last executing test programs:

1.582307324s ago: executing program 1 (id=5175):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000100)=0x4)
syz_80211_inject_frame(0x0, &(0x7f0000000140)=ANY=[], 0xb5)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="2eb4259cd64c0afea7e09f1aab00000010008188e6b62aa78572cc9f1ba10500000000000000000280000091dfa39b051100703b1416a2ea0bf43285618286650d6acde0f33aaf0100f0ca3fd91cf0f5d97b5241d41edc5d4c1b00000092fe00"/105, 0x69}, {&(0x7f00000001c0)="ee6e255181b584347d51746da5e54ca1481dd37cbe42ce89bcdd3ae7f36a8e49f0a5a812fffbf1ca937531510f1e45ec328102fed08b347a121f79c09285a12e31da2d42f6ba51ab5e76548fc45b411733c4bc95a01c5566603daea92f3166268b3f2b6c7880f63f2a67987b331c4f20e4b92360d1dfeffcda8a8cd3529fb0922e293845d545b9a7836ff0811e6a393d8ba43cb16a3fed5f8e597b68", 0x9c}], 0x2}, 0x4000) (async)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="2eb4259cd64c0afea7e09f1aab00000010008188e6b62aa78572cc9f1ba10500000000000000000280000091dfa39b051100703b1416a2ea0bf43285618286650d6acde0f33aaf0100f0ca3fd91cf0f5d97b5241d41edc5d4c1b00000092fe00"/105, 0x69}, {&(0x7f00000001c0)="ee6e255181b584347d51746da5e54ca1481dd37cbe42ce89bcdd3ae7f36a8e49f0a5a812fffbf1ca937531510f1e45ec328102fed08b347a121f79c09285a12e31da2d42f6ba51ab5e76548fc45b411733c4bc95a01c5566603daea92f3166268b3f2b6c7880f63f2a67987b331c4f20e4b92360d1dfeffcda8a8cd3529fb0922e293845d545b9a7836ff0811e6a393d8ba43cb16a3fed5f8e597b68", 0x9c}], 0x2}, 0x4000)

1.011082375s ago: executing program 1 (id=5191):
r0 = socket$netlink(0x10, 0x3, 0x4)
socket$inet6(0xa, 0x3, 0x7)
writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab60070000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
close(0xffffffffffffffff)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x9}}, 0x1c}}, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
sendmmsg$inet6(r4, &(0x7f00000000c0)=[{{&(0x7f0000000080)={0xa, 0x0, 0x900, @private1}, 0x1c, 0x0}}], 0x1, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf252001000000000000000000000000008020010000000000000000000000000001000000004e210002000000006c000000f966bd5c7c261191814027a6ede1f8fd40aef2541a9434d63b765727eb53f8b90497f409ba008f7a7c21c9d1a4a2e5d84ee1a37bf6c564b1b3bd6842bce71c545223dc2c0f98e8c1cf7cb0b703e18ae7f415d6c3b245a99430c72dc39a3c52fbeb8764263015f6e3cefa0996f932d15563a2a1c6237813e429ef7c18f8b0665d7b3a90d818939b975b58b8", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x2000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
socket(0x22, 0x2, 0x2)
r6 = socket(0x22, 0x2, 0x1)
close(r6)
sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x108, 0x12, 0x200, 0x70bd2c, 0x25dfdbfc, {0x15, 0x10, 0x80, 0x3, {0x4e21, 0x4e21, [0x1, 0x52a3, 0x5], [0x6, 0x0, 0x6, 0x6], 0x0, [0xb12c, 0x400]}, 0x650, 0xd05}, [@INET_DIAG_REQ_BYTECODE={0xba, 0x1, "d6855762f0cb3cb353c6e07a4a45dd70bf7d32576dff57f34a0003878c17c8c23532abcfb55f4773bbef11f09e93823f56b839881cda5868854260656477a3f6511faa855063edca3e86ed61df13ccc13b0e16847129c053530e258b75c1421c2385e69c5fe180512a931066f009f6480af37e1e48cf2ad628350d71da7134c26f843bc23787e748895004a643bbbc6de53a9bc81e6f30b46a294ffcd4902d20fc119e3e21d01068bb8c44c619d97266e1b4ea807d78"}]}, 0x108}, 0x1, 0x0, 0x0, 0x4040010}, 0x800)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="10000000f9bb1e00000000000600000058342a3aadea36f5dca0a05ee9ef9657115e5c655a1f39e6f9bf40db117a60ec3ff0ac94690870d9068d6ae4f3f375cb65dc0b19add6e10f9a8abe1b2fe2136050861a4eb1232838b76088953bd19971e9a74054d1aa551598418d6e1b12c65b9c1ba654548131fdcad1e2dae5d856425eeab93281adbbb6c8692bd2c67cd9304cfd787eff62b71303d51d30a0bafa641e483c73f9c7b7cf65c57402a8996bb7cca3f4b8642717a62a4bab0f2cff8e5d313ca59fdc9b"], 0x10}}, 0x0)

965.728349ms ago: executing program 1 (id=5193):
r0 = socket(0x22, 0x2, 0x1)
sendto$inet(r0, &(0x7f0000000780)="e107a79a063e095053b778dfe2fba34034b5434313dea5efa5cfab8543d0e33041a4fd43b0cdeb5d3822ef219b48551f07c1c7a3ac654daeddfdfc4ea788fd8d6ac8e7363ba44591f97d80e386e5fe797786a9719085efd72382fa933154f093c1af232473a613f1608a1e5a7bb52fb316182ab03adb65026ee17bc4f3777ed37c1bcdfd1629130dce379b0e9ec2d6756bfb85f90cc11cf1f1bf26666eea2c330877ba", 0xa3, 0x0, &(0x7f0000000840)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x59}}]}, 0x0}, 0x94)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000f4cde3db080000000100000900000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1, r1}, &(0x7f0000000300), &(0x7f0000000340)='%+9llu \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1, r1}, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x1d, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="184a0000ffffffff0000000000000000852000000400000004170e00b500000018300000040000000000000000000000b7080000000000007b8af8ff00000000b7080000fdffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5"], 0x0, 0x296d, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x64fb}, 0x94)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x9d0, 0x0, 0x11, 0x148, 0x0, 0x0, 0x938, 0x2a8, 0x2a8, 0x938, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x850, 0x898, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}], [], 0x8}, {}, {}, {}, {}, {[], [{}, {0x2}]}, {[{}, {0x2}]}, {[{}, {0x0, 0x3}]}, {}, {}, {[{}, {0x2}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {0xff}]}], 0x29}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa30)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0)
setsockopt$sock_timeval(r3, 0x1, 0x43, &(0x7f0000abaff9)={0x77359400}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', <r4=>0x0})
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x8eb2e000f2c28467, 0x0, '\x00', r4}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001880)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000005c0000005c000000050000000200000004000006040000000500000000000000060000000600000001000000000000c00c000000010000000c0000000000001004000000ff7f000000000009000000000500000000000012010000000700000000000009000000000061c82e"], &(0x7f0000001840)=""/2, 0x79, 0x2, 0x1, 0x6}, 0x28)
r6 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000640)=0x6d93, 0x4)
sendmsg$sock(r6, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x41d, @remote, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x18, 0x1, 0x51, 0x1}}], 0x18}, 0x2004c0c1)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000880)={{r0}, "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"})
r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r8)
sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010027bd7000fbdbdf250100000008000100030000003400048005000300010000000500030001000000050003e300000000050003000200000005000300050000000500030007000000080002"], 0x58}}, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000040)=0x10)

907.420639ms ago: executing program 1 (id=5195):
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040), &(0x7f00000001c0)=0x18)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1a8, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x16c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x154, 0x1, [@m_simple={0x84, 0x1f, 0x0, 0x0, {{0xb}, {0x58, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, '-{\x00'}, @TCA_DEF_DATA={0x9, 0x3, '/-@@\x00'}, @TCA_DEF_DATA={0x3d, 0x3, '\x00\x94\xe4\xe2X\xce\xbar\x069\xf3\xff\x8d\x94\x1ao\xa1,\xa4\xc1\xcc\x1e\x9aS>\a\xd2R\x85\v\x80\xea\x1e\xc8W\xea\x99\xacos\x80\x1d\x8b\xd9`Ewb\xa5&iu@\xfd\x8c\xde\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_mirred={0xcc, 0x13, 0x0, 0x0, {{0xb}, {0x4}, {0x9d, 0x6, "bdc2071950102cb2b080ba1982286d1f1892ecb82e0fd163cb5794a24a8b72ee6e372851051c537ebcfaf9eff6d0b58d9e8cf0f4351019947c24ecad3c05782e72cbbd78a3e91698317a5ce44f2a02f04ac55df3685c69d64762fb667ebe9890534e02ef45417881bb85b6d09a5e6787816197ed1e2356e7fda9f1fae3d62e6987bb1a458e53e3635ae54c15a78394986e6152636bc5aa9251"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x46, &(0x7f0000000380), 0x4)
sendmsg$NFT_BATCH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xfc}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xb7}]}}}]}, @NFTA_RULE_USERDATA={0x32, 0x7, 0x1, 0x0, "9246ac5982ec7c0becae5183a971e8987e1795171ae214c55cdd3e5c7ee1e768d311b7d610fa21604090e8a761b6"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x20004054}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x78, r2, 0x207, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x34, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x33aeae84}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x200040c0}, 0x880)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r0)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f0000000b40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r6, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4001)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES32=<r7=>r0], 0x38}, 0x1, 0x0, 0x0, 0x4044}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, 0x2b, 0xb, 0x0, 0x0, {0x8}, [@typed={0x8, 0x3, 0x0, 0x0, @ipv4=@empty}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20080c40)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
syz_genetlink_get_family_id$team(&(0x7f0000000100), r1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r10}, &(0x7f00000006c0), &(0x7f0000000700)=r8}, 0x20)
r11 = socket$nl_rdma(0x10, 0x3, 0x14)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000007c0)={0x0, @in={{0x2, 0x4e23, @private=0x2}}, 0x1, 0x66a9}, &(0x7f00000002c0)=0x90)
sendmsg$RDMA_NLDEV_CMD_GET(r11, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000001144101", @ANYRES16=r7], 0x10}, 0x1, 0x0, 0x0, 0x8885}, 0x0)
sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)={0x140, 0x4, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0xe9, 0xc, "0f621efdb854e4e309aad60dd354ffa268b8dbd832e767cc1580cb40bd41bf00158f0a787ea7f9bbd3137885f4f513139f4143d4817e08b8b118235112a44ea85c0661adf6d677f5251f052674a8c2e5582c30803ec5a925efcc05e24b03246eaf4691b05df72697cc2071add1e331b3325d3f183944053a951fb89c86438edc5a7dd105efc05185f77dac50cd6d92a4965b64827097a22b9b709b40c81f3c8a849221c97824d58f060d0640d7da3636184984df98580f825297831641d65a9f3384c429b31456eac8a88b22798fc4cfa3f51ad023474543bffaf302510f01c0a3ac06e343"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x7}]}, 0x140}, 0x1, 0x0, 0x0, 0x800}, 0x91)
recvfrom(r11, 0x0, 0x0, 0x40000062, 0x0, 0xfffffffffffffdff)

842.631817ms ago: executing program 1 (id=5197):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x40, r1, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'nicvf0\x00'}]}, 0x40}, 0x1, 0x40030000000000}, 0x0)
write(r0, &(0x7f0000000000)="240000001a605f0214f9f407000901000000000000000005000000000800040001000000", 0x24)

771.914785ms ago: executing program 0 (id=5198):
r0 = socket$isdn(0x22, 0x3, 0x11)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x2, 'veth0_to_bridge\x00', {0x7634}, 0x9497})
close(r0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r1=>0x0})
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x5, [@datasec={0x2, 0x1, 0x0, 0xf, 0x3, [{0x3, 0x0, 0x2}], "7c4012"}, @var={0xb, 0x0, 0x0, 0xe, 0x3, 0x2}, @datasec={0x5, 0x1, 0x0, 0xf, 0x1, [{0x5}], "b2"}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000000180)=""/17, 0x61, 0x11, 0x0, 0x4}, 0x28) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f0000000240)=""/194, 0xc2, <r3=>0x0, &(0x7f0000000340)=""/137, 0x89}}, 0x10) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x9, 0xc, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x1, 0x9, 0x9, 0x4, 0x10, 0xfffffffffffffffb}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}]}, &(0x7f0000000500)='syzkaller\x00', 0x2, 0x2b, &(0x7f0000000540)=""/43, 0x100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0x4, 0x9c, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x2}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xf, 0x6, &(0x7f0000000040)=@raw=[@map_idx_val={0x18, 0x2, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffff9}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xc}], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x42, '\x00', r1, @cgroup_device, r2, 0x8, &(0x7f0000000200)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, r3, r4, 0x2, 0x0, &(0x7f0000000700)=[{0x3, 0x5, 0xe, 0x1}, {0x3, 0x4, 0x8, 0x1}], 0x10, 0x5}, 0x94)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000800)=<r6=>0x0)
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000900)={{r0}, r6, 0x4, @inherit={0x90, &(0x7f0000000840)={0x0, 0x9, 0x7, 0x7fffffff, {0x1a, 0x2, 0x10000, 0x0, 0x100}, [0x3, 0x2f24, 0x1, 0x4, 0x3, 0xf, 0x3, 0xd19, 0x31d0]}}, @subvolid=0xe}) (async)
ioctl$EXT4_IOC_SETFSUUID(r5, 0x4008662c, &(0x7f0000001900)={0x0, 0x0, "a0d8d3b6a8ae0128e4fcac5fb75a6670"}) (async)
r7 = socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 64)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000001980)={<r8=>0x0, 0x38, &(0x7f0000001940)=[@in6={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x8}, @in6={0xa, 0x4e21, 0x0, @loopback, 0x9}]}, &(0x7f00000019c0)=0x10) (rerun: 64)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r7, 0x84, 0x78, &(0x7f0000001a00)=r8, 0x4) (async, rerun: 64)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r10 = syz_genetlink_get_family_id$fou(&(0x7f0000001a80), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r9, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x20, r10, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001b80)={<r11=>r0})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000001bc0)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001c00)=0x14)
getsockopt$inet_int(r9, 0x0, 0x17, &(0x7f0000001c40), &(0x7f0000001c80)=0x4) (async)
sendmsg$TIPC_NL_NET_SET(r9, &(0x7f0000001d80)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x14, 0x0, 0x8, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) (async, rerun: 32)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001f80)={{r0, <r12=>0xffffffffffffffff}, &(0x7f0000001f00), &(0x7f0000001f40)=r5}, 0x20) (async, rerun: 32)
r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001fc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', r1, r2, 0x1, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000020c0)={0xc, 0xe, &(0x7f0000001dc0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}, @generic={0x2, 0x6, 0x3, 0xffff, 0x6}], &(0x7f0000001e40)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x50, '\x00', r1, @fallback=0x1f, r2, 0x8, &(0x7f0000001e80)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000001ec0)={0x2, 0x10, 0x4, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000002040)=[r12, 0x1, r13], &(0x7f0000002080)=[{0x4, 0x5, 0x0, 0xa}, {0x5, 0x4, 0x9, 0x8}, {0x0, 0x4, 0x10, 0x1}, {0x4, 0x1, 0xc, 0x5}], 0x10, 0x2}, 0x94)
read$alg(r11, &(0x7f0000002180)=""/114, 0x72) (async)
r14 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c8, &(0x7f0000002240)={r11, r14, 0x8, 0x7, &(0x7f0000002200)="74a3d07bbee552", 0x1, 0x0, 0x8, 0x3, 0x7fff, 0x1, 0x6, 'syz1\x00'})
sendmsg$NFNL_MSG_CTHELPER_DEL(r11, &(0x7f0000002400)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002340)={0x54, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xfffffff3}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x4}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x281}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000040}, 0x200688c1) (async, rerun: 64)
r15 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002480), r9) (rerun: 64)
sendmsg$IPVS_CMD_GET_SERVICE(r9, &(0x7f0000002540)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x14, r15, 0x200, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000008)

771.646265ms ago: executing program 1 (id=5199):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c)
connect$rose(r0, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, [@null, @null, @bcast, @default, @bcast, @default]}, 0x40)

711.997653ms ago: executing program 0 (id=5200):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
unshare(0x22020600)
ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000))
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0x6a9f0eede9332711}, {0xfff3, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x4d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)

711.529986ms ago: executing program 0 (id=5201):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x4, {0x0, 0x0, 0x0, 0x0, 0x500, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r9)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000802800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0)

492.109816ms ago: executing program 0 (id=5202):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@gettaction={0x30, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x2810}, 0x48884)

491.930772ms ago: executing program 0 (id=5203):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES64=r0], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0xc60c, 0x4404911d, 0xd, 0x2ca00, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x50)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x41, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r0, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

401.719215ms ago: executing program 0 (id=5204):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x4040005, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12)
recvfrom$inet(r0, &(0x7f00000002c0)=""/37, 0x25, 0x1, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
socket$l2tp(0x2, 0x2, 0x73)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4886)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000440), 0x4)
setsockopt$inet6_int(r2, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r2, &(0x7f0000000640)={&(0x7f0000000000)={0xa, 0x4e22, 0x80000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0xfffffffffffffedf}, 0x0)
sendmmsg$inet6(r2, &(0x7f00000018c0)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c, 0x0}}, {{&(0x7f00000007c0)={0xa, 0x4e22, 0x5, @private0, 0x5f}, 0x1c, 0x0, 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="180000000000000029000000370000003c000000000000001400000000000000290000000b00000000000005000000001800060000000000000000003600000016000000cb000000140000000000000029000000430000004100000000000000"], 0x60}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4040041)
r4 = accept4(r1, 0x0, 0x0, 0x80800)
sendmsg$nl_route(r4, &(0x7f00000043c0)={0x0, 0x0, &(0x7f0000004380)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001d000001acbd7000fcdbdf250a000000", @ANYRES32=0x0, @ANYBLOB="0200a1011400030003000000f7ffffff03000000070000000a00010002000000aa390000"], 0x3c}, 0x1, 0x0, 0x0, 0x400a001}, 0x40001)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000140)={0x0, @in={0x2, 0x4e22, @private=0xa010101}, @in={0x2, 0x4e20, @remote}, @tipc=@id={0x1e, 0x3, 0x1, {0x4e24, 0x4}}, 0x6, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0)='bond_slave_0\x00', 0xd316, 0x0, 0x7fff})
accept4$rose(r4, 0x0, &(0x7f00000001c0), 0x800)
recvmmsg$unix(r4, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/14, 0xe}, {&(0x7f0000000480)=""/83, 0x53}], 0x2}}], 0x1, 0x10101, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)

212.021364ms ago: executing program 2 (id=5205):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x9b69}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x600}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000001cc0)) (async, rerun: 32)
pipe(&(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) (rerun: 32)
socket$packet(0x11, 0xa, 0x300)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r5=>0x0})
r6 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r6, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x10, 0x6, @link_local}, 0x14)
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0)
write(r3, &(0x7f0000000340), 0x11000) (async)
pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) (async)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r7 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) (async)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0) (async)
recvmsg(r7, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1412, 0x8, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8851}, 0x40000) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) (async, rerun: 32)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, r8}, 0x38) (async, rerun: 64)
r9 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

162.072322ms ago: executing program 2 (id=5206):
vmsplice(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000280)=0x5, 0x4)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f0000000040)=0x29)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffe}, 0x50)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100))
bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$inet6(r1, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f)
unshare(0x22020600)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='sys_exit\x00', 0xffffffffffffffff, 0x0, 0x100000000}, 0x18)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x92, &(0x7f0000000400)=ANY=[], 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001f00)={&(0x7f0000001e80)=ANY=[@ANYBLOB], 0x0, 0x3c}, 0x28)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070011000000060004404e220000060005405e7d150cb82ea3c1ea7139da97f6703c257657c893119f15ab83853712d4f72db433824792a4d6afb2321281859a58e5dfc1e4"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

61.401868ms ago: executing program 2 (id=5207):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001900)={@fallback=r0, r0, 0x2f}, 0x20)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r1=>0x0}, 0x8)
r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r1, 0x4)
bpf$LINK_DETACH(0x22, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}}]}, 0x30}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0000001800ef0100000000000000000a00000000000000000000000c00090008000000", @ANYRES32=r5, @ANYBLOB="1400050000000000000000000000e3"], 0x3c}, 0x1, 0x11}, 0x0)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x138, 0x138, 0x8, [@union={0xf, 0x9, 0x0, 0x5, 0x0, 0x4, [{0x9, 0x4, 0xfff}, {0xc, 0x5, 0x42}, {0x4, 0x2, 0x6}, {0xd, 0x3, 0x81}, {0x8, 0x1, 0x6}, {0xf, 0x5, 0x1}, {0x0, 0x2, 0x8}, {0xd, 0x4, 0x7}, {0x6, 0x4, 0x8}]}, @typedef={0x6, 0x0, 0x0, 0x8, 0x4}, @func={0x3, 0x0, 0x0, 0xc, 0x5}, @union={0x7, 0x8, 0x0, 0x5, 0x1, 0x5, [{0xc, 0x1}, {0x4, 0x2, 0x5}, {0x7, 0x5, 0x4}, {0x9, 0x2, 0xe}, {0x1, 0x0, 0x4}, {0xd, 0x3, 0x3}, {0x5, 0x0, 0x6}, {0xb, 0x5, 0x2}]}, @const={0xb}, @volatile={0x3, 0x0, 0x0, 0x9, 0x1}, @enum64={0xe, 0x2, 0x0, 0x13, 0x0, 0xe, [{0xd, 0x3f2674aa, 0x4}, {0x9, 0x2, 0x9}]}]}, {0x0, [0x3a, 0x61, 0x61, 0x0, 0x0, 0x10]}}, &(0x7f0000003880)=""/4096, 0x158, 0x1000, 0x1, 0xd, 0x10000}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x5, 0x6, 0x4d22, 0x0, 0x1, 0x6, '\x00', r5, r7, 0x5, 0x5, 0x5}, 0x50)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r9, 0x107, 0x9, 0x0, &(0x7f0000000040))
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r10)
sendmsg$BATADV_CMD_SET_MESH(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x2c, r11, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtaction={0x64, 0x30, 0x709, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x5}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)

60.304226ms ago: executing program 2 (id=5208):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000006006600c78800001a003300"], 0x50}, 0x1, 0x5000000000000000}, 0x0)

2.085378ms ago: executing program 2 (id=5209):
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000010001fff00000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000260000280012800b00010062726964676500001800028005002a00030000000c00230003000000000027"], 0x48}}, 0x48004)

0s ago: executing program 2 (id=5210):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@gettaction={0x30, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x2810}, 0x48884)

kernel console output (not intermixed with test programs):

2382][T18210]  netlink_unicast+0x75c/0x8e0
[  254.522426][T18210]  netlink_sendmsg+0x805/0xb30
[  254.522448][T18210]  ? __pfx_netlink_sendmsg+0x10/0x10
[  254.522465][T18210]  ? aa_sock_msg_perm+0x94/0x160
[  254.522477][T18210]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  254.522488][T18210]  ? __pfx_netlink_sendmsg+0x10/0x10
[  254.522503][T18210]  __sock_sendmsg+0x21c/0x270
[  254.522516][T18210]  ____sys_sendmsg+0x505/0x830
[  254.522534][T18210]  ? __pfx_____sys_sendmsg+0x10/0x10
[  254.522553][T18210]  ? import_iovec+0x74/0xa0
[  254.522569][T18210]  ___sys_sendmsg+0x21f/0x2a0
[  254.522586][T18210]  ? __pfx____sys_sendmsg+0x10/0x10
[  254.522618][T18210]  ? __fget_files+0x2a/0x420
[  254.522628][T18210]  ? __fget_files+0x3a0/0x420
[  254.522643][T18210]  __x64_sys_sendmsg+0x19b/0x260
[  254.522659][T18210]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  254.522683][T18210]  ? do_syscall_64+0xbe/0x3b0
[  254.522696][T18210]  do_syscall_64+0xfa/0x3b0
[  254.522706][T18210]  ? lockdep_hardirqs_on+0x9c/0x150
[  254.522724][T18210]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.522736][T18210]  ? exc_page_fault+0x9f/0xf0
[  254.522748][T18210]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.522758][T18210] RIP: 0033:0x7efd8818e929
[  254.522769][T18210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  254.522778][T18210] RSP: 002b:00007efd8902c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  254.522790][T18210] RAX: ffffffffffffffda RBX: 00007efd883b5fa0 RCX: 00007efd8818e929
[  254.522798][T18210] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  254.522805][T18210] RBP: 00007efd88210ca1 R08: 0000000000000000 R09: 0000000000000000
[  254.522812][T18210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  254.522818][T18210] R13: 0000000000000000 R14: 00007efd883b5fa0 R15: 00007ffd611adc48
[  254.522834][T18210]  </TASK>
[  254.858123][T18233] bridge0: port 1(ipvlan1) entered blocking state
[  254.862232][T18233] bridge0: port 1(ipvlan1) entered disabled state
[  254.864512][T18233] ipvlan1: entered allmulticast mode
[  254.867488][T18233] ipvlan1: left allmulticast mode
[  255.048646][T18251] pim6reg1: entered promiscuous mode
[  255.050804][T18251] pim6reg1: entered allmulticast mode
[  255.125639][T18261] validate_nla: 1 callbacks suppressed
[  255.125652][T18261] netlink: 'syz.2.4129': attribute type 1 has an invalid length.
[  255.409096][T18286] netlink: 'syz.0.4137': attribute type 12 has an invalid length.
[  255.452220][T18298] ": renamed from wg2
[  255.567519][T18305] lo speed is unknown, defaulting to 1000
[  255.570126][T18305] lo speed is unknown, defaulting to 1000
[  255.997836][T18327] syzkaller1: entered promiscuous mode
[  255.999639][T18327] syzkaller1: entered allmulticast mode
[  256.250086][T18345] netlink: 'syz.1.4155': attribute type 1 has an invalid length.
[  256.269175][T18345] 8021q: adding VLAN 0 to HW filter on device bond21
[  256.457710][T18369] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  256.460073][T18369] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  256.545473][T18378] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  256.547886][T18378] CPU: 0 UID: 0 PID: 18378 Comm: syz.1.4168 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  256.547900][T18378] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  256.547907][T18378] Call Trace:
[  256.547911][T18378]  <TASK>
[  256.547917][T18378]  dump_stack_lvl+0x189/0x250
[  256.547937][T18378]  ? __pfx_dump_stack_lvl+0x10/0x10
[  256.547948][T18378]  ? __pfx__printk+0x10/0x10
[  256.547962][T18378]  ? kernfs_path_from_node+0x2c/0x260
[  256.547972][T18378]  ? kernfs_path_from_node+0x2c/0x260
[  256.547980][T18378]  ? kernfs_path_from_node+0x2c/0x260
[  256.547989][T18378]  ? kernfs_path_from_node+0x22c/0x260
[  256.547996][T18378]  ? kernfs_path_from_node+0x2c/0x260
[  256.548005][T18378]  sysfs_warn_dup+0x8e/0xa0
[  256.548018][T18378]  sysfs_do_create_link_sd+0xc0/0x110
[  256.548027][T18378]  device_add_class_symlinks+0x1cf/0x240
[  256.548043][T18378]  device_add+0x475/0xb50
[  256.548057][T18378]  wiphy_register+0x199a/0x26b0
[  256.548077][T18378]  ? __pfx_wiphy_register+0x10/0x10
[  256.548087][T18378]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  256.548102][T18378]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  256.548117][T18378]  ieee80211_register_hw+0x33e1/0x4120
[  256.548141][T18378]  ? ieee80211_register_hw+0x14c1/0x4120
[  256.548157][T18378]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  256.548171][T18378]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  256.548189][T18378]  ? __hrtimer_setup+0x187/0x210
[  256.548199][T18378]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  256.548238][T18378]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  256.548267][T18378]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  256.548280][T18378]  ? trace_kmalloc+0x1f/0xd0
[  256.548292][T18378]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  256.548304][T18378]  ? kstrndup+0xbf/0x160
[  256.548317][T18378]  hwsim_new_radio_nl+0xea4/0x1b10
[  256.548331][T18378]  ? __pfx___nla_validate_parse+0x10/0x10
[  256.548349][T18378]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  256.548367][T18378]  ? __nla_parse+0x40/0x60
[  256.548378][T18378]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  256.548393][T18378]  genl_family_rcv_msg_doit+0x215/0x300
[  256.548405][T18378]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  256.548421][T18378]  ? bpf_lsm_capable+0x9/0x20
[  256.548436][T18378]  ? security_capable+0x7e/0x2e0
[  256.548451][T18378]  genl_rcv_msg+0x60e/0x790
[  256.548464][T18378]  ? __pfx_genl_rcv_msg+0x10/0x10
[  256.548473][T18378]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  256.548494][T18378]  netlink_rcv_skb+0x208/0x470
[  256.548509][T18378]  ? __pfx_genl_rcv_msg+0x10/0x10
[  256.548519][T18378]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  256.548541][T18378]  ? down_read+0x1ad/0x2e0
[  256.548553][T18378]  genl_rcv+0x28/0x40
[  256.548565][T18378]  netlink_unicast+0x75c/0x8e0
[  256.548583][T18378]  netlink_sendmsg+0x805/0xb30
[  256.548601][T18378]  ? __pfx_netlink_sendmsg+0x10/0x10
[  256.548615][T18378]  ? aa_sock_msg_perm+0x94/0x160
[  256.548627][T18378]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  256.548637][T18378]  ? __pfx_netlink_sendmsg+0x10/0x10
[  256.548650][T18378]  __sock_sendmsg+0x21c/0x270
[  256.548662][T18378]  ____sys_sendmsg+0x505/0x830
[  256.548677][T18378]  ? __pfx_____sys_sendmsg+0x10/0x10
[  256.548695][T18378]  ? import_iovec+0x74/0xa0
[  256.548709][T18378]  ___sys_sendmsg+0x21f/0x2a0
[  256.548722][T18378]  ? __pfx____sys_sendmsg+0x10/0x10
[  256.548752][T18378]  ? __fget_files+0x2a/0x420
[  256.548760][T18378]  ? __fget_files+0x3a0/0x420
[  256.548773][T18378]  __x64_sys_sendmsg+0x19b/0x260
[  256.548787][T18378]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  256.548804][T18378]  ? rcu_is_watching+0x15/0xb0
[  256.548817][T18378]  ? do_syscall_64+0xbe/0x3b0
[  256.548830][T18378]  do_syscall_64+0xfa/0x3b0
[  256.548838][T18378]  ? lockdep_hardirqs_on+0x9c/0x150
[  256.548846][T18378]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.548856][T18378]  ? exc_page_fault+0x9f/0xf0
[  256.548866][T18378]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.548875][T18378] RIP: 0033:0x7f91c518e929
[  256.548885][T18378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  256.548893][T18378] RSP: 002b:00007f91c60bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  256.548904][T18378] RAX: ffffffffffffffda RBX: 00007f91c53b5fa0 RCX: 00007f91c518e929
[  256.548911][T18378] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  256.548934][T18378] RBP: 00007f91c5210ca1 R08: 0000000000000000 R09: 0000000000000000
[  256.548940][T18378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  256.548946][T18378] R13: 0000000000000000 R14: 00007f91c53b5fa0 R15: 00007fff3a8d7e28
[  256.548963][T18378]  </TASK>
[  256.725496][T18386] netlink: 'syz.1.4171': attribute type 1 has an invalid length.
[  256.982530][T18395] netlink: 'syz.1.4174': attribute type 1 has an invalid length.
[  257.184538][T18421] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  257.522597][T18427] netlink: 'syz.1.4183': attribute type 4 has an invalid length.
[  257.594635][T18429] netlink: 'syz.1.4183': attribute type 5 has an invalid length.
[  257.612739][T18428] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  257.615196][T18428] CPU: 0 UID: 0 PID: 18428 Comm: syz.2.4182 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  257.615210][T18428] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  257.615217][T18428] Call Trace:
[  257.615222][T18428]  <TASK>
[  257.615227][T18428]  dump_stack_lvl+0x189/0x250
[  257.615246][T18428]  ? __pfx_dump_stack_lvl+0x10/0x10
[  257.615259][T18428]  ? __pfx__printk+0x10/0x10
[  257.615273][T18428]  ? kernfs_path_from_node+0x2c/0x260
[  257.615283][T18428]  ? kernfs_path_from_node+0x2c/0x260
[  257.615290][T18428]  ? kernfs_path_from_node+0x2c/0x260
[  257.615299][T18428]  ? kernfs_path_from_node+0x22c/0x260
[  257.615307][T18428]  ? kernfs_path_from_node+0x2c/0x260
[  257.615316][T18428]  sysfs_warn_dup+0x8e/0xa0
[  257.615335][T18428]  sysfs_do_create_link_sd+0xc0/0x110
[  257.615345][T18428]  device_add_class_symlinks+0x1cf/0x240
[  257.615363][T18428]  device_add+0x475/0xb50
[  257.615378][T18428]  wiphy_register+0x199a/0x26b0
[  257.615400][T18428]  ? __pfx_wiphy_register+0x10/0x10
[  257.615411][T18428]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  257.615427][T18428]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  257.615441][T18428]  ieee80211_register_hw+0x33e1/0x4120
[  257.615462][T18428]  ? ieee80211_register_hw+0x14c1/0x4120
[  257.615478][T18428]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  257.615492][T18428]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  257.615510][T18428]  ? __hrtimer_setup+0x187/0x210
[  257.615520][T18428]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  257.615541][T18428]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  257.615570][T18428]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  257.615582][T18428]  ? trace_kmalloc+0x1f/0xd0
[  257.615595][T18428]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  257.615609][T18428]  ? kstrndup+0xbf/0x160
[  257.615624][T18428]  hwsim_new_radio_nl+0xea4/0x1b10
[  257.615638][T18428]  ? __pfx___nla_validate_parse+0x10/0x10
[  257.615656][T18428]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  257.615674][T18428]  ? __nla_parse+0x40/0x60
[  257.615685][T18428]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  257.615700][T18428]  genl_family_rcv_msg_doit+0x215/0x300
[  257.615712][T18428]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  257.615728][T18428]  ? bpf_lsm_capable+0x9/0x20
[  257.615738][T18428]  ? security_capable+0x7e/0x2e0
[  257.615751][T18428]  genl_rcv_msg+0x60e/0x790
[  257.615763][T18428]  ? __pfx_genl_rcv_msg+0x10/0x10
[  257.615771][T18428]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  257.615790][T18428]  netlink_rcv_skb+0x208/0x470
[  257.615802][T18428]  ? __pfx_genl_rcv_msg+0x10/0x10
[  257.615811][T18428]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  257.615831][T18428]  ? down_read+0x1ad/0x2e0
[  257.615842][T18428]  genl_rcv+0x28/0x40
[  257.615849][T18428]  netlink_unicast+0x75c/0x8e0
[  257.615865][T18428]  netlink_sendmsg+0x805/0xb30
[  257.615881][T18428]  ? __pfx_netlink_sendmsg+0x10/0x10
[  257.615894][T18428]  ? aa_sock_msg_perm+0x94/0x160
[  257.615904][T18428]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  257.615913][T18428]  ? __pfx_netlink_sendmsg+0x10/0x10
[  257.615925][T18428]  __sock_sendmsg+0x21c/0x270
[  257.615937][T18428]  ____sys_sendmsg+0x505/0x830
[  257.615952][T18428]  ? __pfx_____sys_sendmsg+0x10/0x10
[  257.615968][T18428]  ? import_iovec+0x74/0xa0
[  257.615982][T18428]  ___sys_sendmsg+0x21f/0x2a0
[  257.615996][T18428]  ? __pfx____sys_sendmsg+0x10/0x10
[  257.616011][T18428]  ? futex_wait+0x285/0x360
[  257.616034][T18428]  ? __pfx_vfs_write+0x10/0x10
[  257.616050][T18428]  __x64_sys_sendmsg+0x19b/0x260
[  257.616064][T18428]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  257.616082][T18428]  ? __pfx_ksys_write+0x10/0x10
[  257.616095][T18428]  ? do_syscall_64+0xbe/0x3b0
[  257.616133][T18428]  do_syscall_64+0xfa/0x3b0
[  257.616144][T18428]  ? lockdep_hardirqs_on+0x9c/0x150
[  257.616154][T18428]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  257.616165][T18428]  ? exc_page_fault+0x9f/0xf0
[  257.616175][T18428]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  257.616184][T18428] RIP: 0033:0x7efd8818e929
[  257.616195][T18428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  257.616204][T18428] RSP: 002b:00007efd8902c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  257.616214][T18428] RAX: ffffffffffffffda RBX: 00007efd883b5fa0 RCX: 00007efd8818e929
[  257.616221][T18428] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005
[  257.616227][T18428] RBP: 00007efd88210ca1 R08: 0000000000000000 R09: 0000000000000000
[  257.616233][T18428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  257.616239][T18428] R13: 0000000000000000 R14: 00007efd883b5fa0 R15: 00007ffd611adc48
[  257.616253][T18428]  </TASK>
[  257.917686][T18442] __nla_validate_parse: 30 callbacks suppressed
[  257.917698][T18442] netlink: 124 bytes leftover after parsing attributes in process `syz.2.4188'.
[  257.982443][T18447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4191'.
[  258.072414][T18448] bond13: (slave bridge8): Releasing backup interface
[  258.092651][T18448] netlink: 'syz.0.4190': attribute type 10 has an invalid length.
[  258.102736][T18462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4194'.
[  258.107560][T18462] openvswitch: netlink: Key type 30 is not supported
[  258.169855][T18467] Cannot find del_set index 4 as target
[  258.176987][T18467] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4197'.
[  258.181385][T18467] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4197'.
[  258.216221][T18469] _Z`Ԁ@: entered promiscuous mode
[  258.238430][T18471] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4198'.
[  258.244302][T18475] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  258.246609][T18475] CPU: 0 UID: 0 PID: 18475 Comm: syz.1.4199 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  258.246623][T18475] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  258.246630][T18475] Call Trace:
[  258.246635][T18475]  <TASK>
[  258.246640][T18475]  dump_stack_lvl+0x189/0x250
[  258.246661][T18475]  ? __pfx_dump_stack_lvl+0x10/0x10
[  258.246672][T18475]  ? __pfx__printk+0x10/0x10
[  258.246687][T18475]  ? kernfs_path_from_node+0x2c/0x260
[  258.246697][T18475]  ? kernfs_path_from_node+0x2c/0x260
[  258.246704][T18475]  ? kernfs_path_from_node+0x2c/0x260
[  258.246713][T18475]  ? kernfs_path_from_node+0x22c/0x260
[  258.246720][T18475]  ? kernfs_path_from_node+0x2c/0x260
[  258.246729][T18475]  sysfs_warn_dup+0x8e/0xa0
[  258.246742][T18475]  sysfs_do_create_link_sd+0xc0/0x110
[  258.246752][T18475]  device_add_class_symlinks+0x1cf/0x240
[  258.246767][T18475]  device_add+0x475/0xb50
[  258.246782][T18475]  wiphy_register+0x199a/0x26b0
[  258.246804][T18475]  ? __pfx_wiphy_register+0x10/0x10
[  258.246814][T18475]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  258.246829][T18475]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  258.246844][T18475]  ieee80211_register_hw+0x33e1/0x4120
[  258.246864][T18475]  ? ieee80211_register_hw+0x14c1/0x4120
[  258.246881][T18475]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  258.246895][T18475]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  258.246913][T18475]  ? __hrtimer_setup+0x187/0x210
[  258.246922][T18475]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  258.246940][T18475]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  258.246967][T18475]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  258.246978][T18475]  ? trace_kmalloc+0x1f/0xd0
[  258.246989][T18475]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  258.247000][T18475]  ? kstrndup+0xbf/0x160
[  258.247014][T18475]  hwsim_new_radio_nl+0xea4/0x1b10
[  258.247027][T18475]  ? __pfx___nla_validate_parse+0x10/0x10
[  258.247045][T18475]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  258.247082][T18475]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  258.247098][T18475]  ? __nla_parse+0x40/0x60
[  258.247110][T18475]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  258.247126][T18475]  genl_family_rcv_msg_doit+0x215/0x300
[  258.247140][T18475]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  258.247156][T18475]  ? bpf_lsm_capable+0x9/0x20
[  258.247168][T18475]  ? security_capable+0x7e/0x2e0
[  258.247181][T18475]  genl_rcv_msg+0x60e/0x790
[  258.247193][T18475]  ? __pfx_genl_rcv_msg+0x10/0x10
[  258.247201][T18475]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  258.247220][T18475]  netlink_rcv_skb+0x208/0x470
[  258.247232][T18475]  ? __pfx_genl_rcv_msg+0x10/0x10
[  258.247241][T18475]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  258.247260][T18475]  ? down_read+0x1ad/0x2e0
[  258.247272][T18475]  genl_rcv+0x28/0x40
[  258.247279][T18475]  netlink_unicast+0x75c/0x8e0
[  258.247295][T18475]  netlink_sendmsg+0x805/0xb30
[  258.247311][T18475]  ? __pfx_netlink_sendmsg+0x10/0x10
[  258.247324][T18475]  ? aa_sock_msg_perm+0x94/0x160
[  258.247334][T18475]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  258.247343][T18475]  ? __pfx_netlink_sendmsg+0x10/0x10
[  258.247354][T18475]  __sock_sendmsg+0x21c/0x270
[  258.247367][T18475]  ____sys_sendmsg+0x505/0x830
[  258.247382][T18475]  ? __pfx_____sys_sendmsg+0x10/0x10
[  258.247399][T18475]  ? import_iovec+0x74/0xa0
[  258.247413][T18475]  ___sys_sendmsg+0x21f/0x2a0
[  258.247426][T18475]  ? __pfx____sys_sendmsg+0x10/0x10
[  258.247456][T18475]  ? __fget_files+0x2a/0x420
[  258.247471][T18475]  ? __fget_files+0x3a0/0x420
[  258.247485][T18475]  __x64_sys_sendmsg+0x19b/0x260
[  258.247500][T18475]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  258.247520][T18475]  ? rcu_is_watching+0x15/0xb0
[  258.247534][T18475]  ? do_syscall_64+0xbe/0x3b0
[  258.247547][T18475]  do_syscall_64+0xfa/0x3b0
[  258.247555][T18475]  ? lockdep_hardirqs_on+0x9c/0x150
[  258.247563][T18475]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.247572][T18475]  ? exc_page_fault+0x9f/0xf0
[  258.247581][T18475]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.247589][T18475] RIP: 0033:0x7f91c518e929
[  258.247599][T18475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  258.247607][T18475] RSP: 002b:00007f91c60bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  258.247617][T18475] RAX: ffffffffffffffda RBX: 00007f91c53b5fa0 RCX: 00007f91c518e929
[  258.247624][T18475] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  258.247631][T18475] RBP: 00007f91c5210ca1 R08: 0000000000000000 R09: 0000000000000000
[  258.247637][T18475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  258.247642][T18475] R13: 0000000000000000 R14: 00007f91c53b5fa0 R15: 00007fff3a8d7e28
[  258.247657][T18475]  </TASK>
[  258.393729][T18476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4198'.
[  258.552395][T18482] bond10: (slave vcan1): Releasing backup interface
[  258.554388][T18482] vcan1: left promiscuous mode
[  258.563536][T18482] bond11: (slave bridge9): Releasing backup interface
[  258.586132][T18482] netlink: 'syz.2.4203': attribute type 10 has an invalid length.
[  258.588547][T18482] bond0: (slave wlan1): refused to change device type
[  258.685421][T18502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4207'.
[  258.710086][T18496] netlink: 'syz.0.4206': attribute type 21 has an invalid length.
[  258.782916][T18507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4210'.
[  258.791145][T18507] openvswitch: netlink: Key type 30 is not supported
[  258.858481][T18524] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4213'.
[  258.870150][T18527] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  258.880847][T18527] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  258.977534][T18536] openvswitch: netlink: Key type 30 is not supported
[  259.060037][T18548] sctp: [Deprecated]: syz.1.4222 (pid 18548) Use of int in max_burst socket option.
[  259.060037][T18548] Use struct sctp_assoc_value instead
[  259.182546][T18562] openvswitch: netlink: Key type 30 is not supported
[  259.219861][T18568] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  259.225103][T18568] CPU: 0 UID: 0 PID: 18568 Comm: syz.1.4229 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  259.225119][T18568] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  259.225126][T18568] Call Trace:
[  259.225130][T18568]  <TASK>
[  259.225134][T18568]  dump_stack_lvl+0x189/0x250
[  259.225155][T18568]  ? __pfx_dump_stack_lvl+0x10/0x10
[  259.225180][T18568]  ? __pfx__printk+0x10/0x10
[  259.225195][T18568]  ? kernfs_path_from_node+0x2c/0x260
[  259.225205][T18568]  ? kernfs_path_from_node+0x2c/0x260
[  259.225214][T18568]  ? kernfs_path_from_node+0x2c/0x260
[  259.225223][T18568]  ? kernfs_path_from_node+0x22c/0x260
[  259.225232][T18568]  ? kernfs_path_from_node+0x2c/0x260
[  259.225243][T18568]  sysfs_warn_dup+0x8e/0xa0
[  259.225257][T18568]  sysfs_do_create_link_sd+0xc0/0x110
[  259.225266][T18568]  device_add_class_symlinks+0x1cf/0x240
[  259.225282][T18568]  device_add+0x475/0xb50
[  259.225297][T18568]  wiphy_register+0x199a/0x26b0
[  259.225323][T18568]  ? __pfx_wiphy_register+0x10/0x10
[  259.225334][T18568]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  259.225352][T18568]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  259.225369][T18568]  ieee80211_register_hw+0x33e1/0x4120
[  259.225399][T18568]  ? ieee80211_register_hw+0x14c1/0x4120
[  259.225426][T18568]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  259.225447][T18568]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  259.225473][T18568]  ? __hrtimer_setup+0x187/0x210
[  259.225483][T18568]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  259.225501][T18568]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  259.225528][T18568]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  259.225541][T18568]  ? trace_kmalloc+0x1f/0xd0
[  259.225554][T18568]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  259.225566][T18568]  ? kstrndup+0xbf/0x160
[  259.225580][T18568]  hwsim_new_radio_nl+0xea4/0x1b10
[  259.225592][T18568]  ? __pfx___nla_validate_parse+0x10/0x10
[  259.225610][T18568]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  259.225628][T18568]  ? __nla_parse+0x40/0x60
[  259.225639][T18568]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  259.225654][T18568]  genl_family_rcv_msg_doit+0x215/0x300
[  259.225666][T18568]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  259.225682][T18568]  ? bpf_lsm_capable+0x9/0x20
[  259.225694][T18568]  ? security_capable+0x7e/0x2e0
[  259.225707][T18568]  genl_rcv_msg+0x60e/0x790
[  259.225719][T18568]  ? __pfx_genl_rcv_msg+0x10/0x10
[  259.225727][T18568]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  259.225745][T18568]  netlink_rcv_skb+0x208/0x470
[  259.225760][T18568]  ? __pfx_genl_rcv_msg+0x10/0x10
[  259.225769][T18568]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  259.225789][T18568]  ? down_read+0x1ad/0x2e0
[  259.225800][T18568]  genl_rcv+0x28/0x40
[  259.225807][T18568]  netlink_unicast+0x75c/0x8e0
[  259.225823][T18568]  netlink_sendmsg+0x805/0xb30
[  259.225839][T18568]  ? __pfx_netlink_sendmsg+0x10/0x10
[  259.225852][T18568]  ? aa_sock_msg_perm+0x94/0x160
[  259.225862][T18568]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  259.225871][T18568]  ? __pfx_netlink_sendmsg+0x10/0x10
[  259.225883][T18568]  __sock_sendmsg+0x21c/0x270
[  259.225895][T18568]  ____sys_sendmsg+0x505/0x830
[  259.225910][T18568]  ? __pfx_____sys_sendmsg+0x10/0x10
[  259.225927][T18568]  ? import_iovec+0x74/0xa0
[  259.225941][T18568]  ___sys_sendmsg+0x21f/0x2a0
[  259.225978][T18568]  ? __pfx____sys_sendmsg+0x10/0x10
[  259.226012][T18568]  ? __fget_files+0x2a/0x420
[  259.226022][T18568]  ? __fget_files+0x3a0/0x420
[  259.226035][T18568]  __x64_sys_sendmsg+0x19b/0x260
[  259.226051][T18568]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  259.226071][T18568]  ? rcu_is_watching+0x15/0xb0
[  259.226085][T18568]  ? do_syscall_64+0xbe/0x3b0
[  259.226097][T18568]  do_syscall_64+0xfa/0x3b0
[  259.226105][T18568]  ? lockdep_hardirqs_on+0x9c/0x150
[  259.226114][T18568]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.226123][T18568]  ? exc_page_fault+0x9f/0xf0
[  259.226134][T18568]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.226143][T18568] RIP: 0033:0x7f91c518e929
[  259.226152][T18568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  259.226160][T18568] RSP: 002b:00007f91c60bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  259.226170][T18568] RAX: ffffffffffffffda RBX: 00007f91c53b5fa0 RCX: 00007f91c518e929
[  259.226178][T18568] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  259.226183][T18568] RBP: 00007f91c5210ca1 R08: 0000000000000000 R09: 0000000000000000
[  259.226189][T18568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  259.226195][T18568] R13: 0000000000000000 R14: 00007f91c53b5fa0 R15: 00007fff3a8d7e28
[  259.226209][T18568]  </TASK>
[  259.799102][T18619] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  260.998079][T18670] validate_nla: 4 callbacks suppressed
[  260.998090][T18670] netlink: 'syz.0.4266': attribute type 64 has an invalid length.
[  261.039144][T18670] syz_tun: left allmulticast mode
[  261.414104][T18715] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  261.472849][T18727] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  261.483598][T18732] x_tables: unsorted underflow at hook 4
[  261.489008][T18729] sch_fq: defrate 257 ignored.
[  261.540123][T18737] netlink: 'syz.2.4286': attribute type 29 has an invalid length.
[  261.597348][T18748] net_ratelimit: 2 callbacks suppressed
[  261.597360][T18748] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  261.610464][T18748] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  261.975819][T18789] openvswitch: netlink: Key type 30 is not supported
[  262.012068][T18791] netlink: 'syz.2.4302': attribute type 1 has an invalid length.
[  262.031095][T18791] 8021q: adding VLAN 0 to HW filter on device bond13
[  262.044880][T18791] veth9: entered promiscuous mode
[  262.798442][T18850] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  262.801733][T18850] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  262.923992][T18863] __nla_validate_parse: 45 callbacks suppressed
[  262.924003][T18863] netlink: 124 bytes leftover after parsing attributes in process `syz.0.4324'.
[  262.933681][T18864] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  262.936077][T18864] CPU: 0 UID: 0 PID: 18864 Comm: syz.1.4325 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  262.936090][T18864] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  262.936098][T18864] Call Trace:
[  262.936102][T18864]  <TASK>
[  262.936107][T18864]  dump_stack_lvl+0x189/0x250
[  262.936127][T18864]  ? __pfx_dump_stack_lvl+0x10/0x10
[  262.936139][T18864]  ? __pfx__printk+0x10/0x10
[  262.936153][T18864]  ? kernfs_path_from_node+0x2c/0x260
[  262.936163][T18864]  ? kernfs_path_from_node+0x2c/0x260
[  262.936170][T18864]  ? kernfs_path_from_node+0x2c/0x260
[  262.936179][T18864]  ? kernfs_path_from_node+0x22c/0x260
[  262.936186][T18864]  ? kernfs_path_from_node+0x2c/0x260
[  262.936195][T18864]  sysfs_warn_dup+0x8e/0xa0
[  262.936208][T18864]  sysfs_do_create_link_sd+0xc0/0x110
[  262.936217][T18864]  device_add_class_symlinks+0x1cf/0x240
[  262.936234][T18864]  device_add+0x475/0xb50
[  262.936247][T18864]  wiphy_register+0x199a/0x26b0
[  262.936268][T18864]  ? __pfx_wiphy_register+0x10/0x10
[  262.936278][T18864]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  262.936296][T18864]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  262.936313][T18864]  ieee80211_register_hw+0x33e1/0x4120
[  262.936334][T18864]  ? ieee80211_register_hw+0x14c1/0x4120
[  262.936350][T18864]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  262.936364][T18864]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  262.936382][T18864]  ? __hrtimer_setup+0x187/0x210
[  262.936392][T18864]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  262.936408][T18864]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  262.936434][T18864]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  262.936446][T18864]  ? trace_kmalloc+0x1f/0xd0
[  262.936457][T18864]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  262.936468][T18864]  ? kstrndup+0xbf/0x160
[  262.936482][T18864]  hwsim_new_radio_nl+0xea4/0x1b10
[  262.936495][T18864]  ? __pfx___nla_validate_parse+0x10/0x10
[  262.936513][T18864]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  262.936531][T18864]  ? __nla_parse+0x40/0x60
[  262.936543][T18864]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  262.936557][T18864]  genl_family_rcv_msg_doit+0x215/0x300
[  262.936569][T18864]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  262.936585][T18864]  ? bpf_lsm_capable+0x9/0x20
[  262.936596][T18864]  ? security_capable+0x7e/0x2e0
[  262.936634][T18864]  genl_rcv_msg+0x60e/0x790
[  262.936647][T18864]  ? __pfx_genl_rcv_msg+0x10/0x10
[  262.936656][T18864]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  262.936677][T18864]  netlink_rcv_skb+0x208/0x470
[  262.936691][T18864]  ? __pfx_genl_rcv_msg+0x10/0x10
[  262.936700][T18864]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  262.936722][T18864]  ? down_read+0x1ad/0x2e0
[  262.936734][T18864]  genl_rcv+0x28/0x40
[  262.936741][T18864]  netlink_unicast+0x75c/0x8e0
[  262.936757][T18864]  netlink_sendmsg+0x805/0xb30
[  262.936774][T18864]  ? __pfx_netlink_sendmsg+0x10/0x10
[  262.936787][T18864]  ? aa_sock_msg_perm+0x94/0x160
[  262.936796][T18864]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  262.936805][T18864]  ? __pfx_netlink_sendmsg+0x10/0x10
[  262.936817][T18864]  __sock_sendmsg+0x21c/0x270
[  262.936829][T18864]  ____sys_sendmsg+0x505/0x830
[  262.936843][T18864]  ? __pfx_____sys_sendmsg+0x10/0x10
[  262.936861][T18864]  ? import_iovec+0x74/0xa0
[  262.936874][T18864]  ___sys_sendmsg+0x21f/0x2a0
[  262.936887][T18864]  ? __pfx____sys_sendmsg+0x10/0x10
[  262.936918][T18864]  ? __fget_files+0x2a/0x420
[  262.936925][T18864]  ? __fget_files+0x3a0/0x420
[  262.936938][T18864]  __x64_sys_sendmsg+0x19b/0x260
[  262.936952][T18864]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  262.936969][T18864]  ? rcu_is_watching+0x15/0xb0
[  262.936982][T18864]  ? do_syscall_64+0xbe/0x3b0
[  262.936994][T18864]  do_syscall_64+0xfa/0x3b0
[  262.937002][T18864]  ? lockdep_hardirqs_on+0x9c/0x150
[  262.937011][T18864]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.937020][T18864]  ? exc_page_fault+0x9f/0xf0
[  262.937034][T18864]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.937043][T18864] RIP: 0033:0x7f91c518e929
[  262.937054][T18864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  262.937063][T18864] RSP: 002b:00007f91c60bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  262.937074][T18864] RAX: ffffffffffffffda RBX: 00007f91c53b5fa0 RCX: 00007f91c518e929
[  262.937081][T18864] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  262.937087][T18864] RBP: 00007f91c5210ca1 R08: 0000000000000000 R09: 0000000000000000
[  262.937092][T18864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  262.937097][T18864] R13: 0000000000000000 R14: 00007f91c53b5fa0 R15: 00007fff3a8d7e28
[  262.937113][T18864]  </TASK>
[  263.111406][T18867] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  263.121676][T18867] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  263.207420][T18874] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4328'.
[  263.212101][T18874] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4328'.
[  263.332374][T18887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4330'.
[  263.493244][T18899] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  263.506399][T18893] siw: device registration error -23
[  263.815143][T18913] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  263.956903][T18920] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4341'.
[  263.959741][T18920] 8021q: VLANs not supported on ip6_vti0
[  264.002201][T18920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4341'.
[  264.035715][T18924] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4342'.
[  264.147724][T18931] netlink: 124 bytes leftover after parsing attributes in process `syz.0.4345'.
[  264.204281][T18933] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4346'.
[  264.207239][T18933] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4346'.
[  264.416825][T18963] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  264.421272][T18963] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  264.439705][T18965] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  264.443594][T18965] CPU: 0 UID: 0 PID: 18965 Comm: syz.1.4353 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  264.443618][T18965] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  264.443628][T18965] Call Trace:
[  264.443635][T18965]  <TASK>
[  264.443642][T18965]  dump_stack_lvl+0x189/0x250
[  264.443673][T18965]  ? __pfx_dump_stack_lvl+0x10/0x10
[  264.443692][T18965]  ? __pfx__printk+0x10/0x10
[  264.443715][T18965]  ? kernfs_path_from_node+0x2c/0x260
[  264.443732][T18965]  ? kernfs_path_from_node+0x2c/0x260
[  264.443746][T18965]  ? kernfs_path_from_node+0x2c/0x260
[  264.443764][T18965]  ? kernfs_path_from_node+0x22c/0x260
[  264.443778][T18965]  ? kernfs_path_from_node+0x2c/0x260
[  264.443795][T18965]  sysfs_warn_dup+0x8e/0xa0
[  264.443818][T18965]  sysfs_do_create_link_sd+0xc0/0x110
[  264.443835][T18965]  device_add_class_symlinks+0x1cf/0x240
[  264.443870][T18965]  device_add+0x475/0xb50
[  264.443896][T18965]  wiphy_register+0x199a/0x26b0
[  264.443933][T18965]  ? __pfx_wiphy_register+0x10/0x10
[  264.443951][T18965]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  264.443978][T18965]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  264.444006][T18965]  ieee80211_register_hw+0x33e1/0x4120
[  264.444046][T18965]  ? ieee80211_register_hw+0x14c1/0x4120
[  264.444075][T18965]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  264.444101][T18965]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  264.444133][T18965]  ? __hrtimer_setup+0x187/0x210
[  264.444151][T18965]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  264.444181][T18965]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  264.444233][T18965]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  264.444254][T18965]  ? trace_kmalloc+0x1f/0xd0
[  264.444273][T18965]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  264.444294][T18965]  ? kstrndup+0xbf/0x160
[  264.444318][T18965]  hwsim_new_radio_nl+0xea4/0x1b10
[  264.444342][T18965]  ? __pfx___nla_validate_parse+0x10/0x10
[  264.444373][T18965]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  264.444406][T18965]  ? __nla_parse+0x40/0x60
[  264.444426][T18965]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  264.444453][T18965]  genl_family_rcv_msg_doit+0x215/0x300
[  264.444506][T18965]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  264.444535][T18965]  ? bpf_lsm_capable+0x9/0x20
[  264.444557][T18965]  ? security_capable+0x7e/0x2e0
[  264.444582][T18965]  genl_rcv_msg+0x60e/0x790
[  264.444606][T18965]  ? __pfx_genl_rcv_msg+0x10/0x10
[  264.444621][T18965]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  264.444653][T18965]  netlink_rcv_skb+0x208/0x470
[  264.444668][T18965]  ? __pfx_genl_rcv_msg+0x10/0x10
[  264.444695][T18965]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  264.444728][T18965]  ? down_read+0x1ad/0x2e0
[  264.444749][T18965]  genl_rcv+0x28/0x40
[  264.444762][T18965]  netlink_unicast+0x75c/0x8e0
[  264.444787][T18965]  netlink_sendmsg+0x805/0xb30
[  264.444818][T18965]  ? __pfx_netlink_sendmsg+0x10/0x10
[  264.444844][T18965]  ? aa_sock_msg_perm+0x94/0x160
[  264.444869][T18965]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  264.444887][T18965]  ? __pfx_netlink_sendmsg+0x10/0x10
[  264.444909][T18965]  __sock_sendmsg+0x21c/0x270
[  264.444931][T18965]  ____sys_sendmsg+0x505/0x830
[  264.444960][T18965]  ? __pfx_____sys_sendmsg+0x10/0x10
[  264.444990][T18965]  ? import_iovec+0x74/0xa0
[  264.445015][T18965]  ___sys_sendmsg+0x21f/0x2a0
[  264.445039][T18965]  ? __pfx____sys_sendmsg+0x10/0x10
[  264.445081][T18965]  ? __fget_files+0x2a/0x420
[  264.445095][T18965]  ? __fget_files+0x3a0/0x420
[  264.445118][T18965]  __x64_sys_sendmsg+0x19b/0x260
[  264.445145][T18965]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  264.445178][T18965]  ? rcu_is_watching+0x15/0xb0
[  264.445200][T18965]  ? do_syscall_64+0xbe/0x3b0
[  264.445221][T18965]  do_syscall_64+0xfa/0x3b0
[  264.445237][T18965]  ? lockdep_hardirqs_on+0x9c/0x150
[  264.445252][T18965]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.445264][T18965]  ? exc_page_fault+0x9f/0xf0
[  264.445274][T18965]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.445283][T18965] RIP: 0033:0x7f91c518e929
[  264.445294][T18965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  264.445303][T18965] RSP: 002b:00007f91c60bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  264.445314][T18965] RAX: ffffffffffffffda RBX: 00007f91c53b5fa0 RCX: 00007f91c518e929
[  264.445321][T18965] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  264.445328][T18965] RBP: 00007f91c5210ca1 R08: 0000000000000000 R09: 0000000000000000
[  264.445335][T18965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  264.445340][T18965] R13: 0000000000000000 R14: 00007f91c53b5fa0 R15: 00007fff3a8d7e28
[  264.445355][T18965]  </TASK>
[  264.669566][T18974] openvswitch: netlink: Key type 30 is not supported
[  265.573665][T19026] netlink: 'syz.2.4373': attribute type 1 has an invalid length.
[  265.591783][T19026] 8021q: adding VLAN 0 to HW filter on device bond15
[  265.599707][T19026] vlan1: entered allmulticast mode
[  265.602420][T19026] bond15: (slave vlan1): Opening slave failed
[  265.765899][T19032] netlink: 'syz.2.4375': attribute type 13 has an invalid length.
[  265.845150][T19032] lo speed is unknown, defaulting to 1000
[  265.847838][T19032] lo speed is unknown, defaulting to 1000
[  266.234944][T19055] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  266.237912][T19055] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  266.253709][T19046] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  266.266032][T19046] siw: device registration error -23
[  266.539247][T19063] netlink: 'syz.1.4383': attribute type 1 has an invalid length.
[  266.614727][T19066] pim6reg1: entered promiscuous mode
[  266.616478][T19066] pim6reg1: entered allmulticast mode
[  266.747481][T19066] syzkaller0: left promiscuous mode
[  266.749409][T19066] syzkaller0: left allmulticast mode
[  266.794733][T19066] bond16 (unregistering): Released all slaves
[  267.219042][T19096] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  267.343877][T19101] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  267.351903][T19101] siw: device registration error -23
[  267.578199][T19130] netlink: 'syz.0.4404': attribute type 20 has an invalid length.
[  267.588562][T19130] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  267.591070][T19130] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  267.593425][T19130] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  267.595816][T19130] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  267.599531][T19130] netlink: 'syz.0.4404': attribute type 20 has an invalid length.
[  267.684859][T19138] netlink: 'syz.1.4407': attribute type 1 has an invalid length.
[  267.746250][T19142] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  267.748633][T19142] CPU: 0 UID: 0 PID: 19142 Comm: syz.0.4409 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  267.748661][T19142] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  267.748667][T19142] Call Trace:
[  267.748673][T19142]  <TASK>
[  267.748678][T19142]  dump_stack_lvl+0x189/0x250
[  267.748697][T19142]  ? __pfx_dump_stack_lvl+0x10/0x10
[  267.748709][T19142]  ? __pfx__printk+0x10/0x10
[  267.748723][T19142]  ? kernfs_path_from_node+0x2c/0x260
[  267.748734][T19142]  ? kernfs_path_from_node+0x2c/0x260
[  267.748742][T19142]  ? kernfs_path_from_node+0x2c/0x260
[  267.748751][T19142]  ? kernfs_path_from_node+0x22c/0x260
[  267.748758][T19142]  ? kernfs_path_from_node+0x2c/0x260
[  267.748768][T19142]  sysfs_warn_dup+0x8e/0xa0
[  267.748780][T19142]  sysfs_do_create_link_sd+0xc0/0x110
[  267.748790][T19142]  device_add_class_symlinks+0x1cf/0x240
[  267.748806][T19142]  device_add+0x475/0xb50
[  267.748820][T19142]  wiphy_register+0x199a/0x26b0
[  267.748840][T19142]  ? __pfx_wiphy_register+0x10/0x10
[  267.748851][T19142]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  267.748866][T19142]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  267.748881][T19142]  ieee80211_register_hw+0x33e1/0x4120
[  267.748902][T19142]  ? ieee80211_register_hw+0x14c1/0x4120
[  267.748918][T19142]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  267.748931][T19142]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  267.748949][T19142]  ? __hrtimer_setup+0x187/0x210
[  267.748958][T19142]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  267.748976][T19142]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  267.749003][T19142]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  267.749014][T19142]  ? trace_kmalloc+0x1f/0xd0
[  267.749024][T19142]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  267.749036][T19142]  ? kstrndup+0xbf/0x160
[  267.749049][T19142]  hwsim_new_radio_nl+0xea4/0x1b10
[  267.749062][T19142]  ? __pfx___nla_validate_parse+0x10/0x10
[  267.749080][T19142]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  267.749098][T19142]  ? __nla_parse+0x40/0x60
[  267.749109][T19142]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  267.749123][T19142]  genl_family_rcv_msg_doit+0x215/0x300
[  267.749136][T19142]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  267.749172][T19142]  ? bpf_lsm_capable+0x9/0x20
[  267.749187][T19142]  ? security_capable+0x7e/0x2e0
[  267.749201][T19142]  genl_rcv_msg+0x60e/0x790
[  267.749214][T19142]  ? __pfx_genl_rcv_msg+0x10/0x10
[  267.749222][T19142]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  267.749242][T19142]  netlink_rcv_skb+0x208/0x470
[  267.749255][T19142]  ? __pfx_genl_rcv_msg+0x10/0x10
[  267.749264][T19142]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  267.749283][T19142]  ? down_read+0x1ad/0x2e0
[  267.749294][T19142]  genl_rcv+0x28/0x40
[  267.749302][T19142]  netlink_unicast+0x75c/0x8e0
[  267.749317][T19142]  netlink_sendmsg+0x805/0xb30
[  267.749333][T19142]  ? __pfx_netlink_sendmsg+0x10/0x10
[  267.749346][T19142]  ? aa_sock_msg_perm+0x94/0x160
[  267.749357][T19142]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  267.749366][T19142]  ? __pfx_netlink_sendmsg+0x10/0x10
[  267.749378][T19142]  __sock_sendmsg+0x21c/0x270
[  267.749390][T19142]  ____sys_sendmsg+0x505/0x830
[  267.749405][T19142]  ? __pfx_____sys_sendmsg+0x10/0x10
[  267.749422][T19142]  ? import_iovec+0x74/0xa0
[  267.749435][T19142]  ___sys_sendmsg+0x21f/0x2a0
[  267.749448][T19142]  ? __pfx____sys_sendmsg+0x10/0x10
[  267.749479][T19142]  ? __fget_files+0x2a/0x420
[  267.749486][T19142]  ? __fget_files+0x3a0/0x420
[  267.749499][T19142]  __x64_sys_sendmsg+0x19b/0x260
[  267.749512][T19142]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  267.749530][T19142]  ? rcu_is_watching+0x15/0xb0
[  267.749549][T19142]  ? do_syscall_64+0xbe/0x3b0
[  267.749562][T19142]  do_syscall_64+0xfa/0x3b0
[  267.749571][T19142]  ? lockdep_hardirqs_on+0x9c/0x150
[  267.749581][T19142]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.749590][T19142]  ? exc_page_fault+0x9f/0xf0
[  267.749599][T19142]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.749609][T19142] RIP: 0033:0x7f4a9798e929
[  267.749619][T19142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  267.749627][T19142] RSP: 002b:00007f4a98863038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  267.749637][T19142] RAX: ffffffffffffffda RBX: 00007f4a97bb5fa0 RCX: 00007f4a9798e929
[  267.749644][T19142] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  267.749649][T19142] RBP: 00007f4a97a10ca1 R08: 0000000000000000 R09: 0000000000000000
[  267.749654][T19142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  267.749660][T19142] R13: 0000000000000000 R14: 00007f4a97bb5fa0 R15: 00007fffb85bab38
[  267.749674][T19142]  </TASK>
[  267.943953][T19148] __nla_validate_parse: 34 callbacks suppressed
[  267.943964][T19148] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4410'.
[  267.950183][T19150] netlink: 124 bytes leftover after parsing attributes in process `syz.0.4411'.
[  268.044667][T19159] syzkaller1: entered promiscuous mode
[  268.048599][T19159] syzkaller1: entered allmulticast mode
[  268.056446][T19156] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4414'.
[  268.059479][T19156] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4414'.
[  268.106519][T19161] sctp: [Deprecated]: syz.2.4415 (pid 19161) Use of struct sctp_assoc_value in delayed_ack socket option.
[  268.106519][T19161] Use struct sctp_sack_info instead
[  268.147583][T19165] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  268.159418][T19165] CPU: 1 UID: 0 PID: 19165 Comm: syz.2.4417 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  268.159436][T19165] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  268.159442][T19165] Call Trace:
[  268.159446][T19165]  <TASK>
[  268.159452][T19165]  dump_stack_lvl+0x189/0x250
[  268.159471][T19165]  ? __pfx_dump_stack_lvl+0x10/0x10
[  268.159483][T19165]  ? __pfx__printk+0x10/0x10
[  268.159497][T19165]  ? kernfs_path_from_node+0x2c/0x260
[  268.159508][T19165]  ? kernfs_path_from_node+0x2c/0x260
[  268.159515][T19165]  ? kernfs_path_from_node+0x2c/0x260
[  268.159531][T19165]  ? kernfs_path_from_node+0x22c/0x260
[  268.159539][T19165]  ? kernfs_path_from_node+0x2c/0x260
[  268.159550][T19165]  sysfs_warn_dup+0x8e/0xa0
[  268.159564][T19165]  sysfs_do_create_link_sd+0xc0/0x110
[  268.159575][T19165]  device_add_class_symlinks+0x1cf/0x240
[  268.159590][T19165]  device_add+0x475/0xb50
[  268.159605][T19165]  wiphy_register+0x199a/0x26b0
[  268.159626][T19165]  ? __pfx_wiphy_register+0x10/0x10
[  268.159636][T19165]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  268.159652][T19165]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  268.159668][T19165]  ieee80211_register_hw+0x33e1/0x4120
[  268.159691][T19165]  ? ieee80211_register_hw+0x14c1/0x4120
[  268.159707][T19165]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  268.159722][T19165]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  268.159740][T19165]  ? __hrtimer_setup+0x187/0x210
[  268.159749][T19165]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  268.159767][T19165]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  268.159795][T19165]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  268.159808][T19165]  ? trace_kmalloc+0x1f/0xd0
[  268.159821][T19165]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  268.159833][T19165]  ? kstrndup+0xbf/0x160
[  268.159848][T19165]  hwsim_new_radio_nl+0xea4/0x1b10
[  268.159862][T19165]  ? __pfx___nla_validate_parse+0x10/0x10
[  268.159880][T19165]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  268.159898][T19165]  ? __nla_parse+0x40/0x60
[  268.159909][T19165]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  268.159924][T19165]  genl_family_rcv_msg_doit+0x215/0x300
[  268.159938][T19165]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  268.159954][T19165]  ? bpf_lsm_capable+0x9/0x20
[  268.159965][T19165]  ? security_capable+0x7e/0x2e0
[  268.159978][T19165]  genl_rcv_msg+0x60e/0x790
[  268.159990][T19165]  ? __pfx_genl_rcv_msg+0x10/0x10
[  268.159998][T19165]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  268.160016][T19165]  netlink_rcv_skb+0x208/0x470
[  268.160028][T19165]  ? __pfx_genl_rcv_msg+0x10/0x10
[  268.160038][T19165]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  268.160057][T19165]  ? down_read+0x1ad/0x2e0
[  268.160068][T19165]  genl_rcv+0x28/0x40
[  268.160076][T19165]  netlink_unicast+0x75c/0x8e0
[  268.160092][T19165]  netlink_sendmsg+0x805/0xb30
[  268.160131][T19165]  ? __pfx_netlink_sendmsg+0x10/0x10
[  268.160148][T19165]  ? aa_sock_msg_perm+0x94/0x160
[  268.160160][T19165]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  268.160170][T19165]  ? __pfx_netlink_sendmsg+0x10/0x10
[  268.160183][T19165]  __sock_sendmsg+0x21c/0x270
[  268.160196][T19165]  ____sys_sendmsg+0x505/0x830
[  268.160213][T19165]  ? __pfx_____sys_sendmsg+0x10/0x10
[  268.160230][T19165]  ? import_iovec+0x74/0xa0
[  268.160259][T19165]  ___sys_sendmsg+0x21f/0x2a0
[  268.160274][T19165]  ? __pfx____sys_sendmsg+0x10/0x10
[  268.160306][T19165]  ? __fget_files+0x2a/0x420
[  268.160315][T19165]  ? __fget_files+0x3a0/0x420
[  268.160328][T19165]  __x64_sys_sendmsg+0x19b/0x260
[  268.160344][T19165]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  268.160366][T19165]  ? do_syscall_64+0xbe/0x3b0
[  268.160379][T19165]  do_syscall_64+0xfa/0x3b0
[  268.160387][T19165]  ? lockdep_hardirqs_on+0x9c/0x150
[  268.160395][T19165]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.160405][T19165]  ? exc_page_fault+0x9f/0xf0
[  268.160415][T19165]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.160423][T19165] RIP: 0033:0x7efd8818e929
[  268.160432][T19165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  268.160441][T19165] RSP: 002b:00007efd8902c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  268.160452][T19165] RAX: ffffffffffffffda RBX: 00007efd883b5fa0 RCX: 00007efd8818e929
[  268.160459][T19165] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  268.160465][T19165] RBP: 00007efd88210ca1 R08: 0000000000000000 R09: 0000000000000000
[  268.160471][T19165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  268.160476][T19165] R13: 0000000000000000 R14: 00007efd883b5fa0 R15: 00007ffd611adc48
[  268.160492][T19165]  </TASK>
[  268.212080][T19167] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  268.432377][T19184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4419'.
[  268.926274][T19190] netlink: 'syz.0.4423': attribute type 21 has an invalid length.
[  268.928716][T19190] netlink: 'syz.0.4423': attribute type 22 has an invalid length.
[  268.933668][T19190] netlink: 'syz.0.4423': attribute type 21 has an invalid length.
[  268.936137][T19190] netlink: 'syz.0.4423': attribute type 22 has an invalid length.
[  269.232287][T19201] netlink: 116 bytes leftover after parsing attributes in process `syz.0.4425'.
[  269.346815][T19212] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4431'.
[  269.350387][T19212] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4431'.
[  269.378818][T19214] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 35545 - 0
[  269.389440][T19214] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 53081 - 0
[  269.443468][T19214] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 35545 - 0
[  269.446451][T19214] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 53081 - 0
[  269.487085][T19214] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 35545 - 0
[  269.493219][T19214] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 53081 - 0
[  269.511285][T19228] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  269.513564][T19228] CPU: 1 UID: 0 PID: 19228 Comm: syz.0.4436 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  269.513578][T19228] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  269.513584][T19228] Call Trace:
[  269.513589][T19228]  <TASK>
[  269.513593][T19228]  dump_stack_lvl+0x189/0x250
[  269.513612][T19228]  ? __pfx_dump_stack_lvl+0x10/0x10
[  269.513622][T19228]  ? __pfx__printk+0x10/0x10
[  269.513635][T19228]  ? kernfs_path_from_node+0x2c/0x260
[  269.513645][T19228]  ? kernfs_path_from_node+0x2c/0x260
[  269.513653][T19228]  ? kernfs_path_from_node+0x2c/0x260
[  269.513661][T19228]  ? kernfs_path_from_node+0x22c/0x260
[  269.513669][T19228]  ? kernfs_path_from_node+0x2c/0x260
[  269.513678][T19228]  sysfs_warn_dup+0x8e/0xa0
[  269.513691][T19228]  sysfs_do_create_link_sd+0xc0/0x110
[  269.513700][T19228]  device_add_class_symlinks+0x1cf/0x240
[  269.513715][T19228]  device_add+0x475/0xb50
[  269.513729][T19228]  wiphy_register+0x199a/0x26b0
[  269.513748][T19228]  ? __pfx_wiphy_register+0x10/0x10
[  269.513758][T19228]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  269.513773][T19228]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  269.513787][T19228]  ieee80211_register_hw+0x33e1/0x4120
[  269.513810][T19228]  ? ieee80211_register_hw+0x14c1/0x4120
[  269.513827][T19228]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  269.513841][T19228]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  269.513859][T19228]  ? __hrtimer_setup+0x187/0x210
[  269.513868][T19228]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  269.513884][T19228]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  269.513909][T19228]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  269.513920][T19228]  ? trace_kmalloc+0x1f/0xd0
[  269.513931][T19228]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  269.513943][T19228]  ? kstrndup+0xbf/0x160
[  269.513957][T19228]  hwsim_new_radio_nl+0xea4/0x1b10
[  269.513971][T19228]  ? __pfx___nla_validate_parse+0x10/0x10
[  269.514010][T19228]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  269.514029][T19228]  ? __nla_parse+0x40/0x60
[  269.514040][T19228]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  269.514055][T19228]  genl_family_rcv_msg_doit+0x215/0x300
[  269.514068][T19228]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  269.514083][T19228]  ? bpf_lsm_capable+0x9/0x20
[  269.514094][T19228]  ? security_capable+0x7e/0x2e0
[  269.514108][T19228]  genl_rcv_msg+0x60e/0x790
[  269.514119][T19228]  ? __pfx_genl_rcv_msg+0x10/0x10
[  269.514128][T19228]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  269.514146][T19228]  netlink_rcv_skb+0x208/0x470
[  269.514158][T19228]  ? __pfx_genl_rcv_msg+0x10/0x10
[  269.514167][T19228]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  269.514187][T19228]  ? down_read+0x1ad/0x2e0
[  269.514198][T19228]  genl_rcv+0x28/0x40
[  269.514206][T19228]  netlink_unicast+0x75c/0x8e0
[  269.514221][T19228]  netlink_sendmsg+0x805/0xb30
[  269.514238][T19228]  ? __pfx_netlink_sendmsg+0x10/0x10
[  269.514251][T19228]  ? aa_sock_msg_perm+0x94/0x160
[  269.514261][T19228]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  269.514270][T19228]  ? __pfx_netlink_sendmsg+0x10/0x10
[  269.514282][T19228]  __sock_sendmsg+0x21c/0x270
[  269.514294][T19228]  ____sys_sendmsg+0x505/0x830
[  269.514309][T19228]  ? __pfx_____sys_sendmsg+0x10/0x10
[  269.514326][T19228]  ? import_iovec+0x74/0xa0
[  269.514339][T19228]  ___sys_sendmsg+0x21f/0x2a0
[  269.514352][T19228]  ? __pfx____sys_sendmsg+0x10/0x10
[  269.514382][T19228]  ? __fget_files+0x2a/0x420
[  269.514390][T19228]  ? __fget_files+0x3a0/0x420
[  269.514409][T19228]  __x64_sys_sendmsg+0x19b/0x260
[  269.514423][T19228]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  269.514441][T19228]  ? rcu_is_watching+0x15/0xb0
[  269.514455][T19228]  ? do_syscall_64+0xbe/0x3b0
[  269.514467][T19228]  do_syscall_64+0xfa/0x3b0
[  269.514476][T19228]  ? lockdep_hardirqs_on+0x9c/0x150
[  269.514484][T19228]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.514493][T19228]  ? exc_page_fault+0x9f/0xf0
[  269.514502][T19228]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.514510][T19228] RIP: 0033:0x7f4a9798e929
[  269.514519][T19228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  269.514527][T19228] RSP: 002b:00007f4a98863038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  269.514536][T19228] RAX: ffffffffffffffda RBX: 00007f4a97bb5fa0 RCX: 00007f4a9798e929
[  269.514543][T19228] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005
[  269.514549][T19228] RBP: 00007f4a97a10ca1 R08: 0000000000000000 R09: 0000000000000000
[  269.514554][T19228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  269.514559][T19228] R13: 0000000000000000 R14: 00007f4a97bb5fa0 R15: 00007fffb85bab38
[  269.514573][T19228]  </TASK>
[  269.672936][T19214] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 35545 - 0
[  269.679128][T19230] netlink: 124 bytes leftover after parsing attributes in process `syz.0.4438'.
[  269.680363][T19214] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 53081 - 0
[  269.691020][T19232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4437'.
[  269.693727][T19232] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  269.695909][T19232] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  269.699431][T19232] xfrm0: entered allmulticast mode
[  269.737095][T19236] netlink: 'syz.0.4440': attribute type 5 has an invalid length.
[  269.767877][T19214] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 53081 - 0
[  269.771241][T19214] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 35545 - 0
[  269.782528][T19214] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 53081 - 0
[  269.785110][T19214] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 35545 - 0
[  269.808428][T19214] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 53081 - 0
[  269.813234][T19214] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 35545 - 0
[  269.826503][T19214] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 53081 - 0
[  269.829068][T19214] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 35545 - 0
[  269.942835][T19248] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  269.945175][T19248] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  270.073784][T19263] openvswitch: netlink: Key type 30 is not supported
[  270.115381][T19268] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  270.117718][T19268] CPU: 0 UID: 0 PID: 19268 Comm: syz.0.4452 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  270.117732][T19268] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  270.117738][T19268] Call Trace:
[  270.117743][T19268]  <TASK>
[  270.117748][T19268]  dump_stack_lvl+0x189/0x250
[  270.117767][T19268]  ? __pfx_dump_stack_lvl+0x10/0x10
[  270.117778][T19268]  ? __pfx__printk+0x10/0x10
[  270.117791][T19268]  ? kernfs_path_from_node+0x2c/0x260
[  270.117802][T19268]  ? kernfs_path_from_node+0x2c/0x260
[  270.117809][T19268]  ? kernfs_path_from_node+0x2c/0x260
[  270.117818][T19268]  ? kernfs_path_from_node+0x22c/0x260
[  270.117825][T19268]  ? kernfs_path_from_node+0x2c/0x260
[  270.117834][T19268]  sysfs_warn_dup+0x8e/0xa0
[  270.117847][T19268]  sysfs_do_create_link_sd+0xc0/0x110
[  270.117856][T19268]  device_add_class_symlinks+0x1cf/0x240
[  270.117871][T19268]  device_add+0x475/0xb50
[  270.117885][T19268]  wiphy_register+0x199a/0x26b0
[  270.117905][T19268]  ? __pfx_wiphy_register+0x10/0x10
[  270.117915][T19268]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  270.117956][T19268]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  270.117972][T19268]  ieee80211_register_hw+0x33e1/0x4120
[  270.117995][T19268]  ? ieee80211_register_hw+0x14c1/0x4120
[  270.118012][T19268]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  270.118026][T19268]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  270.118044][T19268]  ? __hrtimer_setup+0x187/0x210
[  270.118054][T19268]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  270.118085][T19268]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  270.118113][T19268]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  270.118124][T19268]  ? trace_kmalloc+0x1f/0xd0
[  270.118136][T19268]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  270.118148][T19268]  ? kstrndup+0xbf/0x160
[  270.118162][T19268]  hwsim_new_radio_nl+0xea4/0x1b10
[  270.118175][T19268]  ? __pfx___nla_validate_parse+0x10/0x10
[  270.118192][T19268]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  270.118210][T19268]  ? __nla_parse+0x40/0x60
[  270.118222][T19268]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  270.118236][T19268]  genl_family_rcv_msg_doit+0x215/0x300
[  270.118249][T19268]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  270.118264][T19268]  ? bpf_lsm_capable+0x9/0x20
[  270.118281][T19268]  ? security_capable+0x7e/0x2e0
[  270.118295][T19268]  genl_rcv_msg+0x60e/0x790
[  270.118307][T19268]  ? __pfx_genl_rcv_msg+0x10/0x10
[  270.118315][T19268]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  270.118334][T19268]  netlink_rcv_skb+0x208/0x470
[  270.118348][T19268]  ? __pfx_genl_rcv_msg+0x10/0x10
[  270.118358][T19268]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  270.118378][T19268]  ? down_read+0x1ad/0x2e0
[  270.118390][T19268]  genl_rcv+0x28/0x40
[  270.118398][T19268]  netlink_unicast+0x75c/0x8e0
[  270.118413][T19268]  netlink_sendmsg+0x805/0xb30
[  270.118429][T19268]  ? __pfx_netlink_sendmsg+0x10/0x10
[  270.118442][T19268]  ? aa_sock_msg_perm+0x94/0x160
[  270.118452][T19268]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  270.118461][T19268]  ? __pfx_netlink_sendmsg+0x10/0x10
[  270.118472][T19268]  __sock_sendmsg+0x21c/0x270
[  270.118484][T19268]  ____sys_sendmsg+0x505/0x830
[  270.118499][T19268]  ? __pfx_____sys_sendmsg+0x10/0x10
[  270.118516][T19268]  ? import_iovec+0x74/0xa0
[  270.118530][T19268]  ___sys_sendmsg+0x21f/0x2a0
[  270.118543][T19268]  ? __pfx____sys_sendmsg+0x10/0x10
[  270.118573][T19268]  ? __fget_files+0x2a/0x420
[  270.118581][T19268]  ? __fget_files+0x3a0/0x420
[  270.118593][T19268]  __x64_sys_sendmsg+0x19b/0x260
[  270.118607][T19268]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  270.118628][T19268]  ? do_syscall_64+0xbe/0x3b0
[  270.118640][T19268]  do_syscall_64+0xfa/0x3b0
[  270.118648][T19268]  ? lockdep_hardirqs_on+0x9c/0x150
[  270.118656][T19268]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.118665][T19268]  ? exc_page_fault+0x9f/0xf0
[  270.118674][T19268]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.118682][T19268] RIP: 0033:0x7f4a9798e929
[  270.118691][T19268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  270.118699][T19268] RSP: 002b:00007f4a98863038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  270.118709][T19268] RAX: ffffffffffffffda RBX: 00007f4a97bb5fa0 RCX: 00007f4a9798e929
[  270.118715][T19268] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  270.118721][T19268] RBP: 00007f4a97a10ca1 R08: 0000000000000000 R09: 0000000000000000
[  270.118726][T19268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  270.118731][T19268] R13: 0000000000000000 R14: 00007f4a97bb5fa0 R15: 00007fffb85bab38
[  270.118746][T19268]  </TASK>
[  270.505217][T19294] netlink: 'syz.1.4461': attribute type 10 has an invalid length.
[  270.716598][T19308] lo speed is unknown, defaulting to 1000
[  270.719180][T19308] lo speed is unknown, defaulting to 1000
[  270.884983][T19309] syzkaller1: entered promiscuous mode
[  270.886796][T19309] syzkaller1: entered allmulticast mode
[  271.545183][T19344] validate_nla: 1 callbacks suppressed
[  271.545195][T19344] netlink: 'syz.0.4476': attribute type 21 has an invalid length.
[  271.599381][T19348] netlink: 'syz.0.4478': attribute type 2 has an invalid length.
[  271.658020][T19352] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  271.668245][T19352] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  272.629028][T19398] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  272.853834][T19406] netlink: 'syz.1.4495': attribute type 8 has an invalid length.
[  273.328588][T19427] __nla_validate_parse: 52 callbacks suppressed
[  273.328601][T19427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4502'.
[  273.343174][T19429] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4500'.
[  273.362223][T19429] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4500'.
[  273.403097][T19431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4503'.
[  273.682925][T19438] syzkaller0: Caught tx_queue_len zero misconfig
[  273.786884][T19444] netlink: 'syz.1.4508': attribute type 2 has an invalid length.
[  273.789258][T19444] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4508'.
[  273.807819][T19444] nbd: must specify a device to reconfigure
[  273.908231][T19382] Set syz1 is full, maxelem 65536 reached
[  273.969645][T19451] netlink: 124 bytes leftover after parsing attributes in process `syz.0.4511'.
[  274.023414][T19453] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4512'.
[  274.026641][T19453] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4512'.
[  274.077172][T19457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4519'.
[  274.105716][T19459] A link change request failed with some changes committed already. Interface bond4 may have been left with an inconsistent configuration, please check.
[  274.122035][T19461] netlink: 'syz.0.4515': attribute type 21 has an invalid length.
[  274.125348][T19461] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4515'.
[  274.135263][T19461] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  274.138682][T19461] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  274.921296][T19485] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  274.923628][T19485] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  275.118892][T19487] netlink: 'syz.2.4524': attribute type 3 has an invalid length.
[  275.125590][T19487] netlink: 'syz.2.4524': attribute type 3 has an invalid length.
[  275.407830][T19470] Set syz1 is full, maxelem 65536 reached
[  275.458216][T19491] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  275.574966][T19502] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  276.147065][T19546] sctp: [Deprecated]: syz.0.4546 (pid 19546) Use of struct sctp_assoc_value in delayed_ack socket option.
[  276.147065][T19546] Use struct sctp_sack_info instead
[  276.292829][T19562] netlink: 'syz.0.4552': attribute type 10 has an invalid length.
[  276.947444][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  276.956850][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  277.713446][T19706] net_ratelimit: 6 callbacks suppressed
[  277.713460][T19706] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  277.717600][T19706] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  278.031163][T19723] openvswitch: netlink: Key type 30 is not supported
[  278.218611][T19742] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  278.406071][T19749] __nla_validate_parse: 20 callbacks suppressed
[  278.406086][T19749] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4598'.
[  278.750516][T19763] netlink: 124 bytes leftover after parsing attributes in process `syz.2.4603'.
[  278.785860][T19765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4604'.
[  278.846281][T19769] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  278.848791][T19769] CPU: 0 UID: 0 PID: 19769 Comm: syz.2.4606 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  278.848806][T19769] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  278.848813][T19769] Call Trace:
[  278.848818][T19769]  <TASK>
[  278.848823][T19769]  dump_stack_lvl+0x189/0x250
[  278.848842][T19769]  ? __pfx_dump_stack_lvl+0x10/0x10
[  278.848853][T19769]  ? __pfx__printk+0x10/0x10
[  278.848869][T19769]  ? kernfs_path_from_node+0x2c/0x260
[  278.848878][T19769]  ? kernfs_path_from_node+0x2c/0x260
[  278.848885][T19769]  ? kernfs_path_from_node+0x2c/0x260
[  278.848894][T19769]  ? kernfs_path_from_node+0x22c/0x260
[  278.848901][T19769]  ? kernfs_path_from_node+0x2c/0x260
[  278.848911][T19769]  sysfs_warn_dup+0x8e/0xa0
[  278.848924][T19769]  sysfs_do_create_link_sd+0xc0/0x110
[  278.848935][T19769]  device_add_class_symlinks+0x1cf/0x240
[  278.848950][T19769]  device_add+0x475/0xb50
[  278.848964][T19769]  wiphy_register+0x199a/0x26b0
[  278.848985][T19769]  ? __pfx_wiphy_register+0x10/0x10
[  278.848995][T19769]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  278.849010][T19769]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  278.849024][T19769]  ieee80211_register_hw+0x33e1/0x4120
[  278.849046][T19769]  ? ieee80211_register_hw+0x14c1/0x4120
[  278.849062][T19769]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  278.849076][T19769]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  278.849094][T19769]  ? __hrtimer_setup+0x187/0x210
[  278.849131][T19769]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  278.849149][T19769]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  278.849178][T19769]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  278.849190][T19769]  ? trace_kmalloc+0x1f/0xd0
[  278.849202][T19769]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  278.849213][T19769]  ? kstrndup+0xbf/0x160
[  278.849227][T19769]  hwsim_new_radio_nl+0xea4/0x1b10
[  278.849240][T19769]  ? __pfx___nla_validate_parse+0x10/0x10
[  278.849259][T19769]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  278.849277][T19769]  ? __nla_parse+0x40/0x60
[  278.849288][T19769]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  278.849304][T19769]  genl_family_rcv_msg_doit+0x215/0x300
[  278.849317][T19769]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  278.849332][T19769]  ? bpf_lsm_capable+0x9/0x20
[  278.849343][T19769]  ? security_capable+0x7e/0x2e0
[  278.849357][T19769]  genl_rcv_msg+0x60e/0x790
[  278.849371][T19769]  ? __pfx_genl_rcv_msg+0x10/0x10
[  278.849380][T19769]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  278.849400][T19769]  netlink_rcv_skb+0x208/0x470
[  278.849412][T19769]  ? __pfx_genl_rcv_msg+0x10/0x10
[  278.849421][T19769]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  278.849441][T19769]  ? down_read+0x1ad/0x2e0
[  278.849452][T19769]  genl_rcv+0x28/0x40
[  278.849459][T19769]  netlink_unicast+0x75c/0x8e0
[  278.849481][T19769]  netlink_sendmsg+0x805/0xb30
[  278.849498][T19769]  ? __pfx_netlink_sendmsg+0x10/0x10
[  278.849512][T19769]  ? aa_sock_msg_perm+0x94/0x160
[  278.849525][T19769]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  278.849536][T19769]  ? __pfx_netlink_sendmsg+0x10/0x10
[  278.849549][T19769]  __sock_sendmsg+0x21c/0x270
[  278.849562][T19769]  ____sys_sendmsg+0x505/0x830
[  278.849577][T19769]  ? __pfx_____sys_sendmsg+0x10/0x10
[  278.849594][T19769]  ? import_iovec+0x74/0xa0
[  278.849608][T19769]  ___sys_sendmsg+0x21f/0x2a0
[  278.849621][T19769]  ? __pfx____sys_sendmsg+0x10/0x10
[  278.849652][T19769]  ? __fget_files+0x2a/0x420
[  278.849660][T19769]  ? __fget_files+0x3a0/0x420
[  278.849672][T19769]  __x64_sys_sendmsg+0x19b/0x260
[  278.849686][T19769]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  278.849703][T19769]  ? rcu_is_watching+0x15/0xb0
[  278.849716][T19769]  ? do_syscall_64+0xbe/0x3b0
[  278.849728][T19769]  do_syscall_64+0xfa/0x3b0
[  278.849737][T19769]  ? lockdep_hardirqs_on+0x9c/0x150
[  278.849744][T19769]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  278.849753][T19769]  ? exc_page_fault+0x9f/0xf0
[  278.849762][T19769]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  278.849770][T19769] RIP: 0033:0x7efd8818e929
[  278.849779][T19769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  278.849787][T19769] RSP: 002b:00007efd8902c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  278.849813][T19769] RAX: ffffffffffffffda RBX: 00007efd883b5fa0 RCX: 00007efd8818e929
[  278.849820][T19769] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  278.849827][T19769] RBP: 00007efd88210ca1 R08: 0000000000000000 R09: 0000000000000000
[  278.849833][T19769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  278.849839][T19769] R13: 0000000000000000 R14: 00007efd883b5fa0 R15: 00007ffd611adc48
[  278.849854][T19769]  </TASK>
[  279.167903][T19783] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4610'.
[  279.171191][T19783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4610'.
[  279.173914][T19783] netlink: 31 bytes leftover after parsing attributes in process `syz.2.4610'.
[  279.176632][T19783] netlink: 'syz.2.4610': attribute type 3 has an invalid length.
[  279.178982][T19783] netlink: 'syz.2.4610': attribute type 2 has an invalid length.
[  279.181594][T19783] netlink: 31 bytes leftover after parsing attributes in process `syz.2.4610'.
[  279.184839][T19783] netlink: 'syz.2.4610': attribute type 2 has an invalid length.
[  279.398765][T19792] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4612'.
[  279.403770][T19792] openvswitch: netlink: Flow key attr not present in new flow.
[  279.454182][T19738] Set syz1 is full, maxelem 65536 reached
[  279.549522][T19805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4616'.
[  280.805874][T19841] netlink: 124 bytes leftover after parsing attributes in process `syz.2.4628'.
[  280.879289][T19850] bridge11: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  280.897264][T19844] pim6reg1: entered promiscuous mode
[  280.899152][T19844] pim6reg1: entered allmulticast mode
[  281.125373][T19875] netlink: 'syz.1.4639': attribute type 1 has an invalid length.
[  281.127737][T19875] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  281.330090][T19896] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  281.332797][T19896] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  281.335307][T19896] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  281.337835][T19896] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  281.718724][T19930] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  281.721475][T19930] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  281.764453][T19934] netlink: 'syz.1.4657': attribute type 12 has an invalid length.
[  282.118580][T19961] xt_hashlimit: size too large, truncated to 1048576
[  282.233763][T19967] lo speed is unknown, defaulting to 1000
[  282.236400][T19967] lo speed is unknown, defaulting to 1000
[  282.249385][T19973] ip6gre2: entered allmulticast mode
[  282.419343][T19983] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  282.625334][T19999] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  282.678780][T20000] netlink: 'syz.0.4679': attribute type 10 has an invalid length.
[  283.047262][T20024] netlink: 'syz.0.4688': attribute type 1 has an invalid length.
[  283.106946][T20024] bond14: entered promiscuous mode
[  283.108944][T20024] 8021q: adding VLAN 0 to HW filter on device bond14
[  283.124984][T20026] batadv0: entered promiscuous mode
[  283.130123][T20026] batadv0: entered allmulticast mode
[  283.141586][T20026] 8021q: adding VLAN 0 to HW filter on device batadv0
[  283.155499][T20026] bond14: (slave batadv0): making interface the new active one
[  283.161218][T20026] bond14: (slave batadv0): Enslaving as an active interface with an up link
[  283.347154][T20051] pim6reg: entered allmulticast mode
[  283.351189][T20051] pim6reg: left allmulticast mode
[  283.361324][T20053] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  283.363578][T20053] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  283.435503][T20061] tap0: tun_chr_ioctl cmd 1074025680
[  283.448379][T20059] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 43307 - 0
[  283.451226][T20059] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 43307 - 0
[  283.453743][T20059] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 43307 - 0
[  283.456257][T20059] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 43307 - 0
[  283.458936][T20059] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 32918 - 0
[  283.473299][T20059] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 32918 - 0
[  283.475889][T20059] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 32918 - 0
[  283.478426][T20059] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 32918 - 0
[  283.481323][T20059] geneve2: entered promiscuous mode
[  283.482976][T20059] geneve2: entered allmulticast mode
[  283.517806][T20071] rdma_rxe: rxe_newlink: failed to add lo
[  283.521284][T20071] lo: left promiscuous mode
[  283.522967][T20071] lo: left allmulticast mode
[  283.541310][T20071] ip6gretap0: left promiscuous mode
[  283.548854][T20071] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  283.701954][T20089] __nla_validate_parse: 21 callbacks suppressed
[  283.701968][T20089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4706'.
[  283.715615][T20090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4706'.
[  283.769713][T20095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4708'.
[  283.914595][T20101] netlink: 'syz.1.4711': attribute type 12 has an invalid length.
[  283.917514][T20101] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.4711'.
[  283.973208][T20101] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4711'.
[  283.976592][T20101] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4711'.
[  283.995453][T20108] netlink: 124 bytes leftover after parsing attributes in process `syz.0.4712'.
[  284.039174][T20111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4713'.
[  284.056536][T20113] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  284.092563][T20118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4716'.
[  284.174738][T20123] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4715'.
[  284.192714][T20122] delete_channel: no stack
[  284.487018][T20143] lo speed is unknown, defaulting to 1000
[  284.489816][T20143] lo speed is unknown, defaulting to 1000
[  284.555995][T20147] netlink: 'syz.2.4726': attribute type 12 has an invalid length.
[  285.172933][T20174] syz0: rxe_newlink: already configured on lo
[  285.173588][T20176] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  285.193884][T20174] 8021q: adding VLAN 0 to HW filter on device bond0
[  285.197329][T20174] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  285.203219][ T5892] lo speed is unknown, defaulting to 1000
[  285.204977][ T5892] syz0: Port: 1 Link ACTIVE
[  285.206395][ T5892] lo speed is unknown, defaulting to 1000
[  285.243053][ T5892] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  285.269751][T20179] netlink: 'syz.2.4738': attribute type 30 has an invalid length.
[  285.274804][T20180] netlink: 'syz.0.4737': attribute type 12 has an invalid length.
[  285.289724][T20179] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  285.292856][T20179] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  285.296452][T20179] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  285.298937][T20179] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  285.317225][T20179] netlink: 'syz.2.4738': attribute type 30 has an invalid length.
[  285.435949][T20198] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  285.438707][T20198] syzkaller0: entered promiscuous mode
[  285.441263][T20198] syzkaller0: entered allmulticast mode
[  285.499233][T20200] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  285.619178][T20218] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  285.714092][T20225] netlink: 'syz.0.4751': attribute type 83 has an invalid length.
[  285.717307][T20227] netlink: 'syz.0.4751': attribute type 83 has an invalid length.
[  285.782632][T16174] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  285.851310][T20239] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  285.853712][T20239] CPU: 1 UID: 0 PID: 20239 Comm: syz.2.4757 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  285.853727][T20239] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  285.853733][T20239] Call Trace:
[  285.853738][T20239]  <TASK>
[  285.853743][T20239]  dump_stack_lvl+0x189/0x250
[  285.853761][T20239]  ? __pfx_dump_stack_lvl+0x10/0x10
[  285.853772][T20239]  ? __pfx__printk+0x10/0x10
[  285.853786][T20239]  ? kernfs_path_from_node+0x2c/0x260
[  285.853797][T20239]  ? kernfs_path_from_node+0x2c/0x260
[  285.853804][T20239]  ? kernfs_path_from_node+0x2c/0x260
[  285.853819][T20239]  ? kernfs_path_from_node+0x22c/0x260
[  285.853826][T20239]  ? kernfs_path_from_node+0x2c/0x260
[  285.853837][T20239]  sysfs_warn_dup+0x8e/0xa0
[  285.853852][T20239]  sysfs_do_create_link_sd+0xc0/0x110
[  285.853863][T20239]  device_add_class_symlinks+0x1cf/0x240
[  285.853879][T20239]  device_add+0x475/0xb50
[  285.853895][T20239]  wiphy_register+0x199a/0x26b0
[  285.853916][T20239]  ? __pfx_wiphy_register+0x10/0x10
[  285.853926][T20239]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  285.853941][T20239]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  285.853956][T20239]  ieee80211_register_hw+0x33e1/0x4120
[  285.853977][T20239]  ? ieee80211_register_hw+0x14c1/0x4120
[  285.853993][T20239]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  285.854007][T20239]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  285.854025][T20239]  ? __hrtimer_setup+0x187/0x210
[  285.854035][T20239]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  285.854052][T20239]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  285.854081][T20239]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  285.854093][T20239]  ? trace_kmalloc+0x1f/0xd0
[  285.854105][T20239]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  285.854118][T20239]  ? kstrndup+0xbf/0x160
[  285.854131][T20239]  hwsim_new_radio_nl+0xea4/0x1b10
[  285.854144][T20239]  ? __pfx___nla_validate_parse+0x10/0x10
[  285.854162][T20239]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  285.854175][T20239]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  285.854190][T20239]  ? __nla_parse+0x40/0x60
[  285.854201][T20239]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  285.854214][T20239]  genl_family_rcv_msg_doit+0x215/0x300
[  285.854226][T20239]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  285.854242][T20239]  ? bpf_lsm_capable+0x9/0x20
[  285.854253][T20239]  ? security_capable+0x7e/0x2e0
[  285.854265][T20239]  genl_rcv_msg+0x60e/0x790
[  285.854277][T20239]  ? __pfx_genl_rcv_msg+0x10/0x10
[  285.854285][T20239]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  285.854304][T20239]  netlink_rcv_skb+0x208/0x470
[  285.854317][T20239]  ? __pfx_genl_rcv_msg+0x10/0x10
[  285.854326][T20239]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  285.854346][T20239]  ? down_read+0x1ad/0x2e0
[  285.854357][T20239]  genl_rcv+0x28/0x40
[  285.854364][T20239]  netlink_unicast+0x75c/0x8e0
[  285.854380][T20239]  netlink_sendmsg+0x805/0xb30
[  285.854397][T20239]  ? __pfx_netlink_sendmsg+0x10/0x10
[  285.854409][T20239]  ? aa_sock_msg_perm+0x94/0x160
[  285.854420][T20239]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  285.854429][T20239]  ? __pfx_netlink_sendmsg+0x10/0x10
[  285.854468][T20239]  __sock_sendmsg+0x21c/0x270
[  285.854481][T20239]  ____sys_sendmsg+0x505/0x830
[  285.854497][T20239]  ? __pfx_____sys_sendmsg+0x10/0x10
[  285.854515][T20239]  ? import_iovec+0x74/0xa0
[  285.854529][T20239]  ___sys_sendmsg+0x21f/0x2a0
[  285.854543][T20239]  ? __pfx____sys_sendmsg+0x10/0x10
[  285.854573][T20239]  ? __fget_files+0x2a/0x420
[  285.854581][T20239]  ? __fget_files+0x3a0/0x420
[  285.854593][T20239]  __x64_sys_sendmsg+0x19b/0x260
[  285.854607][T20239]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  285.854624][T20239]  ? rcu_is_watching+0x15/0xb0
[  285.854638][T20239]  ? do_syscall_64+0xbe/0x3b0
[  285.854650][T20239]  do_syscall_64+0xfa/0x3b0
[  285.854658][T20239]  ? lockdep_hardirqs_on+0x9c/0x150
[  285.854666][T20239]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.854675][T20239]  ? exc_page_fault+0x9f/0xf0
[  285.854684][T20239]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.854692][T20239] RIP: 0033:0x7efd8818e929
[  285.854701][T20239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  285.854709][T20239] RSP: 002b:00007efd8902c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  285.854720][T20239] RAX: ffffffffffffffda RBX: 00007efd883b5fa0 RCX: 00007efd8818e929
[  285.854727][T20239] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  285.854733][T20239] RBP: 00007efd88210ca1 R08: 0000000000000000 R09: 0000000000000000
[  285.854739][T20239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  285.854744][T20239] R13: 0000000000000000 R14: 00007efd883b5fa0 R15: 00007ffd611adc48
[  285.854760][T20239]  </TASK>
[  285.855944][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  285.972497][T20247] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  286.159728][T20247] IPVS: Unknown mcast interface: vcan0
[  286.289716][T20265] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  286.355198][T20284] netlink: 'syz.0.4772': attribute type 12 has an invalid length.
[  286.496676][T20299] netlink: 'syz.0.4776': attribute type 1 has an invalid length.
[  286.587145][T20303] xt_hashlimit: size too large, truncated to 1048576
[  286.705324][T20318] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  286.707686][T20318] CPU: 1 UID: 0 PID: 20318 Comm: syz.2.4781 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  286.707700][T20318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  286.707706][T20318] Call Trace:
[  286.707711][T20318]  <TASK>
[  286.707722][T20318]  dump_stack_lvl+0x189/0x250
[  286.707743][T20318]  ? __pfx_dump_stack_lvl+0x10/0x10
[  286.707754][T20318]  ? __pfx__printk+0x10/0x10
[  286.707768][T20318]  ? kernfs_path_from_node+0x2c/0x260
[  286.707779][T20318]  ? kernfs_path_from_node+0x2c/0x260
[  286.707788][T20318]  ? kernfs_path_from_node+0x2c/0x260
[  286.707798][T20318]  ? kernfs_path_from_node+0x22c/0x260
[  286.707805][T20318]  ? kernfs_path_from_node+0x2c/0x260
[  286.707815][T20318]  sysfs_warn_dup+0x8e/0xa0
[  286.707829][T20318]  sysfs_do_create_link_sd+0xc0/0x110
[  286.707839][T20318]  device_add_class_symlinks+0x1cf/0x240
[  286.707855][T20318]  device_add+0x475/0xb50
[  286.707868][T20318]  wiphy_register+0x199a/0x26b0
[  286.707890][T20318]  ? __pfx_wiphy_register+0x10/0x10
[  286.707899][T20318]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  286.707915][T20318]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  286.707929][T20318]  ieee80211_register_hw+0x33e1/0x4120
[  286.707950][T20318]  ? ieee80211_register_hw+0x14c1/0x4120
[  286.707966][T20318]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  286.707980][T20318]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  286.707998][T20318]  ? __hrtimer_setup+0x187/0x210
[  286.708008][T20318]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  286.708024][T20318]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  286.708052][T20318]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  286.708064][T20318]  ? trace_kmalloc+0x1f/0xd0
[  286.708077][T20318]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  286.708090][T20318]  ? kstrndup+0xbf/0x160
[  286.708104][T20318]  hwsim_new_radio_nl+0xea4/0x1b10
[  286.708117][T20318]  ? __pfx___nla_validate_parse+0x10/0x10
[  286.708136][T20318]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  286.708153][T20318]  ? __nla_parse+0x40/0x60
[  286.708165][T20318]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  286.708180][T20318]  genl_family_rcv_msg_doit+0x215/0x300
[  286.708192][T20318]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  286.708208][T20318]  ? bpf_lsm_capable+0x9/0x20
[  286.708218][T20318]  ? security_capable+0x7e/0x2e0
[  286.708231][T20318]  genl_rcv_msg+0x60e/0x790
[  286.708243][T20318]  ? __pfx_genl_rcv_msg+0x10/0x10
[  286.708251][T20318]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  286.708269][T20318]  netlink_rcv_skb+0x208/0x470
[  286.708282][T20318]  ? __pfx_genl_rcv_msg+0x10/0x10
[  286.708291][T20318]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  286.708311][T20318]  ? down_read+0x1ad/0x2e0
[  286.708322][T20318]  genl_rcv+0x28/0x40
[  286.708330][T20318]  netlink_unicast+0x75c/0x8e0
[  286.708345][T20318]  netlink_sendmsg+0x805/0xb30
[  286.708388][T20318]  ? __pfx_netlink_sendmsg+0x10/0x10
[  286.708403][T20318]  ? aa_sock_msg_perm+0x94/0x160
[  286.708415][T20318]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  286.708425][T20318]  ? __pfx_netlink_sendmsg+0x10/0x10
[  286.708438][T20318]  __sock_sendmsg+0x21c/0x270
[  286.708450][T20318]  ____sys_sendmsg+0x505/0x830
[  286.708465][T20318]  ? __pfx_____sys_sendmsg+0x10/0x10
[  286.708482][T20318]  ? import_iovec+0x74/0xa0
[  286.708496][T20318]  ___sys_sendmsg+0x21f/0x2a0
[  286.708509][T20318]  ? __pfx____sys_sendmsg+0x10/0x10
[  286.708540][T20318]  ? __fget_files+0x2a/0x420
[  286.708547][T20318]  ? __fget_files+0x3a0/0x420
[  286.708560][T20318]  __x64_sys_sendmsg+0x19b/0x260
[  286.708574][T20318]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  286.708592][T20318]  ? rcu_is_watching+0x15/0xb0
[  286.708605][T20318]  ? do_syscall_64+0xbe/0x3b0
[  286.708618][T20318]  do_syscall_64+0xfa/0x3b0
[  286.708627][T20318]  ? lockdep_hardirqs_on+0x9c/0x150
[  286.708635][T20318]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.708645][T20318]  ? exc_page_fault+0x9f/0xf0
[  286.708655][T20318]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.708664][T20318] RIP: 0033:0x7efd8818e929
[  286.708673][T20318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  286.708681][T20318] RSP: 002b:00007efd8902c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  286.708707][T20318] RAX: ffffffffffffffda RBX: 00007efd883b5fa0 RCX: 00007efd8818e929
[  286.708720][T20318] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  286.708727][T20318] RBP: 00007efd88210ca1 R08: 0000000000000000 R09: 0000000000000000
[  286.708733][T20318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  286.708740][T20318] R13: 0000000000000000 R14: 00007efd883b5fa0 R15: 00007ffd611adc48
[  286.708755][T20318]  </TASK>
[  286.832770][T20323] Set syz1 is full, maxelem 65536 reached
[  286.850763][ T5856] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  286.854059][ T5856] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  287.276596][T20363] pimreg: entered allmulticast mode
[  287.381453][T20368] lo speed is unknown, defaulting to 1000
[  287.385493][T20368] lo speed is unknown, defaulting to 1000
[  287.652636][ T5864] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  287.665785][T20377] openvswitch: netlink: Key type 30 is not supported
[  287.707171][T20381] netlink: 'syz.0.4800': attribute type 3 has an invalid length.
[  287.723305][T20381] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  287.878011][T20387] netlink: 'syz.0.4802': attribute type 12 has an invalid length.
[  287.983046][ T8255] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  288.023490][T20393] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  288.026018][T20393] CPU: 0 UID: 0 PID: 20393 Comm: syz.0.4805 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  288.026032][T20393] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  288.026038][T20393] Call Trace:
[  288.026043][T20393]  <TASK>
[  288.026048][T20393]  dump_stack_lvl+0x189/0x250
[  288.026068][T20393]  ? __pfx_dump_stack_lvl+0x10/0x10
[  288.026078][T20393]  ? __pfx__printk+0x10/0x10
[  288.026092][T20393]  ? kernfs_path_from_node+0x2c/0x260
[  288.026103][T20393]  ? kernfs_path_from_node+0x2c/0x260
[  288.026111][T20393]  ? kernfs_path_from_node+0x2c/0x260
[  288.026119][T20393]  ? kernfs_path_from_node+0x22c/0x260
[  288.026126][T20393]  ? kernfs_path_from_node+0x2c/0x260
[  288.026136][T20393]  sysfs_warn_dup+0x8e/0xa0
[  288.026149][T20393]  sysfs_do_create_link_sd+0xc0/0x110
[  288.026159][T20393]  device_add_class_symlinks+0x1cf/0x240
[  288.026174][T20393]  device_add+0x475/0xb50
[  288.026189][T20393]  wiphy_register+0x199a/0x26b0
[  288.026208][T20393]  ? __pfx_wiphy_register+0x10/0x10
[  288.026219][T20393]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  288.026269][T20393]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  288.026286][T20393]  ieee80211_register_hw+0x33e1/0x4120
[  288.026309][T20393]  ? ieee80211_register_hw+0x14c1/0x4120
[  288.026326][T20393]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  288.026340][T20393]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  288.026358][T20393]  ? __hrtimer_setup+0x187/0x210
[  288.026368][T20393]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  288.026383][T20393]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  288.026410][T20393]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  288.026421][T20393]  ? trace_kmalloc+0x1f/0xd0
[  288.026433][T20393]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  288.026445][T20393]  ? kstrndup+0xbf/0x160
[  288.026459][T20393]  hwsim_new_radio_nl+0xea4/0x1b10
[  288.026472][T20393]  ? __pfx___nla_validate_parse+0x10/0x10
[  288.026490][T20393]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  288.026508][T20393]  ? __nla_parse+0x40/0x60
[  288.026519][T20393]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  288.026534][T20393]  genl_family_rcv_msg_doit+0x215/0x300
[  288.026547][T20393]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  288.026562][T20393]  ? bpf_lsm_capable+0x9/0x20
[  288.026572][T20393]  ? security_capable+0x7e/0x2e0
[  288.026584][T20393]  genl_rcv_msg+0x60e/0x790
[  288.026596][T20393]  ? __pfx_genl_rcv_msg+0x10/0x10
[  288.026611][T20393]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  288.026629][T20393]  netlink_rcv_skb+0x208/0x470
[  288.026643][T20393]  ? __pfx_genl_rcv_msg+0x10/0x10
[  288.026652][T20393]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  288.026673][T20393]  ? down_read+0x1ad/0x2e0
[  288.026684][T20393]  genl_rcv+0x28/0x40
[  288.026692][T20393]  netlink_unicast+0x75c/0x8e0
[  288.026709][T20393]  netlink_sendmsg+0x805/0xb30
[  288.026726][T20393]  ? __pfx_netlink_sendmsg+0x10/0x10
[  288.026739][T20393]  ? aa_sock_msg_perm+0x94/0x160
[  288.026750][T20393]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  288.026759][T20393]  ? __pfx_netlink_sendmsg+0x10/0x10
[  288.026771][T20393]  __sock_sendmsg+0x21c/0x270
[  288.026783][T20393]  ____sys_sendmsg+0x505/0x830
[  288.026798][T20393]  ? __pfx_____sys_sendmsg+0x10/0x10
[  288.026815][T20393]  ? import_iovec+0x74/0xa0
[  288.026828][T20393]  ___sys_sendmsg+0x21f/0x2a0
[  288.026841][T20393]  ? __pfx____sys_sendmsg+0x10/0x10
[  288.026871][T20393]  ? __fget_files+0x2a/0x420
[  288.026878][T20393]  ? __fget_files+0x3a0/0x420
[  288.026891][T20393]  __x64_sys_sendmsg+0x19b/0x260
[  288.026904][T20393]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  288.026922][T20393]  ? rcu_is_watching+0x15/0xb0
[  288.026935][T20393]  ? do_syscall_64+0xbe/0x3b0
[  288.026947][T20393]  do_syscall_64+0xfa/0x3b0
[  288.026955][T20393]  ? lockdep_hardirqs_on+0x9c/0x150
[  288.026963][T20393]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.026971][T20393]  ? exc_page_fault+0x9f/0xf0
[  288.026980][T20393]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.026988][T20393] RIP: 0033:0x7f4a9798e929
[  288.026998][T20393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  288.027005][T20393] RSP: 002b:00007f4a98863038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  288.027016][T20393] RAX: ffffffffffffffda RBX: 00007f4a97bb5fa0 RCX: 00007f4a9798e929
[  288.027023][T20393] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  288.027028][T20393] RBP: 00007f4a97a10ca1 R08: 0000000000000000 R09: 0000000000000000
[  288.027034][T20393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  288.027039][T20393] R13: 0000000000000000 R14: 00007f4a97bb5fa0 R15: 00007fffb85bab38
[  288.027054][T20393]  </TASK>
[  288.179915][ T8255] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  288.387571][T20414] delete_channel: no stack
[  288.391316][T20408] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  288.421745][ T5864] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  288.736594][T20438] lo speed is unknown, defaulting to 1000
[  288.739240][T20438] lo speed is unknown, defaulting to 1000
[  288.754088][T20440] __nla_validate_parse: 42 callbacks suppressed
[  288.754099][T20440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4816'.
[  288.758905][T20440] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4816'.
[  288.910552][ T5864] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  289.024091][T20444] netlink: 124 bytes leftover after parsing attributes in process `syz.1.4817'.
[  289.114958][T20447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4818'.
[  289.131472][T20447] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4818'.
[  289.344040][T20449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4820'.
[  289.425375][T20456] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4824'.
[  289.559509][T20463] netlink: 124 bytes leftover after parsing attributes in process `syz.2.4826'.
[  289.591351][T20465] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4827'.
[  289.704251][T20475] lo speed is unknown, defaulting to 1000
[  289.706997][T20475] lo speed is unknown, defaulting to 1000
[  289.752355][T20480] Set syz0 is full, maxelem 0 reached
[  289.764338][T20480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4830'.
[  289.816310][T20483] xt_CT: You must specify a L4 protocol and not use inversions on it
[  290.060999][T20494] pimreg: entered allmulticast mode
[  290.215665][T20496] lo speed is unknown, defaulting to 1000
[  290.218315][T20496] lo speed is unknown, defaulting to 1000
[  290.334617][T20513] validate_nla: 2 callbacks suppressed
[  290.334630][T20513] netlink: 'syz.1.4841': attribute type 13 has an invalid length.
[  290.342182][T20513] netlink: 'syz.1.4841': attribute type 17 has an invalid length.
[  290.350681][T20513] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  290.633213][T20533] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  290.635695][T20533] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  290.958307][T20560] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  290.969817][T20560] CPU: 1 UID: 0 PID: 20560 Comm: syz.0.4855 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  290.969835][T20560] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  290.969856][T20560] Call Trace:
[  290.969861][T20560]  <TASK>
[  290.969865][T20560]  dump_stack_lvl+0x189/0x250
[  290.969884][T20560]  ? __pfx_dump_stack_lvl+0x10/0x10
[  290.969895][T20560]  ? __pfx__printk+0x10/0x10
[  290.969908][T20560]  ? kernfs_path_from_node+0x2c/0x260
[  290.969917][T20560]  ? kernfs_path_from_node+0x2c/0x260
[  290.969924][T20560]  ? kernfs_path_from_node+0x2c/0x260
[  290.969933][T20560]  ? kernfs_path_from_node+0x22c/0x260
[  290.969940][T20560]  ? kernfs_path_from_node+0x2c/0x260
[  290.969968][T20560]  sysfs_warn_dup+0x8e/0xa0
[  290.969985][T20560]  sysfs_do_create_link_sd+0xc0/0x110
[  290.969994][T20560]  device_add_class_symlinks+0x1cf/0x240
[  290.970011][T20560]  device_add+0x475/0xb50
[  290.970025][T20560]  wiphy_register+0x199a/0x26b0
[  290.970046][T20560]  ? __pfx_wiphy_register+0x10/0x10
[  290.970056][T20560]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  290.970072][T20560]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  290.970086][T20560]  ieee80211_register_hw+0x33e1/0x4120
[  290.970107][T20560]  ? ieee80211_register_hw+0x14c1/0x4120
[  290.970123][T20560]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  290.970137][T20560]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  290.970155][T20560]  ? __hrtimer_setup+0x187/0x210
[  290.970164][T20560]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  290.970180][T20560]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  290.970206][T20560]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  290.970217][T20560]  ? trace_kmalloc+0x1f/0xd0
[  290.970230][T20560]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  290.970256][T20560]  ? kstrndup+0xbf/0x160
[  290.970272][T20560]  hwsim_new_radio_nl+0xea4/0x1b10
[  290.970285][T20560]  ? __pfx___nla_validate_parse+0x10/0x10
[  290.970305][T20560]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  290.970330][T20560]  ? __nla_parse+0x40/0x60
[  290.970342][T20560]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  290.970357][T20560]  genl_family_rcv_msg_doit+0x215/0x300
[  290.970371][T20560]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  290.970386][T20560]  ? bpf_lsm_capable+0x9/0x20
[  290.970399][T20560]  ? security_capable+0x7e/0x2e0
[  290.970412][T20560]  genl_rcv_msg+0x60e/0x790
[  290.970424][T20560]  ? __pfx_genl_rcv_msg+0x10/0x10
[  290.970433][T20560]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  290.970451][T20560]  netlink_rcv_skb+0x208/0x470
[  290.970465][T20560]  ? __pfx_genl_rcv_msg+0x10/0x10
[  290.970474][T20560]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  290.970494][T20560]  ? down_read+0x1ad/0x2e0
[  290.970505][T20560]  genl_rcv+0x28/0x40
[  290.970513][T20560]  netlink_unicast+0x75c/0x8e0
[  290.970528][T20560]  netlink_sendmsg+0x805/0xb30
[  290.970544][T20560]  ? __pfx_netlink_sendmsg+0x10/0x10
[  290.970557][T20560]  ? aa_sock_msg_perm+0x94/0x160
[  290.970567][T20560]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  290.970576][T20560]  ? __pfx_netlink_sendmsg+0x10/0x10
[  290.970588][T20560]  __sock_sendmsg+0x21c/0x270
[  290.970600][T20560]  ____sys_sendmsg+0x505/0x830
[  290.970614][T20560]  ? __pfx_____sys_sendmsg+0x10/0x10
[  290.970631][T20560]  ? import_iovec+0x74/0xa0
[  290.970645][T20560]  ___sys_sendmsg+0x21f/0x2a0
[  290.970658][T20560]  ? __pfx____sys_sendmsg+0x10/0x10
[  290.970689][T20560]  ? __fget_files+0x2a/0x420
[  290.970696][T20560]  ? __fget_files+0x3a0/0x420
[  290.970709][T20560]  __x64_sys_sendmsg+0x19b/0x260
[  290.970722][T20560]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  290.970743][T20560]  ? rcu_is_watching+0x15/0xb0
[  290.970756][T20560]  ? do_syscall_64+0xbe/0x3b0
[  290.970768][T20560]  do_syscall_64+0xfa/0x3b0
[  290.970776][T20560]  ? lockdep_hardirqs_on+0x9c/0x150
[  290.970784][T20560]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.970793][T20560]  ? exc_page_fault+0x9f/0xf0
[  290.970802][T20560]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.970811][T20560] RIP: 0033:0x7f4a9798e929
[  290.970820][T20560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  290.970828][T20560] RSP: 002b:00007f4a98863038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  290.970838][T20560] RAX: ffffffffffffffda RBX: 00007f4a97bb5fa0 RCX: 00007f4a9798e929
[  290.970845][T20560] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  290.970850][T20560] RBP: 00007f4a97a10ca1 R08: 0000000000000000 R09: 0000000000000000
[  290.970855][T20560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  290.970860][T20560] R13: 0000000000000000 R14: 00007f4a97bb5fa0 R15: 00007fffb85bab38
[  290.970875][T20560]  </TASK>
[  291.203875][T20570] lo speed is unknown, defaulting to 1000
[  291.206470][T20570] lo speed is unknown, defaulting to 1000
[  291.229370][T20572] syzkaller0: left promiscuous mode
[  291.235130][T20572] syzkaller0: left allmulticast mode
[  291.250639][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  291.342533][T20576] xt_CT: You must specify a L4 protocol and not use inversions on it
[  291.934550][T20621] lo speed is unknown, defaulting to 1000
[  291.948557][T20621] lo speed is unknown, defaulting to 1000
[  292.013928][T20628] xt_CT: You must specify a L4 protocol and not use inversions on it
[  292.576240][T20660] lo speed is unknown, defaulting to 1000
[  292.583751][T20660] lo speed is unknown, defaulting to 1000
[  293.367324][T20722] netlink: 'syz.0.4898': attribute type 12 has an invalid length.
[  293.388765][T20711] 8021q: adding VLAN 0 to HW filter on device bond16
[  293.499867][T20727] netlink: 'syz.1.4900': attribute type 12 has an invalid length.
[  293.531473][T20709] delete_channel: no stack
[  293.708348][T20738] tipc: Resetting bearer <ib:gretap0>
[  293.754964][T20738] tipc: Resetting bearer <eth:syzkaller0>
[  293.764624][T20738] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  293.767156][T20738] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  293.769679][T20738] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  293.772567][T20738] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  293.798514][ T8255] lo speed is unknown, defaulting to 1000
[  293.800607][ T8255] syz0: Port: 1 Link DOWN
[  293.802029][ T8255] lo speed is unknown, defaulting to 1000
[  293.885985][T20747] __nla_validate_parse: 25 callbacks suppressed
[  293.886002][T20747] netlink: 348 bytes leftover after parsing attributes in process `syz.0.4908'.
[  294.235496][T20764] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4912'.
[  294.394156][T20777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4916'.
[  294.460689][T20779] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4917'.
[  294.463894][T20779] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4917'.
[  294.497518][T20783] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4918'.
[  294.532727][T20783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4918'.
[  294.559376][T20785] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  294.664857][T20802] netlink: 124 bytes leftover after parsing attributes in process `syz.1.4925'.
[  294.668694][T20802] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4925'.
[  294.671687][T20802] netlink: 216 bytes leftover after parsing attributes in process `syz.1.4925'.
[  294.709853][T20806] netlink: 'syz.1.4926': attribute type 10 has an invalid length.
[  294.815164][T20823] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  294.817402][T20823] CPU: 0 UID: 0 PID: 20823 Comm: syz.1.4931 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  294.817415][T20823] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  294.817421][T20823] Call Trace:
[  294.817425][T20823]  <TASK>
[  294.817431][T20823]  dump_stack_lvl+0x189/0x250
[  294.817450][T20823]  ? __pfx_dump_stack_lvl+0x10/0x10
[  294.817461][T20823]  ? __pfx__printk+0x10/0x10
[  294.817475][T20823]  ? kernfs_path_from_node+0x2c/0x260
[  294.817485][T20823]  ? kernfs_path_from_node+0x2c/0x260
[  294.817492][T20823]  ? kernfs_path_from_node+0x2c/0x260
[  294.817501][T20823]  ? kernfs_path_from_node+0x22c/0x260
[  294.817508][T20823]  ? kernfs_path_from_node+0x2c/0x260
[  294.817517][T20823]  sysfs_warn_dup+0x8e/0xa0
[  294.817530][T20823]  sysfs_do_create_link_sd+0xc0/0x110
[  294.817539][T20823]  device_add_class_symlinks+0x1cf/0x240
[  294.817554][T20823]  device_add+0x475/0xb50
[  294.817568][T20823]  wiphy_register+0x199a/0x26b0
[  294.817605][T20823]  ? __pfx_wiphy_register+0x10/0x10
[  294.817616][T20823]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  294.817634][T20823]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  294.817651][T20823]  ieee80211_register_hw+0x33e1/0x4120
[  294.817674][T20823]  ? ieee80211_register_hw+0x14c1/0x4120
[  294.817690][T20823]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  294.817704][T20823]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  294.817722][T20823]  ? __hrtimer_setup+0x187/0x210
[  294.817732][T20823]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  294.817748][T20823]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  294.817774][T20823]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  294.817785][T20823]  ? trace_kmalloc+0x1f/0xd0
[  294.817797][T20823]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  294.817810][T20823]  ? kstrndup+0xbf/0x160
[  294.817826][T20823]  hwsim_new_radio_nl+0xea4/0x1b10
[  294.817841][T20823]  ? __pfx___nla_validate_parse+0x10/0x10
[  294.817859][T20823]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  294.817877][T20823]  ? __nla_parse+0x40/0x60
[  294.817888][T20823]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  294.817903][T20823]  genl_family_rcv_msg_doit+0x215/0x300
[  294.817916][T20823]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  294.817931][T20823]  ? bpf_lsm_capable+0x9/0x20
[  294.817942][T20823]  ? security_capable+0x7e/0x2e0
[  294.817955][T20823]  genl_rcv_msg+0x60e/0x790
[  294.817967][T20823]  ? __pfx_genl_rcv_msg+0x10/0x10
[  294.817975][T20823]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  294.817994][T20823]  netlink_rcv_skb+0x208/0x470
[  294.818013][T20823]  ? __pfx_genl_rcv_msg+0x10/0x10
[  294.818023][T20823]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  294.818045][T20823]  ? down_read+0x1ad/0x2e0
[  294.818058][T20823]  genl_rcv+0x28/0x40
[  294.818066][T20823]  netlink_unicast+0x75c/0x8e0
[  294.818084][T20823]  netlink_sendmsg+0x805/0xb30
[  294.818101][T20823]  ? __pfx_netlink_sendmsg+0x10/0x10
[  294.818117][T20823]  ? aa_sock_msg_perm+0x94/0x160
[  294.818127][T20823]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  294.818136][T20823]  ? __pfx_netlink_sendmsg+0x10/0x10
[  294.818148][T20823]  __sock_sendmsg+0x21c/0x270
[  294.818159][T20823]  ____sys_sendmsg+0x505/0x830
[  294.818174][T20823]  ? __pfx_____sys_sendmsg+0x10/0x10
[  294.818192][T20823]  ? import_iovec+0x74/0xa0
[  294.818205][T20823]  ___sys_sendmsg+0x21f/0x2a0
[  294.818219][T20823]  ? __pfx____sys_sendmsg+0x10/0x10
[  294.818249][T20823]  ? __fget_files+0x2a/0x420
[  294.818257][T20823]  ? __fget_files+0x3a0/0x420
[  294.818270][T20823]  __x64_sys_sendmsg+0x19b/0x260
[  294.818283][T20823]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  294.818301][T20823]  ? rcu_is_watching+0x15/0xb0
[  294.818314][T20823]  ? do_syscall_64+0xbe/0x3b0
[  294.818325][T20823]  do_syscall_64+0xfa/0x3b0
[  294.818334][T20823]  ? lockdep_hardirqs_on+0x9c/0x150
[  294.818342][T20823]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.818352][T20823]  ? exc_page_fault+0x9f/0xf0
[  294.818362][T20823]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.818372][T20823] RIP: 0033:0x7f91c518e929
[  294.818381][T20823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  294.818389][T20823] RSP: 002b:00007f91c60bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  294.818400][T20823] RAX: ffffffffffffffda RBX: 00007f91c53b5fa0 RCX: 00007f91c518e929
[  294.818407][T20823] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  294.818413][T20823] RBP: 00007f91c5210ca1 R08: 0000000000000000 R09: 0000000000000000
[  294.818419][T20823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  294.818424][T20823] R13: 0000000000000000 R14: 00007f91c53b5fa0 R15: 00007fff3a8d7e28
[  294.818440][T20823]  </TASK>
[  295.207649][T20843] netlink: 'syz.1.4940': attribute type 12 has an invalid length.
[  295.264586][T20853] netlink: 'syz.0.4942': attribute type 4 has an invalid length.
[  295.269735][T20851] netlink: 'syz.2.4941': attribute type 12 has an invalid length.
[  295.272605][T20853] : renamed from bond0
[  295.400089][T20857] netlink: 'syz.2.4944': attribute type 1 has an invalid length.
[  295.467341][T20861] netlink: 'syz.1.4946': attribute type 1 has an invalid length.
[  295.516147][T20861] veth11: entered promiscuous mode
[  295.524190][T20861] bond23: (slave veth11): Enslaving as a backup interface with a down link
[  295.564479][T20859] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  295.688060][T20881] openvswitch: netlink: Flow actions attr not present in new flow.
[  296.598324][T20906] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  297.031902][T20955] netlink: 'syz.2.4974': attribute type 4 has an invalid length.
[  297.041977][T20955] netlink: 'syz.2.4974': attribute type 1 has an invalid length.
[  297.185595][T20964] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  297.215120][T20968] netlink: 'syz.0.4978': attribute type 12 has an invalid length.
[  297.603509][T20989] netlink: 'syz.0.4987': attribute type 3 has an invalid length.
[  297.639998][T20992] netlink: 'syz.0.4989': attribute type 3 has an invalid length.
[  297.912617][T21016] netlink: 'syz.2.4997': attribute type 9 has an invalid length.
[  297.915017][T21016] netlink: 'syz.2.4997': attribute type 6 has an invalid length.
[  297.993497][T21026] netlink: 'syz.0.4998': attribute type 21 has an invalid length.
[  298.395027][T21069] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  298.397458][T21069] CPU: 0 UID: 0 PID: 21069 Comm: syz.0.5019 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  298.397471][T21069] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  298.397478][T21069] Call Trace:
[  298.397483][T21069]  <TASK>
[  298.397488][T21069]  dump_stack_lvl+0x189/0x250
[  298.397508][T21069]  ? __pfx_dump_stack_lvl+0x10/0x10
[  298.397519][T21069]  ? __pfx__printk+0x10/0x10
[  298.397532][T21069]  ? kernfs_path_from_node+0x2c/0x260
[  298.397542][T21069]  ? kernfs_path_from_node+0x2c/0x260
[  298.397549][T21069]  ? kernfs_path_from_node+0x2c/0x260
[  298.397558][T21069]  ? kernfs_path_from_node+0x22c/0x260
[  298.397565][T21069]  ? kernfs_path_from_node+0x2c/0x260
[  298.397575][T21069]  sysfs_warn_dup+0x8e/0xa0
[  298.397587][T21069]  sysfs_do_create_link_sd+0xc0/0x110
[  298.397597][T21069]  device_add_class_symlinks+0x1cf/0x240
[  298.397612][T21069]  device_add+0x475/0xb50
[  298.397626][T21069]  wiphy_register+0x199a/0x26b0
[  298.397662][T21069]  ? __pfx_wiphy_register+0x10/0x10
[  298.397672][T21069]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  298.397689][T21069]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  298.397705][T21069]  ieee80211_register_hw+0x33e1/0x4120
[  298.397728][T21069]  ? ieee80211_register_hw+0x14c1/0x4120
[  298.397745][T21069]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  298.397759][T21069]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  298.397776][T21069]  ? __hrtimer_setup+0x187/0x210
[  298.397787][T21069]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  298.397804][T21069]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  298.397831][T21069]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  298.397843][T21069]  ? trace_kmalloc+0x1f/0xd0
[  298.397856][T21069]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  298.397868][T21069]  ? kstrndup+0xbf/0x160
[  298.397881][T21069]  hwsim_new_radio_nl+0xea4/0x1b10
[  298.397901][T21069]  ? __pfx___nla_validate_parse+0x10/0x10
[  298.397920][T21069]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  298.397938][T21069]  ? __nla_parse+0x40/0x60
[  298.397950][T21069]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  298.397964][T21069]  genl_family_rcv_msg_doit+0x215/0x300
[  298.397977][T21069]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  298.397992][T21069]  ? bpf_lsm_capable+0x9/0x20
[  298.398003][T21069]  ? security_capable+0x7e/0x2e0
[  298.398017][T21069]  genl_rcv_msg+0x60e/0x790
[  298.398029][T21069]  ? __pfx_genl_rcv_msg+0x10/0x10
[  298.398037][T21069]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  298.398056][T21069]  netlink_rcv_skb+0x208/0x470
[  298.398068][T21069]  ? __pfx_genl_rcv_msg+0x10/0x10
[  298.398077][T21069]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  298.398096][T21069]  ? down_read+0x1ad/0x2e0
[  298.398107][T21069]  genl_rcv+0x28/0x40
[  298.398115][T21069]  netlink_unicast+0x75c/0x8e0
[  298.398130][T21069]  netlink_sendmsg+0x805/0xb30
[  298.398146][T21069]  ? __pfx_netlink_sendmsg+0x10/0x10
[  298.398159][T21069]  ? aa_sock_msg_perm+0x94/0x160
[  298.398170][T21069]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  298.398178][T21069]  ? __pfx_netlink_sendmsg+0x10/0x10
[  298.398190][T21069]  __sock_sendmsg+0x21c/0x270
[  298.398202][T21069]  ____sys_sendmsg+0x505/0x830
[  298.398217][T21069]  ? __pfx_____sys_sendmsg+0x10/0x10
[  298.398234][T21069]  ? import_iovec+0x74/0xa0
[  298.398272][T21069]  ___sys_sendmsg+0x21f/0x2a0
[  298.398288][T21069]  ? __pfx____sys_sendmsg+0x10/0x10
[  298.398319][T21069]  ? __fget_files+0x2a/0x420
[  298.398328][T21069]  ? __fget_files+0x3a0/0x420
[  298.398341][T21069]  __x64_sys_sendmsg+0x19b/0x260
[  298.398355][T21069]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  298.398377][T21069]  ? do_syscall_64+0xbe/0x3b0
[  298.398389][T21069]  do_syscall_64+0xfa/0x3b0
[  298.398397][T21069]  ? lockdep_hardirqs_on+0x9c/0x150
[  298.398405][T21069]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.398415][T21069]  ? exc_page_fault+0x9f/0xf0
[  298.398424][T21069]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.398432][T21069] RIP: 0033:0x7f4a9798e929
[  298.398442][T21069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  298.398449][T21069] RSP: 002b:00007f4a98863038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  298.398460][T21069] RAX: ffffffffffffffda RBX: 00007f4a97bb5fa0 RCX: 00007f4a9798e929
[  298.398467][T21069] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  298.398472][T21069] RBP: 00007f4a97a10ca1 R08: 0000000000000000 R09: 0000000000000000
[  298.398477][T21069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  298.398482][T21069] R13: 0000000000000000 R14: 00007f4a97bb5fa0 R15: 00007fffb85bab38
[  298.398496][T21069]  </TASK>
[  298.577930][T21079] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  298.582741][T21079] syzkaller0: MTU too low for tipc bearer
[  298.584589][T21079] tipc: Disabling bearer <eth:syzkaller0>
[  298.797178][T21098] openvswitch: netlink: Flow actions attr not present in new flow.
[  299.030070][T21126] syzkaller0: entered promiscuous mode
[  299.033500][T21126] syzkaller0: entered allmulticast mode
[  299.071640][T21132] __nla_validate_parse: 38 callbacks suppressed
[  299.071652][T21132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5041'.
[  299.117482][T21124] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5039'.
[  299.250428][ T5831] Bluetooth: hci0: command tx timeout
[  299.347768][T21149] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5046'.
[  299.436830][T21155] erspan0: Device is already in use.
[  299.722533][T21170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5052'.
[  299.938954][T21186] netlink: 844 bytes leftover after parsing attributes in process `syz.1.5057'.
[  300.063525][T21190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5059'.
[  300.347426][T21217] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5066'.
[  300.355220][T21217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5066'.
[  300.411559][T21224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5066'.
[  300.470610][T21226] gtp14: left promiscuous mode
[  300.472232][T21226] gtp15: left promiscuous mode
[  300.473800][T21226] A link change request failed with some changes committed already. Interface bond4 may have been left with an inconsistent configuration, please check.
[  300.610564][T21244] validate_nla: 3 callbacks suppressed
[  300.610577][T21244] netlink: 'syz.0.5076': attribute type 11 has an invalid length.
[  300.643323][T21249] netlink: 'syz.0.5077': attribute type 12 has an invalid length.
[  300.645797][T21249] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.5077'.
[  301.019843][T21280] openvswitch: netlink: Key type 30 is not supported
[  301.360557][T21309] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  301.372987][T21309] lo speed is unknown, defaulting to 1000
[  301.375732][T21309] lo speed is unknown, defaulting to 1000
[  301.395933][T21313] netlink: 'syz.2.5096': attribute type 11 has an invalid length.
[  301.923429][T21353] bond14: (slave batadv0): Releasing active interface
[  301.934512][T21353] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  302.078582][T21361] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  302.086966][T21362] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  302.544742][T21389] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  302.547414][T21389] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  302.550017][T21389] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  302.553234][T21389] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  302.555949][T21389] geneve4: entered promiscuous mode
[  302.726543][T21414] dvmrp0: left allmulticast mode
[  302.728140][T21414] syz_tun: left allmulticast mode
[  302.795875][T21423] openvswitch: netlink: Key type 30 is not supported
[  303.481879][T21427] openvswitch: netlink: Key type 30 is not supported
[  303.482156][T21425] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  303.486643][T21425] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  303.489189][T21425] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  303.494906][T21425] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  303.497572][T21425] geneve3: entered promiscuous mode
[  303.609617][T21438] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (592314370)
[  303.613632][T21438] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  303.744982][T21455] netlink: 'syz.0.5137': attribute type 23 has an invalid length.
[  303.815105][T21462] netlink: 'syz.2.5139': attribute type 3 has an invalid length.
[  303.821626][T21462] netlink: 'syz.2.5139': attribute type 12 has an invalid length.
[  303.992538][T21474] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  303.995392][T21474] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  304.099753][T21483] __nla_validate_parse: 12 callbacks suppressed
[  304.099766][T21483] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5147'.
[  304.222800][T21489] tipc: Can't bind to reserved service type 0
[  304.278395][T21494] netlink: 'syz.0.5150': attribute type 12 has an invalid length.
[  304.280882][T21494] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.5150'.
[  304.688282][T21524] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (592314370)
[  304.692053][T21524] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  304.766631][T21531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5163'.
[  304.769457][T21531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5163'.
[  304.842074][T21533] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5165'.
[  304.845478][T21533] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5165'.
[  304.959953][T21537] sctp: [Deprecated]: syz.1.5172 (pid 21537) Use of int in max_burst socket option deprecated.
[  304.959953][T21537] Use struct sctp_assoc_value instead
[  305.130064][T21554] openvswitch: netlink: Key type 30 is not supported
[  305.175214][T21553] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5171'.
[  305.206538][T21558] netlink: 'syz.2.5174': attribute type 1 has an invalid length.
[  305.210639][T21558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5174'.
[  305.466209][T21581] can: request_module (can-proto-0) failed.
[  305.703254][T21606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5188'.
[  305.746327][T21608] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (592314370)
[  305.749520][T21608] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  305.780026][T21612] netlink: 124 bytes leftover after parsing attributes in process `syz.1.5191'.
[  305.955712][T21624] netlink: 'syz.1.5195': attribute type 1 has an invalid length.
[  306.090618][T21638] netlink: 'syz.0.5200': attribute type 15 has an invalid length.
[  306.093093][T21638] netlink: 'syz.0.5200': attribute type 18 has an invalid length.
[  306.127063][T21640] netlink: 'syz.0.5201': attribute type 1 has an invalid length.
[  306.146894][T21640] 8021q: adding VLAN 0 to HW filter on device bond0
[  306.160635][T21640] 8021q: adding VLAN 0 to HW filter on device bond0
[  306.163095][T21640] bond0: (slave vxcan5): The slave device specified does not support setting the MAC address
[  306.167219][T21640] bond0: (slave vxcan5): Error -95 calling set_mac_address
[  306.214396][T21642] bond0: (slave bridge13): Enslaving as an active interface with a down link
[  306.332895][T21646] netlink: 'syz.0.5203': attribute type 12 has an invalid length.
[  306.875747][T21636] ==================================================================
[  306.878195][T21636] BUG: KASAN: slab-use-after-free in rose_transmit_link+0x5c3/0x740
[  306.880596][T21636] Read of size 1 at addr ffff888108b00832 by task syz.1.5199/21636
[  306.883200][T21636] 
[  306.884299][T21636] CPU: 1 UID: 0 PID: 21636 Comm: syz.1.5199 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  306.884314][T21636] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  306.884320][T21636] Call Trace:
[  306.884326][T21636]  <TASK>
[  306.884331][T21636]  dump_stack_lvl+0x189/0x250
[  306.884347][T21636]  ? __kasan_check_byte+0x12/0x40
[  306.884362][T21636]  ? __pfx_dump_stack_lvl+0x10/0x10
[  306.884373][T21636]  ? lock_release+0x4b/0x3e0
[  306.884385][T21636]  ? __virt_addr_valid+0x4a5/0x5c0
[  306.884399][T21636]  print_report+0xd2/0x2b0
[  306.884408][T21636]  ? rose_transmit_link+0x5c3/0x740
[  306.884417][T21636]  kasan_report+0x118/0x150
[  306.884428][T21636]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  306.884461][T21636]  ? rose_transmit_link+0x5c3/0x740
[  306.884474][T21636]  rose_transmit_link+0x5c3/0x740
[  306.884482][T21636]  ? skb_put+0x11b/0x210
[  306.884498][T21636]  rose_write_internal+0x11dc/0x1ac0
[  306.884511][T21636]  ? __pfx_rose_write_internal+0x10/0x10
[  306.884521][T21636]  ? __timer_delete+0x5d/0x390
[  306.884536][T21636]  rose_release+0x24e/0x520
[  306.884549][T21636]  sock_close+0xc3/0x240
[  306.884559][T21636]  ? __pfx_sock_close+0x10/0x10
[  306.884567][T21636]  __fput+0x44c/0xa70
[  306.884578][T21636]  task_work_run+0x1d4/0x260
[  306.884591][T21636]  ? __pfx_task_work_run+0x10/0x10
[  306.884605][T21636]  ? task_work_add+0x377/0x420
[  306.884618][T21636]  ? __pfx_task_work_add+0x10/0x10
[  306.884631][T21636]  get_signal+0x11ed/0x1340
[  306.884645][T21636]  arch_do_signal_or_restart+0x9a/0x750
[  306.884660][T21636]  ? __pfx___sys_connect+0x10/0x10
[  306.884671][T21636]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  306.884687][T21636]  ? exit_to_user_mode_loop+0x40/0x110
[  306.884696][T21636]  exit_to_user_mode_loop+0x75/0x110
[  306.884705][T21636]  do_syscall_64+0x2bd/0x3b0
[  306.884715][T21636]  ? lockdep_hardirqs_on+0x9c/0x150
[  306.884723][T21636]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.884732][T21636]  ? exc_page_fault+0x9f/0xf0
[  306.884740][T21636]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.884749][T21636] RIP: 0033:0x7f91c518e929
[  306.884758][T21636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  306.884766][T21636] RSP: 002b:00007f91c60bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  306.884776][T21636] RAX: fffffffffffffe00 RBX: 00007f91c53b5fa0 RCX: 00007f91c518e929
[  306.884782][T21636] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000004
[  306.884787][T21636] RBP: 00007f91c5210ca1 R08: 0000000000000000 R09: 0000000000000000
[  306.884792][T21636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  306.884797][T21636] R13: 0000000000000000 R14: 00007f91c53b5fa0 R15: 00007fff3a8d7e28
[  306.884807][T21636]  </TASK>
[  306.884811][T21636] 
[  306.968328][T21636] Allocated by task 19447:
[  306.969676][T21636]  kasan_save_track+0x3e/0x80
[  306.971082][T21636]  __kasan_kmalloc+0x93/0xb0
[  306.972500][T21636]  __kmalloc_cache_noprof+0x230/0x3d0
[  306.974124][T21636]  rose_add_node+0x23a/0xde0
[  306.975515][T21636]  rose_rt_ioctl+0xa48/0xfb0
[  306.976903][T21636]  rose_ioctl+0x3ce/0x8b0
[  306.978199][T21636]  sock_do_ioctl+0xdc/0x300
[  306.979585][T21636]  sock_ioctl+0x576/0x790
[  306.980876][T21636]  __se_sys_ioctl+0xfc/0x170
[  306.982248][T21636]  do_syscall_64+0xfa/0x3b0
[  306.983654][T21636]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.985411][T21636] 
[  306.986144][T21636] Freed by task 21638:
[  306.987378][T21636]  kasan_save_track+0x3e/0x80
[  306.988808][T21636]  kasan_save_free_info+0x46/0x50
[  306.990293][T21636]  __kasan_slab_free+0x62/0x70
[  306.991766][T21636]  kfree+0x18e/0x440
[  306.992968][T21636]  rose_rt_device_down+0x473/0x4c0
[  306.994499][T21636]  rose_device_event+0x603/0x6a0
[  306.995975][T21636]  notifier_call_chain+0x1b6/0x3e0
[  306.997556][T21636]  __dev_notify_flags+0x18d/0x2e0
[  306.999085][T21636]  netif_change_flags+0xe8/0x1a0
[  307.000580][T21636]  dev_change_flags+0x130/0x260
[  307.002067][T21636]  dev_ioctl+0x7b4/0x1150
[  307.003364][T21636]  sock_do_ioctl+0x22c/0x300
[  307.004745][T21636]  sock_ioctl+0x576/0x790
[  307.006050][T21636]  __se_sys_ioctl+0xfc/0x170
[  307.007459][T21636]  do_syscall_64+0xfa/0x3b0
[  307.008831][T21636]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.010609][T21636] 
[  307.011353][T21636] The buggy address belongs to the object at ffff888108b00800
[  307.011353][T21636]  which belongs to the cache kmalloc-512 of size 512
[  307.015588][T21636] The buggy address is located 50 bytes inside of
[  307.015588][T21636]  freed 512-byte region [ffff888108b00800, ffff888108b00a00)
[  307.019692][T21636] 
[  307.020454][T21636] The buggy address belongs to the physical page:
[  307.022579][T21636] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108b00
[  307.025416][T21636] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  307.028111][T21636] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  307.030572][T21636] page_type: f5(slab)
[  307.031877][T21636] raw: 057ff00000000040 ffff88801a441c80 dead000000000100 dead000000000122
[  307.034556][T21636] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  307.037240][T21636] head: 057ff00000000040 ffff88801a441c80 dead000000000100 dead000000000122
[  307.039947][T21636] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  307.042696][T21636] head: 057ff00000000002 ffffea000422c001 00000000ffffffff 00000000ffffffff
[  307.045465][T21636] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  307.048142][T21636] page dumped because: kasan: bad access detected
[  307.050080][T21636] page_owner tracks the page as allocated
[  307.051791][T21636] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 13217, tgid 13212 (syz.1.2523), ts 183273572855, free_ts 177804148678
[  307.058045][T21636]  post_alloc_hook+0x240/0x2a0
[  307.059514][T21636]  get_page_from_freelist+0x21e4/0x22c0
[  307.061193][T21636]  __alloc_frozen_pages_noprof+0x181/0x370
[  307.062971][T21636]  alloc_pages_mpol+0x232/0x4a0
[  307.064456][T21636]  allocate_slab+0x8a/0x3b0
[  307.065813][T21636]  ___slab_alloc+0xbfc/0x1480
[  307.067214][T21636]  __kmalloc_cache_noprof+0x296/0x3d0
[  307.068880][T21636]  __genradix_ptr_alloc+0x352/0x4a0
[  307.070475][T21636]  __genradix_prealloc+0x44/0x90
[  307.071990][T21636]  sctp_stream_init+0x14b/0x440
[  307.073459][T21636]  sctp_association_new+0x10dd/0x25f0
[  307.075078][T21636]  sctp_connect_new_asoc+0x2c5/0x690
[  307.076672][T21636]  __sctp_connect+0x5ba/0xd50
[  307.078095][T21636]  sctp_inet_connect+0x12e/0x1e0
[  307.079621][T21636]  __sys_connect+0x316/0x440
[  307.081137][T21636]  __x64_sys_connect+0x7a/0x90
[  307.082610][T21636] page last free pid 12819 tgid 12819 stack trace:
[  307.084561][T21636]  __free_frozen_pages+0xc71/0xe70
[  307.086092][T21636]  __put_partials+0x161/0x1c0
[  307.087526][T21636]  put_cpu_partial+0x17c/0x250
[  307.088960][T21636]  __slab_free+0x2f7/0x400
[  307.090321][T21636]  qlist_free_all+0x97/0x140
[  307.091714][T21636]  kasan_quarantine_reduce+0x148/0x160
[  307.093385][T21636]  __kasan_slab_alloc+0x22/0x80
[  307.094890][T21636]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  307.096576][T21636]  getname_flags+0xb8/0x540
[  307.097973][T21636]  __x64_sys_symlinkat+0x7a/0xb0
[  307.099497][T21636]  do_syscall_64+0xfa/0x3b0
[  307.100909][T21636]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.102719][T21636] 
[  307.103472][T21636] Memory state around the buggy address:
[  307.105181][T21636]  ffff888108b00700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  307.107628][T21636]  ffff888108b00780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  307.110067][T21636] >ffff888108b00800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  307.112531][T21636]                                      ^
[  307.114218][T21636]  ffff888108b00880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  307.116625][T21636]  ffff888108b00900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  307.119008][T21636] ==================================================================
[  307.122466][T21636] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  307.124602][T21636] CPU: 1 UID: 0 PID: 21636 Comm: syz.1.5199 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  307.128312][T21636] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  307.131348][T21636] Call Trace:
[  307.132358][T21636]  <TASK>
[  307.133263][T21636]  dump_stack_lvl+0x99/0x250
[  307.134662][T21636]  ? __asan_memcpy+0x40/0x70
[  307.136074][T21636]  ? __pfx_dump_stack_lvl+0x10/0x10
[  307.137665][T21636]  ? __pfx__printk+0x10/0x10
[  307.139057][T21636]  panic+0x2db/0x790
[  307.140239][T21636]  ? __pfx_preempt_schedule+0x10/0x10
[  307.141893][T21636]  ? __pfx_panic+0x10/0x10
[  307.143257][T21636]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  307.145021][T21636]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  307.146897][T21636]  ? rose_transmit_link+0x5c3/0x740
[  307.148462][T21636]  check_panic_on_warn+0x89/0xb0
[  307.149931][T21636]  ? rose_transmit_link+0x5c3/0x740
[  307.151523][T21636]  end_report+0x78/0x160
[  307.152836][T21636]  kasan_report+0x129/0x150
[  307.154204][T21636]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  307.156092][T21636]  ? rose_transmit_link+0x5c3/0x740
[  307.157691][T21636]  rose_transmit_link+0x5c3/0x740
[  307.159216][T21636]  ? skb_put+0x11b/0x210
[  307.160549][T21636]  rose_write_internal+0x11dc/0x1ac0
[  307.162160][T21636]  ? __pfx_rose_write_internal+0x10/0x10
[  307.163859][T21636]  ? __timer_delete+0x5d/0x390
[  307.165322][T21636]  rose_release+0x24e/0x520
[  307.166720][T21636]  sock_close+0xc3/0x240
[  307.167993][T21636]  ? __pfx_sock_close+0x10/0x10
[  307.169464][T21636]  __fput+0x44c/0xa70
[  307.170709][T21636]  task_work_run+0x1d4/0x260
[  307.172108][T21636]  ? __pfx_task_work_run+0x10/0x10
[  307.173645][T21636]  ? task_work_add+0x377/0x420
[  307.175083][T21636]  ? __pfx_task_work_add+0x10/0x10
[  307.176668][T21636]  get_signal+0x11ed/0x1340
[  307.178067][T21636]  arch_do_signal_or_restart+0x9a/0x750
[  307.179765][T21636]  ? __pfx___sys_connect+0x10/0x10
[  307.181340][T21636]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  307.183230][T21636]  ? exit_to_user_mode_loop+0x40/0x110
[  307.184905][T21636]  exit_to_user_mode_loop+0x75/0x110
[  307.186519][T21636]  do_syscall_64+0x2bd/0x3b0
[  307.187940][T21636]  ? lockdep_hardirqs_on+0x9c/0x150
[  307.189531][T21636]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.191372][T21636]  ? exc_page_fault+0x9f/0xf0
[  307.192834][T21636]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.194607][T21636] RIP: 0033:0x7f91c518e929
[  307.195952][T21636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  307.201622][T21636] RSP: 002b:00007f91c60bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  307.204080][T21636] RAX: fffffffffffffe00 RBX: 00007f91c53b5fa0 RCX: 00007f91c518e929
[  307.206456][T21636] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000004
[  307.208799][T21636] RBP: 00007f91c5210ca1 R08: 0000000000000000 R09: 0000000000000000
[  307.211154][T21636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  307.213473][T21636] R13: 0000000000000000 R14: 00007f91c53b5fa0 R15: 00007fff3a8d7e28
[  307.215793][T21636]  </TASK>
[  307.217289][T21636] Kernel Offset: disabled
[  307.218593][T21636] Rebooting in 86400 seconds..

VM DIAGNOSIS:
06:12:31  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b4c210 RBX=ffff88804b03b1c0 RCX=ffff8880222e8000 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90007007800 RSP=ffffc900070076a0
R8 =ffffffff8fa1d5f7 R9 =1ffffffff1f43abe R10=dffffc0000000000 R11=fffffbfff1f43abf
R12=1ffff11026cc7f5d R13=dffffc0000000000 R14=0000000000000001 R15=ffff88813663fae8
RIP=ffffffff81b4c1f9 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f686ec68440 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33be605 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9
RSI=000000000000d7b6 RDI=000000000000d7b7 RBP=ffffc900024bf3f0 RSP=ffffc900024bf218
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=ffffffff85460ce0
R12=dffffc0000000000 R13=dffffc0000000000 R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460d57 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f91c60bb6c0 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000003126c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff81686f4f ffffffff81686e79
XMM02=000039aa00000002 ffffffff81adb887 XMM03=00000003fffffff7 0000000300030014
XMM04=0000000000000041 0000004300000029 XMM05=0000000000000014 000000cb00000016
XMM06=0000003600000000 0000000000060018 XMM07=0000000005000000 0000000b00000029
XMM08=5f7265705f736574 6174735f78616d20 XMM09=0000000000000000 00007f4a97a11df9
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
