last executing test programs:

2.880740749s ago: executing program 0 (id=4896):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94)
pipe(&(0x7f0000000040))
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='contention_end\x00', r1}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00645200060005000100000008000800", @ANYRES32=r3], 0x2c}}, 0x0)

2.811922289s ago: executing program 0 (id=4899):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x83, &(0x7f0000000000)={0x0, 0x50001}, 0x8)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x2c, r2, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x48845}, 0x4040000)

2.720314164s ago: executing program 0 (id=4900):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x4c, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f3030a7d3f408004a00003c0003000302059078ac1414000a0101004408f57000007fff070909b173380000010000004e240000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6100000090780003"], 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r2, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, <r4=>0x0, <r5=>0x0}, &(0x7f0000000400)=0xc)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002d00090027bd7000fedbdf250500000008000a"], 0x1c}}, 0x20000086)
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
r9 = socket$nl_audit(0x10, 0x3, 0x9)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0)
r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r11, &(0x7f00000003c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5, 0x3}, 0xe)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)={0x24, 0x3a, 0x4, 0x70bd27, 0x25dfdbfd, "", [@typed={0xc, 0x58, 0x0, 0x0, @u64}, @typed={0x5, 0xc1, 0x0, 0x0, @str='\x00'}]}, 0x24}], 0x1, &(0x7f0000000480)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @rights={{0x30, 0x1, 0x1, [r6, r7, 0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff, r9, 0xffffffffffffffff]}}], 0x70, 0x50}, 0x200400c4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r12, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="34000000110001000000000000000000100003400c"], 0x34}], 0x1, 0x0, 0x0, 0x20000000}, 0x0)

1.771081721s ago: executing program 0 (id=4915):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
readv(r0, &(0x7f0000000680)=[{&(0x7f0000000040)=""/2, 0x2}], 0x1)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x24040080}, 0x2400c)

1.712550174s ago: executing program 1 (id=4916):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20080005}, 0x4000)
recvmmsg(r1, &(0x7f0000001740), 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040040)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000))
ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x0, @default, @bpq0, 0x4, 'syz0\x00', @default, 0x1, 0x0, [@null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000))
bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$int_in(r5, 0x5452, &(0x7f0000000180)=0x401)
listen(r5, 0x0)
ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000000000)=0xffffffffffffffff)
shutdown(r5, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4)
connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x80, @any, 0x0, 0x2}, 0xe)
socket$inet6(0xa, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

1.71207599s ago: executing program 1 (id=4917):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045)
shutdown(r1, 0x1)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000200)=@req3={0xf85f, 0x1, 0xfffffffa, 0xf42, 0x4, 0xd386}, 0x1c)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000005ff69d7700"/24], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r3, 0xffffffffffffffff, 0x24}, 0xc)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000cad000/0x14000)=nil, 0x14000, 0x3000005, 0x20000000ec071, r3, 0x634fd000)
unshare(0x62040200)
r4 = socket$kcm(0x10, 0x2, 0x0)
unshare(0x10000000)
sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c800}, 0x200040d4)
sendmsg$NL80211_CMD_CONNECT(r5, 0x0, 0x0)
syz_80211_inject_frame(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="500000000802110000010802110000005050505050500000000000000000020202020100"], 0x2e)
nanosleep(0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000700)=ANY=[@ANYBLOB="b000070000001100000127021100000008021100000010000000020000f4c8ed9790b3d2369a8fa0b15f2148a03974545f71ce777a725ebacc484576ec99d4a010b7da78cca1107b960fef4b1f180fa968970340e84302d9b7895bad9b3cc9f25ac9fde68a0c000000b7e80021ada5eb7b5159f79d4c73e01c94272c10bd33c3d77724946e7f95e8cf532c7e44b0c71bde0330dad4f811522546eadd5d4672"], 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002e0001b7b70000000000000001"], 0x114}], 0x1}, 0x0)
recvmmsg(r6, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40000000, 0x0)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000580)=ANY=[], 0x27)

931.968537ms ago: executing program 2 (id=4918):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000000), 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@ipv6_delrule={0x24, 0x21, 0x129, 0x40000, 0x25dfdbff, {}, [@FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x5}]}, 0x24}}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r5=>0x0})
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r7 = socket$kcm(0x29, 0x5, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f0000000140)=""/189, &(0x7f0000000000)=0xbd)
sendmmsg$inet6(r6, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x3404c8d4)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000b40)=ANY=[@ANYRES32, @ANYBLOB="f7000300041203000500996ab34b683c91cfd9680a4c606b83e5a78add26ad08cb9faced1fa1886482593dcace88d261c04aa06f78e648b861af24b221046a1f5d"], 0xe)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, 0x0, 0x1000f)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x48, r4, 0x1, 0x70bd28, 0x25dfdbfa, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x200, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)

852.777607ms ago: executing program 1 (id=4919):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94)
pipe(&(0x7f0000000040))
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='contention_end\x00', r1}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00705200060005000100000008000800", @ANYRES32=r3], 0x2c}}, 0x0)

848.199326ms ago: executing program 0 (id=4920):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r6=>0xffffffffffffffff})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r8=>0x0})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x2, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x7, 0x8b, 0x5, 0x9, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0xba27, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x3, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x6, 0x8, 0xdc1, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x3, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}})
r9 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r9, &(0x7f0000000440), 0x10)
listen(r9, 0x0)
r10 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r10, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
sendto$packet(r10, &(0x7f0000000600)="5f0efc", 0xfffffffffffffe4c, 0x44, 0x0, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r11, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x44, r7, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050)
sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
write$tun(r4, &(0x7f0000000400)={@val={0x0, 0x8100}, @val={0x3, 0x1, 0x4, 0x7754, 0x7f, 0xb43b}, @mpls={[{0x2}, {0x7db, 0x0, 0x1}, {0x40, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x9f, 0x0, 0x1}, {0x8f6, 0x0, 0x1}, {0x6}, {0xa2, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x81, 0x0, 0x1}], @ipv6=@dccp_packet={0x5, 0x6, "3af2da", 0x1f8, 0x21, 0x1, @empty, @private1, {[@hopopts={0x3c, 0x1b, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x2, 0xd3, "6eaa26abb3c3ebce40daf9397d3120e9fe2f1b707e3651bb0d94324ed5aaafdcf95d1e4627c4095f6897b48c6be1a3dccabd6b59b80c42ad904eedbc4e2e49561872c218236197400253f0148f3c61af29c59ab1bc49bf09e8d93a146268a68d3f2355658444209261de6abffbd8fc88c102ddd400e30d99581c54b32166737be9f2d5089dc169744c1082f5526936c677d0f0b8573615a646b836ce3c1cb1f3fb6dc3d3892a26b6996a2b205db96c4efd84b2c992e9c436689c21a6c16d73b657e60826036aedc8ff52a0d2b42e0bf1b9cc39"}]}, @dstopts={0x3c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0xc}]}, @srh={0x32, 0x6, 0x4, 0x3, 0x6, 0x0, 0x5, [@rand_addr=' \x01\x00', @mcast2, @private1]}, @fragment={0x2, 0x0, 0x3, 0x1, 0x0, 0x5, 0x67}, @hopopts={0x5c, 0x8, '\x00', [@calipso={0x7, 0x30, {0x3, 0xa, 0x2, 0x5, [0x1c000, 0x10, 0x2, 0xb, 0x7fffffff]}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @fragment={0x62, 0x0, 0x2, 0x1, 0x0, 0x2, 0x68}, @srh={0x16, 0xa, 0x4, 0x5, 0x0, 0x20, 0x6, [@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @mcast2, @private2, @ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], {{0x4e22, 0x4e20, 0x4, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, "df8e92", 0x2, "b856ea"}}}}}}, 0x256)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32=r13, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)

847.61584ms ago: executing program 2 (id=4921):
r0 = socket(0x1e, 0x4, 0x0)
connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x0)
getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x89, &(0x7f0000000680), &(0x7f00000006c0)=0x4)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
r2 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.swap.current\x00', 0x0, 0x0)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r6, 0x204, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x20, 0x2, @udp='udp:syz0\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4040040}, 0x8000)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000740)='wlan0\x00', 0x10)
connect$inet(r1, &(0x7f0000000140)={0x2, 0xc000, @multicast1}, 0x10)
setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f0000000300)="18", 0x1)
socket$kcm(0x10, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
socketpair(0x0, 0x0, 0x0, &(0x7f0000000000))
r7 = socket$inet(0x2, 0x3, 0x33)
getsockopt$inet_mreqsrc(r7, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x2000)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0), 0x4)

846.896814ms ago: executing program 1 (id=4922):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000001500)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x8, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2c00}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000600)='GPL\x00', 0x6, 0x66, &(0x7f00000006c0)=""/102, 0x41100, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r2, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0)

719.864783ms ago: executing program 1 (id=4923):
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async)

718.470687ms ago: executing program 2 (id=4924):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6d, 0x6d, 0x5, [@struct={0x8, 0x1, 0x0, 0x4, 0x0, 0x51, [{0xf, 0x0, 0x5}]}, @datasec={0x7, 0x5, 0x0, 0xf, 0x1, [{0x3, 0xff, 0x1ff}, {0x1, 0x0, 0x8}, {0x1, 0x6801, 0x9}, {0x1, 0x1}, {0x5, 0x10, 0x3437}], '\b'}, @func={0x2, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x61, 0x30, 0x30]}}, &(0x7f0000000400)=""/248, 0x8d, 0xf8, 0x1, 0x1}, 0x28)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000540)=ANY=[@ANYRESDEC=r0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x94)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, r4, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r5}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x2)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r3)
sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x18, r7, 0xe1a0b80db4190737, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8091}, 0x0)
sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000f00)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000e80)={0x60, r7, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0xfffffffffffffee9, 0x1, 0x7fffffff}]}]}, 0x60}}, 0x404c0c0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f00000003c0)=@newtaction={0xf8, 0x30, 0x9, 0x0, 0x0, {}, [{0xe4, 0x1, [@m_skbedit={0xe0, 0x1, 0x0, 0x0, {{0xc}, {0xffffffffffffffc4, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8, {0xfff2}}, @TCA_SKBEDIT_PTYPE={0x0, 0x7, 0x6}]}, {0xa3, 0x6, "4f56927ae16557330b04f5ea2ac9c123da371d5e39c984fc633846a1cb95fd20ed1084ec779c0c04a0d10dc0368ecc077af61a973f2953f170cee9ea3d283386f1cd98579a120576f8d9633ec4cbd82d09afc342ab3965b0fcc0d81b651ea4bc311eaaac7c000747568001dc1c087fea97b114831c13ba00be0d7474952bd1c292b6b5807fdd3003ea74f85b1686c2112c316ded6950a2985aabb475454d54"}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
r9 = socket(0x10, 0x3, 0x0)
sendto$inet6(r9, &(0x7f0000000000)="7800000018002507de9881a1ffff00000204be04020506050e020409470009003f000c00100046000000850800000000000000653600648d0a00120002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e00000000000f66ed538f2523250", 0x78, 0x800, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x90002008})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r9, 0x84009422, &(0x7f0000000a80)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r13=>0x0})
sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r13, @ANYRES64], 0x1c}}, 0x84)
sendmsg$TCPDIAG_GETSOCK(r9, &(0x7f0000000600)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f00000006c0)={0x2c8, 0x12, 0xf1db64b9b37ad04f, 0x70bd2a, 0x25dfdbff, {0x8, 0x4, 0x88, 0xfb, {0x4e20, 0x4e23, [0xff, 0x4, 0x1000, 0x5], [0x80, 0xffffffff, 0x9, 0x8], r13, [0x0, 0x5]}, 0x9}, [@INET_DIAG_REQ_BYTECODE={0x86, 0x1, "c757bd898049e5388a4ea5ae0ee8e8942f4e396e6899bba2c73093b9a720095a1b13fe20b19aa0bf7023bc07f4f745318e40bae34c1ada35b121ee28aa1dbc97c4a7147dcf183e3b09198f78cbe3481617b3ca61991228d7fcf8caf6e9e04057814431008a9570505fa2e23b15a3432808a2934cb45c0e928763755775b8f136c132"}, @INET_DIAG_REQ_BYTECODE={0x9f, 0x1, "8116fd9a04885ed3324c41b6aa79fea0c20eea8fa371b4bdf60ac70e0d5e1ac8b676459424ff567d79eba5840eaed8cb8b0876f9f8d784925739ba934bee9dd8a3dc801bf3c7805774aa9e99c805fc4df492dbabe7293df573c9e44fbe79e4abfa4f4e40c815156be2d088fd4898712bca35adc917095221c8a857c75b8ad63eb20e61afc1be1d7983b72c6cb832a391544e18746f7cfebd38b0ac"}, @INET_DIAG_REQ_BYTECODE={0x6e, 0x1, "6e09e462a1fad5e2ccdf27251a71f3f4455e7e0861d2f9f403ff679a2de05dca2d7beb5ff5d8b31f51b70dc161ea27683ca6a871ff4ee1624c179f7829f83ace97ef005cab192f324ff106ce2ce8dae55128dff1c6ca5e689764e981410124cabf016e0aa002882815e1"}, @INET_DIAG_REQ_BYTECODE={0xe1, 0x1, "ad9990a16baa347421b1cfe4d7f558f8c3c0fc6d6b55a1c024e8b03414e5eec6782d8740f5c0281a10e42f4052aaacf6b8dd2a9828052020eb41a97f228a4547e18e767a6ea3535793c9856e75728b14c3755f3a180db0ce3bfea923dd1ec20355795fd4bfdc42ce8a500df3307a8096f407b0820add41089cda6842103e7f02b213d67b5423a240910151256a04c978546551da92c0d9faca363479b97117090f84b0811c2f085f2f87c478b23ee948d402edbf02f8b65e347525900c097a4b2ab9c5329e779f0adcda3756a69974760deab59159947d2f9cba7f3933"}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x4c081}, 0x4000801)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r14)
sendmsg$TIPC_CMD_ENABLE_BEARER(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r11, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x68, r15, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x40, @link='broadcast-link\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000)

718.074436ms ago: executing program 1 (id=4925):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000000010000081100000900000001"], 0x50)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)="d13c9633909a", 0x0, 0x1, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r2, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x980, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0xfff}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r5, r0, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r7, 0xffffffffffffffff, 0x24}, 0xc)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f00000004c0)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f00000014c0)=@data_frame={@msdu=@type11={{0x0, 0x2, 0xb, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_a, {0x5, 0x4}, @device_a, @value={0x7, 0x0, 0x1, 0x0, 0x9}, @value=@ver_80211n={0x0, 0x3, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1}}, @a_msdu=[{@broadcast, @device_b, 0x1f, "43f03df587c02ed5c7c63159f7df7143a7694fcbcac63ae7ab9f9f2b4b593a"}, {@device_b, @broadcast, 0xf1, "4de12b5a16897014f8203d84981b1e9216dd3d79cd1d64982bbfcdcd09b7f28160975e87b7cefadc1cdf2bd02416783beacb4ecc364056ffef7caeeb1d50dfa1b944f1b06bb2a4e8a6349a3fff40cbac7fc4e251fac8c5d0646ac1df0d530a26039f44b70b7d803745129e04e896077a690f09b0952ffde4e21b0cceebfb944426ee38b25b28376ac25b3e76e28ae2a58edd7e47e5adfd13695c866b3eae838a2582fd38ceb4225410f0b0c0e1aa8e154093b9189fac41256b62d3dc23117181e70a72ae33f32b1d39fb6743c17264ff89aa09e8afd1141cbe1183b7fe7c9ebe316c8d51ff3ebc288e14c2a4d83e28df80"}, {@device_b, @device_a, 0x82, "a92ead5a8eef391a1574ef285633da06d9a031c3cf856dc70f5e99ef5c46e0dbe3240d9c75349c7c56f10defe722798830aa6189c9dc4f2e198f4d8ea5f7bb82898c281286ed1a3183e445683210e8c25f96c7c928cf199db13df60bfcb46ce9de11b085da2307cd3658bbb37c5f233c043374be6640798900d2d9339b1c65f63665"}, {@device_a, @broadcast, 0xbd, "645411e5a605a09a8fa56114a0d275df221fba45f56cff9fe5c7452dce806f451e799ed46e5443265a9dc6c1267d493ce2394418bedf468bb0d4bbf211ada8c162b954a92261dd456bbd850165564cd3f032810b70e12a7fe65972cf049bd6e308b80b1d965c1d079df4a9f4bbc9a6f99aff09ad8d08bb33c909d74a69dc15ce8641c8c2044bcdbb3c7091bf704d397cf874d12a86ef6b78a8802968df4bd0b74f2e38578231c1d17dcf073bc77806e661512f9210881273eab5d54741"}, {@device_a, @broadcast, 0x6b, "0f170dbc7abe82b4e2840883c99484814faf0ca319bb88618be1210489f40b26a38ad73756cbf65af209d1c25fbc23ebc86e99f0f52d41a09d5e338c344a317c8132709123d333f112814223fc79d3dd90fcb1f5d1d6dae6a450914ebd933002c17489e61d6b528ab0eb62"}, {@broadcast, @device_a, 0xea, "261d9951a53eee1f6d2a2ce75d5790ed6047b703975208310b0004b0b290586934beb92c12727568a1681c712537ce8577a7faa99486a81ec3342a4312b86eea5d9afa14a303b59b0712504235e4a71e892f308b4089e8ec5de73b1a9df67914560855bd646d677d96fc21432a5c8d6af6b834f99d9f6cd49e6363478f912ab32dc1028c1971a291ecc64c4a300462ff0f61ff9eda12b1a6de635c0438c15d684a8fe89bc0fc68b0613d12f7bde3aaf9707705407d1f9528934eb0a771510469c092e61e1731ae1a678f7f055edb1314f9b856bc697e5dec01262810db6263c0c90fd7684ca55cc01925"}, {@device_a, @device_b, 0x2d, "fcb823f82ec2de943670ae6e7860675b446df9cd703d530649633b36c586718da5dea5d999f875e24221932c91"}, {@broadcast, @device_b, 0x62, "c693e2d4688e886e94042c586e16e5694fdac35ac6a118d67d413a9251485689ca6c13f949794ded4c92b59a8930320cbfccee3d3afda07b5d2e90997f171deb36480f7616f15da3de6f95e4dcffb0cebe786a3302cf2aed7ffb536e171a8f0f7567"}]}, 0x4d0)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0)

539.779672ms ago: executing program 2 (id=4926):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r2, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0xe4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x100000, 0xffffffffffffffff, 0x4}, 0x38)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"})

447.98479ms ago: executing program 2 (id=4927):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0}) (async)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendto$inet(r4, &(0x7f0000000580)="17", 0xfffffffffffffe08, 0x10008095, 0x0, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xfffffffe}]}}]}, 0x38}}, 0x4000000) (async)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22, 0x33, @mcast2, 0x2}, 0x1c) (async)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x4000800}, 0x0) (async)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r6, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x940)

382.331436ms ago: executing program 2 (id=4928):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c000280"], 0x40}}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r2, 0x0, 0x0)
listen(r1, 0xfffffffc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="900000ee0f002144d7204000fedb000014008566", @ANYRESOCT, @ANYBLOB="adffa888e16000006800128009000100766c616e00000000580002804c0003800c00010000080000060000000c00010000040000090000000c000100d5f9ffff020000000c00010004000000800000000c00010007000000030000000700010000000000b7860000060001000004000008000500", @ANYRES32=0x0, @ANYBLOB="4236f995860c6358c26af8b5b6603010a5d065eaa6052d0d4df54a9e495563023ce4ee45afc3afa0b9e500"/67], 0x90}}, 0x2)
r4 = accept4(r1, &(0x7f0000000300)=@in={0x2, 0x0, @broadcast}, &(0x7f0000000180)=0x80, 0x800)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB='-', @ANYRESOCT], 0x27)
setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000280)=@req={0x10b4, 0x7, 0x200402}, 0x10)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
close(0x4)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001300010000000000000000010700000070", @ANYRES32=0x0, @ANYRES32=r8], 0x2c}, 0x1, 0x0, 0x0, 0x4c180}, 0x4)
r9 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1)

0s ago: executing program 0 (id=4929):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20f8870074f547e5e1e2330d578bb6b0f00000263e9e6930e29da2d6312034915c1aec4f34651a80516393f9cbca968c562810f528f81c30a4146d308ac6be2e9aae5a84c6b1cda43069fec8ad83c73b80c10be8003e5eb3e7bbfe9e1c64162a2f5e292ef4fa170e852ee90325", @ANYRES32=r1, @ANYBLOB="ae1e020000000000"], 0x20}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20f8870074f547e5e1e2330d578bb6b0f00000263e9e6930e29da2d6312034915c1aec4f34651a80516393f9cbca968c562810f528f81c30a4146d308ac6be2e9aae5a84c6b1cda43069fec8ad83c73b80c10be8003e5eb3e7bbfe9e1c64162a2f5e292ef4fa170e852ee90325", @ANYRES32=r1, @ANYBLOB="ae1e020000000000"], 0x20}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r3) (async)
close(r3)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r5=>0xffffffffffffffff})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="660a000000000000611149000000000095000000"], &(0x7f00000004c0)='GPL\x00'}, 0x94) (async)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="660a000000000000611149000000000095000000"], &(0x7f00000004c0)='GPL\x00'}, 0x94)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r8=>0x0})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0x11, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x1, 0x6, 0x1, 0x5, 0x6, 0xfffffffffffffff0}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x7}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x11, &(0x7f0000000240)=""/17, 0x40f00, 0x1c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x0, 0x5, 0x4ab, 0x7}, 0x10, 0x1ced4, r6, 0x7, &(0x7f0000000540)=[r3, r3, r3], &(0x7f0000000580)=[{0x1, 0x3, 0x10}, {0x4, 0x5, 0xa, 0x5}, {0x0, 0x3, 0x5, 0x5}, {0x3, 0x1, 0x5, 0x9}, {0x5, 0x3, 0x0, 0x3}, {0x1, 0x3, 0x9, 0x3}, {0x5, 0x4, 0x7, 0x5}], 0x10, 0x8}, 0x94) (async)
r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0x11, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x1, 0x6, 0x1, 0x5, 0x6, 0xfffffffffffffff0}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x7}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x11, &(0x7f0000000240)=""/17, 0x40f00, 0x1c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x0, 0x5, 0x4ab, 0x7}, 0x10, 0x1ced4, r6, 0x7, &(0x7f0000000540)=[r3, r3, r3], &(0x7f0000000580)=[{0x1, 0x3, 0x10}, {0x4, 0x5, 0xa, 0x5}, {0x0, 0x3, 0x5, 0x5}, {0x3, 0x1, 0x5, 0x9}, {0x5, 0x3, 0x0, 0x3}, {0x1, 0x3, 0x9, 0x3}, {0x5, 0x4, 0x7, 0x5}], 0x10, 0x8}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000006c0)={r9, r3, 0x2e, 0x0, @void}, 0x10)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r10, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x44, r7, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050)
sendmsg$kcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (async)
sendmsg$kcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
socket$unix(0x1, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)

kernel console output (not intermixed with test programs):

17832][T18902] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3242'.
[  256.320517][T18902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3242'.
[  256.323992][T18902] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3242'.
[  256.748351][T18927] validate_nla: 7 callbacks suppressed
[  256.748366][T18927] netlink: 'syz.1.3249': attribute type 2 has an invalid length.
[  256.754464][T18927] netlink: 'syz.1.3249': attribute type 3 has an invalid length.
[  257.388815][T19013] netlink: 'syz.2.3272': attribute type 7 has an invalid length.
[  257.391147][T19013] netlink: 'syz.2.3272': attribute type 8 has an invalid length.
[  257.394757][T19013] mac80211_hwsim hwsim261 wlan0: entered promiscuous mode
[  257.873642][T19024] netlink: 'syz.0.3276': attribute type 9 has an invalid length.
[  257.920197][T19024] netlink: 'syz.0.3276': attribute type 9 has an invalid length.
[  258.163245][T19047] xt_socket: unknown flags 0x50
[  258.172728][T19047] 8021q: adding VLAN 0 to HW filter on device bond7
[  258.310529][T19059] lo speed is unknown, defaulting to 1000
[  258.495177][T19068] netlink: 'syz.0.3283': attribute type 3 has an invalid length.
[  258.504585][T19059] lo speed is unknown, defaulting to 1000
[  258.849263][T19095] netlink: 'syz.1.3287': attribute type 10 has an invalid length.
[  259.097943][   T25] block nbd1: Possible stuck request ffff888021400000: control (read@0,1024B). Runtime 120 seconds
[  259.103711][   T25] block nbd1: Possible stuck request ffff888021400200: control (read@1024,1024B). Runtime 120 seconds
[  259.130240][   T25] block nbd1: Possible stuck request ffff888021400400: control (read@2048,1024B). Runtime 120 seconds
[  259.134031][   T25] block nbd1: Possible stuck request ffff888021400600: control (read@3072,1024B). Runtime 120 seconds
[  259.214294][T19119] openvswitch: netlink: Flow actions attr not present in new flow.
[  259.317630][T19125] netlink: 'syz.0.3294': attribute type 8 has an invalid length.
[  259.414580][T19135] netlink: 'syz.0.3298': attribute type 16 has an invalid length.
[  259.587385][T19147] 8021q: adding VLAN 0 to HW filter on device bond29
[  260.024891][T19189] sctp: [Deprecated]: syz.1.3309 (pid 19189) Use of int in max_burst socket option.
[  260.024891][T19189] Use struct sctp_assoc_value instead
[  260.857009][T19188] delete_channel: no stack
[  260.931141][T19198] __nla_validate_parse: 20 callbacks suppressed
[  260.931153][T19198] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3311'.
[  261.085397][T19205] bond43 (unregistering): Released all slaves
[  261.334961][T19226] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3317'.
[  261.338330][T19226] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3317'.
[  261.407188][T19234] 8021q: adding VLAN 0 to HW filter on device bond30
[  261.421309][T19234] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  261.424828][T19234] bond18: (slave macvlan7): Enslaving as a backup interface with a down link
[  261.667566][T19251] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3324'.
[  261.783591][T19266] validate_nla: 4 callbacks suppressed
[  261.783611][T19266] netlink: 'syz.2.3327': attribute type 13 has an invalid length.
[  261.792488][T19266] netlink: 'syz.2.3327': attribute type 17 has an invalid length.
[  261.823918][T19266] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  261.829711][ T5906] lo speed is unknown, defaulting to 1000
[  261.833413][ T5906] syz0: Port: 1 Link ACTIVE
[  261.835234][ T5906] lo speed is unknown, defaulting to 1000
[  261.873440][T19274] netlink: 'syz.1.3329': attribute type 4 has an invalid length.
[  261.888007][T19274] netlink: 'syz.1.3329': attribute type 4 has an invalid length.
[  262.119354][T19280] mac80211_hwsim hwsim248 wlan0: entered promiscuous mode
[  262.126053][T19280] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  262.703888][T19289] netlink: 'syz.1.3334': attribute type 11 has an invalid length.
[  262.976022][T19305] netlink: 'syz.1.3339': attribute type 4 has an invalid length.
[  263.095485][T19313] lo speed is unknown, defaulting to 1000
[  263.228449][T19313] lo speed is unknown, defaulting to 1000
[  263.464187][T19328] pim6reg1: entered promiscuous mode
[  263.465894][T19328] pim6reg1: entered allmulticast mode
[  263.523432][T19333] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3346'.
[  263.630731][T19339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3349'.
[  263.833246][T19352] netlink: 'syz.0.3355': attribute type 12 has an invalid length.
[  263.835608][T19352] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.3355'.
[  263.932453][T19348] bond21: (slave macvlan8): Releasing backup interface
[  263.934686][T19348] bond21: (slave macvlan8): the permanent HWaddr of slave - 7a:31:22:f2:67:ac - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  263.950807][T19348] bond21: (slave macvlan9): Releasing backup interface
[  263.960232][T19348] bond0 (unregistering): (slave bond42): Releasing backup interface
[  263.965898][T19348] bond0 (unregistering): Released all slaves
[  264.140953][T19361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3357'.
[  264.455979][T19368] netlink: 'syz.0.3360': attribute type 1 has an invalid length.
[  264.458494][T19368] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3360'.
[  264.657534][T19376] netlink: 'syz.0.3363': attribute type 10 has an invalid length.
[  264.760096][T19386] 8021q: adding VLAN 0 to HW filter on device bond0
[  264.786696][T19396] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3370'.
[  264.798161][T19397] ieee802154 phy0 wpan0: encryption failed: -22
[  264.940302][T19403] netlink: 'syz.0.3371': attribute type 26 has an invalid length.
[  265.304502][T19448] pim6reg1: entered promiscuous mode
[  265.306673][T19448] pim6reg1: entered allmulticast mode
[  265.415029][T19457] 8021q: adding VLAN 0 to HW filter on device bond31
[  265.418001][T19457] team0: Port device bond31 added
[  265.419906][T19455] Unsupported xt match
[  265.419915][T19455] unable to load match
[  265.670031][T19464] netlink: 'syz.0.3385': attribute type 10 has an invalid length.
[  265.960242][T19515] __nla_validate_parse: 7 callbacks suppressed
[  265.960253][T19515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3391'.
[  265.999568][T19519] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3390'.
[  266.045718][T19526] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  266.049343][T19526] CPU: 1 UID: 0 PID: 19526 Comm: syz.2.3393 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  266.049357][T19526] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  266.049363][T19526] Call Trace:
[  266.049368][T19526]  <TASK>
[  266.049373][T19526]  dump_stack_lvl+0x189/0x250
[  266.049393][T19526]  ? __pfx_dump_stack_lvl+0x10/0x10
[  266.049404][T19526]  ? __pfx__printk+0x10/0x10
[  266.049422][T19526]  ? kernfs_path_from_node+0x2f/0x290
[  266.049434][T19526]  ? kernfs_path_from_node+0x250/0x290
[  266.049443][T19526]  ? kernfs_path_from_node+0x2f/0x290
[  266.049455][T19526]  sysfs_warn_dup+0x8e/0xa0
[  266.049464][T19526]  sysfs_do_create_link_sd+0xc0/0x110
[  266.049474][T19526]  device_add_class_symlinks+0x1cf/0x240
[  266.049489][T19526]  device_add+0x475/0xb50
[  266.049502][T19526]  wiphy_register+0x1ba6/0x28d0
[  266.049522][T19526]  ? __pfx_wiphy_register+0x10/0x10
[  266.049531][T19526]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  266.049547][T19526]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  266.049562][T19526]  ieee80211_register_hw+0x3425/0x4080
[  266.049586][T19526]  ? ieee80211_register_hw+0x1401/0x4080
[  266.049601][T19526]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  266.049615][T19526]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  266.049654][T19526]  ? __hrtimer_setup+0x187/0x210
[  266.049665][T19526]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  266.049679][T19526]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  266.049704][T19526]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  266.049713][T19526]  ? trace_kmalloc+0x1f/0xd0
[  266.049726][T19526]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  266.049738][T19526]  ? kstrndup+0xbf/0x160
[  266.049752][T19526]  hwsim_new_radio_nl+0xea4/0x1b10
[  266.049762][T19526]  ? __pfx___nla_validate_parse+0x10/0x10
[  266.049780][T19526]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  266.049795][T19526]  ? __nla_parse+0x40/0x60
[  266.049807][T19526]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  266.049820][T19526]  genl_family_rcv_msg_doit+0x215/0x300
[  266.049836][T19526]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  266.049854][T19526]  ? bpf_lsm_capable+0x9/0x20
[  266.049864][T19526]  ? security_capable+0x7e/0x2e0
[  266.049878][T19526]  genl_rcv_msg+0x60e/0x790
[  266.049893][T19526]  ? __pfx_genl_rcv_msg+0x10/0x10
[  266.049904][T19526]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  266.049920][T19526]  netlink_rcv_skb+0x208/0x470
[  266.049928][T19526]  ? __lock_acquire+0xab9/0xd20
[  266.049940][T19526]  ? __pfx_genl_rcv_msg+0x10/0x10
[  266.049953][T19526]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  266.049972][T19526]  ? down_read+0x1ad/0x2e0
[  266.049984][T19526]  genl_rcv+0x28/0x40
[  266.049994][T19526]  netlink_unicast+0x82f/0x9e0
[  266.050007][T19526]  ? __pfx_netlink_unicast+0x10/0x10
[  266.050017][T19526]  ? netlink_sendmsg+0x642/0xb30
[  266.050025][T19526]  ? skb_put+0x11b/0x210
[  266.050038][T19526]  netlink_sendmsg+0x805/0xb30
[  266.050052][T19526]  ? __pfx_netlink_sendmsg+0x10/0x10
[  266.050064][T19526]  ? aa_sock_msg_perm+0xf1/0x1d0
[  266.050076][T19526]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  266.050084][T19526]  ? __pfx_netlink_sendmsg+0x10/0x10
[  266.050100][T19526]  __sock_sendmsg+0x21c/0x270
[  266.050112][T19526]  ____sys_sendmsg+0x505/0x830
[  266.050128][T19526]  ? __pfx_____sys_sendmsg+0x10/0x10
[  266.050144][T19526]  ? import_iovec+0x74/0xa0
[  266.050154][T19526]  ___sys_sendmsg+0x21f/0x2a0
[  266.050167][T19526]  ? __pfx____sys_sendmsg+0x10/0x10
[  266.050196][T19526]  ? __fget_files+0x2a/0x420
[  266.050208][T19526]  ? __fget_files+0x3a0/0x420
[  266.050225][T19526]  __x64_sys_sendmsg+0x19b/0x260
[  266.050237][T19526]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  266.050253][T19526]  ? rcu_is_watching+0x15/0xb0
[  266.050264][T19526]  ? do_syscall_64+0xbe/0x3b0
[  266.050278][T19526]  do_syscall_64+0xfa/0x3b0
[  266.050287][T19526]  ? lockdep_hardirqs_on+0x9c/0x150
[  266.050295][T19526]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.050304][T19526]  ? exc_page_fault+0x9f/0xf0
[  266.050314][T19526]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.050322][T19526] RIP: 0033:0x7f223398ebe9
[  266.050331][T19526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  266.050338][T19526] RSP: 002b:00007f2234753038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  266.050348][T19526] RAX: ffffffffffffffda RBX: 00007f2233bb5fa0 RCX: 00007f223398ebe9
[  266.050354][T19526] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  266.050359][T19526] RBP: 00007f2233a11e19 R08: 0000000000000000 R09: 0000000000000000
[  266.050365][T19526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  266.050370][T19526] R13: 00007f2233bb6038 R14: 00007f2233bb5fa0 R15: 00007fff77f49a18
[  266.050384][T19526]  </TASK>
[  266.445809][T19558] netlink: zone id is out of range
[  266.452759][T19558] netlink: zone id is out of range
[  266.455166][T19558] netlink: zone id is out of range
[  266.456832][T19558] netlink: zone id is out of range
[  266.459021][T19558] netlink: zone id is out of range
[  266.460668][T19558] netlink: zone id is out of range
[  266.464242][T19558] netlink: zone id is out of range
[  266.466260][T19558] netlink: zone id is out of range
[  266.469305][T19558] netlink: zone id is out of range
[  266.471734][T19558] netlink: zone id is out of range
[  266.497114][T19560] 8021q: adding VLAN 0 to HW filter on device bond31
[  266.506515][T19560] bond18: (slave macvlan8): Error -98 calling set_mac_address
[  266.607748][T19571] pim6reg1: entered promiscuous mode
[  266.609473][T19571] pim6reg1: entered allmulticast mode
[  266.717033][T19571] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3401'.
[  266.746087][T19571] bond32 (unregistering): Released all slaves
[  266.818985][T19585] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3405'.
[  266.868201][T19590] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3408'.
[  266.943996][T19594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3410'.
[  267.054530][T19593] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3409'.
[  267.517212][T19639] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3419'.
[  267.916209][T19646] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3421'.
[  267.988066][T19649] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3422'.
[  268.424703][T19660] syzkaller1: entered promiscuous mode
[  268.426952][T19660] syzkaller1: entered allmulticast mode
[  268.592962][T19664] validate_nla: 4 callbacks suppressed
[  268.592974][T19664] netlink: 'syz.0.3427': attribute type 9 has an invalid length.
[  268.820701][T19675] 8021q: adding VLAN 0 to HW filter on device bond32
[  268.826566][T19675] bond0: (slave bond32): Enslaving as an active interface with an up link
[  268.996683][T19693] syzkaller1: entered promiscuous mode
[  269.009742][T19693] syzkaller1: entered allmulticast mode
[  269.413479][T19727] netlink: 'syz.0.3443': attribute type 1 has an invalid length.
[  269.664881][T19746] netlink: 'syz.0.3449': attribute type 1 has an invalid length.
[  269.684635][T19746] 8021q: adding VLAN 0 to HW filter on device bond34
[  269.697183][T19746] netlink: 'syz.0.3449': attribute type 2 has an invalid length.
[  269.756180][T19756] mac80211_hwsim hwsim274 wlan0: entered promiscuous mode
[  270.067312][T19787] netlink: 'syz.2.3458': attribute type 11 has an invalid length.
[  270.123588][T19790] mac80211_hwsim hwsim274 wlan0: left promiscuous mode
[  270.590346][T19820] netlink: 'syz.2.3467': attribute type 10 has an invalid length.
[  270.635964][T19822] netlink: 'syz.2.3468': attribute type 29 has an invalid length.
[  270.931749][T19840] lo speed is unknown, defaulting to 1000
[  271.079959][T19852] IPVS: Scheduler module ip_vs_sip not found
[  271.119743][T19840] lo speed is unknown, defaulting to 1000
[  271.145414][T19859] syzkaller1: entered promiscuous mode
[  271.147289][T19859] syzkaller1: entered allmulticast mode
[  271.177248][T19854] bond0 (unregistering): Released all slaves
[  271.233368][T19863] __nla_validate_parse: 11 callbacks suppressed
[  271.233381][T19863] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3479'.
[  271.359040][T19868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3480'.
[  271.473961][T19875] netlink: 4436 bytes leftover after parsing attributes in process `syz.2.3482'.
[  271.477906][T19875] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  271.610513][T19887] syzkaller1: entered promiscuous mode
[  271.617878][T19887] syzkaller1: entered allmulticast mode
[  271.628036][T19888] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3485'.
[  271.775654][T19898] netlink: 'syz.0.3488': attribute type 83 has an invalid length.
[  271.800671][T19899] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  271.813475][T19899] mac80211_hwsim hwsim108 syzkaller0: entered promiscuous mode
[  271.816037][T19899] mac80211_hwsim hwsim108 syzkaller0: entered allmulticast mode
[  271.885972][T19905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3491'.
[  272.062456][T19925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3494'.
[  272.163732][T19937] netlink: 'syz.2.3499': attribute type 10 has an invalid length.
[  272.167425][T19937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3499'.
[  272.175543][T19937] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3499'.
[  272.178364][T19937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3499'.
[  272.181387][T19937] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3499'.
[  272.204987][T19939] netlink: 'syz.1.3500': attribute type 3 has an invalid length.
[  272.418104][T19959] lo speed is unknown, defaulting to 1000
[  272.420943][T19964] syzkaller1: entered promiscuous mode
[  272.422804][T19964] syzkaller1: entered allmulticast mode
[  272.529099][T19959] lo speed is unknown, defaulting to 1000
[  272.578972][T19966] lo speed is unknown, defaulting to 1000
[  272.796929][T19966] lo speed is unknown, defaulting to 1000
[  273.268184][T20009] syzkaller1: entered promiscuous mode
[  273.269923][T20009] syzkaller1: entered allmulticast mode
[  273.367046][T20015] mac80211_hwsim hwsim108 syzkaller0: left promiscuous mode
[  273.369352][T20015] mac80211_hwsim hwsim108 syzkaller0: left allmulticast mode
[  273.763712][T20047] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  273.770797][T20047] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  273.826709][T20053] netlink: 'syz.1.3529': attribute type 23 has an invalid length.
[  274.292157][T20079] netlink: 'syz.1.3534': attribute type 1 has an invalid length.
[  274.982201][T20101] net_ratelimit: 7 callbacks suppressed
[  274.982214][T20101] netlink: zone id is out of range
[  274.985771][T20101] netlink: zone id is out of range
[  274.987451][T20101] netlink: zone id is out of range
[  274.989086][T20101] netlink: zone id is out of range
[  274.990773][T20101] netlink: zone id is out of range
[  274.992564][T20101] netlink: zone id is out of range
[  274.994506][T20101] netlink: zone id is out of range
[  274.996311][T20101] netlink: zone id is out of range
[  274.997954][T20101] netlink: zone id is out of range
[  274.999576][T20101] netlink: zone id is out of range
[  275.085482][T20103] syzkaller1: entered promiscuous mode
[  275.087388][T20103] syzkaller1: entered allmulticast mode
[  275.259126][T20113] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  275.264620][T20113] netlink: 'syz.2.3544': attribute type 12 has an invalid length.
[  275.376742][T20122] syzkaller1: entered promiscuous mode
[  275.379211][T20122] syzkaller1: entered allmulticast mode
[  275.386820][T20122] rdma_rxe: rxe_newlink: failed to add wg0
[  275.469798][T20127] netlink: 'syz.2.3548': attribute type 10 has an invalid length.
[  275.499794][T20133] ieee802154 phy0 wpan0: encryption failed: -22
[  275.833474][T20171] syzkaller1: entered promiscuous mode
[  275.835324][T20171] syzkaller1: entered allmulticast mode
[  276.002335][T20178] netlink: 'syz.0.3563': attribute type 15 has an invalid length.
[  276.217635][T20210] syzkaller1: entered promiscuous mode
[  276.219494][T20210] syzkaller1: entered allmulticast mode
[  276.298830][T20216] __nla_validate_parse: 153 callbacks suppressed
[  276.298843][T20216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3574'.
[  276.334258][   T25] block nbd2: Possible stuck request ffff888021430000: control (read@0,1024B). Runtime 60 seconds
[  276.337672][   T25] block nbd2: Possible stuck request ffff888021430200: control (read@1024,1024B). Runtime 60 seconds
[  276.341114][   T25] block nbd2: Possible stuck request ffff888021430400: control (read@2048,1024B). Runtime 60 seconds
[  276.346742][   T25] block nbd2: Possible stuck request ffff888021430600: control (read@3072,1024B). Runtime 60 seconds
[  276.377805][T20223] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3575'.
[  276.463568][T20232] netlink: 'syz.1.3578': attribute type 1 has an invalid length.
[  276.465981][T20232] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3578'.
[  276.799523][T20258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3584'.
[  276.830695][T20267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3587'.
[  276.840079][T20268] netlink: 'syz.2.3588': attribute type 1 has an invalid length.
[  276.843728][T20268] netlink: 600 bytes leftover after parsing attributes in process `syz.2.3588'.
[  276.893414][T20272] netlink: 'syz.2.3590': attribute type 3 has an invalid length.
[  276.895850][T20272] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3590'.
[  277.029055][T20284] netlink: 'syz.0.3593': attribute type 1 has an invalid length.
[  277.037718][T20284] netlink: 'syz.0.3593': attribute type 2 has an invalid length.
[  277.053538][T20284] tipc: Invalid UDP bearer configuration
[  277.053573][T20284] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  277.157666][T20290] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3594'.
[  277.201086][T20298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3598'.
[  277.220249][T20298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3598'.
[  277.243738][T20300] syzkaller1: entered promiscuous mode
[  277.245507][T20300] syzkaller1: entered allmulticast mode
[  277.486751][T20317] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address
[  277.490937][T20317] bond0: (slave vxcan3): Error -95 calling set_mac_address
[  277.506659][T20320] unknown channel width for channel at 909000KHz?
[  277.541454][T20323] syzkaller1: entered promiscuous mode
[  277.543141][T20323] syzkaller1: entered allmulticast mode
[  277.881660][T20345] pim6reg0: tun_chr_ioctl cmd 2148553947
[  277.910232][T20350] syzkaller1: entered promiscuous mode
[  277.914925][T20350] syzkaller1: entered allmulticast mode
[  278.027733][T20358] IPv6: sit3: Disabled Multicast RS
[  278.087699][T20365] mac80211_hwsim hwsim293 wlan1: entered allmulticast mode
[  278.143243][T20372] veth0: entered promiscuous mode
[  278.160286][T20372] veth0: left promiscuous mode
[  278.298330][T20386] lo speed is unknown, defaulting to 1000
[  278.346312][T20394] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig
[  278.425983][T20386] lo speed is unknown, defaulting to 1000
[  278.426309][T20394] lo speed is unknown, defaulting to 1000
[  278.440179][T20396] bridge13: entered promiscuous mode
[  278.607844][T20394] lo speed is unknown, defaulting to 1000
[  278.860595][T20416] netlink: 'syz.1.3633': attribute type 11 has an invalid length.
[  278.924365][T20413] syzkaller1: entered promiscuous mode
[  278.926718][T20413] syzkaller1: entered allmulticast mode
[  278.930471][T20421] validate_nla: 5 callbacks suppressed
[  278.930483][T20421] netlink: 'syz.0.3635': attribute type 4 has an invalid length.
[  278.938128][T20419] pim6reg1: entered promiscuous mode
[  278.939909][T20419] pim6reg1: entered allmulticast mode
[  279.158268][T20423] 8021q: adding VLAN 0 to HW filter on device bond32
[  279.161811][T20423] team0: Port device bond32 added
[  279.228320][T20432] netlink: 'syz.1.3639': attribute type 13 has an invalid length.
[  279.231098][T20432] netlink: 'syz.1.3639': attribute type 17 has an invalid length.
[  279.273524][T20432] 8021q: adding VLAN 0 to HW filter on device team0
[  279.361850][T20437] lo speed is unknown, defaulting to 1000
[  279.594527][T20452] bond18: (slave macvlan7): Releasing backup interface
[  279.601145][T20452] bond0 (unregistering): (slave bond32): Releasing backup interface
[  279.609468][T20452] bond0 (unregistering): Released all slaves
[  279.623643][T20437] lo speed is unknown, defaulting to 1000
[  280.015005][T20482] bond28: (slave ip6gretap0): Releasing backup interface
[  280.028543][T20482] team0: Port device bond31 removed
[  280.038328][T20482] team0: Port device bond32 removed
[  280.086964][T20482] netlink: 'syz.1.3644': attribute type 10 has an invalid length.
[  280.300203][T20491] netlink: 'syz.0.3648': attribute type 10 has an invalid length.
[  280.765741][T20523] mac80211_hwsim hwsim293 wlan1: left allmulticast mode
[  280.793198][T20525] mac80211_hwsim hwsim274 wlan0: entered promiscuous mode
[  280.795551][T20525] net_ratelimit: 335 callbacks suppressed
[  280.795567][T20525] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  280.838397][T20529] mac80211_hwsim hwsim293 wlan1: entered allmulticast mode
[  280.870819][T20529] netlink: 'syz.2.3657': attribute type 10 has an invalid length.
[  280.956202][T20533] netlink: 'syz.2.3659': attribute type 10 has an invalid length.
[  281.049486][T20544] netlink: 'syz.2.3663': attribute type 1 has an invalid length.
[  281.209055][T20559] netlink: 'syz.2.3667': attribute type 1 has an invalid length.
[  281.505486][T20580] __nla_validate_parse: 21 callbacks suppressed
[  281.505507][T20580] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3673'.
[  281.511721][T20580] netlink: 'syz.1.3673': attribute type 12 has an invalid length.
[  281.514220][T20580] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.3673'.
[  281.688273][T20590] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3675'.
[  281.815591][T20607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3681'.
[  281.831402][T20607] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3681'.
[  281.845442][T20609] netlink: 252 bytes leftover after parsing attributes in process `syz.1.3682'.
[  281.922769][T20614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3683'.
[  281.925729][T20614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3683'.
[  281.932613][T20614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3683'.
[  281.940705][T20614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3683'.
[  281.957256][T20617] syzkaller1: entered promiscuous mode
[  281.958904][T20617] syzkaller1: entered allmulticast mode
[  282.146095][T20631] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  282.166037][T20631] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  282.229688][T20633] lo speed is unknown, defaulting to 1000
[  282.466299][T20633] lo speed is unknown, defaulting to 1000
[  282.512513][T20664] syzkaller1: entered promiscuous mode
[  282.514417][T20664] syzkaller1: entered allmulticast mode
[  282.531604][T20664] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  282.542669][T20664] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  282.545009][T20664] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  282.642183][T20671] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  283.006560][T20686] tipc: Enabled bearer <eth:macvtap0>, priority 10
[  283.095545][T20692] lo speed is unknown, defaulting to 1000
[  283.190628][T20706] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  283.213589][T20706] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  283.237660][T20692] lo speed is unknown, defaulting to 1000
[  283.582534][T20725] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  283.735739][ T5311] lo speed is unknown, defaulting to 1000
[  283.740031][ T5311] syz0: Port: 1 Link DOWN
[  283.745271][ T5311] lo speed is unknown, defaulting to 1000
[  283.976428][T20744] syzkaller1: entered promiscuous mode
[  283.978287][T20744] syzkaller1: entered allmulticast mode
[  283.999923][T20748] validate_nla: 7 callbacks suppressed
[  283.999934][T20748] netlink: 'syz.1.3716': attribute type 5 has an invalid length.
[  284.245395][T20768] mac80211_hwsim hwsim304 wlan1: entered allmulticast mode
[  284.449784][T20789] lo speed is unknown, defaulting to 1000
[  284.555326][T20789] lo speed is unknown, defaulting to 1000
[  285.205703][T20829] netlink: 'syz.0.3735': attribute type 10 has an invalid length.
[  285.296175][T20836] IPv6: Can't replace route, no match found
[  285.518144][T20860] netlink: 'syz.2.3743': attribute type 46 has an invalid length.
[  286.027913][T20901] syzkaller1: entered promiscuous mode
[  286.029740][T20901] syzkaller1: entered allmulticast mode
[  286.327692][T20924] netlink: 'syz.0.3757': attribute type 10 has an invalid length.
[  286.464838][T20926] netlink: 'syz.1.3759': attribute type 9 has an invalid length.
[  286.703166][T20949] __nla_validate_parse: 90 callbacks suppressed
[  286.703179][T20949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3765'.
[  286.710880][T20949] netlink: 'syz.2.3765': attribute type 10 has an invalid length.
[  286.790618][T20970] pim6reg1: entered promiscuous mode
[  286.792806][T20970] pim6reg1: entered allmulticast mode
[  286.839642][T20976] netlink: 'syz.0.3773': attribute type 83 has an invalid length.
[  286.866173][T20982] mac80211_hwsim hwsim304 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  286.910266][T20986] netlink: 'syz.1.3776': attribute type 13 has an invalid length.
[  287.036668][T20970] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3770'.
[  287.090599][T20997] pim6reg1: entered promiscuous mode
[  287.093815][T20997] pim6reg1: entered allmulticast mode
[  287.106661][T20999] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3780'.
[  287.160522][T21007] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3779'.
[  287.170044][T21007] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  287.177625][T21007] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  287.215455][T21013] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3780'.
[  287.314071][T21018] netlink: 'syz.2.3781': attribute type 11 has an invalid length.
[  287.513359][T21042] netlink: 'syz.2.3784': attribute type 10 has an invalid length.
[  287.544291][T21050] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  287.547158][T21050] mac80211_hwsim hwsim108 syzkaller0: entered promiscuous mode
[  287.549524][T21050] mac80211_hwsim hwsim108 syzkaller0: entered allmulticast mode
[  287.647778][T21054] netlink: 'syz.2.3786': attribute type 11 has an invalid length.
[  287.699055][T21070] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3789'.
[  287.752034][T21076] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  287.807391][T21079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3791'.
[  287.816480][T21086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3792'.
[  287.873589][T21096] netlink: 'syz.1.3794': attribute type 1 has an invalid length.
[  287.943125][T21103] bond33: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  287.956141][T10804] bond33: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  287.956729][T21096] 8021q: adding VLAN 0 to HW filter on device bond33
[  287.984014][T21096] veth5: entered promiscuous mode
[  288.058661][T21114] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.3798'.
[  288.062099][ T5869] bond33: (slave ip6gretap2): link status up again after 0 ms
[  288.071336][ T5869] bond33: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  288.074433][T21117] mac80211_hwsim hwsim274 wlan0: left promiscuous mode
[  288.077402][T21117] mac80211_hwsim hwsim304 wlan1: left allmulticast mode
[  288.089075][T21117] veth5: left promiscuous mode
[  288.099185][T21117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3799'.
[  288.210333][T21131] openvswitch: netlink: Tunnel attr 1 has unexpected len 3 expected 4
[  288.235742][T21131] lo speed is unknown, defaulting to 1000
[  288.447755][T21131] lo speed is unknown, defaulting to 1000
[  288.669779][T21156] mac80211_hwsim hwsim312 wlan0: entered promiscuous mode
[  288.673428][T21159] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  289.012418][T21188] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  289.136013][   T25] block nbd1: Possible stuck request ffff888021400000: control (read@0,1024B). Runtime 150 seconds
[  289.139330][   T25] block nbd1: Possible stuck request ffff888021400200: control (read@1024,1024B). Runtime 150 seconds
[  289.143417][   T25] block nbd1: Possible stuck request ffff888021400400: control (read@2048,1024B). Runtime 150 seconds
[  289.147014][   T25] block nbd1: Possible stuck request ffff888021400600: control (read@3072,1024B). Runtime 150 seconds
[  289.160554][T21196] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  289.166303][T21196] bond7: (slave macvlan0): Enslaving as a backup interface with a down link
[  289.170805][T21196] bond33: (slave ip6gretap2): Removing an active aggregator
[  289.173576][T21196] bond33: (slave ip6gretap2): Releasing backup interface
[  289.177241][T21196] bond7: (slave macvlan0): Releasing backup interface
[  289.224295][T21198] 8021q: adding VLAN 0 to HW filter on device bond0
[  289.433744][T21214] validate_nla: 4 callbacks suppressed
[  289.433758][T21214] netlink: 'syz.0.3826': attribute type 10 has an invalid length.
[  289.664519][T21235] netlink: 'syz.2.3830': attribute type 15 has an invalid length.
[  289.684215][T21235] netlink: 'syz.2.3830': attribute type 15 has an invalid length.
[  289.728319][T21227] bridge0 (unregistering): left allmulticast mode
[  290.043332][T21272] netlink: 'syz.2.3840': attribute type 1 has an invalid length.
[  290.078292][T21272] 8021q: adding VLAN 0 to HW filter on device bond43
[  290.206959][T21285] lo speed is unknown, defaulting to 1000
[  290.307459][T21290] macsec0: entered promiscuous mode
[  290.309786][T21285] lo speed is unknown, defaulting to 1000
[  290.701827][T21304] lo speed is unknown, defaulting to 1000
[  290.913470][T21321] mac80211_hwsim hwsim293 wlan1: left allmulticast mode
[  290.954742][T21304] lo speed is unknown, defaulting to 1000
[  290.971942][T21321] netlink: 'syz.2.3852': attribute type 10 has an invalid length.
[  291.003693][T21325] netlink: 'syz.2.3853': attribute type 12 has an invalid length.
[  291.245608][T21332] sctp: [Deprecated]: syz.2.3855 (pid 21332) Use of struct sctp_assoc_value in delayed_ack socket option.
[  291.245608][T21332] Use struct sctp_sack_info instead
[  291.732352][T21376] 8021q: adding VLAN 0 to HW filter on device bond18
[  291.735960][T21376] netlink: 'syz.0.3864': attribute type 1 has an invalid length.
[  291.772370][T21362] __nla_validate_parse: 23 callbacks suppressed
[  291.772383][T21362] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3861'.
[  291.804793][T21380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3866'.
[  291.840152][T21383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3867'.
[  291.849413][T21380] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3866'.
[  291.927105][T21390] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  295.426510][ T5293] udevd[5293]: worker [12525] /devices/virtual/block/nbd2 is taking a long time
[  306.422893][   T25] block nbd2: Possible stuck request ffff888021430000: control (read@0,1024B). Runtime 90 seconds
[  306.427052][   T25] block nbd2: Possible stuck request ffff888021430200: control (read@1024,1024B). Runtime 90 seconds
[  306.431431][   T25] block nbd2: Possible stuck request ffff888021430400: control (read@2048,1024B). Runtime 90 seconds
[  306.435663][   T25] block nbd2: Possible stuck request ffff888021430600: control (read@3072,1024B). Runtime 90 seconds
[  316.657976][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  317.647845][T21406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3871'.
[  317.757008][T21424] ieee802154 phy0 wpan0: encryption failed: -22
[  317.796366][T21424] syzkaller1: entered promiscuous mode
[  317.800967][T21424] syzkaller1: entered allmulticast mode
[  317.812141][T21424] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3876'.
[  317.960392][T21449] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3883'.
[  318.023215][T21447] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  318.032442][T21447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3881'.
[  318.070728][T21456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3884'.
[  318.077458][T21456] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3884'.
[  318.132650][T21460] netlink: 'syz.2.3886': attribute type 11 has an invalid length.
[  318.352540][T21485] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3891'.
[  318.376574][T21486] sctp: [Deprecated]: syz.1.3890 (pid 21486) Use of struct sctp_assoc_value in delayed_ack socket option.
[  318.376574][T21486] Use struct sctp_sack_info instead
[  318.457268][T21493] 8021q: adding VLAN 0 to HW filter on device bond7
[  318.460330][T21497] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  318.469382][T21497] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  318.497882][T21493] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  318.505545][T21493] bond7: (slave macvlan1): Enslaving as a backup interface with a down link
[  318.567348][T21504] bond0 (unregistering): Released all slaves
[  319.221440][   T25] block nbd1: Possible stuck request ffff888021400000: control (read@0,1024B). Runtime 180 seconds
[  319.224994][   T25] block nbd1: Possible stuck request ffff888021400200: control (read@1024,1024B). Runtime 180 seconds
[  319.228424][   T25] block nbd1: Possible stuck request ffff888021400400: control (read@2048,1024B). Runtime 180 seconds
[  319.231891][   T25] block nbd1: Possible stuck request ffff888021400600: control (read@3072,1024B). Runtime 180 seconds
[  324.217011][ T5293] udevd[5293]: worker [5877] /devices/virtual/block/nbd1 timeout; kill it
[  324.221993][ T5293] udevd[5293]: seq 15563 '/devices/virtual/block/nbd1' killed
[  336.503505][   T25] block nbd2: Possible stuck request ffff888021430000: control (read@0,1024B). Runtime 120 seconds
[  336.506797][   T25] block nbd2: Possible stuck request ffff888021430200: control (read@1024,1024B). Runtime 120 seconds
[  336.510192][   T25] block nbd2: Possible stuck request ffff888021430400: control (read@2048,1024B). Runtime 120 seconds
[  336.513611][   T25] block nbd2: Possible stuck request ffff888021430600: control (read@3072,1024B). Runtime 120 seconds
[  342.017485][T21519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3899'.
[  342.020200][T21519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3899'.
[  342.024704][T21519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3899'.
[  342.042720][T21522] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3897'.
[  342.055870][T21522] netlink: 'syz.0.3897': attribute type 16 has an invalid length.
[  342.058351][T21522] netlink: 'syz.0.3897': attribute type 17 has an invalid length.
[  342.071837][T21526] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3901'.
[  342.546976][T21545] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3904'.
[  342.578380][T21550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3906'.
[  342.588956][T21550] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  342.744639][T21560] netlink: 'syz.0.3908': attribute type 13 has an invalid length.
[  342.747093][T21560] netlink: 'syz.0.3908': attribute type 17 has an invalid length.
[  342.756279][T21560] erspan0: left promiscuous mode
[  342.769983][T21560] 8021q: adding VLAN 0 to HW filter on device batadv0
[  342.790936][T21560] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  342.794620][T21560] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  342.798593][T21560] veth1_vlan: left promiscuous mode
[  342.800843][T21560] @: left promiscuous mode
[  342.803513][T21560] @: entered promiscuous mode
[  342.809069][T21560] veth1_vlan: entered promiscuous mode
[  342.814487][T21560] veth1_macvtap: left promiscuous mode
[  342.816916][T21560] veth0_macvtap: left promiscuous mode
[  342.819256][T21560] veth0_macvtap: entered promiscuous mode
[  342.821813][T21560] tipc: Resetting bearer <eth:macvtap0>
[  342.823619][T21560] tipc: Resetting bearer <eth:macvtap0>
[  342.825485][T21560] veth1_macvtap: entered promiscuous mode
[  342.827362][T21560] macsec0: left promiscuous mode
[  342.832269][T21560] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check.
[  342.836951][   T24] lo speed is unknown, defaulting to 1000
[  342.841416][   T24] syz2: Port: 1 Link ACTIVE
[  342.858821][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  342.861569][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  342.865111][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  342.867717][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  342.870995][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  342.873880][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  342.876439][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  342.878961][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  342.969557][T21565] netlink: 'syz.2.3909': attribute type 4 has an invalid length.
[  343.076723][T21568] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3910'.
[  343.092678][T21568] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3910'.
[  343.528943][T21581] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3913'.
[  343.596036][T21586] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  343.599850][T21586] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.617753][T21588] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  343.656216][T21586] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  343.659341][T21586] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.707256][T21586] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  343.710448][T21586] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.745056][T21586] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  343.748004][T21586] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.907622][T21602] netlink: 'syz.1.3920': attribute type 1 has an invalid length.
[  343.930566][T21602] bond34: (slave vxcan1): The slave device specified does not support setting the MAC address
[  343.937351][T21602] bond34: (slave vxcan1): Error -95 calling set_mac_address
[  344.010811][T21606] netlink: 'syz.1.3921': attribute type 21 has an invalid length.
[  344.037539][T10804] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  344.040044][T10804] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  344.056758][T10804] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  344.059216][T10804] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  344.067529][T10804] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  344.069966][T10804] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  344.072690][T10804] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  344.075201][T10804] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  344.101160][T21611] lo speed is unknown, defaulting to 1000
[  344.138148][T21608] openvswitch: netlink: Multiple metadata blocks provided
[  344.152754][T21613] netlink: 'syz.1.3923': attribute type 1 has an invalid length.
[  344.190321][T21616] sctp: [Deprecated]: syz.2.3924 (pid 21616) Use of int in max_burst socket option.
[  344.190321][T21616] Use struct sctp_assoc_value instead
[  344.228197][T21611] lo speed is unknown, defaulting to 1000
[  344.273253][T21620] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  344.674966][T21651] netlink: 'syz.0.3933': attribute type 1 has an invalid length.
[  344.803263][T21658] netlink: 'syz.1.3935': attribute type 10 has an invalid length.
[  344.857022][T21662] lo speed is unknown, defaulting to 1000
[  344.877732][T21670] batadv_slave_0: entered allmulticast mode
[  344.923993][T21672] bond7: (slave macvlan1): Releasing backup interface
[  345.189267][T21662] lo speed is unknown, defaulting to 1000
[  345.416618][T21697] mac80211_hwsim hwsim108 syzkaller0: left promiscuous mode
[  345.418858][T21697] mac80211_hwsim hwsim108 syzkaller0: left allmulticast mode
[  345.448398][T21700] lo speed is unknown, defaulting to 1000
[  345.554494][T21700] lo speed is unknown, defaulting to 1000
[  346.075589][T21722] lo speed is unknown, defaulting to 1000
[  346.127381][T21724] Bluetooth: MGMT ver 1.23
[  346.295078][T21722] lo speed is unknown, defaulting to 1000
[  346.596605][T21745] openvswitch: netlink: Key 6 has unexpected len 176 expected 2
[  346.808142][T21766] 8021q: adding VLAN 0 to HW filter on device team0
[  346.812974][T21766] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  346.878063][T21766] lo speed is unknown, defaulting to 1000
[  347.124588][T21766] lo speed is unknown, defaulting to 1000
[  347.584226][T21785] validate_nla: 5 callbacks suppressed
[  347.584237][T21785] netlink: 'syz.0.3966': attribute type 13 has an invalid length.
[  347.647527][T21791] __nla_validate_parse: 25 callbacks suppressed
[  347.647541][T21791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3968'.
[  347.723168][T21785] tipc: Resetting bearer <eth:macvtap0>
[  347.736263][T21793] netlink: 47 bytes leftover after parsing attributes in process `syz.0.3966'.
[  347.765760][   T24] lo speed is unknown, defaulting to 1000
[  347.766641][T21791] netlink: 556 bytes leftover after parsing attributes in process `syz.2.3968'.
[  347.767632][   T24] syz2: Port: 1 Link DOWN
[  347.778494][T10804] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  347.781112][T10804] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  347.788608][T10804] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  347.793977][T10804] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  347.796522][T10804] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  347.798993][T10804] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  347.805993][T10804] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  347.808578][T10804] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  347.818833][T21797] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  347.889166][T21800] netlink: 'syz.0.3970': attribute type 3 has an invalid length.
[  347.895057][T21800] netlink: 'syz.0.3970': attribute type 3 has an invalid length.
[  347.920260][T21813] sctp: [Deprecated]: syz.2.3973 (pid 21813) Use of int in maxseg socket option.
[  347.920260][T21813] Use struct sctp_assoc_value instead
[  348.114820][T21826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3975'.
[  348.327701][T21847] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3980'.
[  348.352750][T21844] lo speed is unknown, defaulting to 1000
[  348.558276][T21844] lo speed is unknown, defaulting to 1000
[  348.560328][T21845] lo speed is unknown, defaulting to 1000
[  348.708923][T21872] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3988'.
[  348.813941][T21870] bond0 (unregistering): Released all slaves
[  348.829144][T21845] lo speed is unknown, defaulting to 1000
[  348.960449][T21883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3990'.
[  348.993910][T21887] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  348.996674][T21887] mac80211_hwsim hwsim108 syzkaller0: entered promiscuous mode
[  348.998959][T21887] mac80211_hwsim hwsim108 syzkaller0: entered allmulticast mode
[  349.112733][T21890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3993'.
[  349.115423][T21890] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3993'.
[  349.119064][T21890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3993'.
[  349.249322][T21899] IPVS: Scheduler module ip_vs_sip not found
[  349.264134][T21897] lo speed is unknown, defaulting to 1000
[  349.298715][   T25] block nbd1: Possible stuck request ffff888021400000: control (read@0,1024B). Runtime 210 seconds
[  349.302584][   T25] block nbd1: Possible stuck request ffff888021400200: control (read@1024,1024B). Runtime 210 seconds
[  349.305859][   T25] block nbd1: Possible stuck request ffff888021400400: control (read@2048,1024B). Runtime 210 seconds
[  349.309123][   T25] block nbd1: Possible stuck request ffff888021400600: control (read@3072,1024B). Runtime 210 seconds
[  349.513980][T21906] netlink: 'syz.2.3995': attribute type 1 has an invalid length.
[  349.559181][T21897] lo speed is unknown, defaulting to 1000
[  349.604962][T21908] IPVS: Scheduler module ip_vs_sip not found
[  349.717345][T21915] netlink: 'syz.0.4001': attribute type 10 has an invalid length.
[  349.890677][T21925] netlink: 'syz.0.4004': attribute type 1 has an invalid length.
[  350.010649][T21927] 8021q: adding VLAN 0 to HW filter on device bond0
[  350.158946][T21948] batadv_slave_0: entered promiscuous mode
[  350.333602][T21947] batadv_slave_0: left promiscuous mode
[  350.487299][T21966] lo speed is unknown, defaulting to 1000
[  350.620735][T21966] lo speed is unknown, defaulting to 1000
[  350.689702][T21971] mac80211_hwsim hwsim108 syzkaller0: Caught tx_queue_len zero misconfig
[  351.187606][T22000] netlink: 'syz.1.4019': attribute type 10 has an invalid length.
[  351.214027][T22001] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  351.236592][T22003] 8021q: adding VLAN 0 to HW filter on device bond35
[  351.259529][T22003] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  351.265027][T22003] bond7: (slave macvlan2): Enslaving as a backup interface with a down link
[  351.353871][T22013] netlink: 'syz.0.4022': attribute type 4 has an invalid length.
[  351.507688][T22028] IPVS: Scheduler module ip_vs_sip not found
[  351.599627][T22036] openvswitch: netlink: Flow actions attr not present in new flow.
[  351.630390][T22038] netlink: 'syz.1.4029': attribute type 11 has an invalid length.
[  351.810115][T22056] IPVS: length: 49 != 16106127384
[  351.848693][T22062] tunl0: entered allmulticast mode
[  352.094954][T22071] openvswitch: netlink: Flow actions attr not present in new flow.
[  352.769813][T22088] __nla_validate_parse: 19 callbacks suppressed
[  352.769827][T22088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4045'.
[  352.774734][T22088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4045'.
[  352.812929][T22098] raw_sendmsg: syz.1.4048 forgot to set AF_INET. Fix it!
[  352.948041][T22108] 8021q: adding VLAN 0 to HW filter on device bond36
[  352.958457][T22108] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  352.962550][T22108] bond18: (slave macvlan2): Enslaving as a backup interface with a down link
[  353.046530][T22113] netlink: 'syz.2.4053': attribute type 1 has an invalid length.
[  353.063714][T22113] 8021q: adding VLAN 0 to HW filter on device bond0
[  353.072856][T22113] vlan2: entered allmulticast mode
[  353.074726][T22113] mac80211_hwsim hwsim311 wlan0: entered allmulticast mode
[  353.077759][T22113] bond0: (slave vlan2): Opening slave failed
[  353.287093][T22130] netlink: 'syz.0.4059': attribute type 1 has an invalid length.
[  353.309217][T22130] bond37: (slave vxcan5): The slave device specified does not support setting the MAC address
[  353.313382][T22130] bond37: (slave vxcan5): Error -95 calling set_mac_address
[  353.420694][T22136] mac80211_hwsim hwsim325 wlan1: entered allmulticast mode
[  353.426317][T22136] netlink: 'syz.0.4061': attribute type 13 has an invalid length.
[  353.434492][T22136] bond18: (slave macvlan2): Releasing backup interface
[  353.439732][T22137] netlink: 'syz.0.4061': attribute type 10 has an invalid length.
[  353.616528][T22153] netlink: 'syz.0.4065': attribute type 13 has an invalid length.
[  353.618877][T22153] netlink: 'syz.0.4065': attribute type 17 has an invalid length.
[  353.626767][T22153] tunl0: left allmulticast mode
[  353.656880][T22155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4066'.
[  353.705577][T22153] 8021q: adding VLAN 0 to HW filter on device batadv0
[  353.733387][T22153] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  353.736438][T22153] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  353.740376][T22153] veth1_vlan: left promiscuous mode
[  353.744296][T22153] @: left promiscuous mode
[  353.746329][T22153] @: entered promiscuous mode
[  353.750045][T22153] veth1_vlan: entered promiscuous mode
[  353.758766][T22153] veth1_macvtap: left promiscuous mode
[  353.761821][T22153] veth0_macvtap: left promiscuous mode
[  353.764513][T22153] veth0_macvtap: entered promiscuous mode
[  353.773297][T22153] tipc: Resetting bearer <eth:macvtap0>
[  353.775177][T22153] veth1_macvtap: entered promiscuous mode
[  353.780223][T22153] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check.
[  353.785575][   T24] lo speed is unknown, defaulting to 1000
[  353.787481][   T24] syz2: Port: 1 Link ACTIVE
[  353.825200][ T5851] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  353.827728][ T5851] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  353.830191][ T5851] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  353.834250][ T5851] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  353.846350][T22156] lo speed is unknown, defaulting to 1000
[  353.848317][ T5851] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  353.850799][ T5851] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  353.866860][ T5851] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  353.870391][ T5851] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  354.003992][T22166] lo speed is unknown, defaulting to 1000
[  354.009733][T22156] lo speed is unknown, defaulting to 1000
[  354.148268][T22166] lo speed is unknown, defaulting to 1000
[  354.486939][T22183] batadv_slave_1: entered promiscuous mode
[  354.538037][T22185] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4071'.
[  354.763648][T22193] pim6reg1: entered promiscuous mode
[  354.765288][T22193] pim6reg1: entered allmulticast mode
[  354.863283][T22199] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4074'.
[  354.870335][T22193] mac80211_hwsim hwsim108 syzkaller0: left promiscuous mode
[  354.875095][T22193] mac80211_hwsim hwsim108 syzkaller0: left allmulticast mode
[  354.917825][T22193] bond44 (unregistering): Released all slaves
[  355.146096][T22220] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4080'.
[  355.158883][T22220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4080'.
[  355.195385][T22222] netlink: 'syz.0.4081': attribute type 16 has an invalid length.
[  355.197819][T22222] netlink: 'syz.0.4081': attribute type 17 has an invalid length.
[  355.280707][T22222] tipc: Resetting bearer <eth:macvtap0>
[  355.292286][ T5906] lo speed is unknown, defaulting to 1000
[  355.292347][T10804] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  355.294074][ T5906] syz2: Port: 1 Link DOWN
[  355.296639][T10804] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  355.300403][T10804] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  355.303113][T10804] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  355.305651][T10804] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  355.311262][T10804] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  355.313765][T10804] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  355.316274][T10804] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  355.319139][T22182] batadv_slave_1: left promiscuous mode
[  355.366603][T22226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4083'.
[  355.369407][T22226] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4083'.
[  355.433816][T22228] lo speed is unknown, defaulting to 1000
[  355.438371][T22232] netlink: 'syz.1.4085': attribute type 2 has an invalid length.
[  355.440741][T22232] netlink: 'syz.1.4085': attribute type 1 has an invalid length.
[  355.448593][T22232] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4085'.
[  355.565787][T22228] lo speed is unknown, defaulting to 1000
[  356.128545][T22279] 8021q: adding VLAN 0 to HW filter on device bond44
[  356.143191][T22279] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  356.146607][T22279] bond21: (slave macvlan3): Enslaving as a backup interface with a down link
[  356.889308][T22275] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  356.940033][T22305] 8021q: adding VLAN 0 to HW filter on device bond38
[  356.952698][T22305] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  356.956016][T22305] bond18: (slave macvlan3): Enslaving as a backup interface with a down link
[  357.071142][T22320] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  357.076549][T22320] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  357.087047][T22320] bridge13: left promiscuous mode
[  357.089537][T22320] mac80211_hwsim hwsim325 wlan1: left allmulticast mode
[  357.209539][T22334] openvswitch: netlink: Flow actions attr not present in new flow.
[  357.321111][T22340] lo speed is unknown, defaulting to 1000
[  357.654206][T22340] lo speed is unknown, defaulting to 1000
[  358.015167][T22387] __nla_validate_parse: 11 callbacks suppressed
[  358.015181][T22387] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4118'.
[  358.038549][T22387] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4118'.
[  358.153891][T22394] batadv_slave_0: left allmulticast mode
[  358.355671][T22406] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4122'.
[  358.518806][T22424] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  358.525390][T22424] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  358.527711][T22424] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  358.532677][T22424] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4127'.
[  358.570830][T22427] 8021q: adding VLAN 0 to HW filter on device bond39
[  358.595891][T22427] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  358.599525][T22427] bond18: (slave macvlan5): Enslaving as a backup interface with a down link
[  358.740142][T22436] mac80211_hwsim hwsim332 wlan0: entered promiscuous mode
[  358.743699][T22436] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  358.772577][T22439] validate_nla: 1 callbacks suppressed
[  358.772589][T22439] netlink: 'syz.1.4132': attribute type 23 has an invalid length.
[  358.836435][T22443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4134'.
[  358.952615][T22454] netlink: 'syz.1.4138': attribute type 11 has an invalid length.
[  359.005348][T22456] syzkaller1: entered promiscuous mode
[  359.007123][T22456] syzkaller1: entered allmulticast mode
[  359.010855][T22456] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4139'.
[  359.275480][T22482] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4144'.
[  359.313319][T22469] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4142'.
[  359.316925][T22469] netlink: 'syz.0.4142': attribute type 29 has an invalid length.
[  359.380753][T22494] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4147'.
[  359.448731][T22501] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4150'.
[  359.467674][T22501] bond40: entered promiscuous mode
[  359.469428][T22501] bond40: entered allmulticast mode
[  359.471570][T22501] 8021q: adding VLAN 0 to HW filter on device bond40
[  359.562579][T22506] IPVS: Scheduler module ip_vs_sip not found
[  359.797672][T22534] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  359.802206][T22534] netlink: 'syz.2.4156': attribute type 11 has an invalid length.
[  359.906247][T22551] netlink: 'syz.0.4159': attribute type 9 has an invalid length.
[  359.991595][T22555] unknown channel width for channel at 909000KHz?
[  359.993564][T22555] unknown channel width for channel at 909000KHz?
[  360.018090][T22559] netlink: 'syz.1.4161': attribute type 1 has an invalid length.
[  360.057629][T22559] bond36: (slave vxcan1): The slave device specified does not support setting the MAC address
[  360.064236][T22559] bond36: (slave vxcan1): Error -95 calling set_mac_address
[  360.264665][T22593] netlink: 'syz.1.4169': attribute type 1 has an invalid length.
[  360.467225][T22617] netlink: 'syz.1.4175': attribute type 11 has an invalid length.
[  361.050721][T22659] netlink: 'syz.0.4187': attribute type 13 has an invalid length.
[  361.060325][T22659] netlink: 'syz.0.4187': attribute type 11 has an invalid length.
[  361.132485][T22663] netlink: 'syz.0.4189': attribute type 1 has an invalid length.
[  361.225012][T22673] 8021q: adding VLAN 0 to HW filter on device bond41
[  361.261927][T22673] bond18: (slave macvlan6): Error -98 calling set_mac_address
[  361.352803][T22683] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  361.564718][T22695] syzkaller1: entered promiscuous mode
[  361.566559][T22695] syzkaller1: entered allmulticast mode
[  361.700123][T22702] 8021q: adding VLAN 0 to HW filter on device bond37
[  361.710255][T22702] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  361.713947][T22702] bond7: (slave macvlan3): Enslaving as a backup interface with a down link
[  361.983689][T22722] netlink: 'syz.1.4206': attribute type 10 has an invalid length.
[  362.082800][T22733] netlink: 'syz.1.4211': attribute type 1 has an invalid length.
[  362.148964][T22733] 8021q: adding VLAN 0 to HW filter on device bond38
[  362.159180][T22736] bond38: (slave gretap2): making interface the new active one
[  362.163065][T22736] bond38: (slave gretap2): Enslaving as an active interface with an up link
[  362.300589][T22746] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  362.369603][T22749] 8021q: adding VLAN 0 to HW filter on device bond42
[  362.383899][T22749] bond0: (slave bond42): Enslaving as a backup interface with a down link
[  362.592028][T22777] 8021q: adding VLAN 0 to HW filter on device bond43
[  362.614570][T22771] bond21: (slave macvlan3): Releasing backup interface
[  362.620819][T22771] bond0 (unregistering): Released all slaves
[  362.646650][T22777] bond18: (slave macvlan6): Error -98 calling set_mac_address
[  362.739114][T22788] 8021q: adding VLAN 0 to HW filter on device bond0
[  362.749660][T22788] vlan2: entered allmulticast mode
[  362.754153][T22788] bond0: (slave vlan2): Opening slave failed
[  362.779493][T22794] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  362.784550][T22794] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  362.788006][T22794] mac80211_hwsim hwsim332 wlan0: left promiscuous mode
[  362.997164][T22816] 8021q: adding VLAN 0 to HW filter on device bond44
[  363.005263][T22816] bond18: (slave macvlan6): Error -98 calling set_mac_address
[  363.281678][T22845] __nla_validate_parse: 25 callbacks suppressed
[  363.281691][T22845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4238'.
[  363.326104][T22845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4238'.
[  363.387252][T22857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4242'.
[  363.425338][T22857] lo speed is unknown, defaulting to 1000
[  363.486282][T22864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4245'.
[  363.489550][T22861] 8021q: adding VLAN 0 to HW filter on device batadv0
[  363.529612][T22861] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  363.534300][T22861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  363.538314][T22861] veth1_vlan: left promiscuous mode
[  363.540590][T22861] @: left promiscuous mode
[  363.542818][T22861] @: entered promiscuous mode
[  363.546526][T22861] veth1_vlan: entered promiscuous mode
[  363.550669][T22861] veth1_macvtap: left promiscuous mode
[  363.553574][T22861] veth0_macvtap: left promiscuous mode
[  363.555830][T22861] veth0_macvtap: entered promiscuous mode
[  363.558073][T22861] tipc: Resetting bearer <eth:macvtap0>
[  363.559847][T22861] tipc: Resetting bearer <eth:macvtap0>
[  363.561767][T22861] veth1_macvtap: entered promiscuous mode
[  363.566503][T22861] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check.
[  363.577905][   T24] lo speed is unknown, defaulting to 1000
[  363.579720][   T24] syz2: Port: 1 Link ACTIVE
[  363.626763][ T5851] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  363.633505][ T5851] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  363.636047][ T5851] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  363.638453][ T5851] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  363.640918][ T5851] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  363.645211][ T5851] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  363.655110][T22857] lo speed is unknown, defaulting to 1000
[  363.657817][ T5851] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  363.664380][ T5851] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  363.680041][T22867] lo speed is unknown, defaulting to 1000
[  363.843711][T22867] lo speed is unknown, defaulting to 1000
[  364.036787][T22887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4247'.
[  364.327221][T22895] 8021q: adding VLAN 0 to HW filter on device bond45
[  364.344957][T22895] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  364.348229][T22895] bond21: (slave macvlan3): Enslaving as a backup interface with a down link
[  365.090724][T22921] netlink: 252 bytes leftover after parsing attributes in process `syz.2.4258'.
[  365.280955][T22932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4261'.
[  365.376707][T22947] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4264'.
[  365.380888][T22946] netlink: 'syz.2.4264': attribute type 11 has an invalid length.
[  365.436711][T22950] 8021q: adding VLAN 0 to HW filter on device bond46
[  365.448068][T22950] bond21: (slave macvlan4): Error -98 calling set_mac_address
[  365.604087][T22973] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4271'.
[  365.608565][T22973] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4271'.
[  365.753067][T22984] 8021q: adding VLAN 0 to HW filter on device bond39
[  365.765225][T22984] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  365.768794][T22984] bond7: (slave macvlan4): Enslaving as a backup interface with a down link
[  365.816291][T22990] validate_nla: 8 callbacks suppressed
[  365.816305][T22990] netlink: 'syz.1.4276': attribute type 29 has an invalid length.
[  366.016554][T23005] bond7: (slave macvlan2): Releasing backup interface
[  366.018699][T23005] bond7: (slave macvlan2): the permanent HWaddr of slave - 7a:e4:be:44:b4:05 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  366.053833][T23005] bond7: (slave macvlan3): Releasing backup interface
[  366.057219][T23005] bond38: (slave gretap2): Releasing active interface
[  366.061113][T23005] bond7: (slave macvlan4): Releasing backup interface
[  366.070944][T23005] netlink: 'syz.1.4280': attribute type 10 has an invalid length.
[  366.176729][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810f2f6000: rx timeout, send abort
[  366.255955][T23025] netlink: 'syz.1.4284': attribute type 29 has an invalid length.
[  366.583144][   T25] block nbd2: Possible stuck request ffff888021430000: control (read@0,1024B). Runtime 150 seconds
[  366.586816][   T25] block nbd2: Possible stuck request ffff888021430200: control (read@1024,1024B). Runtime 150 seconds
[  366.590262][   T25] block nbd2: Possible stuck request ffff888021430400: control (read@2048,1024B). Runtime 150 seconds
[  366.593726][   T25] block nbd2: Possible stuck request ffff888021430600: control (read@3072,1024B). Runtime 150 seconds
[  366.680304][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810f2f6000: abort rx timeout. Force session deactivation
[  366.763906][T23041] netlink: 'syz.0.4286': attribute type 23 has an invalid length.
[  367.033267][T23051] 8021q: adding VLAN 0 to HW filter on device bond47
[  367.041827][T23051] bond21: (slave macvlan4): Error -98 calling set_mac_address
[  367.114032][T23054] netlink: 'syz.2.4292': attribute type 11 has an invalid length.
[  367.164527][T23055] netlink: 'syz.2.4292': attribute type 11 has an invalid length.
[  367.254143][T23057] netlink: 'syz.1.4293': attribute type 1 has an invalid length.
[  367.368825][T23074] pim6reg1: entered promiscuous mode
[  367.370565][T23074] pim6reg1: entered allmulticast mode
[  367.449931][T23075] 8021q: adding VLAN 0 to HW filter on device bond40
[  367.453639][T23075] team0: Port device bond40 added
[  367.770347][T23109] 8021q: adding VLAN 0 to HW filter on device bond48
[  367.791399][T23109] bond21: (slave macvlan4): Error -98 calling set_mac_address
[  367.944276][T23127] netlink: 'syz.1.4311': attribute type 13 has an invalid length.
[  368.222858][T23162] netlink: 'syz.1.4318': attribute type 9 has an invalid length.
[  368.225314][T23162] netlink: 'syz.1.4318': attribute type 6 has an invalid length.
[  368.412644][T23161] bond18: (slave macvlan3): Releasing backup interface
[  368.414958][T23161] bond18: (slave macvlan3): the permanent HWaddr of slave - 62:ca:14:b2:90:92 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  368.449473][T23161] bond18: (slave macvlan5): Releasing backup interface
[  368.458312][T23161] bond0 (unregistering): (slave bond42): Releasing backup interface
[  368.464211][T23161] bond0 (unregistering): Released all slaves
[  368.506533][T23166] __nla_validate_parse: 25 callbacks suppressed
[  368.506549][T23166] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4321'.
[  368.733004][T23191] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4325'.
[  368.833719][T23200] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4327'.
[  368.963194][T23208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4329'.
[  368.965957][T23208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4329'.
[  369.265572][T23240] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4336'.
[  369.307358][T23244] netlink: 'syz.0.4338': attribute type 1 has an invalid length.
[  369.312608][T23243] 8021q: adding VLAN 0 to HW filter on device bond49
[  369.317895][T23244] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  369.328630][T23243] bond21: (slave macvlan4): Error -98 calling set_mac_address
[  369.365487][T23251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4339'.
[  369.520661][T23258] IPVS: Scheduler module ip_vs_sip not found
[  369.565293][T23266] IPVS: set_ctl: invalid protocol: 80 172.20.20.64:20002
[  369.649055][T23277] netlink: 'syz.1.4345': attribute type 13 has an invalid length.
[  369.739219][T23284] syzkaller1: entered promiscuous mode
[  369.742769][T23284] syzkaller1: entered allmulticast mode
[  369.747484][T23284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4347'.
[  369.807218][T23286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4348'.
[  370.002506][T23296] delete_channel: no stack
[  370.012929][T23295] delete_channel: no stack
[  370.014578][T23295] delete_channel: no stack
[  370.016228][T23295] delete_channel: no stack
[  370.017769][T23295] delete_channel: no stack
[  370.019321][T23295] delete_channel: no stack
[  370.020906][T23295] delete_channel: no stack
[  370.025141][T23295] delete_channel: no stack
[  370.026697][T23295] delete_channel: no stack
[  370.028189][T23295] delete_channel: no stack
[  370.029643][T23295] delete_channel: no stack
[  370.031096][T23295] delete_channel: no stack
[  370.033544][T23295] delete_channel: no stack
[  370.035574][T23295] delete_channel: no stack
[  370.037831][T23295] delete_channel: no stack
[  370.039333][T23295] delete_channel: no stack
[  370.040821][T23295] delete_channel: no stack
[  370.044019][T23295] delete_channel: no stack
[  370.045522][T23295] delete_channel: no stack
[  370.046968][T23295] delete_channel: no stack
[  370.048527][T23295] delete_channel: no stack
[  370.049987][T23295] delete_channel: no stack
[  370.051826][T23295] delete_channel: no stack
[  370.053343][T23295] delete_channel: no stack
[  370.054791][T23295] delete_channel: no stack
[  370.056280][T23295] delete_channel: no stack
[  370.057778][T23295] delete_channel: no stack
[  370.059376][T23295] delete_channel: no stack
[  370.060879][T23295] delete_channel: no stack
[  370.062590][T23295] delete_channel: no stack
[  370.064098][T23295] delete_channel: no stack
[  370.065591][T23295] delete_channel: no stack
[  370.067079][T23295] delete_channel: no stack
[  370.068559][T23295] delete_channel: no stack
[  370.070160][T23295] delete_channel: no stack
[  370.071756][T23295] delete_channel: no stack
[  370.073237][T23295] delete_channel: no stack
[  370.074719][T23295] delete_channel: no stack
[  370.076202][T23295] delete_channel: no stack
[  370.077689][T23295] delete_channel: no stack
[  370.079183][T23295] delete_channel: no stack
[  370.080771][T23295] delete_channel: no stack
[  370.082702][T23295] delete_channel: no stack
[  370.084191][T23295] delete_channel: no stack
[  370.085674][T23295] delete_channel: no stack
[  370.087166][T23295] delete_channel: no stack
[  370.088643][T23295] delete_channel: no stack
[  370.090140][T23295] delete_channel: no stack
[  370.091804][T23295] delete_channel: no stack
[  370.093276][T23295] delete_channel: no stack
[  370.094726][T23295] delete_channel: no stack
[  370.096149][T23295] delete_channel: no stack
[  370.097576][T23295] delete_channel: no stack
[  370.099011][T23295] delete_channel: no stack
[  370.100487][T23295] delete_channel: no stack
[  370.102184][T23295] delete_channel: no stack
[  370.103634][T23295] delete_channel: no stack
[  370.105085][T23295] delete_channel: no stack
[  370.106538][T23295] delete_channel: no stack
[  370.107970][T23295] delete_channel: no stack
[  370.109421][T23295] delete_channel: no stack
[  370.110874][T23295] delete_channel: no stack
[  370.113425][T23295] delete_channel: no stack
[  370.114919][T23295] delete_channel: no stack
[  370.116431][T23295] delete_channel: no stack
[  370.379196][T23317] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4355'.
[  370.465604][T23322] sctp: [Deprecated]: syz.2.4356 (pid 23322) Use of struct sctp_assoc_value in delayed_ack socket option.
[  370.465604][T23322] Use struct sctp_sack_info instead
[  371.117200][T23336] validate_nla: 2 callbacks suppressed
[  371.117212][T23336] netlink: 'syz.0.4359': attribute type 1 has an invalid length.
[  371.236023][T23352] netlink: 'syz.0.4365': attribute type 1 has an invalid length.
[  371.273871][T23354] IPVS: set_ctl: invalid protocol: 58 100.1.1.2:20003
[  371.279254][T23356] sock: sock_set_timeout: `syz.0.4367' (pid 23356) tries to set negative timeout
[  371.694326][T23368] netlink: 'syz.0.4371': attribute type 10 has an invalid length.
[  371.719629][T23371] mac80211_hwsim hwsim339 wlan0: entered promiscuous mode
[  371.722225][T23371] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  371.727103][T23372] mac80211_hwsim hwsim325 wlan1: entered allmulticast mode
[  371.803189][T23374] 8021q: adding VLAN 0 to HW filter on device bond0
[  371.806018][T23379] netlink: 'syz.2.4374': attribute type 10 has an invalid length.
[  371.930310][T23391] IPVS: Scheduler module ip_vs_sip not found
[  372.006203][T23398] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpjciZTT!'
[  372.010392][T23398] CPU: 0 UID: 0 PID: 23398 Comm: syz.2.4378 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  372.010404][T23398] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  372.010410][T23398] Call Trace:
[  372.010415][T23398]  <TASK>
[  372.010420][T23398]  dump_stack_lvl+0x189/0x250
[  372.010438][T23398]  ? __pfx_dump_stack_lvl+0x10/0x10
[  372.010447][T23398]  ? __pfx__printk+0x10/0x10
[  372.010462][T23398]  ? kernfs_path_from_node+0x2f/0x290
[  372.010472][T23398]  ? kernfs_path_from_node+0x250/0x290
[  372.010480][T23398]  ? kernfs_path_from_node+0x2f/0x290
[  372.010490][T23398]  sysfs_warn_dup+0x8e/0xa0
[  372.010498][T23398]  sysfs_do_create_link_sd+0xc0/0x110
[  372.010508][T23398]  device_add_class_symlinks+0x1cf/0x240
[  372.010522][T23398]  device_add+0x475/0xb50
[  372.010535][T23398]  wiphy_register+0x1ba6/0x28d0
[  372.010554][T23398]  ? __pfx_wiphy_register+0x10/0x10
[  372.010562][T23398]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  372.010579][T23398]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  372.010594][T23398]  ieee80211_register_hw+0x3425/0x4080
[  372.010614][T23398]  ? ieee80211_register_hw+0x1401/0x4080
[  372.010629][T23398]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  372.010642][T23398]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  372.010656][T23398]  ? __hrtimer_setup+0x187/0x210
[  372.010664][T23398]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  372.010676][T23398]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  372.010699][T23398]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  372.010706][T23398]  ? trace_kmalloc+0x1f/0xd0
[  372.010717][T23398]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  372.010727][T23398]  ? kstrndup+0xbf/0x160
[  372.010742][T23398]  hwsim_new_radio_nl+0xea4/0x1b10
[  372.010751][T23398]  ? __pfx___nla_validate_parse+0x10/0x10
[  372.010770][T23398]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  372.010784][T23398]  ? __nla_parse+0x40/0x60
[  372.010795][T23398]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  372.010808][T23398]  genl_family_rcv_msg_doit+0x215/0x300
[  372.010824][T23398]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  372.010841][T23398]  ? bpf_lsm_capable+0x9/0x20
[  372.010876][T23398]  ? security_capable+0x7e/0x2e0
[  372.010891][T23398]  genl_rcv_msg+0x60e/0x790
[  372.010905][T23398]  ? __pfx_genl_rcv_msg+0x10/0x10
[  372.010916][T23398]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  372.010931][T23398]  netlink_rcv_skb+0x208/0x470
[  372.010940][T23398]  ? __lock_acquire+0xab9/0xd20
[  372.010952][T23398]  ? __pfx_genl_rcv_msg+0x10/0x10
[  372.010964][T23398]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  372.010983][T23398]  ? down_read+0x1ad/0x2e0
[  372.010996][T23398]  genl_rcv+0x28/0x40
[  372.011006][T23398]  netlink_unicast+0x82f/0x9e0
[  372.011019][T23398]  ? __pfx_netlink_unicast+0x10/0x10
[  372.011028][T23398]  ? netlink_sendmsg+0x642/0xb30
[  372.011037][T23398]  ? skb_put+0x11b/0x210
[  372.011049][T23398]  netlink_sendmsg+0x805/0xb30
[  372.011063][T23398]  ? __pfx_netlink_sendmsg+0x10/0x10
[  372.011074][T23398]  ? aa_sock_msg_perm+0xf1/0x1d0
[  372.011087][T23398]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  372.011095][T23398]  ? __pfx_netlink_sendmsg+0x10/0x10
[  372.011105][T23398]  __sock_sendmsg+0x21c/0x270
[  372.011116][T23398]  ____sys_sendmsg+0x505/0x830
[  372.011134][T23398]  ? __pfx_____sys_sendmsg+0x10/0x10
[  372.011150][T23398]  ? import_iovec+0x74/0xa0
[  372.011159][T23398]  ___sys_sendmsg+0x21f/0x2a0
[  372.011171][T23398]  ? __pfx____sys_sendmsg+0x10/0x10
[  372.011215][T23398]  ? __fget_files+0x2a/0x420
[  372.011228][T23398]  ? __fget_files+0x3a0/0x420
[  372.011244][T23398]  __x64_sys_sendmsg+0x19b/0x260
[  372.011256][T23398]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  372.011273][T23398]  ? do_user_addr_fault+0xc8a/0x1390
[  372.011288][T23398]  ? do_syscall_64+0xbe/0x3b0
[  372.011301][T23398]  do_syscall_64+0xfa/0x3b0
[  372.011310][T23398]  ? lockdep_hardirqs_on+0x9c/0x150
[  372.011320][T23398]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  372.011328][T23398]  ? exc_page_fault+0x9f/0xf0
[  372.011338][T23398]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  372.011346][T23398] RIP: 0033:0x7f223398ebe9
[  372.011355][T23398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  372.011363][T23398] RSP: 002b:00007f2234711038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  372.011373][T23398] RAX: ffffffffffffffda RBX: 00007f2233bb6180 RCX: 00007f223398ebe9
[  372.011378][T23398] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  372.011384][T23398] RBP: 00007f2233a11e19 R08: 0000000000000000 R09: 0000000000000000
[  372.011388][T23398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  372.011393][T23398] R13: 00007f2233bb6218 R14: 00007f2233bb6180 R15: 00007fff77f49a18
[  372.011407][T23398]  </TASK>
[  372.650329][T23436] netlink: 'syz.2.4386': attribute type 12 has an invalid length.
[  372.843412][T23442] bond21: option mode: unable to set because the bond device has slaves
[  372.856093][T23442] bond21: (slave macvlan4): Error -98 calling set_mac_address
[  372.900523][T23446] bond21: (slave macvlan3): Releasing backup interface
[  372.944397][T23447] batadv_slave_0: entered promiscuous mode
[  372.950021][T23445] batadv_slave_0: left promiscuous mode
[  373.125687][T23470] netlink: 'syz.1.4396': attribute type 10 has an invalid length.
[  373.286360][T23473] netlink: 'syz.1.4398': attribute type 10 has an invalid length.
[  373.446935][T23506] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  373.450221][T23506] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.492781][T23506] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  373.501627][T23506] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.537399][T23506] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  373.540463][T23506] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.582221][T23512] sch_tbf: burst 240 is lower than device lo mtu (11337746) !
[  373.604996][T23506] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  373.608212][T23506] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.673148][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  373.675917][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  373.685518][T23518] syzkaller1: entered promiscuous mode
[  373.687396][T23518] syzkaller1: entered allmulticast mode
[  373.690726][T23518] netlink: 'syz.1.4408': attribute type 12 has an invalid length.
[  373.694516][T23518] __nla_validate_parse: 5 callbacks suppressed
[  373.694525][T23518] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.4408'.
[  373.703717][ T5851] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  373.706296][ T5851] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  373.715723][ T5851] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  373.718240][ T5851] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  373.731511][ T5851] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  373.734063][ T5851] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  373.792704][T23523] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  373.828647][T23529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4410'.
[  373.835712][T23529] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4410'.
[  373.906785][T23536] netlink: 'syz.2.4412': attribute type 12 has an invalid length.
[  373.972362][T23538] netlink: 'syz.1.4413': attribute type 11 has an invalid length.
[  374.000808][T23541] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  374.003779][T23541] mac80211_hwsim hwsim108 syzkaller0: entered promiscuous mode
[  374.006203][T23541] mac80211_hwsim hwsim108 syzkaller0: entered allmulticast mode
[  374.010065][T23541] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4414'.
[  374.132384][T23557] lo speed is unknown, defaulting to 1000
[  374.306749][T23560] bond0 (unregistering): Released all slaves
[  374.331396][T23557] lo speed is unknown, defaulting to 1000
[  374.414279][T23578] netlink: 'syz.2.4422': attribute type 10 has an invalid length.
[  374.550335][T23584] lo speed is unknown, defaulting to 1000
[  374.659539][T23584] lo speed is unknown, defaulting to 1000
[  375.221937][T23605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4430'.
[  375.287360][T23612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4432'.
[  375.298441][T23612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4432'.
[  375.404159][T23621] 8021q: adding VLAN 0 to HW filter on device bond46
[  375.413932][T23620] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  375.417419][T23620] bond18: (slave macvlan2): Enslaving as a backup interface with a down link
[  375.433920][T23620] bond18: (slave macvlan2): Releasing backup interface
[  375.590753][T23648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4442'.
[  375.650348][T23628] bond0 (unregistering): Released all slaves
[  375.789952][T23670] sctp: [Deprecated]: syz.0.4449 (pid 23670) Use of int in max_burst socket option.
[  375.789952][T23670] Use struct sctp_assoc_value instead
[  375.987040][T23677] team0: Port device bond40 removed
[  376.044521][T23694] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4454'.
[  376.169071][T23708] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4459'.
[  376.202074][T23708] bond0: entered promiscuous mode
[  376.204184][T23708] bond0: entered allmulticast mode
[  376.206377][T23708] 8021q: adding VLAN 0 to HW filter on device bond0
[  376.213423][T23708] sctp: [Deprecated]: syz.1.4459 (pid 23708) Use of int in max_burst socket option.
[  376.213423][T23708] Use struct sctp_assoc_value instead
[  376.245264][T23713] netlink: 'syz.1.4461': attribute type 11 has an invalid length.
[  377.110641][T23742] mac80211_hwsim hwsim108 syzkaller0: left promiscuous mode
[  377.114477][T23742] mac80211_hwsim hwsim108 syzkaller0: left allmulticast mode
[  377.204302][T23745] IPVS: Scheduler module ip_vs_sip not found
[  377.352975][T23763] validate_nla: 3 callbacks suppressed
[  377.352986][T23763] netlink: 'syz.0.4477': attribute type 1 has an invalid length.
[  377.357074][T23763] netlink: 'syz.0.4477': attribute type 2 has an invalid length.
[  377.375052][T23766] netlink: 'syz.2.4478': attribute type 10 has an invalid length.
[  377.453613][T23773] netlink: 'syz.0.4481': attribute type 13 has an invalid length.
[  377.456055][T23773] netlink: 'syz.0.4481': attribute type 17 has an invalid length.
[  377.458559][T23774] netlink: 'syz.0.4481': attribute type 13 has an invalid length.
[  377.460958][T23774] netlink: 'syz.0.4481': attribute type 17 has an invalid length.
[  377.467658][T23773] netlink: 'syz.0.4481': attribute type 27 has an invalid length.
[  377.470998][T23774] netlink: 'syz.0.4481': attribute type 27 has an invalid length.
[  377.499576][T23773] lo speed is unknown, defaulting to 1000
[  377.532061][T23783] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  377.657977][T23798] pim6reg1: entered promiscuous mode
[  377.659666][T23798] pim6reg1: entered allmulticast mode
[  377.695037][T23773] lo speed is unknown, defaulting to 1000
[  377.702417][T23800] bridge0: port 1(erspan0) entered blocking state
[  377.704542][T23800] bridge0: port 1(erspan0) entered disabled state
[  377.706575][T23800] erspan0: entered allmulticast mode
[  377.709565][T23800] erspan0: left allmulticast mode
[  377.760022][T23803] 8021q: adding VLAN 0 to HW filter on device bond41
[  377.763254][T23803] team0: Port device bond41 added
[  377.965125][T23822] netlink: 'syz.2.4494': attribute type 1 has an invalid length.
[  378.108120][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  378.326744][T23844] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  378.329700][T23844] mac80211_hwsim hwsim108 syzkaller0: entered promiscuous mode
[  378.336048][T23844] mac80211_hwsim hwsim108 syzkaller0: entered allmulticast mode
[  378.707564][T23880] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  378.710655][T23880] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.736056][T23887] __nla_validate_parse: 24 callbacks suppressed
[  378.736067][T23887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4512'.
[  378.795012][T23880] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  378.798131][T23880] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.830743][T23894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4509'.
[  378.846056][T23895] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4513'.
[  378.877796][T23898] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4514'.
[  378.905066][T23880] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  378.908263][T23880] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.946391][T23880] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  378.949488][T23880] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.981087][T23903] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4516'.
[  379.027566][ T5851] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  379.031499][ T5851] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  379.046811][ T5851] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  379.049482][ T5851] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  379.058477][ T5851] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  379.062000][ T5851] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  379.073640][ T5851] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  379.076582][ T5851] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  379.196042][T23926] netlink: 564 bytes leftover after parsing attributes in process `syz.0.4523'.
[  379.217746][T23928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4524'.
[  379.228406][T23928] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4524'.
[  379.243172][T23930] geneve0: entered promiscuous mode
[  379.375205][   T25] block nbd1: Possible stuck request ffff888021400000: control (read@0,1024B). Runtime 240 seconds
[  379.378519][   T25] block nbd1: Possible stuck request ffff888021400200: control (read@1024,1024B). Runtime 240 seconds
[  379.382011][   T25] block nbd1: Possible stuck request ffff888021400400: control (read@2048,1024B). Runtime 240 seconds
[  379.391565][   T25] block nbd1: Possible stuck request ffff888021400600: control (read@3072,1024B). Runtime 240 seconds
[  379.433091][T23942] syzkaller1: entered promiscuous mode
[  379.434852][T23942] syzkaller1: entered allmulticast mode
[  379.507378][T23947] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4531'.
[  379.518345][T23947] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4531'.
[  379.637575][T23954] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  379.646236][T23954] mac80211_hwsim hwsim108 syzkaller0: left promiscuous mode
[  379.648604][T23954] mac80211_hwsim hwsim108 syzkaller0: left allmulticast mode
[  379.687223][T23956] pim6reg1: entered promiscuous mode
[  379.688922][T23956] pim6reg1: entered allmulticast mode
[  380.099399][T23970] 8021q: adding VLAN 0 to HW filter on device bond0
[  380.396588][T23983] mac80211_hwsim hwsim325 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  380.589539][T24011] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  380.856515][T24034] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  380.859493][T24034] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  380.873141][T24034] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  380.915523][T24036] lo speed is unknown, defaulting to 1000
[  381.086839][T24036] lo speed is unknown, defaulting to 1000
[  381.843346][T24106] sock: sock_timestamping_bind_phc: sock not bind to device
[  382.100133][T24140] 8021q: adding VLAN 0 to HW filter on device bond42
[  382.112675][T24140] veth9: entered promiscuous mode
[  382.305189][T24163] 8021q: adding VLAN 0 to HW filter on device bond47
[  382.316882][T24163] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  382.320188][T24163] bond18: (slave macvlan3): Enslaving as a backup interface with a down link
[  382.391551][T24172] openvswitch: netlink: Flow actions attr not present in new flow.
[  382.563132][T24184] 8021q: adding VLAN 0 to HW filter on device bond50
[  382.567444][T24187] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  382.571587][T24187] CPU: 1 UID: 0 PID: 24187 Comm: syz.0.4598 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  382.571601][T24187] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  382.571608][T24187] Call Trace:
[  382.571612][T24187]  <TASK>
[  382.571617][T24187]  dump_stack_lvl+0x189/0x250
[  382.571636][T24187]  ? __pfx_dump_stack_lvl+0x10/0x10
[  382.571646][T24187]  ? __pfx__printk+0x10/0x10
[  382.571662][T24187]  ? kernfs_path_from_node+0x2f/0x290
[  382.571673][T24187]  ? kernfs_path_from_node+0x250/0x290
[  382.571680][T24187]  ? kernfs_path_from_node+0x2f/0x290
[  382.571691][T24187]  sysfs_warn_dup+0x8e/0xa0
[  382.571700][T24187]  sysfs_do_create_link_sd+0xc0/0x110
[  382.571709][T24187]  device_add_class_symlinks+0x1cf/0x240
[  382.571725][T24187]  device_add+0x475/0xb50
[  382.571738][T24187]  wiphy_register+0x1ba6/0x28d0
[  382.571758][T24187]  ? __pfx_wiphy_register+0x10/0x10
[  382.571768][T24187]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  382.571784][T24187]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  382.571800][T24187]  ieee80211_register_hw+0x3425/0x4080
[  382.571823][T24187]  ? ieee80211_register_hw+0x1401/0x4080
[  382.571838][T24187]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  382.571852][T24187]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  382.571866][T24187]  ? __hrtimer_setup+0x187/0x210
[  382.571901][T24187]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  382.571916][T24187]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  382.571940][T24187]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  382.571948][T24187]  ? trace_kmalloc+0x1f/0xd0
[  382.571960][T24187]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  382.571971][T24187]  ? kstrndup+0xbf/0x160
[  382.571985][T24187]  hwsim_new_radio_nl+0xea4/0x1b10
[  382.571996][T24187]  ? __pfx___nla_validate_parse+0x10/0x10
[  382.572014][T24187]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  382.572029][T24187]  ? __nla_parse+0x40/0x60
[  382.572041][T24187]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  382.572054][T24187]  genl_family_rcv_msg_doit+0x215/0x300
[  382.572070][T24187]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  382.572088][T24187]  ? bpf_lsm_capable+0x9/0x20
[  382.572099][T24187]  ? security_capable+0x7e/0x2e0
[  382.572115][T24187]  genl_rcv_msg+0x60e/0x790
[  382.572131][T24187]  ? __pfx_genl_rcv_msg+0x10/0x10
[  382.572142][T24187]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  382.572157][T24187]  netlink_rcv_skb+0x208/0x470
[  382.572166][T24187]  ? __lock_acquire+0xab9/0xd20
[  382.572178][T24187]  ? __pfx_genl_rcv_msg+0x10/0x10
[  382.572190][T24187]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  382.572209][T24187]  ? down_read+0x1ad/0x2e0
[  382.572221][T24187]  genl_rcv+0x28/0x40
[  382.572231][T24187]  netlink_unicast+0x82f/0x9e0
[  382.572244][T24187]  ? __pfx_netlink_unicast+0x10/0x10
[  382.572261][T24187]  ? netlink_sendmsg+0x642/0xb30
[  382.572270][T24187]  ? skb_put+0x11b/0x210
[  382.572285][T24187]  netlink_sendmsg+0x805/0xb30
[  382.572300][T24187]  ? __pfx_netlink_sendmsg+0x10/0x10
[  382.572312][T24187]  ? aa_sock_msg_perm+0xf1/0x1d0
[  382.572326][T24187]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  382.572335][T24187]  ? __pfx_netlink_sendmsg+0x10/0x10
[  382.572347][T24187]  __sock_sendmsg+0x21c/0x270
[  382.572358][T24187]  ____sys_sendmsg+0x505/0x830
[  382.572372][T24187]  ? __pfx_____sys_sendmsg+0x10/0x10
[  382.572388][T24187]  ? import_iovec+0x74/0xa0
[  382.572398][T24187]  ___sys_sendmsg+0x21f/0x2a0
[  382.572410][T24187]  ? __pfx____sys_sendmsg+0x10/0x10
[  382.572439][T24187]  ? __fget_files+0x2a/0x420
[  382.572451][T24187]  ? __fget_files+0x3a0/0x420
[  382.572468][T24187]  __x64_sys_sendmsg+0x19b/0x260
[  382.572480][T24187]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  382.572497][T24187]  ? rcu_is_watching+0x15/0xb0
[  382.572510][T24187]  ? do_syscall_64+0xbe/0x3b0
[  382.572523][T24187]  do_syscall_64+0xfa/0x3b0
[  382.572532][T24187]  ? lockdep_hardirqs_on+0x9c/0x150
[  382.572540][T24187]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  382.572550][T24187]  ? exc_page_fault+0x9f/0xf0
[  382.572561][T24187]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  382.572569][T24187] RIP: 0033:0x7f273238ebe9
[  382.572578][T24187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  382.572586][T24187] RSP: 002b:00007f273314e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  382.572596][T24187] RAX: ffffffffffffffda RBX: 00007f27325b5fa0 RCX: 00007f273238ebe9
[  382.572621][T24187] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000007
[  382.572626][T24187] RBP: 00007f2732411e19 R08: 0000000000000000 R09: 0000000000000000
[  382.572632][T24187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  382.572637][T24187] R13: 00007f27325b6038 R14: 00007f27325b5fa0 R15: 00007ffce9485178
[  382.572653][T24187]  </TASK>
[  382.734410][T24184] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  382.737959][T24184] bond21: (slave macvlan3): Enslaving as a backup interface with a down link
[  382.839254][T24193] validate_nla: 15 callbacks suppressed
[  382.839273][T24193] netlink: 'syz.0.4600': attribute type 1 has an invalid length.
[  382.844889][T24189] IPv6: Can't replace route, no match found
[  382.874882][T24193] bond48: (slave vxcan5): The slave device specified does not support setting the MAC address
[  382.880675][T24193] bond48: (slave vxcan5): Error -95 calling set_mac_address
[  382.883503][T24196] netlink: 'syz.2.4601': attribute type 13 has an invalid length.
[  382.886004][T24196] netlink: 'syz.2.4601': attribute type 17 has an invalid length.
[  382.909441][T24196] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  382.916077][   T24] lo speed is unknown, defaulting to 1000
[  382.917977][   T24] syz0: Port: 1 Link ACTIVE
[  382.919588][   T24] lo speed is unknown, defaulting to 1000
[  383.016170][T24196] lo speed is unknown, defaulting to 1000
[  383.104945][T24207] netlink: 'syz.1.4604': attribute type 11 has an invalid length.
[  383.178594][T24196] lo speed is unknown, defaulting to 1000
[  383.190089][T24207] netlink: 'syz.1.4604': attribute type 11 has an invalid length.
[  383.250441][T24207] netlink: 'syz.1.4604': attribute type 11 has an invalid length.
[  383.320869][T24207] netlink: 'syz.1.4604': attribute type 11 has an invalid length.
[  383.403562][T24207] netlink: 'syz.1.4604': attribute type 11 has an invalid length.
[  383.453470][T24207] netlink: 'syz.1.4604': attribute type 11 has an invalid length.
[  383.502367][T24207] netlink: 'syz.1.4604': attribute type 11 has an invalid length.
[  383.551281][T24207] netlink: 'syz.1.4604': attribute type 11 has an invalid length.
[  383.595680][T24207] netlink: 'syz.1.4604': attribute type 11 has an invalid length.
[  383.642283][T24207] netlink: 'syz.1.4604': attribute type 11 has an invalid length.
[  384.052095][T24225] __nla_validate_parse: 19 callbacks suppressed
[  384.052106][T24225] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4607'.
[  384.056686][T24225] openvswitch: netlink: Flow actions attr not present in new flow.
[  384.074321][T24224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4608'.
[  384.107714][T24228] mac80211_hwsim hwsim361 wlan1: entered allmulticast mode
[  384.148447][T24228] team0: Port device bond41 removed
[  384.165411][T24231] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4610'.
[  384.169095][T24228] netlink: 'syz.1.4609': attribute type 10 has an invalid length.
[  384.172280][T24231] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4610'.
[  384.177273][T24231] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4610'.
[  384.180273][T24231] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check.
[  384.199329][T24231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4610'.
[  384.399118][T24238] 8021q: adding VLAN 0 to HW filter on device bond49
[  384.415342][T24238] bond18: (slave macvlan5): Error -98 calling set_mac_address
[  384.429737][T24241] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4614'.
[  384.486554][T24245] mac80211_hwsim hwsim361 wlan1: left allmulticast mode
[  384.505444][T24246] netlink: 'syz.1.4615': attribute type 10 has an invalid length.
[  384.505455][T24245] netlink: 'syz.1.4615': attribute type 10 has an invalid length.
[  384.646425][T24260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4620'.
[  384.715759][T24267] mac80211_hwsim hwsim355 wlan0: entered promiscuous mode
[  384.773465][T24273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4624'.
[  384.793366][T24273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4624'.
[  384.819263][T24275] 8021q: adding VLAN 0 to HW filter on device bond51
[  384.840137][T24275] bond21: (slave macvlan4): Error -98 calling set_mac_address
[  385.295878][T24311] 8021q: adding VLAN 0 to HW filter on device bond50
[  385.354667][T24311] bond18: (slave macvlan5): Error -98 calling set_mac_address
[  385.446193][T24321] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  385.448315][T24321] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  385.800660][T24346] 8021q: adding VLAN 0 to HW filter on device bond43
[  385.856160][T24346] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  385.868044][T24346] bond7: (slave macvlan0): Enslaving as a backup interface with a down link
[  385.950733][T24359] netlink: 'syz.1.4648': attribute type 10 has an invalid length.
[  386.073213][T24364] IPVS: Scheduler module ip_vs_sip not found
[  386.187425][T24388] 8021q: adding VLAN 0 to HW filter on device bond44
[  386.196431][T24388] bond7: (slave macvlan1): Error -98 calling set_mac_address
[  386.409144][T24406] netlink: 'syz.2.4661': attribute type 10 has an invalid length.
[  386.575847][T24426] 8021q: adding VLAN 0 to HW filter on device bond52
[  386.611135][T24426] bond21: (slave macvlan4): Error -98 calling set_mac_address
[  386.818788][T24446] lo speed is unknown, defaulting to 1000
[  386.872844][T24450] IPv6: Can't replace route, no match found
[  387.017496][T24446] lo speed is unknown, defaulting to 1000
[  387.625913][T24459] tipc: Resetting bearer <eth:macvtap0>
[  387.639267][T24459] tipc: Disabling bearer <eth:macvtap0>
[  387.674003][T24455] netlink: 'syz.1.4674': attribute type 10 has an invalid length.
[  387.737012][T24463] 8021q: adding VLAN 0 to HW filter on device bond53
[  387.756827][T24463] bond21: (slave macvlan4): Error -98 calling set_mac_address
[  387.772176][T24466] mac80211_hwsim hwsim325 wlan1: left allmulticast mode
[  387.786552][T24466] netlink: 'syz.0.4678': attribute type 10 has an invalid length.
[  388.371390][T24502] 8021q: adding VLAN 0 to HW filter on device bond51
[  388.379303][T24506] bond18: (slave macvlan5): Error -98 calling set_mac_address
[  388.586225][T24520] dummy0: entered promiscuous mode
[  388.590108][T24520] dummy0: left promiscuous mode
[  388.797224][T24529] bond18: (slave macvlan3): Releasing backup interface
[  388.803896][T24529] bond0 (unregistering): Released all slaves
[  388.859193][T24530] netlink: 'syz.2.4695': attribute type 10 has an invalid length.
[  388.881647][T24541] rdma_rxe: rxe_newlink: failed to add lo
[  388.974693][T24554] 8021q: adding VLAN 0 to HW filter on device bond0
[  389.116778][T24576] mac80211_hwsim hwsim108 syzkaller0: entered promiscuous mode
[  389.119138][T24576] mac80211_hwsim hwsim108 syzkaller0: entered allmulticast mode
[  389.142205][T24580] 8021q: adding VLAN 0 to HW filter on device bond52
[  389.153232][T24580] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  389.157365][T24580] bond18: (slave macvlan2): Enslaving as a backup interface with a down link
[  389.186797][T24583] __nla_validate_parse: 53 callbacks suppressed
[  389.186807][T24583] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4712'.
[  389.247536][T24593] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4715'.
[  389.316494][T24599] 8021q: adding VLAN 0 to HW filter on device bond54
[  389.326357][T24599] bond21: (slave macvlan4): Error -98 calling set_mac_address
[  389.339014][T24601] bond21: (slave macvlan3): Releasing backup interface
[  389.409302][T24614] 8021q: adding VLAN 0 to HW filter on device bond55
[  389.434954][T24614] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  389.438747][T24614] bond21: (slave macvlan4): Enslaving as a backup interface with a down link
[  389.506687][T24628] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  389.511408][T24628] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.547752][T24628] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  389.552400][T24628] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.561373][T24638] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4728'.
[  389.731145][T24628] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  389.736093][T24628] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.785777][T24646] 8021q: adding VLAN 0 to HW filter on device bond56
[  389.793621][T24628] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  389.798282][T24628] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.808337][T24646] bond21: (slave macvlan6): Error -98 calling set_mac_address
[  389.814139][T24649] netlink: 'syz.1.4730': attribute type 13 has an invalid length.
[  389.862580][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  389.865303][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  389.883748][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  389.886499][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  389.889008][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  389.901319][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  389.908470][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  389.911038][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  390.756964][T24665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4734'.
[  390.850353][T24674] 8021q: adding VLAN 0 to HW filter on device bond57
[  390.863900][T24672] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4738'.
[  390.864490][T24674] bond21: (slave macvlan6): Error -98 calling set_mac_address
[  391.062492][T24692] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4742'.
[  391.077350][T24692] vlan2: entered allmulticast mode
[  391.078897][T24692] mac80211_hwsim hwsim355 wlan0: entered allmulticast mode
[  391.160149][T24700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4745'.
[  391.166706][T24700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4745'.
[  391.169732][T24700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4745'.
[  391.173840][T24700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4745'.
[  391.205928][T24700] lo speed is unknown, defaulting to 1000
[  391.252897][T24710] 8021q: adding VLAN 0 to HW filter on device bond45
[  391.266775][T24710] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  391.286321][T24710] bond7: (slave macvlan1): Enslaving as a backup interface with a down link
[  391.315911][T24715] netlink: 'syz.1.4748': attribute type 1 has an invalid length.
[  391.337286][T24700] lo speed is unknown, defaulting to 1000
[  391.901083][T24744] 8021q: adding VLAN 0 to HW filter on device bond58
[  391.911464][T24744] bond21: (slave macvlan6): Error -98 calling set_mac_address
[  391.918141][T24747] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  392.030443][T24761] netlink: 'syz.2.4759': attribute type 1 has an invalid length.
[  392.070400][T24769] netlink: 'syz.2.4761': attribute type 10 has an invalid length.
[  392.243186][T24782] 8021q: adding VLAN 0 to HW filter on device bond53
[  392.259818][T24782] bond18: (slave macvlan3): Error -98 calling set_mac_address
[  393.698992][T24812] 8021q: adding VLAN 0 to HW filter on device bond54
[  393.710347][T24812] bond18: (slave macvlan3): Error -98 calling set_mac_address
[  393.987954][T24845] 8021q: adding VLAN 0 to HW filter on device bond55
[  393.992297][T24843] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  393.995782][T24843] CPU: 1 UID: 0 PID: 24843 Comm: syz.2.4782 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  393.995794][T24843] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  393.995800][T24843] Call Trace:
[  393.995804][T24843]  <TASK>
[  393.995808][T24843]  dump_stack_lvl+0x189/0x250
[  393.995844][T24843]  ? __pfx_dump_stack_lvl+0x10/0x10
[  393.995854][T24843]  ? __pfx__printk+0x10/0x10
[  393.995868][T24843]  ? kernfs_path_from_node+0x2f/0x290
[  393.995878][T24843]  ? kernfs_path_from_node+0x250/0x290
[  393.995886][T24843]  ? kernfs_path_from_node+0x2f/0x290
[  393.995896][T24843]  sysfs_warn_dup+0x8e/0xa0
[  393.995905][T24843]  sysfs_do_create_link_sd+0xc0/0x110
[  393.995914][T24843]  device_add_class_symlinks+0x1cf/0x240
[  393.995929][T24843]  device_add+0x475/0xb50
[  393.995942][T24843]  wiphy_register+0x1ba6/0x28d0
[  393.995960][T24843]  ? __pfx_wiphy_register+0x10/0x10
[  393.995969][T24843]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  393.995986][T24843]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  393.996000][T24843]  ieee80211_register_hw+0x3425/0x4080
[  393.996021][T24843]  ? ieee80211_register_hw+0x1401/0x4080
[  393.996036][T24843]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  393.996049][T24843]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  393.996062][T24843]  ? __hrtimer_setup+0x187/0x210
[  393.996070][T24843]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  393.996083][T24843]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  393.996105][T24843]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  393.996113][T24843]  ? trace_kmalloc+0x1f/0xd0
[  393.996124][T24843]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  393.996139][T24843]  ? kstrndup+0xbf/0x160
[  393.996153][T24843]  hwsim_new_radio_nl+0xea4/0x1b10
[  393.996163][T24843]  ? __pfx___nla_validate_parse+0x10/0x10
[  393.996181][T24843]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  393.996195][T24843]  ? __nla_parse+0x40/0x60
[  393.996206][T24843]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  393.996219][T24843]  genl_family_rcv_msg_doit+0x215/0x300
[  393.996235][T24843]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  393.996252][T24843]  ? bpf_lsm_capable+0x9/0x20
[  393.996263][T24843]  ? security_capable+0x7e/0x2e0
[  393.996278][T24843]  genl_rcv_msg+0x60e/0x790
[  393.996292][T24843]  ? __pfx_genl_rcv_msg+0x10/0x10
[  393.996303][T24843]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  393.996319][T24843]  netlink_rcv_skb+0x208/0x470
[  393.996327][T24843]  ? __lock_acquire+0xab9/0xd20
[  393.996339][T24843]  ? __pfx_genl_rcv_msg+0x10/0x10
[  393.996351][T24843]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  393.996369][T24843]  ? down_read+0x1ad/0x2e0
[  393.996382][T24843]  genl_rcv+0x28/0x40
[  393.996392][T24843]  netlink_unicast+0x82f/0x9e0
[  393.996405][T24843]  ? __pfx_netlink_unicast+0x10/0x10
[  393.996414][T24843]  ? netlink_sendmsg+0x642/0xb30
[  393.996422][T24843]  ? skb_put+0x11b/0x210
[  393.996434][T24843]  netlink_sendmsg+0x805/0xb30
[  393.996448][T24843]  ? __pfx_netlink_sendmsg+0x10/0x10
[  393.996459][T24843]  ? aa_sock_msg_perm+0xf1/0x1d0
[  393.996472][T24843]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  393.996480][T24843]  ? __pfx_netlink_sendmsg+0x10/0x10
[  393.996490][T24843]  __sock_sendmsg+0x21c/0x270
[  393.996500][T24843]  ____sys_sendmsg+0x505/0x830
[  393.996515][T24843]  ? __pfx_____sys_sendmsg+0x10/0x10
[  393.996530][T24843]  ? import_iovec+0x74/0xa0
[  393.996539][T24843]  ___sys_sendmsg+0x21f/0x2a0
[  393.996551][T24843]  ? __pfx____sys_sendmsg+0x10/0x10
[  393.996579][T24843]  ? __fget_files+0x2a/0x420
[  393.996591][T24843]  ? __fget_files+0x3a0/0x420
[  393.996607][T24843]  __x64_sys_sendmsg+0x19b/0x260
[  393.996619][T24843]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  393.996635][T24843]  ? rcu_is_watching+0x15/0xb0
[  393.996645][T24843]  ? do_syscall_64+0xbe/0x3b0
[  393.996658][T24843]  do_syscall_64+0xfa/0x3b0
[  393.996667][T24843]  ? lockdep_hardirqs_on+0x9c/0x150
[  393.996676][T24843]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.996684][T24843]  ? exc_page_fault+0x9f/0xf0
[  393.996693][T24843]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.996701][T24843] RIP: 0033:0x7f223398ebe9
[  393.996710][T24843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  393.996717][T24843] RSP: 002b:00007f2234753038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  393.996727][T24843] RAX: ffffffffffffffda RBX: 00007f2233bb5fa0 RCX: 00007f223398ebe9
[  393.996732][T24843] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008
[  393.996738][T24843] RBP: 00007f2233a11e19 R08: 0000000000000000 R09: 0000000000000000
[  393.996743][T24843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  393.996747][T24843] R13: 00007f2233bb6038 R14: 00007f2233bb5fa0 R15: 00007fff77f49a18
[  393.996761][T24843]  </TASK>
[  394.007870][T24845] bond18: (slave macvlan3): Error -98 calling set_mac_address
[  394.306231][T24870] __nla_validate_parse: 140 callbacks suppressed
[  394.306244][T24870] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4790'.
[  394.310766][T24872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4792'.
[  394.315388][T24874] netlink: 'syz.0.4791': attribute type 13 has an invalid length.
[  394.459078][  T974] lo speed is unknown, defaulting to 1000
[  394.461321][  T974] syz2: Port: 1 Link DOWN
[  394.480820][T24876] 8021q: adding VLAN 0 to HW filter on device bond47
[  394.492128][T24878] bond7: (slave macvlan2): Error -98 calling set_mac_address
[  394.497928][ T5851] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  394.500852][ T5851] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  394.503660][ T5851] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  394.506189][ T5851] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  394.508869][ T5851] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  394.512095][ T5851] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  394.528682][ T5851] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  394.532698][ T5851] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  394.536965][T24881] netlink: 'syz.0.4794': attribute type 1 has an invalid length.
[  394.547060][T24881] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4794'.
[  394.600050][T24888] bond18: (slave macvlan2): Releasing backup interface
[  394.607699][T24890] netlink: 'syz.2.4798': attribute type 13 has an invalid length.
[  394.610154][T24890] netlink: 'syz.2.4798': attribute type 17 has an invalid length.
[  394.617510][T24890] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  394.659715][T24897] netlink: 324 bytes leftover after parsing attributes in process `syz.2.4800'.
[  394.728723][T24907] 8021q: adding VLAN 0 to HW filter on device bond48
[  394.737664][T24907] bond7: (slave macvlan2): Error -98 calling set_mac_address
[  395.033923][T24920] netlink: 284 bytes leftover after parsing attributes in process `syz.1.4805'.
[  395.613250][T24939] 8021q: adding VLAN 0 to HW filter on device bond56
[  395.616296][T24940] netlink: 'syz.2.4812': attribute type 5 has an invalid length.
[  395.626567][T24939] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  395.630409][T24939] bond18: (slave macvlan3): Enslaving as a backup interface with a down link
[  395.800826][T24952] lo speed is unknown, defaulting to 1000
[  395.925514][T24952] lo speed is unknown, defaulting to 1000
[  396.073988][T24963] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4817'.
[  396.164473][T24969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4819'.
[  396.182671][T24969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4819'.
[  396.235605][T24971] 8021q: adding VLAN 0 to HW filter on device bond49
[  396.257246][T24971] bond7: (slave macvlan2): Error -98 calling set_mac_address
[  396.528206][T24976] bond21: (slave macvlan4): Releasing backup interface
[  396.537003][T24976] bond0 (unregistering): Released all slaves
[  396.663089][   T25] block nbd2: Possible stuck request ffff888021430000: control (read@0,1024B). Runtime 180 seconds
[  396.666221][   T25] block nbd2: Possible stuck request ffff888021430200: control (read@1024,1024B). Runtime 180 seconds
[  396.669351][   T25] block nbd2: Possible stuck request ffff888021430400: control (read@2048,1024B). Runtime 180 seconds
[  396.672897][   T25] block nbd2: Possible stuck request ffff888021430600: control (read@3072,1024B). Runtime 180 seconds
[  396.698377][T25001] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4828'.
[  397.028854][T25017] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4832'.
[  397.274775][T25039] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  397.284071][T25039] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  397.286396][T25039] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  397.882686][T25104] 8021q: adding VLAN 0 to HW filter on device bond57
[  397.895303][T25104] bond18: (slave macvlan5): Error -98 calling set_mac_address
[  398.006573][T25109] mac80211_hwsim hwsim325 wlan1: entered allmulticast mode
[  398.015728][T25109] bond18: (slave macvlan3): Releasing backup interface
[  398.024419][T25109] netlink: 'syz.0.4854': attribute type 10 has an invalid length.
[  398.094767][T25115] netlink: 'syz.0.4856': attribute type 4 has an invalid length.
[  398.263458][T25124] 8021q: adding VLAN 0 to HW filter on device bond58
[  398.273614][T25124] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  398.277053][T25124] bond18: (slave macvlan5): Enslaving as a backup interface with a down link
[  399.282283][T25159] lo speed is unknown, defaulting to 1000
[  399.361520][T25162] mac80211_hwsim hwsim325 wlan1: left allmulticast mode
[  399.386844][T25159] lo speed is unknown, defaulting to 1000
[  399.477624][T25165] __nla_validate_parse: 5 callbacks suppressed
[  399.477637][T25165] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4870'.
[  399.800375][T25176] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4873'.
[  399.805734][T25176] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4873'.
[  399.883322][T25179] bond7: (slave macvlan0): Releasing backup interface
[  399.885375][T25179] bond7: (slave macvlan0): the permanent HWaddr of slave - 7e:1a:70:55:75:a6 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  399.909356][T25179] bond7: (slave macvlan1): Releasing backup interface
[  399.971875][T25183] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4874'.
[  400.028166][T25185] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  400.056578][T25183] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4874'.
[  400.063431][T25183] netlink: 'syz.1.4874': attribute type 1 has an invalid length.
[  400.065840][T25183] netlink: 'syz.1.4874': attribute type 2 has an invalid length.
[  400.068207][T25183] netlink: 'syz.1.4874': attribute type 3 has an invalid length.
[  400.070585][T25183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4874'.
[  400.439736][T25213] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4882'.
[  400.478491][T25215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4883'.
[  400.673153][T25241] 8021q: adding VLAN 0 to HW filter on device bond59
[  400.680914][T25241] bond18: (slave macvlan6): Error -98 calling set_mac_address
[  400.689281][T25245] 8021q: adding VLAN 0 to HW filter on device bond7
[  400.697453][T25245] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  400.700907][T25245] bond7: (slave macvlan2): Enslaving as a backup interface with a down link
[  400.710153][T25245] bond7: (slave macvlan2): Releasing backup interface
[  401.067693][T25289] sctp: [Deprecated]: syz.1.4902 (pid 25289) Use of struct sctp_assoc_value in delayed_ack socket option.
[  401.067693][T25289] Use struct sctp_sack_info instead
[  401.075885][T25289] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4902'.
[  401.267418][T25307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4905'.
[  401.345609][T25313] 8021q: adding VLAN 0 to HW filter on device bond50
[  401.354108][T25315] netlink: 'syz.2.4907': attribute type 16 has an invalid length.
[  401.356510][T25315] netlink: 'syz.2.4907': attribute type 17 has an invalid length.
[  401.422953][  T974] lo speed is unknown, defaulting to 1000
[  401.424821][  T974] syz0: Port: 1 Link DOWN
[  401.431562][T25313] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  401.436424][T25313] bond7: (slave macvlan3): Enslaving as a backup interface with a down link
[  401.439331][ T5906] lo speed is unknown, defaulting to 1000
[  401.518199][T25326] netlink: 'syz.2.4908': attribute type 13 has an invalid length.
[  401.520813][T25326] netlink: 'syz.2.4908': attribute type 17 has an invalid length.
[  401.546020][T25326] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  401.551785][   T24] lo speed is unknown, defaulting to 1000
[  401.555253][   T24] syz0: Port: 1 Link ACTIVE
[  401.556983][   T24] lo speed is unknown, defaulting to 1000
[  401.592234][T25326] lo speed is unknown, defaulting to 1000
[  401.669011][T25334] netlink: 'syz.1.4912': attribute type 9 has an invalid length.
[  401.755007][T25326] lo speed is unknown, defaulting to 1000
[  402.133138][T25357] lo speed is unknown, defaulting to 1000
[  402.226694][T25357] lo speed is unknown, defaulting to 1000
[  402.915344][T25367] mac80211_hwsim hwsim325 wlan1: entered allmulticast mode
[  402.953973][T25367] bond18: (slave macvlan5): Releasing backup interface
[  402.979398][T25367] netlink: 'syz.0.4920': attribute type 10 has an invalid length.
[  402.985775][T25367] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  402.988851][T25367] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  403.149323][T25383] netlink: 'syz.1.4925': attribute type 13 has an invalid length.
[  403.248513][T25383] 8021q: adding VLAN 0 to HW filter on device team0
[  403.257679][T25383] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  403.292622][T25384] lo speed is unknown, defaulting to 1000
[  403.431378][T25384] lo speed is unknown, defaulting to 1000
[  403.465428][T25399] netlink: zone id is out of range
[  403.467276][T25399] netlink: zone id is out of range
[  403.469026][T25399] netlink: zone id is out of range
[  403.470725][T25399] netlink: zone id is out of range
[  403.474500][T25399] netlink: get zone limit has 8 unknown bytes
[  403.788678][T25404] ------------[ cut here ]------------
[  403.790705][T25404] wlan1: Failed check-sdata-in-driver check, flags: 0x1
[  403.795411][T25404] WARNING: CPU: 0 PID: 25404 at net/mac80211/driver-ops.c:366 drv_unassign_vif_chanctx+0x50b/0x7e0
[  403.799152][T25404] Modules linked in:
[  403.800628][T25404] CPU: 0 UID: 0 PID: 25404 Comm: syz.0.4929 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  403.805185][T25404] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  403.808359][T25404] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0
[  403.810320][T25404] Code: 8d 8d b8 09 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 60 13 b0 8c e8 46 74 9c f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 b7 d5 d8 f6 90 0f 0b 90 42 80 7c 3d
[  403.816342][T25404] RSP: 0018:ffffc900082d7910 EFLAGS: 00010246
[  403.818278][T25404] RAX: 6bc03b158bf94800 RBX: 0000000000000000 RCX: ffff88803701b980
[  403.820775][T25404] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[  403.823582][T25404] RBP: ffff8880274f1728 R08: 0000000000000003 R09: 0000000000000004
[  403.826035][T25404] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff8880274f29d0
[  403.828471][T25404] R13: ffff8880274f0d80 R14: 1ffff11004e9e2e5 R15: dffffc0000000000
[  403.830933][T25404] FS:  00007f273314e6c0(0000) GS:ffff8880b8623000(0000) knlGS:0000000000000000
[  403.834085][T25404] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  403.836308][T25404] CR2: 00007f273312cfc8 CR3: 0000000109476000 CR4: 00000000000006f0
[  403.838777][T25404] Call Trace:
[  403.839839][T25404]  <TASK>
[  403.840771][T25404]  ieee80211_assign_link_chanctx+0x1ec/0xd70
[  403.842965][T25404]  __ieee80211_link_release_channel+0x33b/0x4a0
[  403.844896][T25404]  ieee80211_if_change_type+0x14c/0x990
[  403.846624][T25404]  ieee80211_change_iface+0xd5/0x510
[  403.848254][T25404]  cfg80211_change_iface+0x795/0xef0
[  403.849929][T25404]  cfg80211_wext_siwmode+0x1db/0x2b0
[  403.851865][T25404]  ? __pfx_cfg80211_wext_siwmode+0x10/0x10
[  403.853680][T25404]  ? full_name_hash+0x92/0xe0
[  403.855152][T25404]  ? __pfx_cfg80211_wext_siwmode+0x10/0x10
[  403.856962][T25404]  ioctl_standard_call+0xcb/0x1b0
[  403.858530][T25404]  ? __pfx_cfg80211_wext_siwmode+0x10/0x10
[  403.860342][T25404]  wext_ioctl_dispatch+0xee/0x410
[  403.862224][T25404]  ? __pfx_ioctl_standard_call+0x10/0x10
[  403.863987][T25404]  wext_handle_ioctl+0x100/0x1c0
[  403.865525][T25404]  ? __pfx_wext_handle_ioctl+0x10/0x10
[  403.867205][T25404]  ? __lock_acquire+0xab9/0xd20
[  403.868730][T25404]  sock_ioctl+0x15f/0x790
[  403.870078][T25404]  ? __pfx_sock_ioctl+0x10/0x10
[  403.871926][T25404]  ? __fget_files+0x2a/0x420
[  403.873372][T25404]  ? __fget_files+0x3a0/0x420
[  403.874845][T25404]  ? __fget_files+0x2a/0x420
[  403.876513][T25404]  ? bpf_lsm_file_ioctl+0x9/0x20
[  403.878077][T25404]  ? __pfx_sock_ioctl+0x10/0x10
[  403.879596][T25404]  __se_sys_ioctl+0xfc/0x170
[  403.881048][T25404]  do_syscall_64+0xfa/0x3b0
[  403.882792][T25404]  ? lockdep_hardirqs_on+0x9c/0x150
[  403.884488][T25404]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.886362][T25404]  ? exc_page_fault+0x9f/0xf0
[  403.887821][T25404]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.889657][T25404] RIP: 0033:0x7f273238ebe9
[  403.891056][T25404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  403.897214][T25404] RSP: 002b:00007f273314e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  403.899720][T25404] RAX: ffffffffffffffda RBX: 00007f27325b5fa0 RCX: 00007f273238ebe9
[  403.902529][T25404] RDX: 0000200000000000 RSI: 0000000000008b06 RDI: 0000000000000006
[  403.904981][T25404] RBP: 00007f2732411e19 R08: 0000000000000000 R09: 0000000000000000
[  403.907460][T25404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  403.909881][T25404] R13: 00007f27325b6038 R14: 00007f27325b5fa0 R15: 00007ffce9485178
[  403.912697][T25404]  </TASK>
[  403.913678][T25404] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  403.915916][T25404] CPU: 0 UID: 0 PID: 25404 Comm: syz.0.4929 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  403.919728][T25404] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  403.922840][T25404] Call Trace:
[  403.923887][T25404]  <TASK>
[  403.924828][T25404]  dump_stack_lvl+0x99/0x250
[  403.926286][T25404]  ? __asan_memcpy+0x40/0x70
[  403.927740][T25404]  ? __pfx_dump_stack_lvl+0x10/0x10
[  403.929351][T25404]  ? __pfx__printk+0x10/0x10
[  403.930796][T25404]  vpanic+0x281/0x750
[  403.932048][T25404]  ? __pfx__printk+0x10/0x10
[  403.933480][T25404]  ? __pfx_vpanic+0x10/0x10
[  403.934883][T25404]  ? is_bpf_text_address+0x292/0x2b0
[  403.936545][T25404]  panic+0xb9/0xc0
[  403.937717][T25404]  ? __pfx_panic+0x10/0x10
[  403.939121][T25404]  __warn+0x31b/0x4b0
[  403.940387][T25404]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  403.942146][T25404]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  403.943893][T25404]  report_bug+0x2be/0x4f0
[  403.945243][T25404]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  403.946994][T25404]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  403.948746][T25404]  ? drv_unassign_vif_chanctx+0x50d/0x7e0
[  403.950498][T25404]  handle_bug+0x84/0x160
[  403.951837][T25404]  exc_invalid_op+0x1a/0x50
[  403.953268][T25404]  asm_exc_invalid_op+0x1a/0x20
[  403.954780][T25404] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0
[  403.956728][T25404] Code: 8d 8d b8 09 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 60 13 b0 8c e8 46 74 9c f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 b7 d5 d8 f6 90 0f 0b 90 42 80 7c 3d
[  403.962694][T25404] RSP: 0018:ffffc900082d7910 EFLAGS: 00010246
[  403.964567][T25404] RAX: 6bc03b158bf94800 RBX: 0000000000000000 RCX: ffff88803701b980
[  403.967000][T25404] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[  403.969435][T25404] RBP: ffff8880274f1728 R08: 0000000000000003 R09: 0000000000000004
[  403.971880][T25404] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff8880274f29d0
[  403.974321][T25404] R13: ffff8880274f0d80 R14: 1ffff11004e9e2e5 R15: dffffc0000000000
[  403.976767][T25404]  ieee80211_assign_link_chanctx+0x1ec/0xd70
[  403.978615][T25404]  __ieee80211_link_release_channel+0x33b/0x4a0
[  403.980544][T25404]  ieee80211_if_change_type+0x14c/0x990
[  403.982246][T25404]  ieee80211_change_iface+0xd5/0x510
[  403.983884][T25404]  cfg80211_change_iface+0x795/0xef0
[  403.985539][T25404]  cfg80211_wext_siwmode+0x1db/0x2b0
[  403.987165][T25404]  ? __pfx_cfg80211_wext_siwmode+0x10/0x10
[  403.988967][T25404]  ? full_name_hash+0x92/0xe0
[  403.990412][T25404]  ? __pfx_cfg80211_wext_siwmode+0x10/0x10
[  403.992204][T25404]  ioctl_standard_call+0xcb/0x1b0
[  403.993758][T25404]  ? __pfx_cfg80211_wext_siwmode+0x10/0x10
[  403.995573][T25404]  wext_ioctl_dispatch+0xee/0x410
[  403.997139][T25404]  ? __pfx_ioctl_standard_call+0x10/0x10
[  403.999008][T25404]  wext_handle_ioctl+0x100/0x1c0
[  404.000629][T25404]  ? __pfx_wext_handle_ioctl+0x10/0x10
[  404.002299][T25404]  ? __lock_acquire+0xab9/0xd20
[  404.003821][T25404]  sock_ioctl+0x15f/0x790
[  404.005191][T25404]  ? __pfx_sock_ioctl+0x10/0x10
[  404.006706][T25404]  ? __fget_files+0x2a/0x420
[  404.008153][T25404]  ? __fget_files+0x3a0/0x420
[  404.009614][T25404]  ? __fget_files+0x2a/0x420
[  404.011062][T25404]  ? bpf_lsm_file_ioctl+0x9/0x20
[  404.012594][T25404]  ? __pfx_sock_ioctl+0x10/0x10
[  404.014109][T25404]  __se_sys_ioctl+0xfc/0x170
[  404.015539][T25404]  do_syscall_64+0xfa/0x3b0
[  404.016962][T25404]  ? lockdep_hardirqs_on+0x9c/0x150
[  404.018563][T25404]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.020425][T25404]  ? exc_page_fault+0x9f/0xf0
[  404.021877][T25404]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.023700][T25404] RIP: 0033:0x7f273238ebe9
[  404.025098][T25404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  404.030950][T25404] RSP: 002b:00007f273314e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  404.033490][T25404] RAX: ffffffffffffffda RBX: 00007f27325b5fa0 RCX: 00007f273238ebe9
[  404.035910][T25404] RDX: 0000200000000000 RSI: 0000000000008b06 RDI: 0000000000000006
[  404.038312][T25404] RBP: 00007f2732411e19 R08: 0000000000000000 R09: 0000000000000000
[  404.040728][T25404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  404.043157][T25404] R13: 00007f27325b6038 R14: 00007f27325b5fa0 R15: 00007ffce9485178
[  404.045554][T25404]  </TASK>
[  404.047040][T25404] Kernel Offset: disabled
[  404.048370][T25404] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:10:36  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000006d RBX=000000000000006d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900082d70b0
R8 =ffff888107548237 R9 =1ffff11020ea9046 R10=dffffc0000000000 R11=ffffffff854e72a0
R12=dffffc0000000000 R13=ffffffff99af28f3 R14=ffffffff99de74e0 R15=0000000000000000
RIP=ffffffff854e731c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f273314e6c0 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f273312cfc8 CR3=0000000109476000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f250c612e53
XMM06=0000000000000000 00007f250c612e4d XMM07=0000000000000000 00007f250c612e61
XMM08=0000000000000000 00007f250c612ee7 XMM09=0000000000000000 00007f250c612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b44d6b RBX=1ffff11009608341 RCX=ffff888046178000 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc900075477e0 RSP=ffffc90007547660
R8 =ffffffff8fa34237 R9 =1ffffffff1f46846 R10=dffffc0000000000 R11=fffffbfff1f46847
R12=ffff88804b041a08 R13=dffffc0000000000 R14=ffff88813663b1c0 R15=0000000000000000
RIP=ffffffff81b44d6b RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007eff63adf440 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=89564851923a417d d618a1c65ac3da4f
XMM02=0c3230899ab5924c ed4d7949f9136cca XMM03=eb1d177f99902e5d 7ba0fd3a3deeccbf
XMM04=67750f8f1a176e53 fb7fed2acf02336a XMM05=78beceb0ffdce495 6fdea35df116760f
XMM06=4836eb1d177f9990 2e5d7ba0fd3a3dee XMM07=ccbf0c3230899ab5 924ced4d7949f913
XMM08=4e9328951f7d4005 7770f9aae3bdf712 XMM09=0000000000000000 00007f250c612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
