last executing test programs:

1.380682254s ago: executing program 0 (id=1843):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x8b, 0x6e, &(0x7f0000000240)="83481edb834923d812172472d4efe95bd7ea742ee26ea7ec62483514a667a99c997d72e68b03b54b09d62e14d5a41a534d5004c9b36804bed8fcf772c16744f3a923d9245cc684d988bd43cc40d0eb64e9d35b79d4621cea34ab4ef09762ce8a06e86cec8cef2549698ff70cc05fcb0b5965facc0ad48e5ca57a92f4e1acbb2c9777c99ae24a3824d42440", &(0x7f0000000180)=""/110, 0x7, 0x0, 0xd5, 0xbc, &(0x7f0000000300)="022d480e280e42061ffb367c0ce761743fcc0664dd6fa51fb47aadf8ab69c3be243814d799d35fcacac04ca9b819c454dfeed636b1a526d5389d2498e8641162ab6b0f5ac8339f7587d45903129b52fbe2ebdb20ad02507294a3d4f26df2cbc9d7d2717ad8e45e6663539489473fd60afcb8736ddedbf7c9ffd31e01edc48fdb08fd20103e117fabfaaec511a31b18ffd06309027a5838df9e352f0cf8e15afd8454af9e38699a04ed432e8913d6fd22f4bdb8f3ee88ab49e67dc134ed0a20f520b8da934cea2166c56cd7a3fe79df9e930e3dd2c8", &(0x7f0000000500)="adf6423c7bb696e9d970c3a285677731ca8ea8482646ca4835d2a54bbbd5477b4073d22f5b410d1f20254b54801e6dd5609f7ea93127caa50657fe589ac19a06a06622dde8c6f3e282258c0d030a8705d5b6a8231cbad274bc8b1c232f5f678af51b5c4a85e563c7e4c83f5748b877d4037f3d346569712f12d6fa029659d1f8a2e72aef4ed0f25432fc01d599da92139cf4ffe1675d485271eccf629f83df17f41af3f07bf78db274294280a455d9aefe9cbd900eaeb2e3be998415", 0x1}, 0x50)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="780000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad88000000003c0012800b00010067656e65766500002c00028005000a000000000005000a000100000005000a000000000008000b400000000008000100010000000a000200000000000000000008001300", @ANYRES32=r1, @ANYBLOB="08000400e1"], 0x78}}, 0x0)

1.321359208s ago: executing program 0 (id=1844):
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r3, 0x200, 0x70bd24, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x6}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x10000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x20040000)
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}}, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x7fffffff}}}}]}, 0x4c}}, 0x8040)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000000)={0x40, 0x1405, 0x21, 0x70bd25, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x2}}]}, 0x40}}, 0x1004c810)

1.319757524s ago: executing program 2 (id=1846):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'})
unshare(0x6a040000)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8=<r1=>0xffffffffffffffff], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="b9ff03316844268cb89e14f086dd", 0x0, 0xfc, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x50)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000100000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000100)=0x7105, 0x4)
sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000002040)=ANY=[@ANYBLOB="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", @ANYRES64=r1, @ANYRESOCT=r4], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
sendmmsg(r4, &(0x7f0000007fc0), 0x2d, 0x0)
recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40010)
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0xffff, 0x0, 0x0, {0xa, 0x4e22, 0x5, @private1, 0xab}}}, 0x32)
unshare(0x20000400)
r6 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r6, &(0x7f0000000c80)={0xa, 0x0, 0x0, @remote, 0xa872}, 0x1c)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})

1.318279469s ago: executing program 0 (id=1847):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
write(0xffffffffffffffff, &(0x7f0000000040)="2700000014000707030e0000120f0a0011", 0x11)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0)
ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000001300)={{}, {0x7ffd}, 0x48, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)="b1a21d7f674d3a9a6e5c2baa6c186945", 0x10, 0x0, &(0x7f0000000480)={0x2, 0x102, {0x0, 0xc, 0x0, "", 0xf5, "94d6c2fab52202a71021bcb813f56490cd6bca31581daa138a19f55c1b3515b7e5ebe8910249e1193062744b0db22c93cd35f2b0d4bd9e6d26512ae6f39b45505c3dd5c5928b01623808ea53a1c3be10d3895b10d85a1fd861246251408fdcc0f5c97cc68fe8ccb0dff65bb2562676e6bc1d81aea4806aab0f6ab90bcb41a7a0f172096a0395a48c906a001f9bdbc488e29ede664ea457ca5f61554408f7007af96e94c45dd22b630e6a1f45beafa20d171763ae4555b4e3614fe330847202ebfbaeb56f61017f4a0e154dee3f0fa3012210a1c284606094d3f8497e73df5dee436da7bc16b6ebd35b251be99e8f92bcf921859be7"}, 0x59, "efe2e2182716e2188a893fc1e1b054d6692e39bb17f56b5e62d37c9abbe78f21aa70595a86ea384d30f355c1148e2ce3d04a2cd74bc47da1c814046d65e01875723c710b4c46ef198b9dd142cfa1f08339069c197e963f9612"}, 0x167})
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x2, @multicast1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="a0005bf8", 0x4}, {&(0x7f00000001c0)="3969ac0b", 0x4}], 0x2, 0x0, 0x0, 0x900}, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r3, 0x0, 0x0, 0x0)
getsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000f80), &(0x7f0000000fc0)=0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
close(r4)
r5 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x4}, 0x20)
setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @rand_addr=' \x01\x00'}, 0x1c)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r6)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000cc0)={'wlan0\x00'})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x14, r8, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20004054)

501.557899ms ago: executing program 1 (id=1853):
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r3, 0x200, 0x70bd24, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x6}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x10000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x20040000)
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}}, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x7fffffff}}}}]}, 0x4c}}, 0x8040)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000000)={0x40, 0x1405, 0x21, 0x70bd25, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x2}}]}, 0x40}}, 0x1004c810)

499.190374ms ago: executing program 1 (id=1854):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6)
write(r2, &(0x7f0000000000)="2e000300010000", 0x7)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101})
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0)
r3 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000016c0), 0x4)
bind$rxrpc(r3, &(0x7f0000001380)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x7, @empty, 0x4}}, 0x24)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockname$packet(r6, &(0x7f0000001200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendto$inet6(r5, &(0x7f0000000280), 0x0, 0x800, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0xb4}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="a200000006000000045000000700010001000000c3987966fc9796f32860f06f515700b0a37a19e26664e3225ad210b91cd94c3d19b02a35888a04970dbd5415792d24319695ef0fdac3b2cf01a7e94d49eaf6f3e1207da1287c70b1128a85398643c5c5c00b99dd60dae0dffa004b9b90744c477c92252681d3fe903373468699b54a17ef4938aba8a5ebc686ab332819d21d626101500325676b00ac9f4d47b256b337a08ef933effc69a1eb3de6ab6e68a9c79aeda24536e67153fd328128da6d53b10b4ee7c28ffb623ddfd6eb39f0991b94c99dcfefe77397fbe7434e03a455fb546c8395b66514e9e025a9a510cf359495a4797b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000d00008500000001000000850000002a00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r10}, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000002000010300100000fbdbdf2502200000000000000000000008000b000300000008000b00000000020a26e50fe7e87928ef49fc695f74d7e0262a8e46f37eec7b6a8cca866836f2683c44a8e6c21103ba3ead26ac51761984ddefd46da0655af84592"], 0x2c}}, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE(r8, 0x50009401, &(0x7f0000000200)={{r8}, "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"})
ioctl$sock_SIOCGIFCONF(r8, 0x8912, &(0x7f00000000c0)=@buf={0x66, &(0x7f0000000040)="eea4eb9abc0d932730d36d22e8fb8c9f2a3883897a6a99a27315df86c1d9637d970c8e70b0af20a7d0982aa6a908194ab877b678410684c1ed6dab266bc0b6de79f4f05a022ca0d92e9cf1b3278d2140a01c9918e961d222b406f5a94e370aceb9ae28422037"})

397.486439ms ago: executing program 0 (id=1855):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r3, &(0x7f0000000040), 0x8)
r4 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xf}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0)

396.86785ms ago: executing program 2 (id=1856):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r1, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}]}, 0x74}, 0x1, 0x0, 0x0, 0x44880}, 0x800)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, <r2=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, <r3=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000440)=0x14)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r6=>0x0, 0xf1, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xe3, 0x8, 0x8, &(0x7f0000000680)}}, 0x10)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_tracing={0x1a, 0x15, &(0x7f0000000800)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, @call={0x85, 0x0, 0x0, 0x43}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xa0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x7}, @ldst={0x993b6a3b0e89284, 0x0, 0xd, 0x5, 0xb, 0x0, 0xfffffffffffffffc}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8001}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}], &(0x7f00000008c0)='GPL\x00', 0x6, 0x88, &(0x7f0000000900)=""/136, 0x41000, 0x8, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000a00)={0x3, 0xd, 0xe, 0x7}, 0x10, 0x28cd0, 0xffffffffffffffff, 0x7, &(0x7f0000000a40)=[0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000a80)=[{0x4, 0x3, 0x8, 0x8}, {0x0, 0x3, 0x4}, {0x2, 0x4, 0x3, 0x6}, {0x1, 0x1, 0x2, 0x6}, {0x1, 0x3, 0x1, 0x9}, {0x4, 0x3, 0xb, 0x6}, {0x3, 0x3, 0x2, 0xb}], 0x10, 0xfffffffb}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{0x1, <r8=>0xffffffffffffffff}, &(0x7f0000000bc0), &(0x7f0000000c00)}, 0x20)
r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c80)={0x0, 0x6, 0x10}, 0xc)
r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000cc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000dc0)={{0xffffffffffffffff, <r11=>0xffffffffffffffff}, &(0x7f0000000d40), &(0x7f0000000d80)}, 0x20)
r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4}, 0x50)
r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000e80)={0xffffffffffffffff, 0x9, 0x10}, 0xc)
r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000f00)=@o_path={&(0x7f0000000ec0)='./file0\x00', 0x0, 0x8, r0}, 0x18)
r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x15, 0x14, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1d1}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xed}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x7, 0x1, 0x4, 0x0, 0x4, 0x8, 0xfffffffffffffff0}, @map_fd={0x18, 0x9}]}, &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x1, '\x00', r4, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x6, 0x200, 0x6}, 0x10, r6, r7, 0x0, &(0x7f0000000fc0)=[r8, r9, 0xffffffffffffffff, r10, r11, r12, r13, r14, r15], 0x0, 0x10, 0xa}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000010c0)={'macvtap0\x00', 0x801})
r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), r0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000001540)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001500)={&(0x7f0000001180)={0x37c, r16, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x190, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5c}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xff0e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x401}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x42}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc7}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7ff}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb6}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x6}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000000000000001}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x78}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x68}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2d}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcd}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1a}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x128, 0x11d, 0x0, 0x1, [{0xd4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x78, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x5, 0x2, 0xffff, 0x3, 0x6, 0xf, 0x9bb]}}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x3}, {0x7, 0x1}, {0x2, 0x3}, {0x4}, {0x6, 0xa}, {0x5, 0xa}, {0x0, 0x2}, {0x1, 0x8}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x9}, {0x0, 0x1}, {0x1, 0x7}, {0x2, 0x5}, {0x1, 0x3}, {0x0, 0x8}, {0x1, 0x5}, {0x7, 0x1}, {}, {0x7, 0xa}, {0x4}, {0x5, 0x2}, {0x4, 0x3}, {0x0, 0x4}, {0x2, 0x5}, {0x0, 0x3}, {0x1, 0x3}, {0x0, 0x2}, {0x7}, {0x0, 0xa}, {0x2, 0x3}, {0x0, 0x2}, {0x0, 0x1}, {0x1, 0xa}, {0x7, 0x8}, {0x4, 0x9}, {}, {0x6, 0x5}, {0x3}, {0x2, 0x3}, {0x7, 0x6}, {0x1, 0x6}, {0x1, 0x1}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x30, 0x4c, 0x3e, 0xd, 0x12, 0xc, 0x6, 0x12, 0x16, 0x2, 0xb, 0x6c, 0x1b, 0x18, 0xb, 0x48]}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x7, 0x8}, {0x3, 0x2}, {0x1, 0x8}, {0x3, 0x1d}, {0x0, 0x2}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x8}, {0x4, 0x4}, {0x5, 0x1}, {0x7, 0x6}, {0x5, 0x3}, {0x0, 0x4}, {0x4, 0xa}, {0x5, 0x8}, {0x3, 0x8}, {0x0, 0x8}]}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8000}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8b}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5d}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xdd}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fff}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5e}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xec}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x68, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x19}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xde}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9e}]}]}, @NL80211_ATTR_TID_CONFIG={0x40, 0x11d, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x42}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xda}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}]}]}]}, 0x37c}, 0x1, 0x0, 0x0, 0x8044011}, 0x10)
socket$inet(0x2, 0x4, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002600)={r11, &(0x7f0000001580)="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", &(0x7f0000002580)=""/125}, 0x20)
r17 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002680), r9)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f00000027c0)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002780)={&(0x7f00000026c0)={0x94, r17, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x7}]}, 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x20008000)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000002800)={'macvlan1\x00', 0x1000})
gettid()
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002880)={'wlan0\x00', <r18=>0x0})
sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000002940)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002900)={&(0x7f00000028c0)={0x30, r16, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r18}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x6, 0xfffffffe}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000004}, 0x8001)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002a00)={'syztnl0\x00', &(0x7f0000002980)={'syztnl0\x00', r5, 0x0, 0x7, 0xb7, 0x7, 0x8, @mcast1, @loopback, 0x20, 0x1, 0x4, 0x2bf7a8a2}})

314.222515ms ago: executing program 0 (id=1857):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x80, 0x3, 0x7, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xb78e}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xf}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000008000001c0012800b00010067656e65766500000c00028008000f"], 0x3c}}, 0x0)

313.620954ms ago: executing program 1 (id=1858):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x10, 0x8, 0x3, 0xe, 0x0, 0x70bd2d, 0x25dfdbfe, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x6e6bbf, 0x175, {0x6, 0x6c, 0xc0, 0x98, 0x0, 0x3f8c, 0x0, @in=@broadcast, @in=@rand_addr=0x64010100}}, @sadb_sa={0x2, 0x1, 0x4d5, 0x61, 0x69, 0xab, 0x0, 0xc0000001}, @sadb_x_sa2={0x2, 0x13, 0x24, 0x0, 0x0, 0x70bd29}]}, 0x70}}, 0x8001)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x54, r1, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_FLAGS={0x18, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}]}]}, 0x54}, 0x1, 0x0, 0x10000000000, 0x200000d0}, 0x8050)

259.999511ms ago: executing program 0 (id=1859):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x3, 0xff, 0x9, 0x4}, 0xc)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
recvmmsg(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010700, 0x0)
listen(r0, 0xffffffff)
accept4(r0, &(0x7f0000000080)=@nl=@unspec, &(0x7f0000000140)=0x80, 0x80000)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x300, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0xe, 0x4, 0x388, 0xffffffff, 0x0, 0x118, 0x118, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, &(0x7f0000000300), {[{{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0xb7, 0x4, 0x1, [0x547, 0x2, 0xfff, 0xb633, 0x20, 0x3ff, 0x82, 0x5, 0x3, 0x1, 0x3, 0x1, 0x7, 0xfffc, 0x1, 0x1], 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xffffff00, 0xff, 0xff], [0x2d7461df598af968, 0x0, 0xffffff00, 0xffffffff], 'dvmrp0\x00', 'bridge0\x00', {}, {}, 0xc, 0x2, 0x6, 0x50}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xff, 0xffffff00, 0xff], [0xffffff00, 0xffffffff, 0xff, 0xff000000], 'ip6gretap0\x00', 'sit0\x00', {}, {0xff}, 0x1, 0x1, 0xc, 0x28}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10)
listen(r6, 0x100)
sendmsg$inet_sctp(r6, &(0x7f0000001640)={&(0x7f0000000000)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f00000015c0)=ANY=[@ANYBLOB="18"], 0x18, 0x8000}, 0x20000000)
ioctl$sock_rose_SIOCRSCLRRT(r6, 0x89e4)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r7, 0xe00, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x8}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x8000)
setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x7, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r8, &(0x7f0000001740), 0x0, 0x0)
shutdown(r8, 0x1)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000280)='westwood\x00', 0x9)

259.690447ms ago: executing program 1 (id=1860):
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r3, 0x200, 0x70bd24, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x6}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x10000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x20040000)
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}}, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x7fffffff}}}}]}, 0x4c}}, 0x8040)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000000)={0x40, 0x1405, 0x21, 0x70bd25, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x2}}]}, 0x40}}, 0x1004c810)

201.580569ms ago: executing program 2 (id=1861):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x20, 0x2, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x4}, @CTA_FILTER={0x4}, @CTA_TUPLE_REPLY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000078000000090a010400000000000000000100fffd08000a40000000000900020073797a31000000000900010073797a300000000008000540000000253c0011800a0001006c696d69740000002c0002800c000240000000000000000308000440000000010c000140fffffffffffff7ff080003"], 0xc0}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r3, 0x2)
r4 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, 0x7, 0x6, 0xb01, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0xc080}, 0x0)

140.281731ms ago: executing program 2 (id=1862):
socket(0x28, 0x5, 0x0)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000006080)={0x28, 0x14, 0x211, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0xfa, "4ac2411e47060aefadfa617ab9"}]}, 0x28}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48)

139.849631ms ago: executing program 1 (id=1863):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async, rerun: 64)
r0 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64)
r1 = socket$pppoe(0x18, 0x1, 0x0)
accept4(r1, 0x0, 0x0, 0x0) (async, rerun: 64)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000040)=@ethtool_cmd={0x9, 0x0, 0x0, 0x0, 0x0, 0x80, 0xfe, 0x0, 0x87, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x80000045, [0x2, 0x7]}}) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r4=>0x0}) (async, rerun: 64)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
r6 = socket(0x10, 0x80002, 0x0) (async)
r7 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r7, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) (async)
close(r7)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004200)=ANY=[@ANYBLOB="ac0c0000", @ANYRES16=r9, @ANYBLOB="050027bd7000bddbdf25010000001400020077673000000000000000000000000000840c088050000080200004000a004e2200000000000000000000000000000000000000010500000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b060005"], 0xcac}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x40) (async, rerun: 64)
sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000580)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x48}}, 0x0) (async, rerun: 64)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000000206010000000000000000000100000214000780080012400000000505001500060000000500010006000000050005000a00000005000400000000000900020073797a300000000016000300686173683a6e6574"], 0x64}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x10, 0x1405, 0x200, 0x70bd25, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x20004040}, 0x24000044) (async)
sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010002000000800000001200000008000300", @ANYRES32=r4, @ANYBLOB="0a00060008021100000100000c004300"], 0x3c}, 0x1, 0x0, 0x0, 0x4000840}, 0x0)

61.380277ms ago: executing program 1 (id=1864):
syz_emit_ethernet(0x11e4, &(0x7f00000022c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x11ae, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x15}, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x6, '\x00', @loopback, [{0x18, 0x200, "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"}, {0x22, 0x1b, "59707a2be5e023ae9360a06ed0a90b79cb2e87f1179ed1f0e79ca9f7b38e92c5a005929090cea668cfdd747eefcfb8caf8403210258c64af94c587ecb6617867eefdcea171f5d07fe5295edf469479e35719d350b679a7d5a39f5c95d43ca3fd74612010445f16a9b4bd129bd2a28493e82f5d4accabfb0cb7c0cf7a5ab126a382dbed00603058bac938982dd4f4f4d96e3309847870332934b4667e9e4da2b11473f73d5dec179f8231be92428a4882d90423ea907611aa0fed0cf67a8ae4ba3a7c1347d4846b5d5fba69c53ec66fe6331edc630c07d76129bff5"}, {0xbc0deddf4c308b19, 0x1, "60a52fb16b32"}, {0x3, 0x15, "f80dfc2d452d125e7bbc3139faae36c1c9e939968b5a33ee0bedc1696ed9d8c3a3fc8f8111bc839c54cc30374026327c9b2d64e13cd765d3183c89125c830730bd994434f78c857ab95e9e457a02fdcb934c880f5a7198420eb156a798254e65219a5c0bd166900196723b8c26d86ad3fbbbcee413c08f36cb6a0fe010e40e8625f5a788f316b611d68fdab49fc37e4d653f2035ca97a72fec084db2e11c846b06c569411b68daf079c62f160e"}]}}}}}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) (async)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r3, 0x400454cd, 0x339) (async)
ioctl$TUNSETLINK(r3, 0x400454cd, 0x339)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast})
close(r3) (async)
close(r3)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x34, r2, 0x1, 0x3, 0x0, {{0xa}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48881}, 0x40) (async)
sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x34, r2, 0x1, 0x3, 0x0, {{0xa}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48881}, 0x40)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000840)={'team0\x00', <r6=>0x0})
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x642000, 0x0)
r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000340), r1)
sendmsg$FOU_CMD_DEL(r1, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="040025bd7000fbdbdf250200000008000b00", @ANYRES32=r6, @ANYBLOB="daf5bc55"], 0x20}, 0x1, 0x0, 0x0, 0x40090}, 0x4010) (async)
sendmsg$FOU_CMD_DEL(r1, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="040025bd7000fbdbdf250200000008000b00", @ANYRES32=r6, @ANYBLOB="daf5bc55"], 0x20}, 0x1, 0x0, 0x0, 0x40090}, 0x4010)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xca02})
close(r7)
socket$netlink(0x10, 0x3, 0x0)
preadv(r8, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x3}], 0x3e8, 0x0, 0x0)
r10 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000091405002cbd7000fbdbdf2508000100050000000800010001000000080001000100000008000100000100"], 0x50}, 0x1, 0x0, 0x0, 0x440008c0}, 0x4804)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9}, 0x48) (async)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="00000000000000002702000014000000b703000000000000850000009c000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000280)='GPL\x00'}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="00000000000000002702000014000000b703000000000000850000009c000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000280)='GPL\x00'}, 0x94)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880), 0x4) (async)
r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000000020000ff0f00000800000000860000", @ANYRES32=r11, @ANYBLOB="ae4d00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000050000000300"/20, @ANYRES32=r12, @ANYBLOB="2b05604472201bb53a89ea9b2b9fa97a8eadbf7c323c1c82da07"], 0x50)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=ANY=[@ANYBLOB="4400000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000b401001c00128009000100626f6e64000000000c000280050001000600000008000a00", @ANYRES32=r6], 0x44}}, 0x0)

422.858µs ago: executing program 2 (id=1865):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70600000000006"], 0x20}}, 0x84)

0s ago: executing program 2 (id=1866):
r0 = socket(0x1e, 0x805, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x0, 0x111, 0x4b4, 0x178, 0x700, 0x2c0, 0x278, 0x278, 0x2c0, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [], [], 'vlan0\x00', 'team_slave_0\x00', {}, {}, 0x88}, 0x0, 0x110, 0x178, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'syzkaller1\x00', 'pim6reg1\x00', 0x31, 0x3, 0x8576, 0xffffffff, 0x6, 0x9, {0x40}, {0x9}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, [], [], 'geneve1\x00', 'erspan0\x00', {}, {0xe3b7d5bccbf95351}}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0xa56, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10, 0x44802}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x84}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x404c840)
sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'})

kernel console output (not intermixed with test programs):

][ T6219]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  179.833816][ T6219]  netlink_rcv_skb+0x208/0x470
[  179.833831][ T6219]  ? __pfx_genl_rcv_msg+0x10/0x10
[  179.833840][ T6219]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  179.833861][ T6219]  ? down_read+0x1ad/0x2e0
[  179.833874][ T6219]  genl_rcv+0x28/0x40
[  179.833882][ T6219]  netlink_unicast+0x75c/0x8e0
[  179.833898][ T6219]  netlink_sendmsg+0x805/0xb30
[  179.833914][ T6219]  ? __pfx_netlink_sendmsg+0x10/0x10
[  179.833927][ T6219]  ? aa_sock_msg_perm+0x94/0x160
[  179.833937][ T6219]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  179.833946][ T6219]  ? __pfx_netlink_sendmsg+0x10/0x10
[  179.833958][ T6219]  __sock_sendmsg+0x21c/0x270
[  179.833970][ T6219]  ____sys_sendmsg+0x505/0x830
[  179.833985][ T6219]  ? __pfx_____sys_sendmsg+0x10/0x10
[  179.834002][ T6219]  ? import_iovec+0x74/0xa0
[  179.834016][ T6219]  ___sys_sendmsg+0x21f/0x2a0
[  179.834029][ T6219]  ? __pfx____sys_sendmsg+0x10/0x10
[  179.834060][ T6219]  ? __fget_files+0x2a/0x420
[  179.834067][ T6219]  ? __fget_files+0x3a0/0x420
[  179.834080][ T6219]  __x64_sys_sendmsg+0x19b/0x260
[  179.834094][ T6219]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  179.834111][ T6219]  ? rcu_is_watching+0x15/0xb0
[  179.834124][ T6219]  ? do_syscall_64+0xbe/0x3b0
[  179.834136][ T6219]  do_syscall_64+0xfa/0x3b0
[  179.834144][ T6219]  ? lockdep_hardirqs_on+0x9c/0x150
[  179.834152][ T6219]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.834161][ T6219]  ? exc_page_fault+0x9f/0xf0
[  179.834170][ T6219]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.834178][ T6219] RIP: 0033:0x7f048458e929
[  179.834187][ T6219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  179.834202][ T6219] RSP: 002b:00007f04853b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  179.834213][ T6219] RAX: ffffffffffffffda RBX: 00007f04847b5fa0 RCX: 00007f048458e929
[  179.834219][ T6219] RDX: 000000000e000000 RSI: 0000200000000040 RDI: 0000000000000004
[  179.834226][ T6219] RBP: 00007f0484610ca1 R08: 0000000000000000 R09: 0000000000000000
[  179.834232][ T6219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  179.834237][ T6219] R13: 0000000000000000 R14: 00007f04847b5fa0 R15: 00007fff232e77b8
[  179.834252][ T6219]  </TASK>
[  180.046493][ T6224] netlink: 'syz.1.99': attribute type 4 has an invalid length.
[  180.057223][ T6221] netlink: 'syz.2.100': attribute type 2 has an invalid length.
[  180.242544][ T6240] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  180.245079][ T6240] CPU: 0 UID: 0 PID: 6240 Comm: syz.2.107 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  180.245093][ T6240] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  180.245098][ T6240] Call Trace:
[  180.245102][ T6240]  <TASK>
[  180.245107][ T6240]  dump_stack_lvl+0x189/0x250
[  180.245125][ T6240]  ? __pfx_dump_stack_lvl+0x10/0x10
[  180.245137][ T6240]  ? __pfx__printk+0x10/0x10
[  180.245149][ T6240]  ? kernfs_path_from_node+0x2c/0x260
[  180.245159][ T6240]  ? kernfs_path_from_node+0x2c/0x260
[  180.245168][ T6240]  ? kernfs_path_from_node+0x2c/0x260
[  180.245177][ T6240]  ? kernfs_path_from_node+0x22c/0x260
[  180.245184][ T6240]  ? kernfs_path_from_node+0x2c/0x260
[  180.245193][ T6240]  sysfs_warn_dup+0x8e/0xa0
[  180.245206][ T6240]  sysfs_do_create_link_sd+0xc0/0x110
[  180.245215][ T6240]  device_add_class_symlinks+0x1cf/0x240
[  180.245229][ T6240]  device_add+0x475/0xb50
[  180.245243][ T6240]  wiphy_register+0x199a/0x26b0
[  180.245263][ T6240]  ? __pfx_wiphy_register+0x10/0x10
[  180.245272][ T6240]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  180.245287][ T6240]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  180.245302][ T6240]  ieee80211_register_hw+0x33e1/0x4120
[  180.245324][ T6240]  ? ieee80211_register_hw+0x14c1/0x4120
[  180.245339][ T6240]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  180.245353][ T6240]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  180.245371][ T6240]  ? __hrtimer_setup+0x187/0x210
[  180.245381][ T6240]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  180.245395][ T6240]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  180.245421][ T6240]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  180.245433][ T6240]  ? trace_kmalloc+0x1f/0xd0
[  180.245444][ T6240]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  180.245457][ T6240]  ? kstrndup+0xbf/0x160
[  180.245471][ T6240]  hwsim_new_radio_nl+0xea4/0x1b10
[  180.245483][ T6240]  ? __pfx___nla_validate_parse+0x10/0x10
[  180.245501][ T6240]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  180.245514][ T6240]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  180.245527][ T6240]  ? __nla_parse+0x40/0x60
[  180.245538][ T6240]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  180.245551][ T6240]  genl_family_rcv_msg_doit+0x215/0x300
[  180.245563][ T6240]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  180.245578][ T6240]  ? bpf_lsm_capable+0x9/0x20
[  180.245589][ T6240]  ? security_capable+0x7e/0x2e0
[  180.245601][ T6240]  genl_rcv_msg+0x60e/0x790
[  180.245612][ T6240]  ? __pfx_genl_rcv_msg+0x10/0x10
[  180.245620][ T6240]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  180.245639][ T6240]  netlink_rcv_skb+0x208/0x470
[  180.245651][ T6240]  ? __pfx_genl_rcv_msg+0x10/0x10
[  180.245659][ T6240]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  180.245679][ T6240]  ? down_read+0x1ad/0x2e0
[  180.245690][ T6240]  genl_rcv+0x28/0x40
[  180.245697][ T6240]  netlink_unicast+0x75c/0x8e0
[  180.245713][ T6240]  netlink_sendmsg+0x805/0xb30
[  180.245729][ T6240]  ? __pfx_netlink_sendmsg+0x10/0x10
[  180.245784][ T6240]  ? aa_sock_msg_perm+0x94/0x160
[  180.245797][ T6240]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  180.245808][ T6240]  ? __pfx_netlink_sendmsg+0x10/0x10
[  180.245820][ T6240]  __sock_sendmsg+0x21c/0x270
[  180.245834][ T6240]  ____sys_sendmsg+0x505/0x830
[  180.245852][ T6240]  ? __pfx_____sys_sendmsg+0x10/0x10
[  180.245869][ T6240]  ? import_iovec+0x74/0xa0
[  180.245882][ T6240]  ___sys_sendmsg+0x21f/0x2a0
[  180.245895][ T6240]  ? __pfx____sys_sendmsg+0x10/0x10
[  180.245925][ T6240]  ? __fget_files+0x2a/0x420
[  180.245933][ T6240]  ? __fget_files+0x3a0/0x420
[  180.245945][ T6240]  __x64_sys_sendmsg+0x19b/0x260
[  180.245958][ T6240]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  180.245994][ T6240]  ? rcu_is_watching+0x15/0xb0
[  180.246008][ T6240]  ? do_syscall_64+0xbe/0x3b0
[  180.246021][ T6240]  do_syscall_64+0xfa/0x3b0
[  180.246030][ T6240]  ? lockdep_hardirqs_on+0x9c/0x150
[  180.246038][ T6240]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.246047][ T6240]  ? exc_page_fault+0x9f/0xf0
[  180.246060][ T6240]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.246070][ T6240] RIP: 0033:0x7f048458e929
[  180.246079][ T6240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  180.246088][ T6240] RSP: 002b:00007f04853b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  180.246098][ T6240] RAX: ffffffffffffffda RBX: 00007f04847b5fa0 RCX: 00007f048458e929
[  180.246104][ T6240] RDX: 0000000010000000 RSI: 0000200000000040 RDI: 0000000000000004
[  180.246111][ T6240] RBP: 00007f0484610ca1 R08: 0000000000000000 R09: 0000000000000000
[  180.246117][ T6240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  180.246122][ T6240] R13: 0000000000000000 R14: 00007f04847b5fa0 R15: 00007fff232e77b8
[  180.246139][ T6240]  </TASK>
[  180.549989][ T6250] tipc: Started in network mode
[  180.551497][ T6250] tipc: Node identity 4eedceff6d91, cluster identity 4711
[  180.564208][ T6250] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  180.569358][ T6250] syzkaller0: entered promiscuous mode
[  180.571060][ T6250] syzkaller0: entered allmulticast mode
[  180.613680][ T6242] tipc: Resetting bearer <eth:syzkaller0>
[  180.621861][ T6252] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  180.624540][ T6252] syzkaller0: entered promiscuous mode
[  180.626330][ T6252] syzkaller0: entered allmulticast mode
[  180.638634][ T6252] tipc: Resetting bearer <eth:syzkaller0>
[  180.643128][ T6251] tipc: Resetting bearer <eth:syzkaller0>
[  180.656721][ T6251] tipc: Disabling bearer <eth:syzkaller0>
[  180.994208][ T6258] syzkaller0: entered promiscuous mode
[  180.996399][ T6258] syzkaller0: entered allmulticast mode
[  181.137751][ T6258] __nla_validate_parse: 13 callbacks suppressed
[  181.137766][ T6258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.115'.
[  181.266820][ T6241] tipc: Resetting bearer <eth:syzkaller0>
[  181.292406][ T6241] tipc: Disabling bearer <eth:syzkaller0>
[  181.410560][ T5851] Bluetooth: hci2: command tx timeout
[  181.489188][ T5851] Bluetooth: hci0: command tx timeout
[  181.490924][ T5851] Bluetooth: hci1: command tx timeout
[  181.944160][ T6262] team0: No ports can be present during mode change
[  182.012390][ T6266] netlink: 124 bytes leftover after parsing attributes in process `syz.2.118'.
[  182.208860][ T6198] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 39029 - 0
[  182.215396][ T6198] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  182.227485][ T6281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.125'.
[  182.230990][ T6198] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 39029 - 0
[  182.233592][ T6198] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  182.245063][ T6198] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 39029 - 0
[  182.247917][ T6198] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  182.259975][ T6198] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 39029 - 0
[  182.262682][ T6198] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  182.265738][ T6279] netlink: 16 bytes leftover after parsing attributes in process `syz.2.124'.
[  182.271368][ T6279] netlink: 16 bytes leftover after parsing attributes in process `syz.2.124'.
[  182.372944][ T6292] bridge0: entered promiscuous mode
[  182.385236][ T6288] bridge_slave_0: left allmulticast mode
[  182.387079][ T6288] bridge_slave_0: left promiscuous mode
[  182.389872][ T6288] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.421417][ T6288] bridge_slave_1: left allmulticast mode
[  182.423199][ T6288] bridge_slave_1: left promiscuous mode
[  182.425031][ T6288] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.433465][ T6288] bond0: (slave bond_slave_0): Releasing backup interface
[  182.442503][ T6288] bond0: (slave bond_slave_1): Releasing backup interface
[  182.456339][ T6288] team0: Port device team_slave_0 removed
[  182.464568][ T6288] team0: Port device team_slave_1 removed
[  182.467125][ T6288] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  182.470268][ T6288] batman_adv: batadv0: Removing interface: batadv_slave_0
[  182.475063][ T6288] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  182.477478][ T6288] batman_adv: batadv0: Removing interface: batadv_slave_1
[  182.574009][ T6306] ip6erspan0: entered allmulticast mode
[  182.621962][ T6317] netlink: 32 bytes leftover after parsing attributes in process `syz.1.137'.
[  182.625009][ T6317] netlink: 32 bytes leftover after parsing attributes in process `syz.1.137'.
[  182.643743][ T6318] netlink: 16 bytes leftover after parsing attributes in process `syz.0.136'.
[  182.651075][ T6318] netlink: 16 bytes leftover after parsing attributes in process `syz.0.136'.
[  182.677538][ T6321] team0: No ports can be present during mode change
[  182.688579][ T6323] netlink: 'syz.2.138': attribute type 12 has an invalid length.
[  182.693458][ T6323] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.138'.
[  183.364325][ T6391] netlink: 'syz.1.162': attribute type 1 has an invalid length.
[  183.386371][ T6395] netlink: 'syz.2.163': attribute type 12 has an invalid length.
[  183.536969][ T6414] netlink: 'syz.1.167': attribute type 10 has an invalid length.
[  183.676862][ T6426] bridge1: entered promiscuous mode
[  183.709373][ T6430] netlink: 'syz.2.172': attribute type 12 has an invalid length.
[  183.919319][ T6441] ieee802154 phy0 wpan0: encryption failed: -22
[  183.931753][ T6435] bridge2: port 1(ip6gretap1) entered blocking state
[  183.934507][ T6435] bridge2: port 1(ip6gretap1) entered disabled state
[  183.937143][ T6435] ip6gretap1: entered allmulticast mode
[  183.948280][ T6435] ip6gretap1: entered promiscuous mode
[  183.987898][ T6435] veth3: entered promiscuous mode
[  184.045635][ T6448] team0: Port device bridge1 added
[  184.054626][ T6448] macvlan2: entered promiscuous mode
[  184.056842][ T6448] macvlan2: entered allmulticast mode
[  184.059966][ T6448] bond1: (slave macvlan2): Opening slave failed
[  184.168324][   T33] audit: type=1800 audit(1752819998.236:2): pid=6465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.185" name="blkio.bfq.time_recursive" dev="tmpfs" ino=370 res=0 errno=0
[  184.231674][ T6465] IPVS: set_ctl: invalid protocol: 8345 172.30.1.2:20003
[  184.241102][ T6465] Cannot find add_set index 3 as target
[  184.368164][ T6474] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  184.368168][ T6485] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  184.453148][ T6492] netlink: 'syz.0.194': attribute type 12 has an invalid length.
[  184.509992][ T6498] team0: No ports can be present during mode change
[  184.575752][ T6508] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  184.595362][ T6508] CPU: 0 UID: 0 PID: 6508 Comm: syz.2.200 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  184.595389][ T6508] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  184.595398][ T6508] Call Trace:
[  184.595404][ T6508]  <TASK>
[  184.595414][ T6508]  dump_stack_lvl+0x189/0x250
[  184.595440][ T6508]  ? __pfx_dump_stack_lvl+0x10/0x10
[  184.595456][ T6508]  ? __pfx__printk+0x10/0x10
[  184.595470][ T6508]  ? kernfs_path_from_node+0x2c/0x260
[  184.595480][ T6508]  ? kernfs_path_from_node+0x2c/0x260
[  184.595487][ T6508]  ? kernfs_path_from_node+0x2c/0x260
[  184.595496][ T6508]  ? kernfs_path_from_node+0x22c/0x260
[  184.595502][ T6508]  ? kernfs_path_from_node+0x2c/0x260
[  184.595512][ T6508]  sysfs_warn_dup+0x8e/0xa0
[  184.595525][ T6508]  sysfs_do_create_link_sd+0xc0/0x110
[  184.595534][ T6508]  device_add_class_symlinks+0x1cf/0x240
[  184.595549][ T6508]  device_add+0x475/0xb50
[  184.595566][ T6508]  wiphy_register+0x199a/0x26b0
[  184.595587][ T6508]  ? __pfx_wiphy_register+0x10/0x10
[  184.595596][ T6508]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  184.595611][ T6508]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  184.595625][ T6508]  ieee80211_register_hw+0x33e1/0x4120
[  184.595645][ T6508]  ? ieee80211_register_hw+0x14c1/0x4120
[  184.595661][ T6508]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  184.595676][ T6508]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  184.595693][ T6508]  ? __hrtimer_setup+0x187/0x210
[  184.595704][ T6508]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  184.595718][ T6508]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  184.595745][ T6508]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  184.595757][ T6508]  ? trace_kmalloc+0x1f/0xd0
[  184.595768][ T6508]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  184.595781][ T6508]  ? kstrndup+0xbf/0x160
[  184.595795][ T6508]  hwsim_new_radio_nl+0xea4/0x1b10
[  184.595809][ T6508]  ? __pfx___nla_validate_parse+0x10/0x10
[  184.595833][ T6508]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  184.595853][ T6508]  ? __nla_parse+0x40/0x60
[  184.595865][ T6508]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  184.595879][ T6508]  genl_family_rcv_msg_doit+0x215/0x300
[  184.595892][ T6508]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  184.595907][ T6508]  ? bpf_lsm_capable+0x9/0x20
[  184.595917][ T6508]  ? security_capable+0x7e/0x2e0
[  184.595930][ T6508]  genl_rcv_msg+0x60e/0x790
[  184.595943][ T6508]  ? __pfx_genl_rcv_msg+0x10/0x10
[  184.595951][ T6508]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  184.595971][ T6508]  netlink_rcv_skb+0x208/0x470
[  184.595984][ T6508]  ? __pfx_genl_rcv_msg+0x10/0x10
[  184.595993][ T6508]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  184.596013][ T6508]  ? down_read+0x1ad/0x2e0
[  184.596023][ T6508]  genl_rcv+0x28/0x40
[  184.596031][ T6508]  netlink_unicast+0x75c/0x8e0
[  184.596047][ T6508]  netlink_sendmsg+0x805/0xb30
[  184.596063][ T6508]  ? __pfx_netlink_sendmsg+0x10/0x10
[  184.596075][ T6508]  ? aa_sock_msg_perm+0x94/0x160
[  184.596085][ T6508]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  184.596093][ T6508]  ? __pfx_netlink_sendmsg+0x10/0x10
[  184.596105][ T6508]  __sock_sendmsg+0x21c/0x270
[  184.596117][ T6508]  ____sys_sendmsg+0x505/0x830
[  184.596132][ T6508]  ? __pfx_____sys_sendmsg+0x10/0x10
[  184.596148][ T6508]  ? import_iovec+0x74/0xa0
[  184.596161][ T6508]  ___sys_sendmsg+0x21f/0x2a0
[  184.596175][ T6508]  ? __pfx____sys_sendmsg+0x10/0x10
[  184.596204][ T6508]  ? __fget_files+0x2a/0x420
[  184.596212][ T6508]  ? __fget_files+0x3a0/0x420
[  184.596224][ T6508]  __x64_sys_sendmsg+0x19b/0x260
[  184.596238][ T6508]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  184.596255][ T6508]  ? rcu_is_watching+0x15/0xb0
[  184.596267][ T6508]  ? do_syscall_64+0xbe/0x3b0
[  184.596278][ T6508]  do_syscall_64+0xfa/0x3b0
[  184.596287][ T6508]  ? lockdep_hardirqs_on+0x9c/0x150
[  184.596294][ T6508]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.596303][ T6508]  ? exc_page_fault+0x9f/0xf0
[  184.596312][ T6508]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.596348][ T6508] RIP: 0033:0x7f048458e929
[  184.596366][ T6508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  184.596378][ T6508] RSP: 002b:00007f04853b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  184.596396][ T6508] RAX: ffffffffffffffda RBX: 00007f04847b5fa0 RCX: 00007f048458e929
[  184.596409][ T6508] RDX: 0000100000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  184.596419][ T6508] RBP: 00007f0484610ca1 R08: 0000000000000000 R09: 0000000000000000
[  184.596429][ T6508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  184.596434][ T6508] R13: 0000000000000000 R14: 00007f04847b5fa0 R15: 00007fff232e77b8
[  184.596448][ T6508]  </TASK>
[  184.994629][ T6536] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  184.997054][ T6536] CPU: 0 UID: 0 PID: 6536 Comm: syz.1.208 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  184.997067][ T6536] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  184.997073][ T6536] Call Trace:
[  184.997077][ T6536]  <TASK>
[  184.997083][ T6536]  dump_stack_lvl+0x189/0x250
[  184.997100][ T6536]  ? __pfx_dump_stack_lvl+0x10/0x10
[  184.997112][ T6536]  ? __pfx__printk+0x10/0x10
[  184.997125][ T6536]  ? kernfs_path_from_node+0x2c/0x260
[  184.997135][ T6536]  ? kernfs_path_from_node+0x2c/0x260
[  184.997142][ T6536]  ? kernfs_path_from_node+0x2c/0x260
[  184.997150][ T6536]  ? kernfs_path_from_node+0x22c/0x260
[  184.997157][ T6536]  ? kernfs_path_from_node+0x2c/0x260
[  184.997167][ T6536]  sysfs_warn_dup+0x8e/0xa0
[  184.997180][ T6536]  sysfs_do_create_link_sd+0xc0/0x110
[  184.997190][ T6536]  device_add_class_symlinks+0x1cf/0x240
[  184.997205][ T6536]  device_add+0x475/0xb50
[  184.997220][ T6536]  wiphy_register+0x199a/0x26b0
[  184.997240][ T6536]  ? __pfx_wiphy_register+0x10/0x10
[  184.997249][ T6536]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  184.997265][ T6536]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  184.997304][ T6536]  ieee80211_register_hw+0x33e1/0x4120
[  184.997346][ T6536]  ? ieee80211_register_hw+0x14c1/0x4120
[  184.997371][ T6536]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  184.997387][ T6536]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  184.997405][ T6536]  ? __hrtimer_setup+0x187/0x210
[  184.997416][ T6536]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  184.997433][ T6536]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  184.997461][ T6536]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  184.997472][ T6536]  ? trace_kmalloc+0x1f/0xd0
[  184.997484][ T6536]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  184.997496][ T6536]  ? kstrndup+0xbf/0x160
[  184.997509][ T6536]  hwsim_new_radio_nl+0xea4/0x1b10
[  184.997522][ T6536]  ? __pfx___nla_validate_parse+0x10/0x10
[  184.997539][ T6536]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  184.997559][ T6536]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  184.997573][ T6536]  ? __nla_parse+0x40/0x60
[  184.997585][ T6536]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  184.997598][ T6536]  genl_family_rcv_msg_doit+0x215/0x300
[  184.997611][ T6536]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  184.997627][ T6536]  ? bpf_lsm_capable+0x9/0x20
[  184.997638][ T6536]  ? security_capable+0x7e/0x2e0
[  184.997650][ T6536]  genl_rcv_msg+0x60e/0x790
[  184.997662][ T6536]  ? __pfx_genl_rcv_msg+0x10/0x10
[  184.997670][ T6536]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  184.997688][ T6536]  netlink_rcv_skb+0x208/0x470
[  184.997700][ T6536]  ? __pfx_genl_rcv_msg+0x10/0x10
[  184.997709][ T6536]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  184.997728][ T6536]  ? down_read+0x1ad/0x2e0
[  184.997739][ T6536]  genl_rcv+0x28/0x40
[  184.997746][ T6536]  netlink_unicast+0x75c/0x8e0
[  184.997762][ T6536]  netlink_sendmsg+0x805/0xb30
[  184.997778][ T6536]  ? __pfx_netlink_sendmsg+0x10/0x10
[  184.997791][ T6536]  ? aa_sock_msg_perm+0x94/0x160
[  184.997800][ T6536]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  184.997809][ T6536]  ? __pfx_netlink_sendmsg+0x10/0x10
[  184.997821][ T6536]  __sock_sendmsg+0x21c/0x270
[  184.997832][ T6536]  ____sys_sendmsg+0x505/0x830
[  184.997848][ T6536]  ? __pfx_____sys_sendmsg+0x10/0x10
[  184.997865][ T6536]  ? import_iovec+0x74/0xa0
[  184.997877][ T6536]  ___sys_sendmsg+0x21f/0x2a0
[  184.997891][ T6536]  ? __pfx____sys_sendmsg+0x10/0x10
[  184.997920][ T6536]  ? __fget_files+0x2a/0x420
[  184.997928][ T6536]  ? __fget_files+0x3a0/0x420
[  184.997940][ T6536]  __x64_sys_sendmsg+0x19b/0x260
[  184.997953][ T6536]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  184.997971][ T6536]  ? rcu_is_watching+0x15/0xb0
[  184.997983][ T6536]  ? do_syscall_64+0xbe/0x3b0
[  184.997995][ T6536]  do_syscall_64+0xfa/0x3b0
[  184.998003][ T6536]  ? lockdep_hardirqs_on+0x9c/0x150
[  184.998011][ T6536]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.998019][ T6536]  ? exc_page_fault+0x9f/0xf0
[  184.998028][ T6536]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.998036][ T6536] RIP: 0033:0x7ff57c78e929
[  184.998046][ T6536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  184.998053][ T6536] RSP: 002b:00007ff57d5bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  184.998062][ T6536] RAX: ffffffffffffffda RBX: 00007ff57c9b5fa0 RCX: 00007ff57c78e929
[  184.998069][ T6536] RDX: 0003000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  184.998076][ T6536] RBP: 00007ff57c810ca1 R08: 0000000000000000 R09: 0000000000000000
[  184.998081][ T6536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  184.998086][ T6536] R13: 0000000000000000 R14: 00007ff57c9b5fa0 R15: 00007fffd32cde38
[  184.998100][ T6536]  </TASK>
[  185.324971][ T6554] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  185.541869][ T6571] netlink: 'syz.1.216': attribute type 1 has an invalid length.
[  185.842169][ T6578] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  185.844616][ T6578] IPv6: NLM_F_CREATE should be set when creating new route
[  186.190909][ T6606] netlink: 'syz.0.228': attribute type 1 has an invalid length.
[  186.193948][ T6606] __nla_validate_parse: 29 callbacks suppressed
[  186.193957][ T6606] netlink: 184 bytes leftover after parsing attributes in process `syz.0.228'.
[  186.199590][ T6606] netlink: 'syz.0.228': attribute type 1 has an invalid length.
[  186.258113][ T6620] team0: No ports can be present during mode change
[  186.297104][ T6625] netlink: 12 bytes leftover after parsing attributes in process `syz.2.233'.
[  186.301247][ T6625] 8021q: VLANs not supported on caif0
[  186.304868][ T6624] Cannot find map_set index 0 as target
[  186.384900][ T6635] netlink: 'syz.0.235': attribute type 49 has an invalid length.
[  186.447217][ T6641] netlink: 'syz.0.237': attribute type 9 has an invalid length.
[  186.598818][ T6654] netlink: 32 bytes leftover after parsing attributes in process `syz.0.241'.
[  186.649476][ T6654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.241'.
[  186.666477][ T6654] bond1 (unregistering): Released all slaves
[  186.851070][ T6657] netlink: 'syz.2.239': attribute type 1 has an invalid length.
[  186.853745][ T6657] netlink: 'syz.2.239': attribute type 2 has an invalid length.
[  186.856373][ T6657] netlink: 24 bytes leftover after parsing attributes in process `syz.2.239'.
[  187.061127][ T6667] team0: No ports can be present during mode change
[  187.264058][ T6679] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  187.281829][ T6679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.248'.
[  187.285055][ T6679] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  187.287672][ T6679] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  187.344165][ T6679] xt_CT: No such helper "snmp_trap"
[  187.371631][ T6686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.251'.
[  187.378636][ T6686] team0: entered promiscuous mode
[  187.382014][ T6686] team_slave_0: entered promiscuous mode
[  187.384403][ T6686] team_slave_1: entered promiscuous mode
[  187.387266][ T6686] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  187.391143][ T6686] team0: left promiscuous mode
[  187.392754][ T6686] team_slave_0: left promiscuous mode
[  187.396295][ T6686] team_slave_1: left promiscuous mode
[  187.522237][ T6702] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  187.531105][ T6703] netlink: 212268 bytes leftover after parsing attributes in process `syz.2.256'.
[  187.579077][ T6712] netlink: 244 bytes leftover after parsing attributes in process `syz.0.261'.
[  187.653914][ T6722] netlink: 9 bytes leftover after parsing attributes in process `syz.2.265'.
[  187.768158][ T6734] team0: No ports can be present during mode change
[  187.847214][ T6739] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  187.851704][ T6739] CPU: 1 UID: 0 PID: 6739 Comm: syz.0.272 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  187.851726][ T6739] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  187.851733][ T6739] Call Trace:
[  187.851737][ T6739]  <TASK>
[  187.851742][ T6739]  dump_stack_lvl+0x189/0x250
[  187.851762][ T6739]  ? __pfx_dump_stack_lvl+0x10/0x10
[  187.851773][ T6739]  ? __pfx__printk+0x10/0x10
[  187.851787][ T6739]  ? kernfs_path_from_node+0x2c/0x260
[  187.851797][ T6739]  ? kernfs_path_from_node+0x2c/0x260
[  187.851805][ T6739]  ? kernfs_path_from_node+0x2c/0x260
[  187.851815][ T6739]  ? kernfs_path_from_node+0x22c/0x260
[  187.851823][ T6739]  ? kernfs_path_from_node+0x2c/0x260
[  187.851833][ T6739]  sysfs_warn_dup+0x8e/0xa0
[  187.851846][ T6739]  sysfs_do_create_link_sd+0xc0/0x110
[  187.851855][ T6739]  device_add_class_symlinks+0x1cf/0x240
[  187.851871][ T6739]  device_add+0x475/0xb50
[  187.851885][ T6739]  wiphy_register+0x199a/0x26b0
[  187.851906][ T6739]  ? __pfx_wiphy_register+0x10/0x10
[  187.851915][ T6739]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  187.851930][ T6739]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  187.851944][ T6739]  ieee80211_register_hw+0x33e1/0x4120
[  187.851965][ T6739]  ? ieee80211_register_hw+0x14c1/0x4120
[  187.851981][ T6739]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  187.851996][ T6739]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  187.852052][ T6739]  ? __hrtimer_setup+0x187/0x210
[  187.852065][ T6739]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  187.852084][ T6739]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  187.852112][ T6739]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  187.852125][ T6739]  ? trace_kmalloc+0x1f/0xd0
[  187.852136][ T6739]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  187.852148][ T6739]  ? kstrndup+0xbf/0x160
[  187.852161][ T6739]  hwsim_new_radio_nl+0xea4/0x1b10
[  187.852174][ T6739]  ? __pfx___nla_validate_parse+0x10/0x10
[  187.852192][ T6739]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  187.852209][ T6739]  ? __nla_parse+0x40/0x60
[  187.852221][ T6739]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  187.852235][ T6739]  genl_family_rcv_msg_doit+0x215/0x300
[  187.852247][ T6739]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  187.852262][ T6739]  ? bpf_lsm_capable+0x9/0x20
[  187.852273][ T6739]  ? security_capable+0x7e/0x2e0
[  187.852287][ T6739]  genl_rcv_msg+0x60e/0x790
[  187.852299][ T6739]  ? __pfx_genl_rcv_msg+0x10/0x10
[  187.852308][ T6739]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  187.852328][ T6739]  netlink_rcv_skb+0x208/0x470
[  187.852341][ T6739]  ? __pfx_genl_rcv_msg+0x10/0x10
[  187.852350][ T6739]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  187.852369][ T6739]  ? down_read+0x1ad/0x2e0
[  187.852380][ T6739]  genl_rcv+0x28/0x40
[  187.852387][ T6739]  netlink_unicast+0x75c/0x8e0
[  187.852403][ T6739]  netlink_sendmsg+0x805/0xb30
[  187.852419][ T6739]  ? __pfx_netlink_sendmsg+0x10/0x10
[  187.852432][ T6739]  ? aa_sock_msg_perm+0x94/0x160
[  187.852442][ T6739]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  187.852450][ T6739]  ? __pfx_netlink_sendmsg+0x10/0x10
[  187.852462][ T6739]  __sock_sendmsg+0x21c/0x270
[  187.852474][ T6739]  ____sys_sendmsg+0x505/0x830
[  187.852488][ T6739]  ? __pfx_____sys_sendmsg+0x10/0x10
[  187.852505][ T6739]  ? import_iovec+0x74/0xa0
[  187.852518][ T6739]  ___sys_sendmsg+0x21f/0x2a0
[  187.852531][ T6739]  ? __pfx____sys_sendmsg+0x10/0x10
[  187.852561][ T6739]  ? __fget_files+0x2a/0x420
[  187.852568][ T6739]  ? __fget_files+0x3a0/0x420
[  187.852581][ T6739]  __x64_sys_sendmsg+0x19b/0x260
[  187.852594][ T6739]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  187.852616][ T6739]  ? do_syscall_64+0xbe/0x3b0
[  187.852628][ T6739]  do_syscall_64+0xfa/0x3b0
[  187.852636][ T6739]  ? lockdep_hardirqs_on+0x9c/0x150
[  187.852644][ T6739]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.852653][ T6739]  ? exc_page_fault+0x9f/0xf0
[  187.852663][ T6739]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.852672][ T6739] RIP: 0033:0x7f61ea98e929
[  187.852681][ T6739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  187.852689][ T6739] RSP: 002b:00007f61eb768038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  187.852699][ T6739] RAX: ffffffffffffffda RBX: 00007f61eabb5fa0 RCX: 00007f61ea98e929
[  187.852705][ T6739] RDX: 0700000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  187.852710][ T6739] RBP: 00007f61eaa10ca1 R08: 0000000000000000 R09: 0000000000000000
[  187.852715][ T6739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  187.852726][ T6739] R13: 0000000000000000 R14: 00007f61eabb5fa0 R15: 00007ffc7ce38fd8
[  187.852741][ T6739]  </TASK>
[  188.121242][ T6754] team0: No ports can be present during mode change
[  188.223436][ T6756] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.226628][ T6756] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.301812][ T6756] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  188.309021][ T6756] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  188.361117][ T6756] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  188.363949][ T6756] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  188.366542][ T6756] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  188.370308][ T6756] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  188.396879][ T6756] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 39029 - 0
[  188.399702][ T6756] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 39029 - 0
[  188.402569][ T6756] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 39029 - 0
[  188.405471][ T6756] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 39029 - 0
[  188.423009][ T6768] geneve2: entered promiscuous mode
[  188.468597][ T6773] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  188.472350][ T6773] CPU: 1 UID: 0 PID: 6773 Comm: syz.1.283 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  188.472369][ T6773] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  188.472375][ T6773] Call Trace:
[  188.472380][ T6773]  <TASK>
[  188.472384][ T6773]  dump_stack_lvl+0x189/0x250
[  188.472402][ T6773]  ? __pfx_dump_stack_lvl+0x10/0x10
[  188.472413][ T6773]  ? __pfx__printk+0x10/0x10
[  188.472426][ T6773]  ? kernfs_path_from_node+0x2c/0x260
[  188.472436][ T6773]  ? kernfs_path_from_node+0x2c/0x260
[  188.472443][ T6773]  ? kernfs_path_from_node+0x2c/0x260
[  188.472452][ T6773]  ? kernfs_path_from_node+0x22c/0x260
[  188.472459][ T6773]  ? kernfs_path_from_node+0x2c/0x260
[  188.472468][ T6773]  sysfs_warn_dup+0x8e/0xa0
[  188.472482][ T6773]  sysfs_do_create_link_sd+0xc0/0x110
[  188.472492][ T6773]  device_add_class_symlinks+0x1cf/0x240
[  188.472507][ T6773]  device_add+0x475/0xb50
[  188.472521][ T6773]  wiphy_register+0x199a/0x26b0
[  188.472559][ T6773]  ? __pfx_wiphy_register+0x10/0x10
[  188.472569][ T6773]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  188.472598][ T6773]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  188.472614][ T6773]  ieee80211_register_hw+0x33e1/0x4120
[  188.472635][ T6773]  ? ieee80211_register_hw+0x14c1/0x4120
[  188.472652][ T6773]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  188.472666][ T6773]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  188.472683][ T6773]  ? __hrtimer_setup+0x187/0x210
[  188.472693][ T6773]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  188.472711][ T6773]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  188.472738][ T6773]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  188.472748][ T6773]  ? trace_kmalloc+0x1f/0xd0
[  188.472761][ T6773]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  188.472772][ T6773]  ? kstrndup+0xbf/0x160
[  188.472786][ T6773]  hwsim_new_radio_nl+0xea4/0x1b10
[  188.472799][ T6773]  ? __pfx___nla_validate_parse+0x10/0x10
[  188.472816][ T6773]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  188.472834][ T6773]  ? __nla_parse+0x40/0x60
[  188.472845][ T6773]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  188.472859][ T6773]  genl_family_rcv_msg_doit+0x215/0x300
[  188.472871][ T6773]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  188.472886][ T6773]  ? bpf_lsm_capable+0x9/0x20
[  188.472897][ T6773]  ? security_capable+0x7e/0x2e0
[  188.472910][ T6773]  genl_rcv_msg+0x60e/0x790
[  188.472921][ T6773]  ? __pfx_genl_rcv_msg+0x10/0x10
[  188.472930][ T6773]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  188.472949][ T6773]  netlink_rcv_skb+0x208/0x470
[  188.472986][ T6773]  ? __pfx_genl_rcv_msg+0x10/0x10
[  188.472996][ T6773]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  188.473016][ T6773]  ? down_read+0x1ad/0x2e0
[  188.473028][ T6773]  genl_rcv+0x28/0x40
[  188.473036][ T6773]  netlink_unicast+0x75c/0x8e0
[  188.473051][ T6773]  netlink_sendmsg+0x805/0xb30
[  188.473068][ T6773]  ? __pfx_netlink_sendmsg+0x10/0x10
[  188.473081][ T6773]  ? aa_sock_msg_perm+0x94/0x160
[  188.473090][ T6773]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  188.473099][ T6773]  ? __pfx_netlink_sendmsg+0x10/0x10
[  188.473110][ T6773]  __sock_sendmsg+0x21c/0x270
[  188.473122][ T6773]  ____sys_sendmsg+0x505/0x830
[  188.473137][ T6773]  ? __pfx_____sys_sendmsg+0x10/0x10
[  188.473154][ T6773]  ? import_iovec+0x74/0xa0
[  188.473167][ T6773]  ___sys_sendmsg+0x21f/0x2a0
[  188.473180][ T6773]  ? __pfx____sys_sendmsg+0x10/0x10
[  188.473210][ T6773]  ? __fget_files+0x2a/0x420
[  188.473218][ T6773]  ? __fget_files+0x3a0/0x420
[  188.473230][ T6773]  __x64_sys_sendmsg+0x19b/0x260
[  188.473243][ T6773]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  188.473260][ T6773]  ? rcu_is_watching+0x15/0xb0
[  188.473273][ T6773]  ? do_syscall_64+0xbe/0x3b0
[  188.473285][ T6773]  do_syscall_64+0xfa/0x3b0
[  188.473293][ T6773]  ? lockdep_hardirqs_on+0x9c/0x150
[  188.473301][ T6773]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.473310][ T6773]  ? exc_page_fault+0x9f/0xf0
[  188.473318][ T6773]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.473326][ T6773] RIP: 0033:0x7ff57c78e929
[  188.473335][ T6773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  188.473342][ T6773] RSP: 002b:00007ff57d5bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  188.473360][ T6773] RAX: ffffffffffffffda RBX: 00007ff57c9b5fa0 RCX: 00007ff57c78e929
[  188.473366][ T6773] RDX: 0800000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  188.473371][ T6773] RBP: 00007ff57c810ca1 R08: 0000000000000000 R09: 0000000000000000
[  188.473376][ T6773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  188.473381][ T6773] R13: 0000000000000000 R14: 00007ff57c9b5fa0 R15: 00007fffd32cde38
[  188.473396][ T6773]  </TASK>
[  188.714292][ T6787] team0: No ports can be present during mode change
[  188.760466][ T6781] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  188.762724][ T6781] IPv6: NLM_F_CREATE should be set when creating new route
[  188.811211][ T6793] syz.0.290 uses obsolete (PF_INET,SOCK_PACKET)
[  188.914494][ T6803] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  188.917027][ T6803] CPU: 1 UID: 0 PID: 6803 Comm: syz.2.293 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  188.917039][ T6803] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  188.917045][ T6803] Call Trace:
[  188.917050][ T6803]  <TASK>
[  188.917055][ T6803]  dump_stack_lvl+0x189/0x250
[  188.917074][ T6803]  ? __pfx_dump_stack_lvl+0x10/0x10
[  188.917085][ T6803]  ? __pfx__printk+0x10/0x10
[  188.917099][ T6803]  ? kernfs_path_from_node+0x2c/0x260
[  188.917109][ T6803]  ? kernfs_path_from_node+0x2c/0x260
[  188.917117][ T6803]  ? kernfs_path_from_node+0x2c/0x260
[  188.917126][ T6803]  ? kernfs_path_from_node+0x22c/0x260
[  188.917133][ T6803]  ? kernfs_path_from_node+0x2c/0x260
[  188.917142][ T6803]  sysfs_warn_dup+0x8e/0xa0
[  188.917155][ T6803]  sysfs_do_create_link_sd+0xc0/0x110
[  188.917164][ T6803]  device_add_class_symlinks+0x1cf/0x240
[  188.917179][ T6803]  device_add+0x475/0xb50
[  188.917193][ T6803]  wiphy_register+0x199a/0x26b0
[  188.917213][ T6803]  ? __pfx_wiphy_register+0x10/0x10
[  188.917223][ T6803]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  188.917238][ T6803]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  188.917252][ T6803]  ieee80211_register_hw+0x33e1/0x4120
[  188.917273][ T6803]  ? ieee80211_register_hw+0x14c1/0x4120
[  188.917288][ T6803]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  188.917302][ T6803]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  188.917327][ T6803]  ? __hrtimer_setup+0x187/0x210
[  188.917339][ T6803]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  188.917357][ T6803]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  188.917384][ T6803]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  188.917395][ T6803]  ? trace_kmalloc+0x1f/0xd0
[  188.917407][ T6803]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  188.917420][ T6803]  ? kstrndup+0xbf/0x160
[  188.917433][ T6803]  hwsim_new_radio_nl+0xea4/0x1b10
[  188.917446][ T6803]  ? __pfx___nla_validate_parse+0x10/0x10
[  188.917463][ T6803]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  188.917476][ T6803]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  188.917490][ T6803]  ? __nla_parse+0x40/0x60
[  188.917501][ T6803]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  188.917514][ T6803]  genl_family_rcv_msg_doit+0x215/0x300
[  188.917526][ T6803]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  188.917541][ T6803]  ? bpf_lsm_capable+0x9/0x20
[  188.917553][ T6803]  ? security_capable+0x7e/0x2e0
[  188.917567][ T6803]  genl_rcv_msg+0x60e/0x790
[  188.917578][ T6803]  ? __pfx_genl_rcv_msg+0x10/0x10
[  188.917586][ T6803]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  188.917604][ T6803]  netlink_rcv_skb+0x208/0x470
[  188.917636][ T6803]  ? __pfx_genl_rcv_msg+0x10/0x10
[  188.917646][ T6803]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  188.917667][ T6803]  ? down_read+0x1ad/0x2e0
[  188.917680][ T6803]  genl_rcv+0x28/0x40
[  188.917687][ T6803]  netlink_unicast+0x75c/0x8e0
[  188.917703][ T6803]  netlink_sendmsg+0x805/0xb30
[  188.917720][ T6803]  ? __pfx_netlink_sendmsg+0x10/0x10
[  188.917734][ T6803]  ? aa_sock_msg_perm+0x94/0x160
[  188.917744][ T6803]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  188.917753][ T6803]  ? __pfx_netlink_sendmsg+0x10/0x10
[  188.917764][ T6803]  __sock_sendmsg+0x21c/0x270
[  188.917776][ T6803]  ____sys_sendmsg+0x505/0x830
[  188.917791][ T6803]  ? __pfx_____sys_sendmsg+0x10/0x10
[  188.917808][ T6803]  ? import_iovec+0x74/0xa0
[  188.917822][ T6803]  ___sys_sendmsg+0x21f/0x2a0
[  188.917835][ T6803]  ? __pfx____sys_sendmsg+0x10/0x10
[  188.917865][ T6803]  ? __fget_files+0x2a/0x420
[  188.917872][ T6803]  ? __fget_files+0x3a0/0x420
[  188.917885][ T6803]  __x64_sys_sendmsg+0x19b/0x260
[  188.917899][ T6803]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  188.917939][ T6803]  ? rcu_is_watching+0x15/0xb0
[  188.917955][ T6803]  ? do_syscall_64+0xbe/0x3b0
[  188.917969][ T6803]  do_syscall_64+0xfa/0x3b0
[  188.917978][ T6803]  ? lockdep_hardirqs_on+0x9c/0x150
[  188.917987][ T6803]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.917996][ T6803]  ? exc_page_fault+0x9f/0xf0
[  188.918005][ T6803]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.918013][ T6803] RIP: 0033:0x7f048458e929
[  188.918023][ T6803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  188.918030][ T6803] RSP: 002b:00007f04853b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  188.918054][ T6803] RAX: ffffffffffffffda RBX: 00007f04847b5fa0 RCX: 00007f048458e929
[  188.918062][ T6803] RDX: 0900000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  188.918069][ T6803] RBP: 00007f0484610ca1 R08: 0000000000000000 R09: 0000000000000000
[  188.918074][ T6803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  188.918080][ T6803] R13: 0000000000000000 R14: 00007f04847b5fa0 R15: 00007fff232e77b8
[  188.918094][ T6803]  </TASK>
[  189.183133][ T6809] team0: No ports can be present during mode change
[  189.211857][ T6813] IPv6: Can't replace route, no match found
[  189.587580][ T6818] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  189.590398][ T6818] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  189.593010][ T6818] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  189.595581][ T6818] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  189.666777][ T6824] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.743690][ T6824] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.820371][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  189.845361][ T6824] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.913382][ T6824] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.974340][ T6824] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  189.982726][ T6824] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  189.991798][ T6824] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  190.000007][ T6824] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  190.097213][ T6838] validate_nla: 3 callbacks suppressed
[  190.097239][ T6838] netlink: 'syz.1.305': attribute type 9 has an invalid length.
[  190.134898][ T6841] netlink: 'syz.1.306': attribute type 4 has an invalid length.
[  190.135757][ T6842] netlink: 'syz.1.306': attribute type 4 has an invalid length.
[  190.706967][ T6858] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  190.710527][ T6858] CPU: 1 UID: 0 PID: 6858 Comm: syz.2.310 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  190.710542][ T6858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  190.710548][ T6858] Call Trace:
[  190.710553][ T6858]  <TASK>
[  190.710559][ T6858]  dump_stack_lvl+0x189/0x250
[  190.710578][ T6858]  ? __pfx_dump_stack_lvl+0x10/0x10
[  190.710589][ T6858]  ? __pfx__printk+0x10/0x10
[  190.710618][ T6858]  ? kernfs_path_from_node+0x2c/0x260
[  190.710628][ T6858]  ? kernfs_path_from_node+0x2c/0x260
[  190.710636][ T6858]  ? kernfs_path_from_node+0x2c/0x260
[  190.710645][ T6858]  ? kernfs_path_from_node+0x22c/0x260
[  190.710652][ T6858]  ? kernfs_path_from_node+0x2c/0x260
[  190.710662][ T6858]  sysfs_warn_dup+0x8e/0xa0
[  190.710677][ T6858]  sysfs_do_create_link_sd+0xc0/0x110
[  190.710687][ T6858]  device_add_class_symlinks+0x1cf/0x240
[  190.710702][ T6858]  device_add+0x475/0xb50
[  190.710716][ T6858]  wiphy_register+0x199a/0x26b0
[  190.710737][ T6858]  ? __pfx_wiphy_register+0x10/0x10
[  190.710770][ T6858]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  190.710787][ T6858]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  190.710803][ T6858]  ieee80211_register_hw+0x33e1/0x4120
[  190.710826][ T6858]  ? ieee80211_register_hw+0x14c1/0x4120
[  190.710842][ T6858]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  190.710857][ T6858]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  190.710874][ T6858]  ? __hrtimer_setup+0x187/0x210
[  190.710884][ T6858]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  190.710901][ T6858]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  190.710927][ T6858]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  190.710938][ T6858]  ? trace_kmalloc+0x1f/0xd0
[  190.710950][ T6858]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  190.710961][ T6858]  ? kstrndup+0xbf/0x160
[  190.710975][ T6858]  hwsim_new_radio_nl+0xea4/0x1b10
[  190.710988][ T6858]  ? __pfx___nla_validate_parse+0x10/0x10
[  190.711006][ T6858]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  190.711023][ T6858]  ? __nla_parse+0x40/0x60
[  190.711035][ T6858]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  190.711050][ T6858]  genl_family_rcv_msg_doit+0x215/0x300
[  190.711063][ T6858]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  190.711078][ T6858]  ? bpf_lsm_capable+0x9/0x20
[  190.711089][ T6858]  ? security_capable+0x7e/0x2e0
[  190.711103][ T6858]  genl_rcv_msg+0x60e/0x790
[  190.711116][ T6858]  ? __pfx_genl_rcv_msg+0x10/0x10
[  190.711130][ T6858]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  190.711150][ T6858]  netlink_rcv_skb+0x208/0x470
[  190.711165][ T6858]  ? __pfx_genl_rcv_msg+0x10/0x10
[  190.711175][ T6858]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  190.711195][ T6858]  ? down_read+0x1ad/0x2e0
[  190.711208][ T6858]  genl_rcv+0x28/0x40
[  190.711216][ T6858]  netlink_unicast+0x75c/0x8e0
[  190.711232][ T6858]  netlink_sendmsg+0x805/0xb30
[  190.711250][ T6858]  ? __pfx_netlink_sendmsg+0x10/0x10
[  190.711264][ T6858]  ? aa_sock_msg_perm+0x94/0x160
[  190.711274][ T6858]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  190.711283][ T6858]  ? __pfx_netlink_sendmsg+0x10/0x10
[  190.711294][ T6858]  __sock_sendmsg+0x21c/0x270
[  190.711306][ T6858]  ____sys_sendmsg+0x505/0x830
[  190.711322][ T6858]  ? __pfx_____sys_sendmsg+0x10/0x10
[  190.711338][ T6858]  ? import_iovec+0x74/0xa0
[  190.711351][ T6858]  ___sys_sendmsg+0x21f/0x2a0
[  190.711365][ T6858]  ? __pfx____sys_sendmsg+0x10/0x10
[  190.711395][ T6858]  ? __fget_files+0x2a/0x420
[  190.711403][ T6858]  ? __fget_files+0x3a0/0x420
[  190.711415][ T6858]  __x64_sys_sendmsg+0x19b/0x260
[  190.711429][ T6858]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  190.711446][ T6858]  ? rcu_is_watching+0x15/0xb0
[  190.711459][ T6858]  ? do_syscall_64+0xbe/0x3b0
[  190.711471][ T6858]  do_syscall_64+0xfa/0x3b0
[  190.711479][ T6858]  ? lockdep_hardirqs_on+0x9c/0x150
[  190.711487][ T6858]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.711496][ T6858]  ? exc_page_fault+0x9f/0xf0
[  190.711505][ T6858]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.711513][ T6858] RIP: 0033:0x7f048458e929
[  190.711522][ T6858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  190.711530][ T6858] RSP: 002b:00007f04853b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  190.711540][ T6858] RAX: ffffffffffffffda RBX: 00007f04847b5fa0 RCX: 00007f048458e929
[  190.711546][ T6858] RDX: 1100000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  190.711552][ T6858] RBP: 00007f0484610ca1 R08: 0000000000000000 R09: 0000000000000000
[  190.711558][ T6858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  190.711563][ T6858] R13: 0000000000000000 R14: 00007f04847b5fa0 R15: 00007fff232e77b8
[  190.711577][ T6858]  </TASK>
[  191.116939][ T6874] netlink: 'syz.2.315': attribute type 11 has an invalid length.
[  191.119601][ T6874] netlink: 'syz.2.315': attribute type 11 has an invalid length.
[  191.410794][ T6894] tc_dump_action: action bad kind
[  191.440644][ T6896] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  191.446622][ T6896] CPU: 0 UID: 0 PID: 6896 Comm: syz.1.324 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  191.446637][ T6896] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  191.446644][ T6896] Call Trace:
[  191.446649][ T6896]  <TASK>
[  191.446654][ T6896]  dump_stack_lvl+0x189/0x250
[  191.446704][ T6896]  ? __pfx_dump_stack_lvl+0x10/0x10
[  191.446726][ T6896]  ? __pfx__printk+0x10/0x10
[  191.446748][ T6896]  ? kernfs_path_from_node+0x2c/0x260
[  191.446764][ T6896]  ? kernfs_path_from_node+0x2c/0x260
[  191.446777][ T6896]  ? kernfs_path_from_node+0x2c/0x260
[  191.446792][ T6896]  ? kernfs_path_from_node+0x22c/0x260
[  191.446807][ T6896]  ? kernfs_path_from_node+0x2c/0x260
[  191.446817][ T6896]  sysfs_warn_dup+0x8e/0xa0
[  191.446833][ T6896]  sysfs_do_create_link_sd+0xc0/0x110
[  191.446844][ T6896]  device_add_class_symlinks+0x1cf/0x240
[  191.446859][ T6896]  device_add+0x475/0xb50
[  191.446874][ T6896]  wiphy_register+0x199a/0x26b0
[  191.446896][ T6896]  ? __pfx_wiphy_register+0x10/0x10
[  191.446906][ T6896]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  191.446922][ T6896]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  191.446938][ T6896]  ieee80211_register_hw+0x33e1/0x4120
[  191.446959][ T6896]  ? ieee80211_register_hw+0x14c1/0x4120
[  191.446975][ T6896]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  191.446989][ T6896]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  191.447007][ T6896]  ? __hrtimer_setup+0x187/0x210
[  191.447017][ T6896]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  191.447033][ T6896]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  191.447059][ T6896]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  191.447072][ T6896]  ? trace_kmalloc+0x1f/0xd0
[  191.447085][ T6896]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  191.447097][ T6896]  ? kstrndup+0xbf/0x160
[  191.447110][ T6896]  hwsim_new_radio_nl+0xea4/0x1b10
[  191.447123][ T6896]  ? __pfx___nla_validate_parse+0x10/0x10
[  191.447141][ T6896]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  191.447154][ T6896]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  191.447168][ T6896]  ? __nla_parse+0x40/0x60
[  191.447188][ T6896]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  191.447202][ T6896]  genl_family_rcv_msg_doit+0x215/0x300
[  191.447215][ T6896]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  191.447232][ T6896]  ? bpf_lsm_capable+0x9/0x20
[  191.447246][ T6896]  ? security_capable+0x7e/0x2e0
[  191.447260][ T6896]  genl_rcv_msg+0x60e/0x790
[  191.447272][ T6896]  ? __pfx_genl_rcv_msg+0x10/0x10
[  191.447280][ T6896]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  191.447298][ T6896]  netlink_rcv_skb+0x208/0x470
[  191.447310][ T6896]  ? __pfx_genl_rcv_msg+0x10/0x10
[  191.447319][ T6896]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  191.447338][ T6896]  ? down_read+0x1ad/0x2e0
[  191.447349][ T6896]  genl_rcv+0x28/0x40
[  191.447357][ T6896]  netlink_unicast+0x75c/0x8e0
[  191.447372][ T6896]  netlink_sendmsg+0x805/0xb30
[  191.447388][ T6896]  ? __pfx_netlink_sendmsg+0x10/0x10
[  191.447402][ T6896]  ? aa_sock_msg_perm+0x94/0x160
[  191.447412][ T6896]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  191.447421][ T6896]  ? __pfx_netlink_sendmsg+0x10/0x10
[  191.447432][ T6896]  __sock_sendmsg+0x21c/0x270
[  191.447444][ T6896]  ____sys_sendmsg+0x505/0x830
[  191.447459][ T6896]  ? __pfx_____sys_sendmsg+0x10/0x10
[  191.447475][ T6896]  ? import_iovec+0x74/0xa0
[  191.447489][ T6896]  ___sys_sendmsg+0x21f/0x2a0
[  191.447503][ T6896]  ? __pfx____sys_sendmsg+0x10/0x10
[  191.447532][ T6896]  ? __fget_files+0x2a/0x420
[  191.447541][ T6896]  ? __fget_files+0x3a0/0x420
[  191.447553][ T6896]  __x64_sys_sendmsg+0x19b/0x260
[  191.447566][ T6896]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  191.447584][ T6896]  ? rcu_is_watching+0x15/0xb0
[  191.447596][ T6896]  ? do_syscall_64+0xbe/0x3b0
[  191.447609][ T6896]  do_syscall_64+0xfa/0x3b0
[  191.447617][ T6896]  ? lockdep_hardirqs_on+0x9c/0x150
[  191.447625][ T6896]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.447634][ T6896]  ? exc_page_fault+0x9f/0xf0
[  191.447643][ T6896]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.447651][ T6896] RIP: 0033:0x7ff57c78e929
[  191.447659][ T6896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  191.447667][ T6896] RSP: 002b:00007ff57d5bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  191.447710][ T6896] RAX: ffffffffffffffda RBX: 00007ff57c9b5fa0 RCX: 00007ff57c78e929
[  191.447720][ T6896] RDX: 2100000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  191.447730][ T6896] RBP: 00007ff57c810ca1 R08: 0000000000000000 R09: 0000000000000000
[  191.447740][ T6896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  191.447750][ T6896] R13: 0000000000000000 R14: 00007ff57c9b5fa0 R15: 00007fffd32cde38
[  191.447774][ T6896]  </TASK>
[  191.615803][ T6900] __nla_validate_parse: 5 callbacks suppressed
[  191.615815][ T6900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.325'.
[  191.688566][ T6906] pim6reg1: entered promiscuous mode
[  191.692426][ T6906] pim6reg1: entered allmulticast mode
[  191.713829][ T6908] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.767548][ T6913] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  191.792815][ T6908] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.847792][ T6908] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.072918][ T6908] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.089030][ T6927] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  192.095673][ T6927] CPU: 0 UID: 0 PID: 6927 Comm: syz.2.335 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  192.095699][ T6927] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  192.095708][ T6927] Call Trace:
[  192.095716][ T6927]  <TASK>
[  192.095726][ T6927]  dump_stack_lvl+0x189/0x250
[  192.095746][ T6927]  ? __pfx_dump_stack_lvl+0x10/0x10
[  192.095757][ T6927]  ? __pfx__printk+0x10/0x10
[  192.095770][ T6927]  ? kernfs_path_from_node+0x2c/0x260
[  192.095780][ T6927]  ? kernfs_path_from_node+0x2c/0x260
[  192.095789][ T6927]  ? kernfs_path_from_node+0x2c/0x260
[  192.095797][ T6927]  ? kernfs_path_from_node+0x22c/0x260
[  192.095806][ T6927]  ? kernfs_path_from_node+0x2c/0x260
[  192.095815][ T6927]  sysfs_warn_dup+0x8e/0xa0
[  192.095828][ T6927]  sysfs_do_create_link_sd+0xc0/0x110
[  192.095837][ T6927]  device_add_class_symlinks+0x1cf/0x240
[  192.095852][ T6927]  device_add+0x475/0xb50
[  192.095865][ T6927]  wiphy_register+0x199a/0x26b0
[  192.095885][ T6927]  ? __pfx_wiphy_register+0x10/0x10
[  192.095894][ T6927]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  192.095910][ T6927]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  192.095926][ T6927]  ieee80211_register_hw+0x33e1/0x4120
[  192.095953][ T6927]  ? ieee80211_register_hw+0x14c1/0x4120
[  192.095970][ T6927]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  192.095985][ T6927]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  192.096003][ T6927]  ? __hrtimer_setup+0x187/0x210
[  192.096013][ T6927]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  192.096028][ T6927]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  192.096054][ T6927]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  192.096065][ T6927]  ? trace_kmalloc+0x1f/0xd0
[  192.096076][ T6927]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  192.096087][ T6927]  ? kstrndup+0xbf/0x160
[  192.096100][ T6927]  hwsim_new_radio_nl+0xea4/0x1b10
[  192.096113][ T6927]  ? __pfx___nla_validate_parse+0x10/0x10
[  192.096131][ T6927]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  192.096151][ T6927]  ? __nla_parse+0x40/0x60
[  192.096162][ T6927]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  192.096175][ T6927]  genl_family_rcv_msg_doit+0x215/0x300
[  192.096188][ T6927]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  192.096203][ T6927]  ? bpf_lsm_capable+0x9/0x20
[  192.096214][ T6927]  ? security_capable+0x7e/0x2e0
[  192.096226][ T6927]  genl_rcv_msg+0x60e/0x790
[  192.096238][ T6927]  ? __pfx_genl_rcv_msg+0x10/0x10
[  192.096246][ T6927]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  192.096264][ T6927]  netlink_rcv_skb+0x208/0x470
[  192.096276][ T6927]  ? __pfx_genl_rcv_msg+0x10/0x10
[  192.096285][ T6927]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  192.096309][ T6927]  ? down_read+0x1ad/0x2e0
[  192.096321][ T6927]  genl_rcv+0x28/0x40
[  192.096328][ T6927]  netlink_unicast+0x75c/0x8e0
[  192.096344][ T6927]  netlink_sendmsg+0x805/0xb30
[  192.096360][ T6927]  ? __pfx_netlink_sendmsg+0x10/0x10
[  192.096373][ T6927]  ? aa_sock_msg_perm+0x94/0x160
[  192.096384][ T6927]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  192.096393][ T6927]  ? __pfx_netlink_sendmsg+0x10/0x10
[  192.096405][ T6927]  __sock_sendmsg+0x21c/0x270
[  192.096417][ T6927]  ____sys_sendmsg+0x505/0x830
[  192.096432][ T6927]  ? __pfx_____sys_sendmsg+0x10/0x10
[  192.096449][ T6927]  ? import_iovec+0x74/0xa0
[  192.096462][ T6927]  ___sys_sendmsg+0x21f/0x2a0
[  192.096476][ T6927]  ? __pfx____sys_sendmsg+0x10/0x10
[  192.096506][ T6927]  ? __fget_files+0x2a/0x420
[  192.096513][ T6927]  ? __fget_files+0x3a0/0x420
[  192.096525][ T6927]  __x64_sys_sendmsg+0x19b/0x260
[  192.096539][ T6927]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  192.096556][ T6927]  ? rcu_is_watching+0x15/0xb0
[  192.096569][ T6927]  ? do_syscall_64+0xbe/0x3b0
[  192.096580][ T6927]  do_syscall_64+0xfa/0x3b0
[  192.096588][ T6927]  ? lockdep_hardirqs_on+0x9c/0x150
[  192.096596][ T6927]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.096604][ T6927]  ? exc_page_fault+0x9f/0xf0
[  192.096648][ T6927]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.096664][ T6927] RIP: 0033:0x7f048458e929
[  192.096679][ T6927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  192.096693][ T6927] RSP: 002b:00007f04853b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  192.096710][ T6927] RAX: ffffffffffffffda RBX: 00007f04847b5fa0 RCX: 00007f048458e929
[  192.096720][ T6927] RDX: 3f00000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  192.096730][ T6927] RBP: 00007f0484610ca1 R08: 0000000000000000 R09: 0000000000000000
[  192.096735][ T6927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  192.096741][ T6927] R13: 0000000000000000 R14: 00007f04847b5fa0 R15: 00007fff232e77b8
[  192.096756][ T6927]  </TASK>
[  192.249775][ T6929] netlink: 32 bytes leftover after parsing attributes in process `syz.0.336'.
[  192.285354][ T6929] bond1: entered promiscuous mode
[  192.287941][ T6929] 8021q: adding VLAN 0 to HW filter on device bond1
[  192.326634][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.338'.
[  192.373036][ T6934] netlink: 'syz.2.338': attribute type 1 has an invalid length.
[  192.458793][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.342'.
[  192.463414][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.342'.
[  192.528601][ T6951] netlink: 'syz.2.342': attribute type 16 has an invalid length.
[  192.531979][ T6951] netlink: 'syz.2.342': attribute type 17 has an invalid length.
[  192.542923][ T6953] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  192.563120][ T6953] vxcan3: entered allmulticast mode
[  192.696753][ T6957] netlink: 56 bytes leftover after parsing attributes in process `syz.0.347'.
[  192.798607][ T6961] netlink: 'syz.0.349': attribute type 12 has an invalid length.
[  192.801227][ T6961] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.349'.
[  192.868691][ T6963] syzkaller0: entered promiscuous mode
[  192.870605][ T6963] syzkaller0: entered allmulticast mode
[  193.206952][ T6969] netlink: 28 bytes leftover after parsing attributes in process `syz.0.351'.
[  193.341773][ T6974] netlink: 'syz.0.353': attribute type 13 has an invalid length.
[  193.344334][ T6974] netlink: 'syz.0.353': attribute type 17 has an invalid length.
[  193.402617][ T6974] bridge0: left promiscuous mode
[  193.413579][ T6974] 8021q: adding VLAN 0 to HW filter on device bond0
[  193.417864][ T6974] 8021q: adding VLAN 0 to HW filter on device team0
[  193.424839][ T6974] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  193.741706][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  193.743754][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  193.814408][ T7002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.361'.
[  193.894344][ T7002] team0 (unregistering): Port device team_slave_0 removed
[  193.897999][ T7002] team0 (unregistering): Port device team_slave_1 removed
[  194.471109][ T7004] netlink: 'syz.2.362': attribute type 12 has an invalid length.
[  194.473634][ T7004] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.362'.
[  194.508212][ T7004] bridge_slave_0: entered allmulticast mode
[  194.608290][ T7011] bond2: entered promiscuous mode
[  194.611847][ T7011] bond2: entered allmulticast mode
[  194.710572][ T6908] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  194.719711][ T6908] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  194.726795][ T6908] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  194.734329][ T6908] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  194.858830][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.865737][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.032829][ T7051] team0: No ports can be present during mode change
[  196.094850][ T7091] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  196.295947][ T7115] validate_nla: 1 callbacks suppressed
[  196.295958][ T7115] netlink: 'syz.0.402': attribute type 10 has an invalid length.
[  196.313201][ T7105] team0 (unregistering): Port device team_slave_0 removed
[  196.323082][ T7105] team0 (unregistering): Port device team_slave_1 removed
[  196.468723][ T7134] team0: No ports can be present during mode change
[  196.628224][ T7145] __nla_validate_parse: 7 callbacks suppressed
[  196.628243][ T7145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.413'.
[  196.636648][ T7145] netlink: 24 bytes leftover after parsing attributes in process `syz.2.413'.
[  196.705873][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.415'.
[  196.776714][ T7157] netlink: 16 bytes leftover after parsing attributes in process `syz.2.417'.
[  198.058799][ T7190] netlink: 20 bytes leftover after parsing attributes in process `syz.0.425'.
[  198.067398][ T7190] netlink: 20 bytes leftover after parsing attributes in process `syz.0.425'.
[  199.077499][ T7218] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  199.085373][ T7218] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  199.105154][ T7222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.436'.
[  199.118454][ T7223] netlink: 16 bytes leftover after parsing attributes in process `syz.2.434'.
[  199.285646][ T7234] netlink: 32 bytes leftover after parsing attributes in process `syz.1.441'.
[  199.455445][ T7249] netlink: 28 bytes leftover after parsing attributes in process `syz.0.445'.
[  199.527586][ T7255] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  199.807398][ T7274] tipc: Started in network mode
[  199.809243][ T7274] tipc: Node identity 9aba741200d1, cluster identity 4711
[  199.811785][ T7274] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  199.824917][ T7274] tipc: Resetting bearer <eth:syzkaller0>
[  199.857089][ T7276] netlink: 'syz.0.455': attribute type 1 has an invalid length.
[  199.907646][ T7278] batman_adv: batadv0: Interface activated: batadv_slave_0
[  200.152360][ T7296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  200.163185][ T7297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  200.223194][ T7304] SET target dimension over the limit!
[  200.940327][  T792] tipc: Node number set to 2590733330
[  201.033438][ T7389] macvlan0: entered allmulticast mode
[  201.040754][ T7389] netlink: 'syz.1.494': attribute type 1 has an invalid length.
[  201.043137][ T7389] netlink: 'syz.1.494': attribute type 2 has an invalid length.
[  201.136074][ T7398] netlink: 'syz.1.499': attribute type 8 has an invalid length.
[  201.145712][ T7402] netlink: 'syz.1.499': attribute type 8 has an invalid length.
[  201.200561][ T7409] caif0: entered allmulticast mode
[  201.213096][ T7413] xt_hashlimit: size too large, truncated to 1048576
[  201.520537][ T7428] nbd: couldn't find a device at index 65546
[  201.531943][ T7442] netlink: 'syz.0.512': attribute type 1 has an invalid length.
[  201.813589][ T7462] __nla_validate_parse: 9 callbacks suppressed
[  201.813601][ T7462] netlink: 16 bytes leftover after parsing attributes in process `syz.0.519'.
[  201.825330][ T7462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.519'.
[  202.467739][ T7497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.530'.
[  202.471707][ T7497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.530'.
[  202.587428][ T7503] netlink: 'syz.1.532': attribute type 1 has an invalid length.
[  202.594765][ T7503] netlink: 'syz.1.532': attribute type 1 has an invalid length.
[  202.731274][ T7511] netlink: 16 bytes leftover after parsing attributes in process `syz.2.534'.
[  202.739560][ T7516] netlink: 'syz.0.536': attribute type 12 has an invalid length.
[  202.741995][ T7516] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.536'.
[  202.819228][ T7520] bridge_slave_0: left allmulticast mode
[  202.821510][ T7520] bridge_slave_0: left promiscuous mode
[  202.823373][ T7520] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.841018][ T7520] bridge_slave_1: left allmulticast mode
[  202.842817][ T7520] bridge_slave_1: left promiscuous mode
[  202.844699][ T7520] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.855930][ T7524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.537'.
[  202.858895][ T7520] bond0: (slave bond_slave_0): Releasing backup interface
[  202.866905][ T7520] bond0: (slave bond_slave_1): Releasing backup interface
[  202.873902][ T7520] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  202.876212][ T7520] batman_adv: batadv0: Removing interface: batadv_slave_0
[  202.883218][ T7520] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  202.885541][ T7520] batman_adv: batadv0: Removing interface: batadv_slave_1
[  202.894349][ T7522] team0: No ports can be present during mode change
[  202.966208][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.542'.
[  203.064609][ T7526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  203.211721][ T7550] netlink: 'syz.1.547': attribute type 303 has an invalid length.
[  203.216373][ T7550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.547'.
[  203.220688][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.547'.
[  203.224428][ T7551] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  203.253334][ T7551] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  204.148732][ T7584] Driver unsupported XDP return value 0 on prog  (id 79) dev N/A, expect packet loss!
[  204.172304][ T7584] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  204.176950][ T7584] macsec1: entered allmulticast mode
[  204.179509][ T7584] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  204.183685][ T7584] batman_adv: batadv0: Adding interface: macsec1
[  204.186114][ T7584] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  204.196161][ T7584] batman_adv: batadv0: Interface activated: macsec1
[  204.423875][ T7597] netlink: 'syz.1.563': attribute type 1 has an invalid length.
[  204.447225][ T7597] 8021q: adding VLAN 0 to HW filter on device bond4
[  204.461251][ T7597] netlink: 'syz.1.563': attribute type 1 has an invalid length.
[  204.478428][ T7597] veth5: entered promiscuous mode
[  204.482432][ T7597] erspan0: entered allmulticast mode
[  204.518644][ T7605] netlink: 'syz.1.566': attribute type 1 has an invalid length.
[  204.554058][ T7605] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  204.570551][ T5663] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  204.577266][ T7605] 8021q: adding VLAN 0 to HW filter on device bond5
[  204.601369][ T7605] veth7: entered promiscuous mode
[  204.604110][ T7613] ieee802154 phy1 wpan1: encryption failed: -22
[  204.606048][ T7605] bond5: (slave veth7): Enslaving as a backup interface with a down link
[  204.606083][ T7613] ieee802154 phy1 wpan1: encryption failed: -22
[  204.664880][ T7618] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  204.667784][ T7618] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  204.681721][ T5663] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  204.718132][ T7627] 8021q: VLANs not supported on ipvlan1
[  204.984848][ T7651] pimreg3: entered allmulticast mode
[  204.987479][ T7650] pimreg3: left allmulticast mode
[  205.042452][ T7654] tipc: Enabling of bearer <et:g> rejected, media not registered
[  205.521490][ T7664] dvmrp8: entered allmulticast mode
[  205.574869][ T7663] dvmrp8: left allmulticast mode
[  205.676201][ T7669] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004
[  205.836671][ T7676] vlan2: entered promiscuous mode
[  205.838371][ T7676] bridge0: entered promiscuous mode
[  205.840228][ T7676] vlan2: entered allmulticast mode
[  205.841793][ T7676] bridge0: entered allmulticast mode
[  206.005422][ T7692] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  206.112116][ T7703] netlink: 'syz.0.605': attribute type 13 has an invalid length.
[  206.170975][ T7711] pim6reg: entered allmulticast mode
[  206.173518][ T7711] bridge0: entered allmulticast mode
[  206.249959][ T7710] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  206.265747][ T7710] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  206.273949][ T7710] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  206.355724][ T7728] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[  206.394596][ T7730] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  206.806283][ T7737] netlink: 'syz.1.618': attribute type 1 has an invalid length.
[  206.842022][ T7737] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[  206.847134][ T7737] bond6: (slave vxcan3): Error -95 calling set_mac_address
[  206.886818][ T7739] gretap1: entered promiscuous mode
[  206.891702][ T7739] bond6: (slave gretap1): making interface the new active one
[  206.895120][ T7739] bond6: (slave gretap1): Enslaving as an active interface with an up link
[  207.191965][ T7755] vlan3: entered promiscuous mode
[  207.832768][ T7761] __nla_validate_parse: 6 callbacks suppressed
[  207.832779][ T7761] netlink: 68 bytes leftover after parsing attributes in process `syz.1.623'.
[  207.926213][ T5663] syzkaller0: tun_net_xmit 76
[  207.928028][ T5663] syzkaller0: tun_net_xmit 48
[  207.931375][ T7767] syzkaller0: create flow: hash 586574322 index 1
[  207.959229][   T24] syzkaller0: tun_net_xmit 76
[  207.978259][ T7765] syzkaller0: delete flow: hash 586574322 index 1
[  208.930543][ T7800] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.632'.
[  208.933471][ T7800] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  208.936120][ T7800] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  208.954936][ T7805] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  208.958120][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  208.961220][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  209.027463][ T7808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.633'.
[  209.030912][ T7808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.633'.
[  209.037424][ T7808] D: renamed from syzkaller0 (while UP)
[  209.041481][ T7808] tipc: Disabling bearer <eth:syzkaller0>
[  209.131263][ T7814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.637'.
[  209.136920][ T7814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.637'.
[  209.288740][ T7830] netlink: 844 bytes leftover after parsing attributes in process `syz.0.644'.
[  209.292830][ T7829] netlink: 27 bytes leftover after parsing attributes in process `syz.2.643'.
[  209.306282][ T7830] netlink: 56 bytes leftover after parsing attributes in process `syz.0.644'.
[  209.315181][ T7830] netlink: 20 bytes leftover after parsing attributes in process `syz.0.644'.
[  209.383510][ T7840] openvswitch: netlink: Duplicate or invalid key (type 0).
[  209.385794][ T7840] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  209.391462][ T7840] vlan0: entered promiscuous mode
[  209.603227][ T7851] Bluetooth: MGMT ver 1.23
[  209.816497][ T7871] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  209.819142][ T7871] syzkaller0: entered promiscuous mode
[  209.820887][ T7871] syzkaller0: entered allmulticast mode
[  209.831343][ T7871] tipc: Resetting bearer <eth:syzkaller0>
[  209.835421][ T7870] tipc: Resetting bearer <eth:syzkaller0>
[  209.842902][ T7870] tipc: Disabling bearer <eth:syzkaller0>
[  210.127988][ T7890] batadv_slave_1: entered promiscuous mode
[  210.130672][ T7890] batadv_slave_1: left promiscuous mode
[  210.176558][ T7896] xt_hashlimit: size too large, truncated to 1048576
[  210.570252][ T7922] netlink: 'syz.1.676': attribute type 2 has an invalid length.
[  210.572859][ T7922] nbd: must specify a device to reconfigure
[  210.628810][ T7928] netlink: 'syz.2.678': attribute type 1 has an invalid length.
[  210.665744][ T7928] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  210.674360][ T5880] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  210.675404][ T7928] 8021q: adding VLAN 0 to HW filter on device bond4
[  210.675957][ T7929] netlink: 'syz.1.679': attribute type 12 has an invalid length.
[  210.693832][ T7928] veth5: entered promiscuous mode
[  210.698153][ T7928] bond4: (slave veth5): Enslaving as a backup interface with a down link
[  210.779136][ T5880] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  210.974542][ T7942] team0 (unregistering): Port device bridge1 removed
[  211.049502][ T7954] netlink: 'syz.2.687': attribute type 21 has an invalid length.
[  211.223167][ T7974] netlink: 'syz.1.689': attribute type 13 has an invalid length.
[  211.225509][ T7974] netlink: 'syz.1.689': attribute type 17 has an invalid length.
[  211.240909][ T7974] erspan0: left allmulticast mode
[  211.259850][ T7974] caif0: left allmulticast mode
[  211.261345][ T7974] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  211.284951][ T7968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  211.339331][ T7968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  211.393762][ T7968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  211.900843][ T7968] syz.1.689 (7968) used greatest stack depth: 18904 bytes left
[  212.040089][   T13] bond5: (slave ip6gretap1): link status up again after 0 ms
[  212.043304][   T13] bond5: (slave ip6gretap1): failed to get link speed/duplex
[  212.149651][ T5880] bond5: (slave ip6gretap1): failed to get link speed/duplex
[  212.217199][ T8000] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  212.269933][ T5888] bond5: (slave ip6gretap1): failed to get link speed/duplex
[  212.357417][ T5888] bond4: (slave ip6gretap1): link status up again after 0 ms
[  212.365603][ T5888] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  212.442579][ T8035] bridge_slave_1: left allmulticast mode
[  212.444574][ T8035] bridge_slave_1: left promiscuous mode
[  212.446556][ T8035] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.452907][ T8035] bridge_slave_0: left allmulticast mode
[  212.454774][ T8035] bridge_slave_0: left promiscuous mode
[  212.456765][ T8035] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.471344][ T8035] bridge0 (unregistering): left allmulticast mode
[  212.701365][ T8048] netlink: 'syz.0.708': attribute type 13 has an invalid length.
[  212.703896][ T8048] netlink: 'syz.0.708': attribute type 17 has an invalid length.
[  212.842204][ T8052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  212.913178][ T8048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  212.970816][ T8052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  212.988407][ T8057] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  212.992063][ T8057] syzkaller0: entered promiscuous mode
[  212.993777][ T8057] syzkaller0: entered allmulticast mode
[  213.007835][ T8057] tipc: Resetting bearer <eth:syzkaller0>
[  213.014851][ T8056] tipc: Resetting bearer <eth:syzkaller0>
[  213.026073][ T8056] tipc: Disabling bearer <eth:syzkaller0>
[  213.291455][ T8066] netlink: 'syz.1.714': attribute type 1 has an invalid length.
[  213.309759][ T8066] 8021q: adding VLAN 0 to HW filter on device bond7
[  213.323847][ T8066] 8021q: adding VLAN 0 to HW filter on device bond7
[  213.326287][ T8066] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address
[  213.331782][ T8066] bond7: (slave vxcan3): Error -95 calling set_mac_address
[  213.382116][ T8068] veth9: entered promiscuous mode
[  213.385706][ T8068] bond7: (slave veth9): Enslaving as an active interface with a down link
[  213.392373][ T8066] erspan0: entered allmulticast mode
[  213.397770][ T8066] bond7: (slave erspan0): making interface the new active one
[  213.400977][ T8066] bond7: (slave erspan0): Enslaving as an active interface with an up link
[  213.675563][ T8078] netlink: 'syz.0.718': attribute type 7 has an invalid length.
[  213.702011][ T8081] __nla_validate_parse: 20 callbacks suppressed
[  213.702025][ T8081] netlink: 52 bytes leftover after parsing attributes in process `syz.1.719'.
[  213.712632][ T8076] IPv6: NLM_F_CREATE should be specified when creating new route
[  213.926187][ T8104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.727'.
[  213.971041][ T8117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.730'.
[  214.006964][ T8119] lo: entered promiscuous mode
[  214.008620][ T8119] lo: entered allmulticast mode
[  214.017328][ T8120] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  214.022731][ T8120] syzkaller0: entered promiscuous mode
[  214.022806][ T8121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.730'.
[  214.024519][ T8120] syzkaller0: entered allmulticast mode
[  214.056235][ T8120] tipc: Resetting bearer <eth:syzkaller0>
[  214.071900][ T8118] tipc: Resetting bearer <eth:syzkaller0>
[  214.094830][ T8118] tipc: Disabling bearer <eth:syzkaller0>
[  214.134225][ T8125] xt_CT: You must specify a L4 protocol and not use inversions on it
[  214.230766][ T8134] netlink: 20 bytes leftover after parsing attributes in process `syz.1.735'.
[  214.281686][ T8143] netlink: 'syz.1.738': attribute type 7 has an invalid length.
[  214.368880][ T8147] netlink: 212364 bytes leftover after parsing attributes in process `syz.1.740'.
[  214.384995][ T8148] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 !
[  214.400379][ T8150] netlink: 'syz.1.741': attribute type 12 has an invalid length.
[  214.404180][ T8150] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.741'.
[  214.502791][ T8157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.743'.
[  214.536471][ T8159] netlink: 20 bytes leftover after parsing attributes in process `syz.1.744'.
[  214.541032][ T8159] netlink: 20 bytes leftover after parsing attributes in process `syz.1.744'.
[  214.585692][ T8162] pim6reg0: tun_chr_ioctl cmd 2148553947
[  215.245603][ T8186] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  215.248120][ T8186] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  215.252464][ T8186] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  215.255064][ T8186] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  215.259407][ T8186] batman_adv: batadv0: Interface deactivated: macsec1
[  215.261708][ T8186] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  215.296685][ T8196] bridge_slave_0: entered promiscuous mode
[  215.464748][ T8209] netlink: 'syz.0.758': attribute type 1 has an invalid length.
[  215.579054][ T8207] block nbd0: server does not support multiple connections per device.
[  215.583024][ T8207] block nbd0: shutting down sockets
[  215.632299][ T8209] veth5: entered promiscuous mode
[  215.779952][ T5663] net_ratelimit: 50 callbacks suppressed
[  215.779973][ T5663] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  215.788009][ T8215] netlink: 'syz.0.760': attribute type 13 has an invalid length.
[  215.835353][ T8223] bond4: (slave ip6gretap1): Removing an active aggregator
[  215.839736][ T8223] bond4: (slave ip6gretap1): Releasing backup interface
[  215.841816][ T8223] bond4: (slave ip6gretap1): the permanent HWaddr of slave - 02:c6:28:15:67:1c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  215.856535][ T8223] bond4: (slave veth5): Releasing backup interface
[  215.984494][ T8223] veth1_to_bridge: entered promiscuous mode
[  216.000547][ T8238] netlink: 'syz.0.766': attribute type 4 has an invalid length.
[  216.023334][ T8238] netlink: 'syz.0.766': attribute type 3 has an invalid length.
[  216.360041][ T8276] ieee802154 phy1 wpan1: encryption failed: -22
[  216.385526][ T8279] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  216.471325][ T8275] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  216.505999][ T8275] siw: device registration error -23
[  216.617088][ T8302] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  216.645621][ T8311] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  216.866132][ T8329] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  216.986881][ T8323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  217.270481][ T8338] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[  217.795162][ T8369] validate_nla: 7 callbacks suppressed
[  217.795173][ T8369] netlink: 'syz.0.813': attribute type 12 has an invalid length.
[  217.993156][ T8383] netlink: 'syz.1.818': attribute type 10 has an invalid length.
[  217.999419][ T8383] dummy0: entered promiscuous mode
[  218.007024][ T8383] bridge0: port 1(dummy0) entered blocking state
[  218.009442][ T8383] bridge0: port 1(dummy0) entered disabled state
[  218.011674][ T8383] dummy0: entered allmulticast mode
[  218.048729][ T8388] bpq0: entered promiscuous mode
[  218.096443][ T8391] netlink: 'syz.1.821': attribute type 12 has an invalid length.
[  218.165425][ T8393] tap0: tun_chr_ioctl cmd 1074025677
[  218.167286][ T8393] tap0: linktype set to 270
[  218.270245][ T8401] netlink: 'syz.0.825': attribute type 1 has an invalid length.
[  218.288393][ T8401] 8021q: adding VLAN 0 to HW filter on device bond2
[  218.335213][ T8411] netlink: 'syz.0.828': attribute type 7 has an invalid length.
[  218.653192][ T8445] bpq0: left promiscuous mode
[  218.658864][ T8445] netlink: 'syz.1.839': attribute type 1 has an invalid length.
[  218.771450][ T8461] IPVS: length: 209 != 24
[  218.798395][ T8464] __nla_validate_parse: 66 callbacks suppressed
[  218.798406][ T8464] netlink: 27 bytes leftover after parsing attributes in process `syz.1.845'.
[  218.837601][ T8467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.846'.
[  218.912442][ T8475] netlink: 20 bytes leftover after parsing attributes in process `syz.0.848'.
[  218.915342][ T8475] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[  218.924492][ T8475] netlink: 16 bytes leftover after parsing attributes in process `syz.0.848'.
[  218.974664][ T8487] netlink: 28 bytes leftover after parsing attributes in process `syz.1.852'.
[  219.067314][ T8489] netlink: 20 bytes leftover after parsing attributes in process `syz.0.853'.
[  219.106505][ T8489] netlink: 'syz.0.853': attribute type 4 has an invalid length.
[  219.183176][ T8504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.857'.
[  219.215360][ T8506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.858'.
[  219.218637][ T8506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.858'.
[  219.224390][ T8506] netlink: 32 bytes leftover after parsing attributes in process `syz.1.858'.
[  219.342667][ T8509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  219.397361][ T8509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  219.452396][ T8509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  219.691979][ T8518] netlink: 'syz.2.862': attribute type 21 has an invalid length.
[  219.887822][ T8527] netlink: 'syz.2.866': attribute type 7 has an invalid length.
[  219.987949][   T24] IPVS: starting estimator thread 0...
[  220.007767][ T8534] vlan4: entered promiscuous mode
[  220.012917][ T8534] vlan4: entered allmulticast mode
[  220.014485][ T8534] bridge0: entered allmulticast mode
[  220.060070][ T3554] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  220.091506][ T8536] IPVS: using max 61 ests per chain, 146400 per kthread
[  220.096604][ T8533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  220.182322][ T8554] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  220.184831][ T8554] CPU: 0 UID: 0 PID: 8554 Comm: syz.1.878 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  220.184844][ T8554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  220.184850][ T8554] Call Trace:
[  220.184855][ T8554]  <TASK>
[  220.184859][ T8554]  dump_stack_lvl+0x189/0x250
[  220.184876][ T8554]  ? __pfx_dump_stack_lvl+0x10/0x10
[  220.184887][ T8554]  ? __pfx__printk+0x10/0x10
[  220.184901][ T8554]  ? kernfs_path_from_node+0x2c/0x260
[  220.184910][ T8554]  ? kernfs_path_from_node+0x2c/0x260
[  220.184918][ T8554]  ? kernfs_path_from_node+0x2c/0x260
[  220.184928][ T8554]  ? kernfs_path_from_node+0x22c/0x260
[  220.184935][ T8554]  ? kernfs_path_from_node+0x2c/0x260
[  220.184945][ T8554]  sysfs_warn_dup+0x8e/0xa0
[  220.184980][ T8554]  sysfs_do_create_link_sd+0xc0/0x110
[  220.184990][ T8554]  device_add_class_symlinks+0x1cf/0x240
[  220.185005][ T8554]  device_add+0x475/0xb50
[  220.185019][ T8554]  wiphy_register+0x199a/0x26b0
[  220.185040][ T8554]  ? __pfx_wiphy_register+0x10/0x10
[  220.185049][ T8554]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  220.185064][ T8554]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  220.185080][ T8554]  ieee80211_register_hw+0x33e1/0x4120
[  220.185101][ T8554]  ? ieee80211_register_hw+0x14c1/0x4120
[  220.185117][ T8554]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  220.185131][ T8554]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  220.185148][ T8554]  ? __hrtimer_setup+0x187/0x210
[  220.185157][ T8554]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  220.185174][ T8554]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  220.185201][ T8554]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  220.185213][ T8554]  ? trace_kmalloc+0x1f/0xd0
[  220.185224][ T8554]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  220.185237][ T8554]  ? kstrndup+0xbf/0x160
[  220.185256][ T8554]  hwsim_new_radio_nl+0xea4/0x1b10
[  220.185269][ T8554]  ? __pfx___nla_validate_parse+0x10/0x10
[  220.185287][ T8554]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  220.185306][ T8554]  ? __nla_parse+0x40/0x60
[  220.185318][ T8554]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  220.185333][ T8554]  genl_family_rcv_msg_doit+0x215/0x300
[  220.185346][ T8554]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  220.185361][ T8554]  ? bpf_lsm_capable+0x9/0x20
[  220.185371][ T8554]  ? security_capable+0x7e/0x2e0
[  220.185384][ T8554]  genl_rcv_msg+0x60e/0x790
[  220.185397][ T8554]  ? __pfx_genl_rcv_msg+0x10/0x10
[  220.185406][ T8554]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  220.185425][ T8554]  netlink_rcv_skb+0x208/0x470
[  220.185438][ T8554]  ? __pfx_genl_rcv_msg+0x10/0x10
[  220.185447][ T8554]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  220.185466][ T8554]  ? down_read+0x1ad/0x2e0
[  220.185477][ T8554]  genl_rcv+0x28/0x40
[  220.185485][ T8554]  netlink_unicast+0x75c/0x8e0
[  220.185500][ T8554]  netlink_sendmsg+0x805/0xb30
[  220.185516][ T8554]  ? __pfx_netlink_sendmsg+0x10/0x10
[  220.185529][ T8554]  ? aa_sock_msg_perm+0x94/0x160
[  220.185539][ T8554]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  220.185547][ T8554]  ? __pfx_netlink_sendmsg+0x10/0x10
[  220.185559][ T8554]  __sock_sendmsg+0x21c/0x270
[  220.185570][ T8554]  ____sys_sendmsg+0x505/0x830
[  220.185586][ T8554]  ? __pfx_____sys_sendmsg+0x10/0x10
[  220.185602][ T8554]  ? import_iovec+0x74/0xa0
[  220.185615][ T8554]  ___sys_sendmsg+0x21f/0x2a0
[  220.185628][ T8554]  ? __pfx____sys_sendmsg+0x10/0x10
[  220.185658][ T8554]  ? __fget_files+0x2a/0x420
[  220.185665][ T8554]  ? __fget_files+0x3a0/0x420
[  220.185678][ T8554]  __x64_sys_sendmsg+0x19b/0x260
[  220.185691][ T8554]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  220.185713][ T8554]  ? do_syscall_64+0xbe/0x3b0
[  220.185724][ T8554]  do_syscall_64+0xfa/0x3b0
[  220.185732][ T8554]  ? lockdep_hardirqs_on+0x9c/0x150
[  220.185740][ T8554]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.185749][ T8554]  ? exc_page_fault+0x9f/0xf0
[  220.185759][ T8554]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.185768][ T8554] RIP: 0033:0x7ff57c78e929
[  220.185777][ T8554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  220.185784][ T8554] RSP: 002b:00007ff57d5bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  220.185794][ T8554] RAX: ffffffffffffffda RBX: 00007ff57c9b5fa0 RCX: 00007ff57c78e929
[  220.185800][ T8554] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  220.185806][ T8554] RBP: 00007ff57c810ca1 R08: 0000000000000000 R09: 0000000000000000
[  220.185812][ T8554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  220.185817][ T8554] R13: 0000000000000000 R14: 00007ff57c9b5fa0 R15: 00007fffd32cde38
[  220.185831][ T8554]  </TASK>
[  220.390548][ T8561] netlink: 'syz.1.880': attribute type 83 has an invalid length.
[  220.692267][ T8589] syzkaller0: entered promiscuous mode
[  220.693989][ T8589] syzkaller0: entered allmulticast mode
[  222.352922][ T8686] lo: left promiscuous mode
[  222.354419][ T8686] lo: left allmulticast mode
[  222.372244][ T8686] gretap0: refused to change device tx_queue_len
[  222.374281][ T8686] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  222.583240][ T8705] 8021q: adding VLAN 0 to HW filter on device bond6
[  222.599187][ T8704] 8021q: adding VLAN 0 to HW filter on device bond6
[  222.601547][ T8704] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address
[  222.605447][ T8704] bond6: (slave vxcan1): Error -95 calling set_mac_address
[  222.621002][ T8705] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address
[  222.624906][ T8705] bond6: (slave vxcan1): Error -95 calling set_mac_address
[  222.781675][ T8720] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  222.788212][ T8720] syzkaller0: entered promiscuous mode
[  222.790595][ T8720] syzkaller0: entered allmulticast mode
[  222.798606][ T8720] tipc: Resetting bearer <eth:syzkaller0>
[  222.803331][ T8719] tipc: Resetting bearer <eth:syzkaller0>
[  222.815566][ T8719] tipc: Disabling bearer <eth:syzkaller0>
[  222.826844][ T8724] openvswitch: netlink: Duplicate or invalid key (type 0).
[  222.829741][ T8724] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  223.098386][ T8742] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300
[  223.313394][ T8759] dummy0: left allmulticast mode
[  223.315946][ T8759] bridge0: port 1(dummy0) entered disabled state
[  223.320790][ T8762] validate_nla: 5 callbacks suppressed
[  223.320799][ T8762] netlink: 'syz.2.934': attribute type 10 has an invalid length.
[  223.463974][ T8766] netlink: 'syz.1.935': attribute type 7 has an invalid length.
[  223.923587][ T8778] netlink: 'syz.0.938': attribute type 10 has an invalid length.
[  223.926413][ T8779] netlink: 'syz.0.938': attribute type 10 has an invalid length.
[  224.424634][ T8788] __nla_validate_parse: 20 callbacks suppressed
[  224.424646][ T8788] netlink: 14 bytes leftover after parsing attributes in process `syz.2.941'.
[  224.454356][ T8795] netlink: 'syz.0.942': attribute type 7 has an invalid length.
[  224.528798][ T8788] bond0 (unregistering): Released all slaves
[  224.555799][ T8792] veth1_to_bond: entered allmulticast mode
[  224.622370][ T8800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.943'.
[  224.655502][ T8800] veth1_to_bond (unregistering): left allmulticast mode
[  224.770720][ T8823] netlink: 28 bytes leftover after parsing attributes in process `syz.0.947'.
[  224.826930][ T8823] netlink: 248 bytes leftover after parsing attributes in process `syz.0.947'.
[  224.894064][ T8835] netlink: 'syz.0.948': attribute type 4 has an invalid length.
[  225.020220][ T8845] netlink: 56 bytes leftover after parsing attributes in process `syz.0.949'.
[  225.023158][ T8845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.949'.
[  225.047429][ T8845] netlink: 24 bytes leftover after parsing attributes in process `syz.0.949'.
[  225.097758][ T8853] netlink: 36 bytes leftover after parsing attributes in process `syz.0.950'.
[  225.134902][ T8853] netlink: 12 bytes leftover after parsing attributes in process `syz.0.950'.
[  225.281654][ T8870] netlink: 24 bytes leftover after parsing attributes in process `syz.0.952'.
[  225.422767][ T8891] netlink: 'syz.0.956': attribute type 7 has an invalid length.
[  225.534479][ T8903] macsec1: entered allmulticast mode
[  225.536076][ T8903] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode
[  225.542013][ T8903] mac80211_hwsim hwsim3 wlan0: left allmulticast mode
[  225.637518][ T8888] sctp: [Deprecated]: syz.2.955 (pid 8888) Use of int in maxseg socket option.
[  225.637518][ T8888] Use struct sctp_assoc_value instead
[  225.689967][ T8913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  225.907911][ T8941] netlink: 'syz.0.973': attribute type 2 has an invalid length.
[  225.911316][ T8941] netlink: 'syz.0.973': attribute type 8 has an invalid length.
[  226.147225][ T8963] macsec1: entered allmulticast mode
[  226.149706][ T8963] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode
[  226.153477][ T8963] batman_adv: batadv0: Adding interface: macsec1
[  226.155359][ T8963] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  226.164366][ T8963] batman_adv: batadv0: Interface activated: macsec1
[  226.199513][ T8965] netlink: 'syz.0.982': attribute type 2 has an invalid length.
[  226.264087][ T8969] 8021q: adding VLAN 0 to HW filter on device bond3
[  226.279802][ T8969] 8021q: adding VLAN 0 to HW filter on device bond3
[  226.282241][ T8969] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  226.286159][ T8969] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  226.718408][ T8993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  226.722083][ T8992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  226.848480][ T9011] batman_adv: batadv0: Removing interface: macsec1
[  226.903054][ T9016] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  227.571860][ T9083] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  227.580710][ T9086] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  227.601202][ T9086] syzkaller0: entered promiscuous mode
[  227.611015][ T9086] syzkaller0: entered allmulticast mode
[  227.623683][ T9086] tipc: Resetting bearer <eth:syzkaller0>
[  228.212230][ T9141] macsec0: entered allmulticast mode
[  228.215431][ T9141] veth1_macvtap: entered allmulticast mode
[  228.217282][ T9141] macsec0: left allmulticast mode
[  228.218869][ T9141] veth1_macvtap: left allmulticast mode
[  229.038719][ T9179] bridge0: entered allmulticast mode
[  229.046655][ T9182] xt_TPROXY: Can be used only with -p tcp or -p udp
[  229.135858][ T9192] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  229.254115][ T9204] sit0: Master is either lo or non-ether device
[  229.350940][ T9215] validate_nla: 6 callbacks suppressed
[  229.350951][ T9215] netlink: 'syz.0.1053': attribute type 9 has an invalid length.
[  229.359197][ T9215] netlink: 'syz.0.1053': attribute type 6 has an invalid length.
[  229.515397][ T9236] netlink: 'syz.1.1060': attribute type 12 has an invalid length.
[  229.524922][ T9236] __nla_validate_parse: 22 callbacks suppressed
[  229.524933][ T9236] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.1060'.
[  229.595231][ T9247] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  229.605464][ T9248] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  229.656842][ T9254] netlink: 'syz.0.1065': attribute type 1 has an invalid length.
[  229.674044][ T9254] 8021q: adding VLAN 0 to HW filter on device bond4
[  229.685224][ T9254] bond4: (slave gretap1): making interface the new active one
[  229.700124][ T9254] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  229.804708][ T9263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1066'.
[  230.579506][ T9276] netlink: 'syz.1.1070': attribute type 13 has an invalid length.
[  230.581999][ T9276] netlink: 'syz.1.1070': attribute type 17 has an invalid length.
[  230.591769][ T9276] erspan0: left allmulticast mode
[  230.605342][ T9276] 8021q: adding VLAN 0 to HW filter on device bond0
[  230.607773][ T9276] dummy0: left promiscuous mode
[  230.613332][ T9276] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  230.716495][ T9291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1075'.
[  230.723425][ T9291] xfrm1: entered promiscuous mode
[  230.725127][ T9291] xfrm1: entered allmulticast mode
[  230.859660][ T9300] netlink: 'syz.2.1078': attribute type 8 has an invalid length.
[  230.878275][ T9302] netlink: 'syz.1.1080': attribute type 9 has an invalid length.
[  230.882777][ T9302] netlink: 'syz.1.1080': attribute type 6 has an invalid length.
[  231.195614][ T9310] xt_l2tp: invalid flags combination: 4
[  231.264349][ T9315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1084'.
[  231.268136][ T9315] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  231.272135][ T9315] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  231.333485][   T52] wlan0: Trigger new scan to find an IBSS to join
[  232.003778][ T9358] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1097'.
[  232.021251][ T9358] sch_tbf: burst 88 is lower than device veth9 mtu (1514) !
[  232.111943][ T9367] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1100'.
[  232.241561][ T9380] bridge0: entered allmulticast mode
[  232.254669][ T9380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1103'.
[  232.257555][ T9380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1103'.
[  232.363119][ T9390] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1106'.
[  232.433169][ T9403] netlink: 'syz.2.1109': attribute type 1 has an invalid length.
[  232.453548][ T9403] bond0: entered promiscuous mode
[  232.455327][ T9403] 8021q: adding VLAN 0 to HW filter on device bond0
[  232.466136][ T9403] 8021q: adding VLAN 0 to HW filter on device bond0
[  232.468418][ T9403] bond0: (slave vcan0): The slave device specified does not support setting the MAC address
[  232.479290][ T9403] bond0: (slave vcan0): Setting fail_over_mac to active for active-backup mode
[  232.492041][ T9403] bond0: (slave vcan0): making interface the new active one
[  232.494510][ T9403] vcan0: entered promiscuous mode
[  232.497918][ T9403] bond0: (slave vcan0): Enslaving as an active interface with an up link
[  232.519295][ T9417] syzkaller1: entered promiscuous mode
[  232.521032][ T9417] syzkaller1: entered allmulticast mode
[  233.024783][ T9473] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1131'.
[  233.030826][ T9476] bridge0: port 1(veth0_to_bridge) entered blocking state
[  233.033059][ T9476] bridge0: port 1(veth0_to_bridge) entered disabled state
[  233.035309][ T9476] veth0_to_bridge: entered allmulticast mode
[  233.038168][ T9476] veth0_to_bridge: entered promiscuous mode
[  233.198239][ T9496] syzkaller1: entered promiscuous mode
[  233.202380][ T9496] syzkaller1: entered allmulticast mode
[  233.336286][ T9506] !: renamed from dummy0 (while UP)
[  233.768619][ T9560] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  234.289317][   T36] wlan0: Trigger new scan to find an IBSS to join
[  234.570323][ T9632] __nla_validate_parse: 4 callbacks suppressed
[  234.570334][ T9632] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1159'.
[  234.997838][ T9657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1164'.
[  235.093358][ T9667] validate_nla: 3 callbacks suppressed
[  235.093369][ T9667] netlink: 'syz.0.1168': attribute type 2 has an invalid length.
[  235.097439][ T9667] netlink: 'syz.0.1168': attribute type 2 has an invalid length.
[  235.246798][ T9675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1172'.
[  235.263323][ T9675] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1172'.
[  235.372813][ T9685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1175'.
[  235.378440][ T9685] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1175'.
[  235.383757][ T9685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1175'.
[  235.386679][ T9685] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1175'.
[  235.391132][ T9686] xt_TCPMSS: Only works on TCP SYN packets
[  235.403635][ T9685] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1175'.
[  235.406461][ T9685] unsupported nlmsg_type 40
[  235.448721][ T9686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1176'.
[  236.083123][ T9733] xt_l2tp: missing protocol rule (udp|l2tpip)
[  236.453906][ T9754] IPv6: sit1: Disabled Multicast RS
[  236.532863][ T9759] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  236.535272][ T9759] macsec0: entered allmulticast mode
[  236.537033][ T9759] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  236.574565][ T9765] pim6reg1: entered promiscuous mode
[  236.576299][ T9765] pim6reg1: entered allmulticast mode
[  236.632780][ T9766] veth0_to_bridge: entered promiscuous mode
[  236.634768][ T9766] veth0_to_bridge: entered allmulticast mode
[  236.827929][ T9784] veth0: entered promiscuous mode
[  236.849620][ T9783] veth0: left promiscuous mode
[  236.936899][ T9792] netlink: 'syz.0.1200': attribute type 12 has an invalid length.
[  237.329290][   T27] wlan0: Trigger new scan to find an IBSS to join
[  237.562945][ T9841] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  237.580173][ T9841] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  237.911022][ T9869] netlink: 'syz.2.1222': attribute type 12 has an invalid length.
[  238.242152][ T9614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  238.268344][ T9886] netlink: 'syz.2.1228': attribute type 20 has an invalid length.
[  238.439653][ T9903] tipc: Can't bind to reserved service type 2
[  238.763355][ T9917] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  238.923072][ T9927] pimreg: entered allmulticast mode
[  238.996521][ T9935] syzkaller0: entered promiscuous mode
[  239.001215][ T9935] syzkaller0: entered allmulticast mode
[  239.017274][ T9935] syzkaller0: mtu greater than device maximum
[  239.043568][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  239.046353][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  239.111391][ T9939] netlink: 'syz.2.1246': attribute type 12 has an invalid length.
[  239.372215][ T9957] nbd: couldn't find a device at index 65546
[  239.454478][   T33] audit: type=1800 audit(1752820053.526:3): pid=9967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1253" name="memory.events" dev="tmpfs" ino=2302 res=0 errno=0
[  239.635043][ T9978] __nla_validate_parse: 16 callbacks suppressed
[  239.635054][ T9978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1257'.
[  239.889629][T10002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1266'.
[  239.903937][T10004] sctp: [Deprecated]: syz.0.1267 (pid 10004) Use of struct sctp_assoc_value in delayed_ack socket option.
[  239.903937][T10004] Use struct sctp_sack_info instead
[  240.283115][T10046] xt_hashlimit: size too large, truncated to 1048576
[  240.551613][T10060] IPVS: Scheduler module ip_vs_sip not found
[  240.554503][T10060] IPVS: length: 8 != 446622349272
[  240.823859][T10067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1283'.
[  240.829433][T10067] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1283'.
[  241.141183][T10083] can: request_module (can-proto-3) failed.
[  241.144323][T10083] syzkaller0: left promiscuous mode
[  241.146111][T10083] syzkaller0: left allmulticast mode
[  241.311138][T10095] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1294'.
[  241.334069][T10095] xt_CT: You must specify a L4 protocol and not use inversions on it
[  241.352630][T10098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1296'.
[  241.417285][T10098] ieee802154 phy1 wpan1: encryption failed: -22
[  241.430711][T10098] veth7: entered promiscuous mode
[  241.432505][T10098] bridge0: port 1(veth7) entered blocking state
[  241.434442][T10098] bridge0: port 1(veth7) entered disabled state
[  241.436424][T10098] veth7: entered allmulticast mode
[  241.511203][T10110] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20000
[  241.595903][T10118] netlink: 'syz.1.1304': attribute type 1 has an invalid length.
[  241.639666][T10118] veth11: entered promiscuous mode
[  241.643125][T10118] bond9: (slave veth11): Enslaving as a backup interface with a down link
[  241.866764][T10141] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20000
[  241.883206][T10143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1313'.
[  241.913983][T10147] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1316'.
[  242.030748][T10158] netlink: 'syz.1.1322': attribute type 13 has an invalid length.
[  242.033319][T10158] netlink: 'syz.1.1322': attribute type 17 has an invalid length.
[  242.041646][T10158] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  242.176313][T10158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  242.233492][T10177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  242.275939][T10181] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  242.288854][T10158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  242.328438][T10188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1330'.
[  242.453477][T10198] netlink: 'syz.2.1335': attribute type 13 has an invalid length.
[  242.459377][T10198] netlink: 'syz.2.1335': attribute type 17 has an invalid length.
[  242.495117][T10198] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  242.566532][T10212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1339'.
[  242.826739][T10233] ip6erspan0: entered promiscuous mode
[  243.027161][T10251] netlink: 'syz.2.1355': attribute type 12 has an invalid length.
[  243.096215][T10255] netlink: 'syz.0.1357': attribute type 1 has an invalid length.
[  243.284842][T10277] netlink: 'syz.0.1365': attribute type 12 has an invalid length.
[  243.479736][T10297] netlink: zone id is out of range
[  243.481421][T10297] netlink: zone id is out of range
[  243.482962][T10297] netlink: set zone limit has 4 unknown bytes
[  243.495460][T10299] netlink: 'syz.0.1375': attribute type 12 has an invalid length.
[  243.682341][T10312] netlink: 'syz.2.1380': attribute type 1 has an invalid length.
[  244.706781][T10388] __nla_validate_parse: 17 callbacks suppressed
[  244.706794][T10388] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1403'.
[  244.715005][T10387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1403'.
[  244.730084][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  244.732752][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  244.769208][ T2292] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  244.835598][T10406] netlink: 844 bytes leftover after parsing attributes in process `syz.0.1411'.
[  244.897273][T10414] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1415'.
[  245.387560][T10454] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1429'.
[  245.391050][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  245.580756][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  245.740389][T10484] af_packet: tpacket_rcv: packet too big, clamped from 4496 to 3944. macoff=96
[  245.916227][T10496] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1447'.
[  246.055299][T10508] vlan2: entered allmulticast mode
[  246.056893][T10508] bond0: entered allmulticast mode
[  246.058394][T10508] bond_slave_0: entered allmulticast mode
[  246.075919][T10508] bond_slave_1: entered allmulticast mode
[  246.121397][T10512] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.1453'.
[  246.293125][T10532] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1460'.
[  246.297303][T10532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1460'.
[  246.300292][T10532] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1460'.
[  246.379306][T10542] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  246.382913][T10542] syzkaller0: entered promiscuous mode
[  246.385741][T10542] syzkaller0: entered allmulticast mode
[  246.663135][T10576] validate_nla: 9 callbacks suppressed
[  246.663149][T10576] netlink: 'syz.1.1476': attribute type 12 has an invalid length.
[  247.034859][T10602] tap0: tun_chr_ioctl cmd 1074025678
[  247.036601][T10602] tap0: group set to 60929
[  247.104371][T10605] netlink: 'syz.1.1485': attribute type 12 has an invalid length.
[  247.372557][T10617] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  247.389136][ T2292] tipc: Node number set to 595382015
[  247.476618][T10630] netlink: 'syz.0.1494': attribute type 12 has an invalid length.
[  247.502680][T10632] netlink: 'syz.1.1495': attribute type 25 has an invalid length.
[  247.826187][T10666] netlink: 'syz.2.1503': attribute type 64 has an invalid length.
[  248.025973][T10680] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  248.609057][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  248.806830][T10765] netlink: 'syz.1.1529': attribute type 5 has an invalid length.
[  248.821977][T10767] tap0: tun_chr_ioctl cmd 1074025675
[  248.823604][T10767] tap0: persist disabled
[  248.890574][T10771] x_tables: (null)_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING
[  249.227154][T10791] bridge4: entered promiscuous mode
[  249.231912][T10791] bridge4: entered allmulticast mode
[  249.285871][T10792] bridge4: entered promiscuous mode
[  249.287951][T10792] bridge4: entered allmulticast mode
[  249.450258][T10801] nbd0: detected capacity change from 0 to 127
[  249.549553][T10802] nbd1: detected capacity change from 0 to 127
[  249.556389][   T56] block nbd0: Receive control failed (result -104)
[  249.558720][T10805] block nbd1: Receive control failed (result -32)
[  250.212255][T10855] __nla_validate_parse: 21 callbacks suppressed
[  250.212269][T10855] netlink: 844 bytes leftover after parsing attributes in process `syz.2.1560'.
[  250.427763][T10878] batadv1: entered promiscuous mode
[  250.477472][T10879] bond0: Unable to set down delay as MII monitoring is disabled
[  250.516739][T10883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1570'.
[  250.546164][T10887] netlink: 'syz.1.1572': attribute type 58 has an invalid length.
[  250.548538][T10887] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1572'.
[  250.771781][T10907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1579'.
[  250.775456][T10907] veth1: entered promiscuous mode
[  250.777215][T10907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1579'.
[  250.782449][T10907] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  251.060689][T10924] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1587'.
[  251.131521][T10928] pim6reg1: entered promiscuous mode
[  251.133294][T10928] pim6reg1: entered allmulticast mode
[  251.285997][T10939] netlink: 13956 bytes leftover after parsing attributes in process `syz.2.1593'.
[  251.310256][T10929] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1589'.
[  251.346578][T10929] bond10 (unregistering): Released all slaves
[  251.631805][T10966] netlink: 'syz.1.1603': attribute type 12 has an invalid length.
[  251.634224][T10966] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.1603'.
[  251.638330][T10967] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  251.644591][T10967] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  251.647629][T10967] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  251.650640][T10967] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  251.653718][T10967] geneve2: entered promiscuous mode
[  251.788470][T10980] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  252.583805][T11017] netlink: 'syz.2.1619': attribute type 12 has an invalid length.
[  252.586322][T11017] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1619'.
[  252.765524][T11036] bond0: (slave vcan0): Releasing backup interface
[  252.767777][T11036] vcan0: left promiscuous mode
[  252.863338][T11042] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  252.867214][T11042] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  253.010481][T11052] netlink: 'syz.1.1627': attribute type 1 has an invalid length.
[  253.068793][T11052] 8021q: adding VLAN 0 to HW filter on device bond10
[  253.364650][T11080] netlink: 'syz.2.1637': attribute type 1 has an invalid length.
[  253.390621][T11080] 8021q: adding VLAN 0 to HW filter on device bond7
[  253.403292][T11080] bond7: (slave ip6gretap2): making interface the new active one
[  253.406315][T11080] bond7: (slave ip6gretap2): Enslaving as an active interface with an up link
[  253.410751][T11083] netlink: 'syz.1.1638': attribute type 29 has an invalid length.
[  255.181476][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  256.459109][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  256.584432][T11106] pim6reg1: entered promiscuous mode
[  256.586151][T11106] pim6reg1: entered allmulticast mode
[  256.703818][T11116] pimreg3: entered allmulticast mode
[  256.712894][T11115] pimreg3: left allmulticast mode
[  256.746034][T11106] __nla_validate_parse: 8 callbacks suppressed
[  256.746047][T11106] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1647'.
[  256.794082][T11106] bond11 (unregistering): Released all slaves
[  256.894641][T11135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1656'.
[  256.926383][T11137] netlink: 'syz.1.1659': attribute type 11 has an invalid length.
[  256.980068][T11143] netlink: 'syz.1.1662': attribute type 13 has an invalid length.
[  256.983347][T11143] netlink: 'syz.1.1662': attribute type 17 has an invalid length.
[  257.006741][T11143] 8021q: adding VLAN 0 to HW filter on device bond0
[  257.012356][T11143] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  257.100640][T11151] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1662'.
[  257.105053][T11151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  257.265526][T11162] vxcan1: MTU too low for tipc bearer
[  257.267228][T11162] tipc: Enabling of bearer <eth:vxcan1> rejected, failed to enable media
[  257.370573][T11164] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1669'.
[  257.542687][T11175] netlink: 'syz.2.1672': attribute type 29 has an invalid length.
[  257.618839][T11182] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1674'.
[  257.787359][T11188] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1676'.
[  257.791483][T11188] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1676'.
[  257.945544][T11202] 8021q: VLANs not supported on wg2
[  257.951371][T11201] 8021q: VLANs not supported on wg2
[  258.086054][T11217] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1688'.
[  258.299815][T11247] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  258.621800][T11277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1709'.
[  258.698531][T11273] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1705'.
[  258.855577][T11289] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  258.982803][T11297] bond0: left promiscuous mode
[  259.415533][T11322] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  259.417854][T11322] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  259.522356][T11324] sctp: [Deprecated]: syz.2.1728 (pid 11324) Use of struct sctp_assoc_value in delayed_ack socket option.
[  259.522356][T11324] Use struct sctp_sack_info instead
[  259.540343][T11325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  260.430029][T11360] xt_hashlimit: invalid rate
[  260.732247][T11386] netlink: 'syz.2.1745': attribute type 4 has an invalid length.
[  261.113236][T11433] openvswitch: netlink: IP tunnel dst address not specified
[  261.282620][T11450] netlink: 'syz.0.1766': attribute type 1 has an invalid length.
[  261.440562][T11461] tc_dump_action: action bad kind
[  261.443704][T11461] netlink: 'syz.0.1768': attribute type 4 has an invalid length.
[  262.326165][T11481] netlink: 'syz.0.1778': attribute type 5 has an invalid length.
[  262.362664][T11489] __nla_validate_parse: 22 callbacks suppressed
[  262.362674][T11489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1780'.
[  262.631549][T11507] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1785'.
[  262.710807][T11512] netlink: 'syz.2.1787': attribute type 1 has an invalid length.
[  262.713250][T11512] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1787'.
[  263.402644][T11515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1789'.
[  263.532125][T11519] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  263.598688][T11526] lo speed is unknown, defaulting to 1000
[  263.622655][T11526] lo speed is unknown, defaulting to 1000
[  263.624939][T11526] lo speed is unknown, defaulting to 1000
[  263.667861][T11534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1796'.
[  263.805601][T11548] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  263.836660][T11526] infiniband syz0: set down
[  263.840854][ T5887] lo speed is unknown, defaulting to 1000
[  263.849298][T11526] infiniband syz0: added lo
[  263.852065][T11526] syz0: rxe_create_cq: returned err = -12
[  263.853982][T11526] infiniband syz0: Couldn't create ib_mad CQ
[  263.855917][T11526] infiniband syz0: Couldn't open port 1
[  263.897071][T11526] RDS/IB: syz0: added
[  263.900996][T11526] smc: adding ib device syz0 with port count 1
[  263.905312][T11526] smc:    ib device syz0 port 1 has pnetid 
[  263.912561][ T5887] lo speed is unknown, defaulting to 1000
[  263.916261][T11526] lo speed is unknown, defaulting to 1000
[  263.972222][T11559] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1802'.
[  264.047706][T11526] lo speed is unknown, defaulting to 1000
[  264.156433][T11526] lo speed is unknown, defaulting to 1000
[  264.268110][T11526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  264.401964][T11569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1807'.
[  264.404818][T11569] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1807'.
[  264.523460][T11573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1809'.
[  264.627574][T11577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1811'.
[  264.957371][T11595] netlink: 'syz.1.1817': attribute type 13 has an invalid length.
[  264.960465][T11595] netlink: 'syz.1.1817': attribute type 17 has an invalid length.
[  264.967656][T11595] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  265.008371][T11595] lo speed is unknown, defaulting to 1000
[  265.071571][T11601] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  265.075364][T11601] gretap1: entered promiscuous mode
[  265.077276][T11601] gretap1: entered allmulticast mode
[  265.400726][T11618] netlink: 'syz.1.1826': attribute type 5 has an invalid length.
[  265.496228][T11629] syzkaller0: entered promiscuous mode
[  265.498282][T11629] syzkaller0: entered allmulticast mode
[  265.541697][T11635] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  265.545284][T11635] syzkaller0: Caught tx_queue_len zero misconfig
[  265.770314][T11651] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  265.885597][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  265.889339][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  266.011688][T11664] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  266.140186][T11674] lo speed is unknown, defaulting to 1000
[  266.181138][ T5851] Bluetooth: hci2: link tx timeout
[  266.183751][ T5851] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  266.681192][T11692] xt_hashlimit: size too large, truncated to 1048576
[  266.789744][T11692] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  267.339055][T11736] pim6reg1: entered promiscuous mode
[  267.340868][T11736] pim6reg1: entered allmulticast mode
[  267.406549][T11736] __nla_validate_parse: 16 callbacks suppressed
[  267.406560][T11736] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1864'.
[  267.416534][T11745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1866'.
[  267.419631][T11745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1866'.
[  267.434579][T11736] bond11 (unregistering): Released all slaves
[  267.449143][T11745] 
[  267.449956][T11745] ======================================================
[  267.452184][T11745] WARNING: possible circular locking dependency detected
[  267.454276][T11745] 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 Not tainted
[  267.456909][T11745] ------------------------------------------------------
[  267.459615][T11745] syz.2.1866/11745 is trying to acquire lock:
[  267.461388][T11745] ffff888106b34a70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_device_down+0x12a/0x720
[  267.464350][T11745] 
[  267.464350][T11745] but task is already holding lock:
[  267.466598][T11745] ffffffff8f674638 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720
[  267.469378][T11745] 
[  267.469378][T11745] which lock already depends on the new lock.
[  267.469378][T11745] 
[  267.472381][T11745] 
[  267.472381][T11745] the existing dependency chain (in reverse order) is:
[  267.475046][T11745] 
[  267.475046][T11745] -> #2 (nr_node_list_lock){+...}-{3:3}:
[  267.477332][T11745]        lock_acquire+0x120/0x360
[  267.478835][T11745]        _raw_spin_lock_bh+0x36/0x50
[  267.480386][T11745]        nr_rt_device_down+0xa9/0x720
[  267.482011][T11745]        nr_device_event+0x137/0x150
[  267.483606][T11745]        notifier_call_chain+0x1b6/0x3e0
[  267.485229][T11745]        dev_close_many+0x29c/0x410
[  267.486810][T11745]        netif_close+0x158/0x210
[  267.488270][T11745]        dev_close+0x10a/0x220
[  267.489714][T11745]        bpq_device_event+0x2f4/0x600
[  267.491303][T11745]        notifier_call_chain+0x1b6/0x3e0
[  267.492978][T11745]        dev_close_many+0x29c/0x410
[  267.494529][T11745]        netif_close+0x158/0x210
[  267.496022][T11745]        dev_close+0x10a/0x220
[  267.497493][T11745]        bond_setup_by_slave+0x5f/0x3f0
[  267.499113][T11745]        bond_enslave+0x7a0/0x3a20
[  267.500687][T11745]        bond_do_ioctl+0x635/0x9b0
[  267.502173][T11745]        dev_ifsioc+0x90b/0xf00
[  267.503645][T11745]        dev_ioctl+0x7b4/0x1150
[  267.505094][T11745]        sock_do_ioctl+0x22c/0x300
[  267.506664][T11745]        sock_ioctl+0x576/0x790
[  267.508105][T11745]        __se_sys_ioctl+0xfc/0x170
[  267.509622][T11745]        do_syscall_64+0xfa/0x3b0
[  267.511127][T11745]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.512956][T11745] 
[  267.512956][T11745] -> #1 (nr_neigh_list_lock){+...}-{3:3}:
[  267.515296][T11745]        lock_acquire+0x120/0x360
[  267.516788][T11745]        _raw_spin_lock_bh+0x36/0x50
[  267.518345][T11745]        nr_remove_neigh+0x25/0xe0
[  267.519930][T11745]        nr_add_node+0x1d9f/0x2570
[  267.521491][T11745]        nr_rt_ioctl+0xc12/0xd50
[  267.522938][T11745]        sock_do_ioctl+0xdc/0x300
[  267.524420][T11745]        sock_ioctl+0x576/0x790
[  267.525914][T11745]        __se_sys_ioctl+0xfc/0x170
[  267.527465][T11745]        do_syscall_64+0xfa/0x3b0
[  267.529000][T11745]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.530936][T11745] 
[  267.530936][T11745] -> #0 (&nr_node->node_lock){+...}-{3:3}:
[  267.533283][T11745]        validate_chain+0xb9b/0x2140
[  267.534823][T11745]        __lock_acquire+0xab9/0xd20
[  267.536354][T11745]        lock_acquire+0x120/0x360
[  267.537861][T11745]        _raw_spin_lock_bh+0x36/0x50
[  267.539445][T11745]        nr_rt_device_down+0x12a/0x720
[  267.541059][T11745]        nr_device_event+0x137/0x150
[  267.542615][T11745]        notifier_call_chain+0x1b6/0x3e0
[  267.544246][T11745]        dev_close_many+0x29c/0x410
[  267.545796][T11745]        netif_close+0x158/0x210
[  267.547257][T11745]        dev_close+0x10a/0x220
[  267.548671][T11745]        bpq_device_event+0x2f4/0x600
[  267.550251][T11745]        notifier_call_chain+0x1b6/0x3e0
[  267.551937][T11745]        dev_close_many+0x29c/0x410
[  267.553512][T11745]        netif_close+0x158/0x210
[  267.555003][T11745]        dev_close+0x10a/0x220
[  267.556423][T11745]        bond_setup_by_slave+0x5f/0x3f0
[  267.558054][T11745]        bond_enslave+0x7a0/0x3a20
[  267.559554][T11745]        bond_do_ioctl+0x635/0x9b0
[  267.561064][T11745]        dev_ifsioc+0x90b/0xf00
[  267.562526][T11745]        dev_ioctl+0x7b4/0x1150
[  267.563948][T11745]        sock_do_ioctl+0x22c/0x300
[  267.565433][T11745]        sock_ioctl+0x576/0x790
[  267.566936][T11745]        __se_sys_ioctl+0xfc/0x170
[  267.568492][T11745]        do_syscall_64+0xfa/0x3b0
[  267.569995][T11745]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.571869][T11745] 
[  267.571869][T11745] other info that might help us debug this:
[  267.571869][T11745] 
[  267.574828][T11745] Chain exists of:
[  267.574828][T11745]   &nr_node->node_lock --> nr_neigh_list_lock --> nr_node_list_lock
[  267.574828][T11745] 
[  267.578816][T11745]  Possible unsafe locking scenario:
[  267.578816][T11745] 
[  267.580997][T11745]        CPU0                    CPU1
[  267.582586][T11745]        ----                    ----
[  267.584220][T11745]   lock(nr_node_list_lock);
[  267.585652][T11745]                                lock(nr_neigh_list_lock);
[  267.587844][T11745]                                lock(nr_node_list_lock);
[  267.590028][T11745]   lock(&nr_node->node_lock);
[  267.591520][T11745] 
[  267.591520][T11745]  *** DEADLOCK ***
[  267.591520][T11745] 
[  267.593980][T11745] 3 locks held by syz.2.1866/11745:
[  267.595567][T11745]  #0: ffffffff8f51bb48 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150
[  267.598248][T11745]  #1: ffffffff8f6745d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  267.601270][T11745]  #2: ffffffff8f674638 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720
[  267.604231][T11745] 
[  267.604231][T11745] stack backtrace:
[  267.606044][T11745] CPU: 0 UID: 0 PID: 11745 Comm: syz.2.1866 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  267.606057][T11745] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  267.606063][T11745] Call Trace:
[  267.606069][T11745]  <TASK>
[  267.606075][T11745]  dump_stack_lvl+0x189/0x250
[  267.606088][T11745]  ? __pfx_dump_stack_lvl+0x10/0x10
[  267.606099][T11745]  ? __pfx__printk+0x10/0x10
[  267.606112][T11745]  ? print_lock_name+0xde/0x100
[  267.606125][T11745]  print_circular_bug+0x2ee/0x310
[  267.606137][T11745]  check_noncircular+0x134/0x160
[  267.606151][T11745]  validate_chain+0xb9b/0x2140
[  267.606164][T11745]  ? look_up_lock_class+0x74/0x170
[  267.606173][T11745]  ? register_lock_class+0x51/0x320
[  267.606183][T11745]  __lock_acquire+0xab9/0xd20
[  267.606192][T11745]  ? nr_rt_device_down+0x12a/0x720
[  267.606200][T11745]  lock_acquire+0x120/0x360
[  267.606208][T11745]  ? nr_rt_device_down+0x12a/0x720
[  267.606219][T11745]  ? nr_rt_device_down+0x12a/0x720
[  267.606228][T11745]  _raw_spin_lock_bh+0x36/0x50
[  267.606240][T11745]  ? nr_rt_device_down+0x12a/0x720
[  267.606248][T11745]  nr_rt_device_down+0x12a/0x720
[  267.606259][T11745]  nr_device_event+0x137/0x150
[  267.606267][T11745]  notifier_call_chain+0x1b6/0x3e0
[  267.606278][T11745]  dev_close_many+0x29c/0x410
[  267.606291][T11745]  ? __pfx_dev_close_many+0x10/0x10
[  267.606301][T11745]  ? __try_to_del_timer_sync+0x34a/0x3a0
[  267.606314][T11745]  ? bond_netdev_event+0x227/0xe80
[  267.606328][T11745]  netif_close+0x158/0x210
[  267.606337][T11745]  ? __pfx_netif_close+0x10/0x10
[  267.606346][T11745]  ? tun_device_event+0x77/0x1020
[  267.606358][T11745]  dev_close+0x10a/0x220
[  267.606370][T11745]  bpq_device_event+0x2f4/0x600
[  267.606383][T11745]  notifier_call_chain+0x1b6/0x3e0
[  267.606393][T11745]  dev_close_many+0x29c/0x410
[  267.606403][T11745]  ? __pfx_dev_close_many+0x10/0x10
[  267.606414][T11745]  netif_close+0x158/0x210
[  267.606424][T11745]  ? __pfx_netif_close+0x10/0x10
[  267.606432][T11745]  ? do_raw_spin_lock+0x121/0x290
[  267.606445][T11745]  ? __local_bh_enable_ip+0x12d/0x1c0
[  267.606456][T11745]  ? lockdep_hardirqs_on+0x9c/0x150
[  267.606489][T11745]  dev_close+0x10a/0x220
[  267.606502][T11745]  bond_setup_by_slave+0x5f/0x3f0
[  267.606512][T11745]  bond_enslave+0x7a0/0x3a20
[  267.606521][T11745]  ? arch_stack_walk+0xfc/0x150
[  267.606538][T11745]  ? __pfx_bond_enslave+0x10/0x10
[  267.606549][T11745]  ? apparmor_capable+0x137/0x1b0
[  267.606560][T11745]  ? full_name_hash+0x92/0xe0
[  267.606569][T11745]  ? netdev_name_node_lookup+0xdf/0x120
[  267.606578][T11745]  bond_do_ioctl+0x635/0x9b0
[  267.606589][T11745]  ? __pfx_bond_do_ioctl+0x10/0x10
[  267.606598][T11745]  ? trace_contention_end+0x39/0x120
[  267.606608][T11745]  ? __mutex_lock+0x330/0xe80
[  267.606619][T11745]  ? full_name_hash+0x92/0xe0
[  267.606628][T11745]  ? netdev_name_node_lookup+0xdf/0x120
[  267.606636][T11745]  dev_ifsioc+0x90b/0xf00
[  267.606647][T11745]  ? dev_load+0x21/0x1f0
[  267.606656][T11745]  dev_ioctl+0x7b4/0x1150
[  267.606666][T11745]  sock_do_ioctl+0x22c/0x300
[  267.606675][T11745]  ? __pfx_sock_do_ioctl+0x10/0x10
[  267.606683][T11745]  ? __lock_acquire+0xab9/0xd20
[  267.606693][T11745]  sock_ioctl+0x576/0x790
[  267.606701][T11745]  ? __pfx_sock_ioctl+0x10/0x10
[  267.606709][T11745]  ? __fget_files+0x2a/0x420
[  267.606716][T11745]  ? __fget_files+0x3a0/0x420
[  267.606722][T11745]  ? __fget_files+0x2a/0x420
[  267.606729][T11745]  ? bpf_lsm_file_ioctl+0x9/0x20
[  267.606739][T11745]  ? __pfx_sock_ioctl+0x10/0x10
[  267.606747][T11745]  __se_sys_ioctl+0xfc/0x170
[  267.606757][T11745]  do_syscall_64+0xfa/0x3b0
[  267.606765][T11745]  ? lockdep_hardirqs_on+0x9c/0x150
[  267.606773][T11745]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.606781][T11745]  ? exc_page_fault+0x9f/0xf0
[  267.606789][T11745]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.606802][T11745] RIP: 0033:0x7f048458e929
[  267.606812][T11745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  267.606821][T11745] RSP: 002b:00007f04853b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  267.606831][T11745] RAX: ffffffffffffffda RBX: 00007f04847b5fa0 RCX: 00007f048458e929
[  267.606838][T11745] RDX: 0000200000000180 RSI: 0000000000008990 RDI: 0000000000000007
[  267.606845][T11745] RBP: 00007f0484610ca1 R08: 0000000000000000 R09: 0000000000000000
[  267.606850][T11745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  267.606856][T11745] R13: 0000000000000000 R14: 00007f04847b5fa0 R15: 00007fff232e77b8
[  267.606866][T11745]  </TASK>
[  267.741781][T11745] 8021q: adding VLAN 0 to HW filter on device bond0
[  267.745768][T11745] bond0: (slave rose0): Enslaving as an active interface with an up link
[  268.209667][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  271.169265][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!

VM DIAGNOSIS:
06:28:01  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000699f RDI=00000000000069a0 RBP=00000000000003f8 RSP=ffffc90002f9e8d0
R8 =ffff888020108237 R9 =1ffff11004021046 R10=dffffc0000000000 R11=ffffffff85460db0
R12=dffffc0000000000 R13=ffffffff99aee882 R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460e2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f04853b16c0 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f04853b0fc8 CR3=0000000118014000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f61eaa11df9
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=48ff6c2e8b894300 RBX=ffffffff81976c78 RCX=48ff6c2e8b894300 RDX=0000000000000001
RSI=ffffffff8be28c20 RDI=ffffffff81976c78 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1d5f0 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d3000
RIP=ffffffff8b6d64d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c27b683 CR3=000000003fc9c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
