512) Use of int in max_burst socket option deprecated.
[  227.085148][T15512] Use struct sctp_assoc_value instead
[  227.576639][T15541] validate_nla: 3 callbacks suppressed
[  227.576656][T15541] netlink: 'syz.0.2498': attribute type 10 has an invalid length.
[  227.680530][T15553] netlink: 'syz.0.2500': attribute type 1 has an invalid length.
[  228.267064][T15580] netlink: 'syz.0.2505': attribute type 5 has an invalid length.
[  228.309868][T15592] __nla_validate_parse: 20 callbacks suppressed
[  228.309882][T15592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2507'.
[  228.317990][T15592] netlink: 'syz.2.2507': attribute type 1 has an invalid length.
[  228.382326][T15600] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2509'.
[  228.390957][T15600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2509'.
[  228.394315][T15600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2509'.
[  228.398151][T15600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2509'.
[  228.401851][T15600] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  228.480520][T15613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2513'.
[  228.518417][T15615] vlan0: entered promiscuous mode
[  228.520197][T15615] bridge0: entered promiscuous mode
[  228.522134][T15615] vlan0: entered allmulticast mode
[  228.524517][T15615] bridge0: entered allmulticast mode
[  228.597002][T15619] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2515'.
[  228.950422][T15627] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2517'.
[  229.015620][T15629] lo speed is unknown, defaulting to 1000
[  229.164717][T15629] lo speed is unknown, defaulting to 1000
[  229.378582][T15645] mac80211_hwsim hwsim177 wlan0: left promiscuous mode
[  229.507780][T15649] syz_tun: entered allmulticast mode
[  229.512069][T15651] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  229.530896][T15649] syz_tun: left allmulticast mode
[  229.749486][T15662] infiniband syz!: set down
[  229.751034][T15662] infiniband syz!: added team_slave_0
[  229.775431][T15662] RDS/IB: syz!: added
[  229.776783][T15662] smc: adding ib device syz! with port count 1
[  229.778708][T15662] smc:    ib device syz! port 1 has pnetid 
[  229.827750][T15698] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2529'.
[  229.832560][T15698] netlink: 'syz.1.2529': attribute type 10 has an invalid length.
[  229.909509][T15703] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2531'.
[  230.159073][T15714] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  230.228578][T15720] openvswitch: netlink: Multiple metadata blocks provided
[  230.297041][T15720] bond9: entered promiscuous mode
[  230.299311][T15720] bond9: entered allmulticast mode
[  230.302400][T15720] 8021q: adding VLAN 0 to HW filter on device bond9
[  230.316736][T15720] netlink: 'syz.1.2534': attribute type 10 has an invalid length.
[  231.041477][T15734] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  231.045330][T15734] CPU: 0 UID: 0 PID: 15734 Comm: syz.2.2538 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  231.045343][T15734] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  231.045350][T15734] Call Trace:
[  231.045354][T15734]  <TASK>
[  231.045360][T15734]  dump_stack_lvl+0x189/0x250
[  231.045379][T15734]  ? __pfx_dump_stack_lvl+0x10/0x10
[  231.045390][T15734]  ? __pfx__printk+0x10/0x10
[  231.045406][T15734]  ? kernfs_path_from_node+0x2f/0x290
[  231.045418][T15734]  ? kernfs_path_from_node+0x250/0x290
[  231.045427][T15734]  ? kernfs_path_from_node+0x2f/0x290
[  231.045439][T15734]  sysfs_warn_dup+0x8e/0xa0
[  231.045468][T15734]  sysfs_do_create_link_sd+0xc0/0x110
[  231.045482][T15734]  device_add_class_symlinks+0x1cf/0x240
[  231.045499][T15734]  device_add+0x475/0xb50
[  231.045514][T15734]  wiphy_register+0x1ba6/0x28d0
[  231.045534][T15734]  ? __pfx_wiphy_register+0x10/0x10
[  231.045542][T15734]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  231.045559][T15734]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  231.045576][T15734]  ieee80211_register_hw+0x3425/0x4080
[  231.045599][T15734]  ? ieee80211_register_hw+0x1401/0x4080
[  231.045614][T15734]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  231.045628][T15734]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  231.045642][T15734]  ? __hrtimer_setup+0x187/0x210
[  231.045650][T15734]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  231.045663][T15734]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  231.045687][T15734]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  231.045694][T15734]  ? trace_kmalloc+0x1f/0xd0
[  231.045708][T15734]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  231.045720][T15734]  ? kstrndup+0xbf/0x160
[  231.045735][T15734]  hwsim_new_radio_nl+0xea4/0x1b10
[  231.045746][T15734]  ? __pfx___nla_validate_parse+0x10/0x10
[  231.045764][T15734]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  231.045779][T15734]  ? __nla_parse+0x40/0x60
[  231.045791][T15734]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  231.045804][T15734]  genl_family_rcv_msg_doit+0x215/0x300
[  231.045827][T15734]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  231.045849][T15734]  ? bpf_lsm_capable+0x9/0x20
[  231.045861][T15734]  ? security_capable+0x7e/0x2e0
[  231.045879][T15734]  genl_rcv_msg+0x60e/0x790
[  231.045896][T15734]  ? __pfx_genl_rcv_msg+0x10/0x10
[  231.045909][T15734]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  231.045925][T15734]  netlink_rcv_skb+0x208/0x470
[  231.045934][T15734]  ? __lock_acquire+0xab9/0xd20
[  231.045947][T15734]  ? __pfx_genl_rcv_msg+0x10/0x10
[  231.045959][T15734]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  231.045978][T15734]  ? down_read+0x1ad/0x2e0
[  231.045990][T15734]  genl_rcv+0x28/0x40
[  231.046001][T15734]  netlink_unicast+0x82f/0x9e0
[  231.046014][T15734]  ? __pfx_netlink_unicast+0x10/0x10
[  231.046024][T15734]  ? netlink_sendmsg+0x642/0xb30
[  231.046033][T15734]  ? skb_put+0x11b/0x210
[  231.046046][T15734]  netlink_sendmsg+0x805/0xb30
[  231.046060][T15734]  ? __pfx_netlink_sendmsg+0x10/0x10
[  231.046072][T15734]  ? aa_sock_msg_perm+0xf1/0x1d0
[  231.046084][T15734]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  231.046111][T15734]  ? __pfx_netlink_sendmsg+0x10/0x10
[  231.046122][T15734]  __sock_sendmsg+0x21c/0x270
[  231.046135][T15734]  ____sys_sendmsg+0x505/0x830
[  231.046152][T15734]  ? __pfx_____sys_sendmsg+0x10/0x10
[  231.046170][T15734]  ? import_iovec+0x74/0xa0
[  231.046180][T15734]  ___sys_sendmsg+0x21f/0x2a0
[  231.046195][T15734]  ? __pfx____sys_sendmsg+0x10/0x10
[  231.046226][T15734]  ? __fget_files+0x2a/0x420
[  231.046238][T15734]  ? __fget_files+0x3a0/0x420
[  231.046255][T15734]  __x64_sys_sendmsg+0x19b/0x260
[  231.046268][T15734]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  231.046284][T15734]  ? rcu_is_watching+0x15/0xb0
[  231.046295][T15734]  ? do_syscall_64+0xbe/0x3b0
[  231.046308][T15734]  do_syscall_64+0xfa/0x3b0
[  231.046318][T15734]  ? lockdep_hardirqs_on+0x9c/0x150
[  231.046327][T15734]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.046336][T15734]  ? exc_page_fault+0x9f/0xf0
[  231.046346][T15734]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.046354][T15734] RIP: 0033:0x7f258fb8ebe9
[  231.046362][T15734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  231.046369][T15734] RSP: 002b:00007f259098d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  231.046379][T15734] RAX: ffffffffffffffda RBX: 00007f258fdb5fa0 RCX: 00007f258fb8ebe9
[  231.046386][T15734] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008
[  231.046392][T15734] RBP: 00007f258fc11e19 R08: 0000000000000000 R09: 0000000000000000
[  231.046397][T15734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  231.046403][T15734] R13: 00007f258fdb6038 R14: 00007f258fdb5fa0 R15: 00007ffffb8ef648
[  231.046419][T15734]  </TASK>
[  231.247728][T15739] netlink: 'syz.2.2540': attribute type 1 has an invalid length.
[  231.299847][T15743] mac80211_hwsim hwsim177 wlan0: entered promiscuous mode
[  231.302095][T15743] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  231.445444][T15759] netlink: 'syz.2.2541': attribute type 5 has an invalid length.
[  231.589677][T15771] netlink: 'syz.1.2548': attribute type 1 has an invalid length.
[  232.210457][T15780] veth1: left promiscuous mode
[  232.426927][T15782] netlink: 'syz.2.2552': attribute type 10 has an invalid length.
[  232.981121][T15829] ieee802154 phy1 wpan1: encryption failed: -22
[  233.489407][T15854] syzkaller1: entered promiscuous mode
[  233.493785][T15854] syzkaller1: entered allmulticast mode
[  233.498763][T15856] __nla_validate_parse: 20 callbacks suppressed
[  233.498776][T15856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2573'.
[  233.505874][T15856] validate_nla: 1 callbacks suppressed
[  233.505886][T15856] netlink: 'syz.1.2573': attribute type 1 has an invalid length.
[  233.578280][T15858] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2574'.
[  233.680345][T15862] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2576'.
[  233.833335][T15876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2580'.
[  233.840995][T15876] netlink: 'syz.2.2580': attribute type 1 has an invalid length.
[  233.845719][T15875] netlink: 'syz.0.2579': attribute type 10 has an invalid length.
[  233.931472][T15865] netlink: 'syz.1.2577': attribute type 10 has an invalid length.
[  234.056663][T15899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2586'.
[  234.102568][T15901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2587'.
[  234.112719][T15901] netlink: 'syz.2.2587': attribute type 1 has an invalid length.
[  234.148047][T15901] bond25: entered promiscuous mode
[  234.150766][T15901] 8021q: adding VLAN 0 to HW filter on device bond25
[  234.176411][T15903] lo speed is unknown, defaulting to 1000
[  234.270898][T15907] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2589'.
[  234.366029][T15903] lo speed is unknown, defaulting to 1000
[  234.606700][T15924] bridge0: port 1(ipvlan2) entered blocking state
[  234.609221][T15924] bridge0: port 1(ipvlan2) entered disabled state
[  234.614723][T15924] ipvlan2: entered allmulticast mode
[  234.617041][T15924] bridge0: entered allmulticast mode
[  234.631422][T15924] ipvlan2: left allmulticast mode
[  234.644053][T15924] bridge0: left allmulticast mode
[  234.822089][T15938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2592'.
[  234.852241][T15940] unknown channel width for channel at 909000KHz?
[  234.867289][T15940] unknown channel width for channel at 909000KHz?
[  234.869376][T15940] unknown channel width for channel at 909000KHz?
[  234.901502][T15947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2597'.
[  234.907362][T15947] netlink: 'syz.0.2597': attribute type 1 has an invalid length.
[  234.931408][T15951] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2598'.
[  235.014067][T15953] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  235.016654][T15953] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  235.280120][T15982] netlink: 'syz.2.2608': attribute type 1 has an invalid length.
[  235.387943][T15991] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20004
[  235.418689][T15993] netlink: 'syz.2.2613': attribute type 1 has an invalid length.
[  235.492073][T15997] netlink: 'syz.2.2615': attribute type 11 has an invalid length.
[  235.499347][T15999] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  235.546588][T16003] netlink: 'syz.2.2616': attribute type 1 has an invalid length.
[  236.575320][T16029] openvswitch: netlink: nsh attr 2560 is out of range max 3
[  236.578587][T16029] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  237.272213][T16047] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  237.290345][T16047] mac80211_hwsim hwsim59 syzkaller0: entered promiscuous mode
[  237.294449][T16047] mac80211_hwsim hwsim59 syzkaller0: entered allmulticast mode
[  237.338710][T16055] macsec0: entered allmulticast mode
[  237.341760][T16055] batman_adv: batadv0: Adding interface: macsec0
[  237.347180][T16055] batman_adv: batadv0: The MTU of interface macsec0 is too small (1006) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  237.361604][T16055] batman_adv: batadv0: Interface activated: macsec0
[  237.492632][T16070] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  237.596932][T16080] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  237.868172][T16097] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  237.870953][T16097] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  238.374464][T16123] lo speed is unknown, defaulting to 1000
[  238.546971][T16123] lo speed is unknown, defaulting to 1000
[  238.549452][T16125] lo speed is unknown, defaulting to 1000
[  238.691178][T16125] lo speed is unknown, defaulting to 1000
[  239.186839][T16143] __nla_validate_parse: 23 callbacks suppressed
[  239.186856][T16143] netlink: 252 bytes leftover after parsing attributes in process `syz.0.2657'.
[  239.486814][T16156] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2661'.
[  239.860779][T16164] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2663'.
[  240.129062][T16173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2666'.
[  240.174096][T16177] validate_nla: 7 callbacks suppressed
[  240.174111][T16177] netlink: 'syz.1.2667': attribute type 13 has an invalid length.
[  240.215329][T16179] netlink: 'syz.2.2669': attribute type 11 has an invalid length.
[  240.301455][T16185] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2672'.
[  240.306128][T16185] netlink: 'syz.0.2672': attribute type 1 has an invalid length.
[  240.317569][T16188] sctp: [Deprecated]: syz.1.2673 (pid 16188) Use of int in max_burst socket option.
[  240.317569][T16188] Use struct sctp_assoc_value instead
[  240.341732][T16185] 8021q: adding VLAN 0 to HW filter on device bond19
[  240.376890][T16185] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2672'.
[  240.379747][T16185] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2672'.
[  240.417150][T16197] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2675'.
[  240.488211][T16208] sctp: [Deprecated]: syz.2.2678 (pid 16208) Use of int in max_burst socket option.
[  240.488211][T16208] Use struct sctp_assoc_value instead
[  240.651669][T16219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2683'.
[  240.705085][T16221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2684'.
[  240.709649][T16221] netlink: 'syz.0.2684': attribute type 1 has an invalid length.
[  241.390693][T16272] pim6reg1: entered promiscuous mode
[  241.397879][T16272] pim6reg1: entered allmulticast mode
[  241.470819][T16272] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  241.474843][T16272] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  241.500571][T16272] 8021q: adding VLAN 0 to HW filter on device bond10
[  241.505821][T16272] team0: Port device bond10 added
[  241.566408][T16288] netlink: 'syz.2.2711': attribute type 13 has an invalid length.
[  241.589176][T16291] netlink: 'syz.1.2710': attribute type 1 has an invalid length.
[  241.726826][T16301] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  241.831067][T16299] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  241.840696][T16299] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  241.916384][T16310] unknown channel width for channel at 909000KHz?
[  242.605212][T16327] netlink: 'syz.0.2723': attribute type 4 has an invalid length.
[  242.608667][T16327] netlink: 'syz.0.2723': attribute type 4 has an invalid length.
[  242.671961][T16333] netlink: 'syz.1.2725': attribute type 1 has an invalid length.
[  242.779604][T16343] ksmbd: Unknown IPC event: 8, ignore.
[  242.828012][T16349] mac80211_hwsim hwsim237 wlan1: entered allmulticast mode
[  242.841899][T16349] team0: Port device bond16 removed
[  242.845344][T16349] team0: Port device bond17 removed
[  242.858236][T16349] bond0: (slave bond18): Releasing backup interface
[  242.866160][T16349] team0: Port device bond24 removed
[  242.951727][T16360] sock: sock_set_timeout: `syz.1.2733' (pid 16360) tries to set negative timeout
[  243.025531][T16364] netlink: 'syz.2.2735': attribute type 1 has an invalid length.
[  243.071467][T16366] netlink: 'syz.1.2736': attribute type 21 has an invalid length.
[  243.194957][T16375] pim6reg1: entered promiscuous mode
[  243.197008][T16375] pim6reg1: entered allmulticast mode
[  243.279109][T16373] 8021q: adding VLAN 0 to HW filter on device bond11
[  243.282524][T16373] bond0: (slave bond11): Enslaving as a backup interface with a down link
[  243.313991][T16379] 8021q: adding VLAN 0 to HW filter on device bond26
[  243.324266][T16379] team0: Port device bond26 added
[  243.419785][T16388] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  243.710546][T16432] netlink: 'syz.0.2743': attribute type 11 has an invalid length.
[  244.359635][T16465] __nla_validate_parse: 16 callbacks suppressed
[  244.359648][T16465] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2752'.
[  244.463731][T16471] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2754'.
[  244.466759][T16471] mac80211_hwsim hwsim220 wlan0: entered promiscuous mode
[  244.697570][T16484] lo speed is unknown, defaulting to 1000
[  244.857385][T16484] lo speed is unknown, defaulting to 1000
[  245.292532][T16494] validate_nla: 2 callbacks suppressed
[  245.292548][T16494] netlink: 'syz.0.2760': attribute type 13 has an invalid length.
[  245.302883][T16494] netlink: 'syz.0.2760': attribute type 17 has an invalid length.
[  245.337705][T16494] 8021q: adding VLAN 0 to HW filter on device team0
[  247.706085][T16494] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  247.802557][T16502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2761'.
[  247.886183][T16502] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2761'.
[  247.962142][T16510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2763'.
[  247.977112][T16510] netlink: 'syz.0.2763': attribute type 1 has an invalid length.
[  248.127377][T16516] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2765'.
[  248.131133][T16516] netlink: 'syz.0.2765': attribute type 7 has an invalid length.
[  248.136926][T16516] netlink: 'syz.0.2765': attribute type 8 has an invalid length.
[  248.147694][T16515] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2766'.
[  248.150712][T16517] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2766'.
[  248.151054][T16516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2765'.
[  248.181621][T16519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2765'.
[  248.411889][T16534] netlink: 'syz.0.2772': attribute type 1 has an invalid length.
[  248.850587][T16580] 8021q: adding VLAN 0 to HW filter on device bond4
[  248.880936][T16580] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  248.884472][T16580] bond4: (slave macvlan5): Enslaving as a backup interface with a down link
[  248.890495][T16580] batman_adv: batadv0: Interface deactivated: macsec0
[  248.892640][T16580] batman_adv: batadv0: Removing interface: macsec0
[  248.897675][T16580] bond4: (slave macvlan5): Releasing backup interface
[  248.992567][T16590] 8021q: adding VLAN 0 to HW filter on device bond27
[  248.996938][T16590] team0: Port device bond27 added
[  249.009485][T16595] openvswitch: netlink: Flow actions attr not present in new flow.
[  249.085419][T16601] sctp: [Deprecated]: syz.0.2792 (pid 16601) Use of struct sctp_assoc_value in delayed_ack socket option.
[  249.085419][T16601] Use struct sctp_sack_info instead
[  249.451578][T16632] __nla_validate_parse: 11 callbacks suppressed
[  249.451598][T16632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2801'.
[  249.492279][T16636] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  249.707766][T16645] netlink: 'syz.0.2804': attribute type 13 has an invalid length.
[  249.715173][T16645] netlink: 'syz.0.2804': attribute type 17 has an invalid length.
[  249.722464][T16645] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  249.901393][T16661] tipc: Enabled bearer <udp:syz0>, priority 10
[  250.088026][T16683] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2815'.
[  250.184175][T16691] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2817'.
[  250.334814][T16699] netlink: 47 bytes leftover after parsing attributes in process `syz.2.2819'.
[  250.389176][T16700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2820'.
[  250.500196][T16718] netlink: 'syz.1.2825': attribute type 4 has an invalid length.
[  250.503204][T16717] netlink: 'syz.1.2825': attribute type 4 has an invalid length.
[  250.670579][T16730] netlink: 'syz.0.2830': attribute type 1 has an invalid length.
[  250.692126][T16730] 8021q: adding VLAN 0 to HW filter on device bond20
[  250.698779][T16730] netlink: 'syz.0.2830': attribute type 13 has an invalid length.
[  250.701238][T16730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2830'.
[  251.374339][T16738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2832'.
[  251.488416][T16741] 8021q: adding VLAN 0 to HW filter on device bond21
[  251.563032][T16744] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2834'.
[  251.672647][T16748] lo speed is unknown, defaulting to 1000
[  251.753824][T16749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2836'.
[  251.806508][T16750] netlink: 'syz.0.2836': attribute type 1 has an invalid length.
[  251.809693][T16750] netlink: 400 bytes leftover after parsing attributes in process `syz.0.2836'.
[  251.837551][T16748] lo speed is unknown, defaulting to 1000
[  252.309590][T16768] netlink: 'syz.1.2840': attribute type 13 has an invalid length.
[  252.649753][T16781] bond0 (unregistering): Released all slaves
[  253.198294][T16822] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  253.262466][T16825] netlink: 'syz.1.2855': attribute type 16 has an invalid length.
[  253.267691][T16825] netlink: 'syz.1.2855': attribute type 17 has an invalid length.
[  253.292716][T16827] netlink: 'syz.2.2857': attribute type 1 has an invalid length.
[  253.307309][T16827] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  254.146077][T16874] v: renamed from ip6_vti0 (while UP)
[  254.163395][T16874] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  254.183605][T16879] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3942. macoff=106
[  254.271832][T16883] team0: Port device bond26 removed
[  254.276634][T16883] team0: Port device bond27 removed
[  254.287987][T16883] netlink: 'syz.2.2874': attribute type 10 has an invalid length.
[  254.301367][T16886] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  254.329564][T16885] lo speed is unknown, defaulting to 1000
[  254.370080][T16888] netlink: 'syz.2.2876': attribute type 11 has an invalid length.
[  254.608953][T16881] lo speed is unknown, defaulting to 1000
[  254.615943][T16885] lo speed is unknown, defaulting to 1000
[  254.795806][T16889] __nla_validate_parse: 11 callbacks suppressed
[  254.795820][T16889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2875'.
[  254.872379][T16881] lo speed is unknown, defaulting to 1000
[  255.273407][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  255.460492][T16922] IPVS: Scheduler module ip_vs_sip not found
[  255.490949][T16926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2887'.
[  255.690645][T16932] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2889'.
[  255.740639][T16936] mac80211_hwsim hwsim237 wlan1: left allmulticast mode
[  255.838102][T16946] nbd: must specify at least one socket
[  255.925532][T16952] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  256.301318][T16981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2902'.
[  256.308829][T16979] validate_nla: 3 callbacks suppressed
[  256.308844][T16979] netlink: 'syz.2.2903': attribute type 10 has an invalid length.
[  256.350044][T16984] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  256.458232][T16994] netlink: 'syz.2.2907': attribute type 1 has an invalid length.
[  256.459532][T16996] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  256.461549][T16994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2907'.
[  256.775986][T17022] pim6reg1: entered promiscuous mode
[  256.778425][T17022] pim6reg1: entered allmulticast mode
[  257.154988][T17045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2920'.
[  257.291630][T17059] ieee802154 phy1 wpan1: encryption failed: -22
[  257.305211][T17060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2924'.
[  257.307975][T17060] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2924'.
[  257.310931][T17060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2924'.
[  257.314728][T17060] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2924'.
[  257.398214][T17068] netlink: 'syz.0.2926': attribute type 1 has an invalid length.
[  257.513082][T17073] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  257.618663][T17086] sctp: [Deprecated]: syz.1.2930 (pid 17086) Use of struct sctp_assoc_value in delayed_ack socket option.
[  257.618663][T17086] Use struct sctp_sack_info instead
[  258.605003][T17102] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  258.798012][T17111] syzkaller1: entered promiscuous mode
[  258.800392][T17111] syzkaller1: entered allmulticast mode
[  258.833392][T17111] netlink: 'syz.0.2939': attribute type 10 has an invalid length.
[  259.062521][T17129] lo speed is unknown, defaulting to 1000
[  259.402270][T17142] netlink: 'syz.2.2946': attribute type 29 has an invalid length.
[  259.430532][T17129] lo speed is unknown, defaulting to 1000
[  259.601947][T17150] netlink: 'syz.2.2948': attribute type 3 has an invalid length.
[  259.611453][T17150] syz_tun: entered allmulticast mode
[  259.635496][T17150] 8021q: adding VLAN 0 to HW filter on device team0
[  259.642454][T17150] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  259.667450][T17149] syz_tun: left allmulticast mode
[  259.939542][T17155] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  260.346022][T17183] netlink: 'syz.0.2958': attribute type 10 has an invalid length.
[  260.391174][T17189] netlink: 'syz.0.2959': attribute type 1 has an invalid length.
[  260.394871][T17189] __nla_validate_parse: 8 callbacks suppressed
[  260.394884][T17189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2959'.
[  260.402541][T17189] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  260.418018][T17189] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2959'.
[  260.451583][T17190] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  260.455237][T17190] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  260.584888][T17199] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2961'.
[  260.698378][T17207] mac80211_hwsim hwsim247 wlan1: entered allmulticast mode
[  260.768464][T17217] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2967'.
[  260.771780][T17218] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2967'.
[  260.777287][T17217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2967'.
[  260.782692][T17217] netlink: 'syz.1.2967': attribute type 12 has an invalid length.
[  260.786631][T17217] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.2967'.
[  260.855197][T17220] openvswitch: netlink: Message has 4 unknown bytes.
[  261.383155][T17246] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2975'.
[  261.609042][T17264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2979'.
[  261.613445][T17261] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2978'.
[  261.633024][T17264] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  261.641365][T17264] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  261.651432][T17264] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  261.658697][T17264] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  261.868867][T17283] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  261.871759][T17283] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  262.239486][T17312] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  262.245760][T17312] CPU: 0 UID: 0 PID: 17312 Comm: syz.1.2992 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  262.245781][T17312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  262.245792][T17312] Call Trace:
[  262.245798][T17312]  <TASK>
[  262.245805][T17312]  dump_stack_lvl+0x189/0x250
[  262.245833][T17312]  ? __pfx_dump_stack_lvl+0x10/0x10
[  262.245853][T17312]  ? __pfx__printk+0x10/0x10
[  262.245877][T17312]  ? kernfs_path_from_node+0x2f/0x290
[  262.245894][T17312]  ? kernfs_path_from_node+0x250/0x290
[  262.245908][T17312]  ? kernfs_path_from_node+0x2f/0x290
[  262.245926][T17312]  sysfs_warn_dup+0x8e/0xa0
[  262.245941][T17312]  sysfs_do_create_link_sd+0xc0/0x110
[  262.245959][T17312]  device_add_class_symlinks+0x1cf/0x240
[  262.245984][T17312]  device_add+0x475/0xb50
[  262.246011][T17312]  wiphy_register+0x1ba6/0x28d0
[  262.246044][T17312]  ? __pfx_wiphy_register+0x10/0x10
[  262.246063][T17312]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  262.246093][T17312]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  262.246119][T17312]  ieee80211_register_hw+0x3425/0x4080
[  262.246155][T17312]  ? ieee80211_register_hw+0x1401/0x4080
[  262.246191][T17312]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  262.246217][T17312]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  262.246241][T17312]  ? __hrtimer_setup+0x187/0x210
[  262.246254][T17312]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  262.246275][T17312]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  262.246318][T17312]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  262.246332][T17312]  ? trace_kmalloc+0x1f/0xd0
[  262.246349][T17312]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  262.246369][T17312]  ? kstrndup+0xbf/0x160
[  262.246392][T17312]  hwsim_new_radio_nl+0xea4/0x1b10
[  262.246410][T17312]  ? __pfx___nla_validate_parse+0x10/0x10
[  262.246442][T17312]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  262.246470][T17312]  ? __nla_parse+0x40/0x60
[  262.246492][T17312]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  262.246515][T17312]  genl_family_rcv_msg_doit+0x215/0x300
[  262.246545][T17312]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  262.246611][T17312]  ? bpf_lsm_capable+0x9/0x20
[  262.246633][T17312]  ? security_capable+0x7e/0x2e0
[  262.246658][T17312]  genl_rcv_msg+0x60e/0x790
[  262.246688][T17312]  ? __pfx_genl_rcv_msg+0x10/0x10
[  262.246710][T17312]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  262.246738][T17312]  netlink_rcv_skb+0x208/0x470
[  262.246753][T17312]  ? __lock_acquire+0xab9/0xd20
[  262.246774][T17312]  ? __pfx_genl_rcv_msg+0x10/0x10
[  262.246798][T17312]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  262.246833][T17312]  ? down_read+0x1ad/0x2e0
[  262.246855][T17312]  genl_rcv+0x28/0x40
[  262.246874][T17312]  netlink_unicast+0x82f/0x9e0
[  262.246898][T17312]  ? __pfx_netlink_unicast+0x10/0x10
[  262.246916][T17312]  ? netlink_sendmsg+0x642/0xb30
[  262.246931][T17312]  ? skb_put+0x11b/0x210
[  262.246954][T17312]  netlink_sendmsg+0x805/0xb30
[  262.246980][T17312]  ? __pfx_netlink_sendmsg+0x10/0x10
[  262.247007][T17312]  ? aa_sock_msg_perm+0xf1/0x1d0
[  262.247030][T17312]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  262.247046][T17312]  ? __pfx_netlink_sendmsg+0x10/0x10
[  262.247065][T17312]  __sock_sendmsg+0x21c/0x270
[  262.247084][T17312]  ____sys_sendmsg+0x505/0x830
[  262.247110][T17312]  ? __pfx_____sys_sendmsg+0x10/0x10
[  262.247140][T17312]  ? import_iovec+0x74/0xa0
[  262.247158][T17312]  ___sys_sendmsg+0x21f/0x2a0
[  262.247186][T17312]  ? __pfx____sys_sendmsg+0x10/0x10
[  262.247240][T17312]  ? __fget_files+0x2a/0x420
[  262.247261][T17312]  ? __fget_files+0x3a0/0x420
[  262.247292][T17312]  __x64_sys_sendmsg+0x19b/0x260
[  262.247315][T17312]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  262.247353][T17312]  ? do_syscall_64+0xbe/0x3b0
[  262.247375][T17312]  do_syscall_64+0xfa/0x3b0
[  262.247392][T17312]  ? lockdep_hardirqs_on+0x9c/0x150
[  262.247409][T17312]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.247423][T17312]  ? exc_page_fault+0x9f/0xf0
[  262.247442][T17312]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.247456][T17312] RIP: 0033:0x7f8495d8ebe9
[  262.247470][T17312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  262.247483][T17312] RSP: 002b:00007f8496b7c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  262.247501][T17312] RAX: ffffffffffffffda RBX: 00007f8495fb5fa0 RCX: 00007f8495d8ebe9
[  262.247513][T17312] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000a
[  262.247523][T17312] RBP: 00007f8495e11e19 R08: 0000000000000000 R09: 0000000000000000
[  262.247533][T17312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  262.247543][T17312] R13: 00007f8495fb6038 R14: 00007f8495fb5fa0 R15: 00007ffde863a8a8
[  262.247601][T17312]  </TASK>
[  262.669111][T17333] bond0 (unregistering): Released all slaves
[  262.829369][T17345] openvswitch: netlink: Flow actions attr not present in new flow.
[  262.979890][T17361] netlink: 'syz.2.3005': attribute type 1 has an invalid length.
[  263.009281][T17361] 8021q: adding VLAN 0 to HW filter on device bond0
[  263.025185][T17361] vlan2: entered allmulticast mode
[  263.026973][T17361] mac80211_hwsim hwsim227 wlan0: entered allmulticast mode
[  263.090273][T17372] lo speed is unknown, defaulting to 1000
[  263.271587][T17372] lo speed is unknown, defaulting to 1000
[  263.547569][T17398] netlink: 'syz.0.3013': attribute type 1 has an invalid length.
[  263.564581][T17398] netlink: 'syz.0.3013': attribute type 2 has an invalid length.
[  263.610282][T17404] sctp: [Deprecated]: syz.2.3015 (pid 17404) Use of int in max_burst socket option.
[  263.610282][T17404] Use struct sctp_assoc_value instead
[  263.783410][T17414] netlink: 'syz.2.3019': attribute type 11 has an invalid length.
[  264.185304][T17431] bond0 (unregistering): Released all slaves
[  264.324513][T17447] netlink: 'syz.1.3028': attribute type 23 has an invalid length.
[  264.508152][T17467] pim6reg1: entered promiscuous mode
[  264.509925][T17467] pim6reg1: entered allmulticast mode
[  264.567480][T17468] mac80211_hwsim hwsim59 syzkaller0: left promiscuous mode
[  264.569920][T17468] mac80211_hwsim hwsim59 syzkaller0: left allmulticast mode
[  264.942260][T17506] mac80211_hwsim hwsim177 wlan0: left promiscuous mode
[  264.952640][T17506] macsec0: left allmulticast mode
[  264.975194][T17525] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  265.309474][T17558] netlink: 'syz.2.3058': attribute type 3 has an invalid length.
[  265.366224][T17561] lo speed is unknown, defaulting to 1000
[  265.522431][T17566] __nla_validate_parse: 24 callbacks suppressed
[  265.522442][T17566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3060'.
[  265.654958][T17561] lo speed is unknown, defaulting to 1000
[  265.799237][T17571] tipc: Can't bind to reserved service type 0
[  266.054148][T17580] netlink: 'syz.2.3064': attribute type 9 has an invalid length.
[  266.057828][T17580] netlink: 'syz.2.3064': attribute type 9 has an invalid length.
[  266.087372][T17578] netlink: 'syz.0.3063': attribute type 4 has an invalid length.
[  266.175827][T17583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3064'.
[  266.184296][T17583] openvswitch: netlink: Flow actions attr not present in new flow.
[  266.259427][T17586] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3065'.
[  266.409683][T17594] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3068'.
[  266.433968][T17598] mac80211_hwsim hwsim265 wlan1: entered allmulticast mode
[  266.451557][T17601] netlink: 'syz.2.3069': attribute type 10 has an invalid length.
[  266.539554][T17611] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  266.543427][T17611] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  266.545762][T17611] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  266.550306][T17607] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3072'.
[  266.643656][T17620] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3076'.
[  267.117859][T17657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3084'.
[  267.150027][T17662] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3085'.
[  267.150568][T17661] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3085'.
[  267.298855][T17667] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3087'.
[  268.260475][T17708] openvswitch: netlink: Flow actions attr not present in new flow.
[  268.440954][T17718] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  268.445085][T17718] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  268.847924][T17736] pim6reg1: entered promiscuous mode
[  268.850296][T17736] pim6reg1: entered allmulticast mode
[  268.951425][T17738] 8021q: adding VLAN 0 to HW filter on device bond12
[  268.957593][T17738] team0: Port device bond12 added
[  269.058285][T17752] netlink: 'syz.2.3112': attribute type 3 has an invalid length.
[  269.195587][T17766] netlink: 'syz.1.3115': attribute type 10 has an invalid length.
[  269.507658][T17801] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  269.511353][T17799] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  269.515978][T17799] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  269.626678][T17815] netlink: 'syz.0.3131': attribute type 13 has an invalid length.
[  269.629189][T17815] netlink: 'syz.0.3131': attribute type 17 has an invalid length.
[  269.654456][T17815] 8021q: adding VLAN 0 to HW filter on device team0
[  269.659382][T17815] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  269.693547][T17815] lo speed is unknown, defaulting to 1000
[  269.883772][T17815] lo speed is unknown, defaulting to 1000
[  269.939974][T17830] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  269.943708][T17830] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  270.316760][T17847] openvswitch: netlink: IPv4 tun info is not correct
[  270.577544][T17856] __nla_validate_parse: 13 callbacks suppressed
[  270.577558][T17856] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3143'.
[  270.582355][T17856] openvswitch: netlink: Flow actions attr not present in new flow.
[  270.627457][T17860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3144'.
[  270.678729][T17863] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3145'.
[  270.745276][T17868] netlink: 'syz.1.3147': attribute type 11 has an invalid length.
[  270.748095][T17865] mac80211_hwsim hwsim265 wlan1: left allmulticast mode
[  270.748582][T17865] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  270.884009][T17865] netlink: 'syz.2.3146': attribute type 10 has an invalid length.
[  271.102372][T17884] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3151'.
[  271.163694][T17892] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3154'.
[  271.253605][T17905] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  271.301789][T17908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3160'.
[  271.306704][T17908] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3160'.
[  271.707362][T17941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3169'.
[  271.930825][T17950] raw_sendmsg: syz.0.3171 forgot to set AF_INET. Fix it!
[  272.117869][T17964] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3175'.
[  272.196521][T17963] pim6reg1: entered promiscuous mode
[  272.200342][T17963] pim6reg1: entered allmulticast mode
[  272.248503][T17975] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3178'.
[  272.298237][T17970] 8021q: adding VLAN 0 to HW filter on device bond0
[  272.308200][T17970] team0: Port device bond0 added
[  272.581810][T17982] lo speed is unknown, defaulting to 1000
[  272.649377][T17992] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  272.809177][T17982] lo speed is unknown, defaulting to 1000
[  273.315656][T17996] IPv6: NLM_F_REPLACE set, but no existing node found!
[  273.575426][T18017] netlink: 'syz.2.3189': attribute type 1 has an invalid length.
[  273.615258][T18017] 8021q: adding VLAN 0 to HW filter on device bond0
[  274.290961][T18064] openvswitch: netlink: Missing valid actions attribute.
[  274.294740][T18064] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  274.345660][T18067] netlink: 'syz.2.3204': attribute type 4 has an invalid length.
[  274.795881][T18100] netlink: 'syz.0.3216': attribute type 13 has an invalid length.
[  274.798318][T18100] netlink: 'syz.0.3216': attribute type 17 has an invalid length.
[  274.804977][T18100] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  275.394182][T18119] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  275.530185][T18125] lo speed is unknown, defaulting to 1000
[  275.636274][T18133] __nla_validate_parse: 17 callbacks suppressed
[  275.636292][T18133] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3226'.
[  275.738974][T18125] lo speed is unknown, defaulting to 1000
[  276.834907][T18153] openvswitch: netlink: IPv4 tun info is not correct
[  276.904384][T18160] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3235'.
[  277.055294][T18173] 8021q: adding VLAN 0 to HW filter on device bond13
[  277.062192][T18176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3241'.
[  277.133999][T18178] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3242'.
[  277.143375][T18178] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  277.152591][T18178] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3242'.
[  277.258967][T18181] bond0: (slave ip6gretap1): Removing an active aggregator
[  277.262727][T18181] bond0: (slave ip6gretap1): Releasing backup interface
[  277.267435][T18181] bond0: (slave ip6gretap1): the permanent HWaddr of slave - de:77:a3:ca:32:20 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  277.280946][T18181] bond0: (slave bond4): Releasing backup interface
[  277.286603][T18181] bond0: (slave bond5): Releasing backup interface
[  277.298232][T18181] bond6: (slave veth1): Releasing backup interface
[  277.305066][T18181] bond7: (slave gretap1): Releasing active interface
[  277.310997][T18181] bond8: (slave gretap2): Releasing active interface
[  277.318645][T18200] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3247'.
[  277.325486][T18181] team0: Port device bond10 removed
[  277.328827][T18181] bond0: (slave bond11): Releasing backup interface
[  277.337823][T18181] team0: Port device bond12 removed
[  277.458333][T18212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3250'.
[  277.474823][T18212] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3250'.
[  277.648900][T18221] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  277.652288][T18221] mac80211_hwsim hwsim59 syzkaller0: entered promiscuous mode
[  277.656331][T18221] mac80211_hwsim hwsim59 syzkaller0: entered allmulticast mode
[  277.660685][T18221] mac80211_hwsim hwsim59 syzkaller0: left promiscuous mode
[  277.664928][T18221] mac80211_hwsim hwsim59 syzkaller0: left allmulticast mode
[  277.787900][T18225] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3255'.
[  277.965743][T18233] netlink: 212936 bytes leftover after parsing attributes in process `syz.1.3257'.
[  278.011052][T18240] netlink: 'syz.2.3260': attribute type 6 has an invalid length.
[  278.185801][T18263] netlink: 'syz.0.3268': attribute type 1 has an invalid length.
[  278.211629][T18263] 8021q: adding VLAN 0 to HW filter on device bond22
[  278.233324][T18263] veth7: entered promiscuous mode
[  278.247569][T18263] bond22: (slave veth7): Enslaving as a backup interface with a down link
[  278.590785][T18280] netlink: 'syz.0.3273': attribute type 11 has an invalid length.
[  278.678843][T18284] netlink: 'syz.2.3274': attribute type 3 has an invalid length.
[  278.700869][T18284] syz_tun: entered allmulticast mode
[  278.729902][T18284] 8021q: adding VLAN 0 to HW filter on device team0
[  278.741859][T18284] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  278.770457][T18281] syz_tun: left allmulticast mode
[  279.399499][T18348] mac80211_hwsim hwsim246 wlan1: entered allmulticast mode
[  279.531111][T18362] IPVS: Scheduler module ip_vs_sip not found
[  280.053318][T18386] netlink: 'syz.0.3299': attribute type 1 has an invalid length.
[  280.086623][T18386] bond23: (slave vxcan1): The slave device specified does not support setting the MAC address
[  280.090835][T18386] bond23: (slave vxcan1): Error -95 calling set_mac_address
[  280.103180][T18389] netlink: 'syz.2.3300': attribute type 1 has an invalid length.
[  280.125693][T18389] bond28: (slave vxcan1): The slave device specified does not support setting the MAC address
[  280.133433][T18389] bond28: (slave vxcan1): Error -95 calling set_mac_address
[  280.252729][T18399] netlink: 'syz.0.3302': attribute type 13 has an invalid length.
[  280.503935][T18410] lo speed is unknown, defaulting to 1000
[  280.776304][T18427] __nla_validate_parse: 21 callbacks suppressed
[  280.776319][T18427] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3310'.
[  280.782650][T18427] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3310'.
[  280.840055][T18434] mac80211_hwsim hwsim246 wlan1: left allmulticast mode
[  280.855740][T18434] netlink: 'syz.0.3312': attribute type 10 has an invalid length.
[  280.856604][T18411] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3306'.
[  280.876497][T18411] netlink: 'syz.2.3306': attribute type 13 has an invalid length.
[  280.879587][T18411] netlink: 'syz.2.3306': attribute type 17 has an invalid length.
[  280.978881][T18411] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  280.990098][T18410] lo speed is unknown, defaulting to 1000
[  280.997024][T18440] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  281.062182][T18447] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3316'.
[  281.310226][T18460] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3319'.
[  281.879991][T18492] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3329'.
[  281.886445][T18492] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3329'.
[  281.919661][T18494] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3330'.
[  281.938485][T18497] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3331'.
[  282.110204][T18502] 8021q: adding VLAN 0 to HW filter on device bond1
[  282.118083][T18504] bond1: option mode: unable to set because the bond device is up
[  282.132146][T18510] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3335'.
[  282.136641][T18504] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig
[  282.175391][T18515] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  282.451285][T18547] bond0: down delay (5) is not a multiple of miimon (100), value rounded to 0 ms
[  282.456578][T18547] bond0: option all_slaves_active: invalid value (7)
[  282.518494][T18553] pimreg3: entered allmulticast mode
[  282.572180][T18556] vlan0: entered promiscuous mode
[  282.574807][T18556] vlan0: entered allmulticast mode
[  282.576889][T18556] veth0_virt_wifi: entered allmulticast mode
[  283.261453][T18542] BUG: unable to handle page fault for address: ffff8881a3c23020
[  283.264596][T18542] #PF: supervisor write access in kernel mode
[  283.267127][T18542] #PF: error_code(0x0002) - not-present page
[  283.270448][T18542] PGD 1a201067 P4D 1a201067 PUD 0 
[  283.272500][T18542] Oops: Oops: 0002 [#1] SMP KASAN PTI
[  283.274691][T18542] CPU: 1 UID: 0 PID: 18542 Comm: syz.1.3344 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  283.279364][T18542] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  283.283374][T18542] RIP: 0010:nsim_queue_free+0xdc/0x150
[  283.285491][T18542] Code: 10 bd bd 8d 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ff e8 db 9c 0d fb 49 8b 07 48 8b 0c 24 <4a> 01 4c 28 20 4c 89 f7 be 00 02 00 00 e8 42 6d 6f fa 4c 89 e7 be
[  283.292943][T18542] RSP: 0018:ffffc9000670ede0 EFLAGS: 00010246
[  283.295300][T18542] RAX: ffff8881a3c23000 RBX: ffff88811ffd3000 RCX: 0000000000000000
[  283.298430][T18542] RDX: ffffc9000f3ea000 RSI: 0000000000031465 RDI: 0000000000031466
[  283.301508][T18542] RBP: 0000000000000001 R08: ffffffff8e1e58e7 R09: 1ffffffff1c3cb1c
[  283.304653][T18542] R10: dffffc0000000000 R11: fffffbfff1c3cb1d R12: ffff88811ffd3218
[  283.307708][T18542] R13: 0000000000000000 R14: ffffffff871578d3 R15: ffffffff8dbdbd18
[  283.310864][T18542] FS:  00007f8496b7c6c0(0000) GS:ffff8881a3c23000(0000) knlGS:0000000000000000
[  283.314317][T18542] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  283.316927][T18542] CR2: ffff8881a3c23020 CR3: 00000000328c8000 CR4: 00000000000006f0
[  283.320088][T18542] Call Trace:
[  283.321450][T18542]  <TASK>
[  283.322684][T18542]  nsim_create+0xbbf/0xf10
[  283.324502][T18542]  __nsim_dev_port_add+0x6b6/0xb10
[  283.326556][T18542]  ? __pfx___nsim_dev_port_add+0x10/0x10
[  283.328814][T18542]  ? queue_delayed_work_on+0x1f7/0x280
[  283.331003][T18542]  ? __pfx_queue_delayed_work_on+0x10/0x10
[  283.333293][T18542]  ? timer_init_key+0x171/0x2d0
[  283.335262][T18542]  nsim_dev_port_add_all+0x37/0xf0
[  283.337327][T18542]  nsim_dev_reload_up+0x451/0x780
[  283.339380][T18542]  ? __pfx_nsim_dev_reload_up+0x10/0x10
[  283.341604][T18542]  devlink_reload+0x4ec/0x8d0
[  283.343414][T18542]  ? __pfx_devlink_reload+0x10/0x10
[  283.345395][T18542]  ? devlink_resources_validate+0xa7/0xd0
[  283.347682][T18542]  ? devlink_resources_validate+0xa7/0xd0
[  283.349928][T18542]  devlink_nl_reload_doit+0xb35/0xd50
[  283.352069][T18542]  ? __pfx_devlink_nl_reload_doit+0x10/0x10
[  283.354419][T18542]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  283.356920][T18542]  genl_family_rcv_msg_doit+0x215/0x300
[  283.358938][T18542]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  283.361103][T18542]  ? bpf_lsm_capable+0x9/0x20
[  283.362983][T18542]  ? security_capable+0x7e/0x2e0
[  283.364936][T18542]  genl_rcv_msg+0x60e/0x790
[  283.366750][T18542]  ? __pfx_genl_rcv_msg+0x10/0x10
[  283.368763][T18542]  ? __pfx_devlink_nl_pre_doit_dev_lock+0x10/0x10
[  283.371322][T18542]  ? __pfx_devlink_nl_reload_doit+0x10/0x10
[  283.373661][T18542]  ? __pfx_devlink_nl_post_doit_dev_lock+0x10/0x10
[  283.376240][T18542]  netlink_rcv_skb+0x208/0x470
[  283.378217][T18542]  ? __lock_acquire+0xab9/0xd20
[  283.380183][T18542]  ? __pfx_genl_rcv_msg+0x10/0x10
[  283.382135][T18542]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  283.384251][T18542]  ? down_read+0x1ad/0x2e0
[  283.386066][T18542]  genl_rcv+0x28/0x40
[  283.387728][T18542]  netlink_unicast+0x82f/0x9e0
[  283.389655][T18542]  ? __pfx_netlink_unicast+0x10/0x10
[  283.391739][T18542]  ? netlink_sendmsg+0x642/0xb30
[  283.393733][T18542]  ? skb_put+0x11b/0x210
[  283.395426][T18542]  netlink_sendmsg+0x805/0xb30
[  283.397353][T18542]  ? __pfx_netlink_sendmsg+0x10/0x10
[  283.399522][T18542]  ? aa_sock_msg_perm+0xf1/0x1d0
[  283.401532][T18542]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  283.403647][T18542]  ? __pfx_netlink_sendmsg+0x10/0x10
[  283.405778][T18542]  __sock_sendmsg+0x21c/0x270
[  283.407679][T18542]  ____sys_sendmsg+0x505/0x830
[  283.409648][T18542]  ? __pfx_____sys_sendmsg+0x10/0x10
[  283.411775][T18542]  ? import_iovec+0x74/0xa0
[  283.413578][T18542]  ___sys_sendmsg+0x21f/0x2a0
[  283.415476][T18542]  ? __pfx____sys_sendmsg+0x10/0x10
[  283.417455][T18542]  ? __fget_files+0x2a/0x420
[  283.419321][T18542]  ? __fget_files+0x3a0/0x420
[  283.421260][T18542]  __x64_sys_sendmsg+0x19b/0x260
[  283.423251][T18542]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  283.425434][T18542]  ? rcu_is_watching+0x15/0xb0
[  283.427374][T18542]  ? do_syscall_64+0xbe/0x3b0
[  283.429279][T18542]  do_syscall_64+0xfa/0x3b0
[  283.431131][T18542]  ? lockdep_hardirqs_on+0x9c/0x150
[  283.433216][T18542]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.435679][T18542]  ? exc_page_fault+0x9f/0xf0
[  283.437473][T18542]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.439792][T18542] RIP: 0033:0x7f8495d8ebe9
[  283.441530][T18542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  283.448961][T18542] RSP: 002b:00007f8496b7c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  283.452117][T18542] RAX: ffffffffffffffda RBX: 00007f8495fb5fa0 RCX: 00007f8495d8ebe9
[  283.455253][T18542] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004
[  283.458390][T18542] RBP: 00007f8495e11e19 R08: 0000000000000000 R09: 0000000000000000
[  283.461535][T18542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  283.464707][T18542] R13: 00007f8495fb6038 R14: 00007f8495fb5fa0 R15: 00007ffde863a8a8
[  283.467745][T18542]  </TASK>
[  283.468966][T18542] Modules linked in:
[  283.470472][T18542] CR2: ffff8881a3c23020
[  283.472159][T18542] ---[ end trace 0000000000000000 ]---
[  283.474260][T18542] RIP: 0010:nsim_queue_free+0xdc/0x150
[  283.476413][T18542] Code: 10 bd bd 8d 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ff e8 db 9c 0d fb 49 8b 07 48 8b 0c 24 <4a> 01 4c 28 20 4c 89 f7 be 00 02 00 00 e8 42 6d 6f fa 4c 89 e7 be
[  283.484036][T18542] RSP: 0018:ffffc9000670ede0 EFLAGS: 00010246
[  283.486497][T18542] RAX: ffff8881a3c23000 RBX: ffff88811ffd3000 RCX: 0000000000000000
[  283.489692][T18542] RDX: ffffc9000f3ea000 RSI: 0000000000031465 RDI: 0000000000031466
[  283.492841][T18542] RBP: 0000000000000001 R08: ffffffff8e1e58e7 R09: 1ffffffff1c3cb1c
[  283.495923][T18542] R10: dffffc0000000000 R11: fffffbfff1c3cb1d R12: ffff88811ffd3218
[  283.499095][T18542] R13: 0000000000000000 R14: ffffffff871578d3 R15: ffffffff8dbdbd18
[  283.502210][T18542] FS:  00007f8496b7c6c0(0000) GS:ffff8881a3c23000(0000) knlGS:0000000000000000
[  283.505768][T18542] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  283.508389][T18542] CR2: ffff8881a3c23020 CR3: 00000000328c8000 CR4: 00000000000006f0
[  283.511535][T18542] Kernel panic - not syncing: Fatal exception in interrupt
[  283.515047][T18542] Kernel Offset: disabled
[  283.516824][T18542] Rebooting in 86400 seconds..

VM DIAGNOSIS:
19:24:45  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b44d6b RBX=1ffff11026cc7f61 RCX=ffff8880481e0000 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000275e1e0 RSP=ffffc9000275e060
R8 =ffff88810b2994c7 R9 =1ffff11021653298 R10=dffffc0000000000 R11=ffffffff8174ae50
R12=ffff88813663fb08 R13=dffffc0000000000 R14=ffff88804b03b1c0 R15=0000000000000001
RIP=ffffffff81b44d53 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=0000000123648000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ff00000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007f9fb9aed100 00007f9fb8f87460 XMM05=00007f9fb8f87478 00007f9fb8f874c0
XMM06=00007f9fb8f874b8 00007f9fb8f874b0 XMM07=00007f9fb8f874a8 00007f9fb8f874a0
XMM08=0000000000000000 00007f9fb8e12ee7 XMM09=0000000000000000 00007f9fb8e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000003204c RDI=000000000003204d RBP=00000000000003f8 RSP=ffffc9000670e430
R8 =ffff888108838237 R9 =1ffff11021107046 R10=dffffc0000000000 R11=ffffffff854e72a0
R12=dffffc0000000000 R13=ffffffff99af28f1 R14=ffffffff99de74e0 R15=0000000000000000
RIP=ffffffff854e731c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f8496b7c6c0 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=ffff8881a3c23020 CR3=00000000328c8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f8495e12e53
XMM06=0000000000000000 00007f8495e12e4d XMM07=0000000000000000 00007f8495e12e61
XMM08=0000000000000000 00007f8495e12ee7 XMM09=0000000000000000 00007f8495e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
