last executing test programs:

2m21.624660585s ago: executing program 1 (id=758):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x28, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP={0xc, 0x9, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x6}}]}, 0x28}}, 0x4000801)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 32)
r3 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 32)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, 0x140f, 0x1, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000840}, 0x4004804) (async)
getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, 0x0, &(0x7f0000000140)) (async)
r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000900), 0x4) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
r5 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000100)={r5})
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000080)={r5}) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000000c0)) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000400500040000000000050005000a00000014000780050015000a00000008001240"], 0x60}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async)
poll(&(0x7f0000000080), 0x0, 0x8001)

2m20.685045601s ago: executing program 1 (id=774):
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000001300)={0xa, {{0x2, 0x0, @multicast2}}}, 0x88)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0)
r2 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
connect$pptp(r2, &(0x7f00000001c0)={0x18, 0x2, {0x1, @multicast1}}, 0x1e)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x14, r1, 0x1, 0x80000}, 0x14}}, 0x40000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f00000001c0)=ANY=[@ANYBLOB="18080000000000000000000000008b2785100000060000001800000035c58af29c20397795619d7b3b232cd6412311ff25a0185e6ed9c4e1", @ANYRES32, @ANYBLOB="00000000000000002c000000000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x4}, 0x8)
sendto$inet6(r3, &(0x7f0000000580)="81", 0x1, 0x40000, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000001c0)={0x0, 0x5}, &(0x7f0000000200)=0x8)
socket$alg(0x26, 0x5, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, 0x0, 0x20004011)
bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x180d4, 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, r4)

2m20.494796154s ago: executing program 1 (id=778):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
syz_emit_ethernet(0x86, &(0x7f0000000040)={@broadcast, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @loopback, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x7, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1=0xe0000089}, {@private}, {@multicast1}, {@remote}, {@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}, {@private}]}]}}}}}}}, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4d}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x9)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
syz_emit_ethernet(0x86, &(0x7f0000000040)={@broadcast, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @loopback, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x7, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1=0xe0000089}, {@private}, {@multicast1}, {@remote}, {@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}, {@private}]}]}}}}}}}, 0x0) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4d}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async)
socket$netlink(0x10, 0x3, 0x9) (async)

2m20.395311613s ago: executing program 1 (id=780):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0xa08, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x970, 0xffffffff, 0xffffffff, 0x970, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2100]}}}}, {{@ip={@loopback, @dev, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00'}, 0x0, 0x850, 0x870, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{}, {[{0x0, 0x2}]}, {[{}, {}, {}, {}, {}, {0x1ff}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7fff}]}]}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa68)

2m20.344713773s ago: executing program 1 (id=781):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100004000000000000000000000c000a20000000000a01020000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000219c0000000c0a01020000000000000000070000090900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80200041800a00010071756f7461000000100002800c00014000000000000000002c0001800a0001006c696d69740000001c0002800c00024000000000000000000c0001400041bbd9927e6a400000000000000310000180080001006475700004000280140000001000010000000000000000000084000a"], 0x120}}, 0x0)

2m20.29468536s ago: executing program 1 (id=783):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={<r2=>0x0, @empty, @local}, &(0x7f0000000180)=0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', <r3=>0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r6=>0x0})
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00001700000000001c0037800b0003086970768a616e08000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00001700000000001c0037800b0003086970768a616e08000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000880)={'ip_vti0\x00', <r8=>0x0, 0x1, 0x0, 0x7fffffff, 0x0, {{0x1e, 0x4, 0x3, 0x4, 0x78, 0x64, 0x0, 0x0, 0x29, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x18}, {[@timestamp_prespec={0x44, 0x44, 0xc2, 0x3, 0x6, [{@remote, 0x5}, {@multicast1, 0x1}, {@rand_addr=0x64010102, 0x5}, {@multicast2, 0x200}, {@remote, 0xdca}, {@remote, 0x200}, {@empty, 0xc97}, {@multicast1, 0x9839e00c}]}, @timestamp_prespec={0x44, 0x1c, 0xda, 0x3, 0x9, [{@local, 0x8}, {@remote, 0x100}, {@broadcast, 0x206}]}, @noop]}}}}})
r9 = socket$inet6(0xa, 0x2, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000003100)={0xb, 0x4, {0x9, @struct={0x4aa2b666, 0x80}, 0x0, 0x401, 0x1, 0xffffffffffffffff, 0x828, 0x1, 0x444, @struct={0x3, 0x3e7}, 0x8, 0x4, [0x2, 0xfffffffffffff79b, 0x1, 0x803, 0x7, 0x8f4]}, {0x5, @usage, 0x0, 0x4, 0x100000000, 0x9, 0x40, 0xf, 0xa4, @usage=0x7fffffffffffffff, 0x0, 0x81, [0x2a4d, 0x2, 0xfffffffffffffff8, 0x2, 0x5, 0x7]}, {0x9, @struct={0x81, 0x9}, 0x0, 0x5, 0x0, 0x7, 0xcb, 0x8, 0x2, @usage=0x6, 0x352, 0xfffffeff, [0x8001, 0x3, 0xfffffffffffffe00, 0x2, 0x9, 0x4]}, {0xc, 0x7, 0x9}})
r10 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async)
sendmsg$SMC_PNETID_GET(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r10, &(0x7f0000000440)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000370400000000ffffffff1f000000", @ANYRES32=r11, @ANYBLOB="0b12050000000000240012800b00010069703667726500001400028008000100", @ANYRES32=r11, @ANYBLOB="08000c0000ff"], 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)
sendmmsg$inet(r9, &(0x7f0000000bc0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @empty, @multicast1}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{0x0}, {0xfffffffffffffffd}], 0x2}}], 0x2, 0x0) (async)
sendmmsg$inet(r9, &(0x7f0000000bc0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @empty, @multicast1}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{0x0}, {0xfffffffffffffffd}], 0x2}}], 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl0\x00', <r12=>0x0, 0x2f, 0x7, 0x3, 0xf, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00', 0x8000, 0x7, 0x700, 0x3}})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000480)=0x14) (async)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000480)=0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', <r14=>0x0, 0x29, 0x9, 0xd, 0x1, 0xa, @empty, @private0, 0x700, 0x20, 0x80000001, 0x5}})
socket$can_j1939(0x1d, 0x2, 0x7) (async)
r15 = socket$can_j1939(0x1d, 0x2, 0x7)
socket$nl_route(0x10, 0x3, 0x0) (async)
r16 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r15, 0x8933, &(0x7f0000000400)={'vcan0\x00', <r17=>0x0})
socket$can_j1939(0x1d, 0x2, 0x7) (async)
r18 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r18, &(0x7f0000000080)={0x1d, r17, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18)
sendmsg$can_j1939(r18, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r17, 0x0, {0x0, 0xf0}}, 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0x8ee)
sendmsg$nl_route_sched(r16, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd2c, 0x100000, {0x0, 0x0, 0x74, r17, {0x6, 0xfff2}, {0x5, 0xfff3}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'\x00', <r19=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x178, 0x0, 0x814, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x804}, 0x1) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x178, 0x0, 0x814, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x804}, 0x1)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b92f4411f6bbf44dc48f57", 0x39}], 0x1) (async)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b92f4411f6bbf44dc48f57", 0x39}], 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)

2m5.29349569s ago: executing program 32 (id=783):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={<r2=>0x0, @empty, @local}, &(0x7f0000000180)=0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', <r3=>0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r6=>0x0})
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00001700000000001c0037800b0003086970768a616e08000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00001700000000001c0037800b0003086970768a616e08000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000880)={'ip_vti0\x00', <r8=>0x0, 0x1, 0x0, 0x7fffffff, 0x0, {{0x1e, 0x4, 0x3, 0x4, 0x78, 0x64, 0x0, 0x0, 0x29, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x18}, {[@timestamp_prespec={0x44, 0x44, 0xc2, 0x3, 0x6, [{@remote, 0x5}, {@multicast1, 0x1}, {@rand_addr=0x64010102, 0x5}, {@multicast2, 0x200}, {@remote, 0xdca}, {@remote, 0x200}, {@empty, 0xc97}, {@multicast1, 0x9839e00c}]}, @timestamp_prespec={0x44, 0x1c, 0xda, 0x3, 0x9, [{@local, 0x8}, {@remote, 0x100}, {@broadcast, 0x206}]}, @noop]}}}}})
r9 = socket$inet6(0xa, 0x2, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000003100)={0xb, 0x4, {0x9, @struct={0x4aa2b666, 0x80}, 0x0, 0x401, 0x1, 0xffffffffffffffff, 0x828, 0x1, 0x444, @struct={0x3, 0x3e7}, 0x8, 0x4, [0x2, 0xfffffffffffff79b, 0x1, 0x803, 0x7, 0x8f4]}, {0x5, @usage, 0x0, 0x4, 0x100000000, 0x9, 0x40, 0xf, 0xa4, @usage=0x7fffffffffffffff, 0x0, 0x81, [0x2a4d, 0x2, 0xfffffffffffffff8, 0x2, 0x5, 0x7]}, {0x9, @struct={0x81, 0x9}, 0x0, 0x5, 0x0, 0x7, 0xcb, 0x8, 0x2, @usage=0x6, 0x352, 0xfffffeff, [0x8001, 0x3, 0xfffffffffffffe00, 0x2, 0x9, 0x4]}, {0xc, 0x7, 0x9}})
r10 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async)
sendmsg$SMC_PNETID_GET(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r10, &(0x7f0000000440)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000370400000000ffffffff1f000000", @ANYRES32=r11, @ANYBLOB="0b12050000000000240012800b00010069703667726500001400028008000100", @ANYRES32=r11, @ANYBLOB="08000c0000ff"], 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)
sendmmsg$inet(r9, &(0x7f0000000bc0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @empty, @multicast1}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{0x0}, {0xfffffffffffffffd}], 0x2}}], 0x2, 0x0) (async)
sendmmsg$inet(r9, &(0x7f0000000bc0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @empty, @multicast1}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{0x0}, {0xfffffffffffffffd}], 0x2}}], 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl0\x00', <r12=>0x0, 0x2f, 0x7, 0x3, 0xf, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00', 0x8000, 0x7, 0x700, 0x3}})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000480)=0x14) (async)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000480)=0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', <r14=>0x0, 0x29, 0x9, 0xd, 0x1, 0xa, @empty, @private0, 0x700, 0x20, 0x80000001, 0x5}})
socket$can_j1939(0x1d, 0x2, 0x7) (async)
r15 = socket$can_j1939(0x1d, 0x2, 0x7)
socket$nl_route(0x10, 0x3, 0x0) (async)
r16 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r15, 0x8933, &(0x7f0000000400)={'vcan0\x00', <r17=>0x0})
socket$can_j1939(0x1d, 0x2, 0x7) (async)
r18 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r18, &(0x7f0000000080)={0x1d, r17, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18)
sendmsg$can_j1939(r18, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r17, 0x0, {0x0, 0xf0}}, 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0x8ee)
sendmsg$nl_route_sched(r16, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd2c, 0x100000, {0x0, 0x0, 0x74, r17, {0x6, 0xfff2}, {0x5, 0xfff3}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'\x00', <r19=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x178, 0x0, 0x814, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x804}, 0x1) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x178, 0x0, 0x814, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x804}, 0x1)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b92f4411f6bbf44dc48f57", 0x39}], 0x1) (async)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b92f4411f6bbf44dc48f57", 0x39}], 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)

42.985617288s ago: executing program 0 (id=2407):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$sock_proto_private(r2, 0x891f, &(0x7f0000000000))
r3 = accept4(r2, &(0x7f0000000140)=@xdp={0x2c, 0x0, <r4=>0x0}, &(0x7f0000000000)=0x80, 0x80800)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000002c0)={<r6=>r3, 0x7, 0x279, 0x4})
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)={0xa0, r7, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xb6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb5}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x10}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x16}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1000}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}]}, 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x8000)
connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c)
sendto$inet6(r5, 0x0, 0x0, 0x20000040, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "d5b916598ea92858", "13382aa32c33be6347392ef78b3810b0", "4c6659ac", "7396bb65dc1088e5"}, 0x28)
syz_genetlink_get_family_id$team(&(0x7f0000000080), r3)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x14, r1, 0x1, 0x1000000, 0x25dfdc00, {0x3}}, 0x14}}, 0x0)
r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4008, r0}, 0x18)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r8, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280), 0x0, 0x7f, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], 0x18, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xed, 0x8, 0xfffffffffffffddc, &(0x7f0000000200)}}, 0x10)

42.985212996s ago: executing program 0 (id=2408):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000020000000000000000000711d3d00000000009500000700000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x90)

42.915524746s ago: executing program 0 (id=2409):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100), 0x1c) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) (async)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000733dd02fdec96f3684704396b24a2b8a41478e690cf520c92e91b19187522046502802c9ace07e00e685859578e3b6abde6a423fa81abf1f5ebab36e5614c9f4b7854e9ac2668230a511d1f61d3df9dfc59708a7559815c413b6c1823c1ba1c9618485acc01fab3cce0e495a7c1ce3361c5503f25dd820d131bdd5f7e119ca31659863b108bb4cb70d4507b5fb4a4a2d3c553bf526c676250190967da4b864bf19181787cc81d63418b9825fc905f1a8aef2d8b1a7d35906e158ad5ac1373b44e719bbc180fdf9d0724a80d510cea8f682cf94639501f5d572ffe6371c5d", @ANYRES16=0x0, @ANYBLOB="00032dbd7000fbdbdf25370000000800570006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x801) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x100000, @empty}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x3a, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb499419be4f9142da0bc21470e441225642855b5f2b4b67efbff2fdf98328de9434031348589b763d46d14810acc5f7000000e3ffffff00"}, 0xd8) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0xa, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="660a00000900000061118700000000009500"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0) (async)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x0) (async)
listen(r5, 0x71e4)
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r8, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1)

42.915075216s ago: executing program 0 (id=2410):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0xa08, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x970, 0xffffffff, 0xffffffff, 0x970, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @common=@SET={0x60}}, {{@ip={@loopback, @dev, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00'}, 0x0, 0x850, 0x870, 0x0, {0x0, 0x2000000}, [@common=@unspec=@u32={{0x7e0}, {[{}, {[{0x0, 0x2}]}, {[{}, {}, {}, {}, {}, {0x1ff}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7fff}]}]}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa68)

42.82526759s ago: executing program 0 (id=2411):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002900)=@newqdisc={0x24, 0x58, 0x4ee4e6a52ff56541}, 0x24}}, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x17)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=<r7=>0x0)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r7], 0x1c}}, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r8)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r10=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x1c, r9, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r5)
sendmsg$IEEE802154_START_REQ(r8, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="00022bbd7000fddbdf250d0000000600080000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c094)
write$nci(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="6103060506029509010f01"], 0xb)
r12 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r12, &(0x7f0000000300)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xa)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r13, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
r14 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r15 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r15, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r14, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbbbbbbbbbbbbb86dd6d0000000000000000000000000000ff0200000000000000000000000000014f194e2000119078012c02"], 0x4b)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x5c, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x9}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffff00, 0xffffffff, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @empty}]}}]}, 0x5c}}, 0x4040004)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r1, @ANYBLOB="0000000000000000790000000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x94)

41.864668873s ago: executing program 0 (id=2423):
socket(0x10, 0x803, 0x0) (async)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) (async)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0)
sendfile(r7, r7, 0x0, 0x4)
close(0x4)
openat$cgroup_type(r5, &(0x7f0000000300), 0x2, 0x0) (async)
r8 = openat$cgroup_type(r5, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r8, &(0x7f0000000280), 0x9)
r9 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r9, &(0x7f0000000c40), 0x12) (async)
write$cgroup_pid(r9, &(0x7f0000000c40), 0x12)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000140)="cb", 0x1}], 0x1, 0x0, 0xe0}}], 0x1, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) (async)
r11 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r11, &(0x7f0000000140), 0x0}, 0x20) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r11, &(0x7f0000000140), 0x0}, 0x20)
openat$cgroup_ro(r10, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async)
r12 = openat$cgroup_ro(r10, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r12, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_int(r12, &(0x7f00000000c0), 0x12)

26.873118028s ago: executing program 33 (id=2423):
socket(0x10, 0x803, 0x0) (async)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) (async)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0)
sendfile(r7, r7, 0x0, 0x4)
close(0x4)
openat$cgroup_type(r5, &(0x7f0000000300), 0x2, 0x0) (async)
r8 = openat$cgroup_type(r5, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r8, &(0x7f0000000280), 0x9)
r9 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r9, &(0x7f0000000c40), 0x12) (async)
write$cgroup_pid(r9, &(0x7f0000000c40), 0x12)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000140)="cb", 0x1}], 0x1, 0x0, 0xe0}}], 0x1, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) (async)
r11 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r11, &(0x7f0000000140), 0x0}, 0x20) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r11, &(0x7f0000000140), 0x0}, 0x20)
openat$cgroup_ro(r10, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async)
r12 = openat$cgroup_ro(r10, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r12, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_int(r12, &(0x7f00000000c0), 0x12)

1.451142724s ago: executing program 2 (id=3118):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff0300000080ff000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880)

1.204281809s ago: executing program 2 (id=3123):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8}]}]}, 0x30}}, 0x0)
pipe(&(0x7f0000019480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f00000017c0)="a2ac", 0x2}], 0x1, 0xc)
close(r2)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x800000, 0x4}, 0x48)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000008, 0x8010, r0, 0xbc641000)
sendmmsg$inet(r3, &(0x7f0000006f40)=[{{&(0x7f0000005640)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000700000086080000000300"], 0x18}}], 0x1, 0x0)
splice(r1, 0x0, r2, 0x0, 0x10500, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/4096, 0x1000, 0x0, &(0x7f0000000000)=""/165, 0xa5}, &(0x7f0000000100)=0x40)

1.124696566s ago: executing program 2 (id=3126):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
r1 = socket(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'macvlan0\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000000080)="3303120081fd140000007ef52f555f2a0c09000000fd810000f786dd3baa4b1f0f85114632f470", 0x27, 0x40008c1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x62, 0x6, @broadcast}, 0x14)
ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000080)={0x1, 0xce8})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5a}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

1.049071599s ago: executing program 2 (id=3128):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
listen(r4, 0xfffffffc)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000b00000000000000070000000c0001800500020001"], 0x20}}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)

841.904278ms ago: executing program 3 (id=3134):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x4000000, 0x0, 0x1ff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}}, 0x20048000)
r0 = socket$inet6(0x2d, 0x2, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r4)

781.331271ms ago: executing program 3 (id=3136):
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x1, {0x0, 0xff}}, 0x18)
sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)="8010e60080", 0x5}], 0x1}}], 0x1, 0x40000)
sendmsg$OSF_MSG_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x710, 0x0, 0x5, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [{{0x254, 0x1, {{0x7, 0x80}, 0x3, 0x9, 0x4, 0x101, 0x26, 'syz0\x00', "766b40084bc224a965a3ab4f834065acf0cf9eea358e503106ed13b7811dbe6e", "e84c0717d4ae8ac5ee3a421779caa53755f80aa402746fdac4563326c74b9a8a", [{0x5, 0x4, {0x1, 0x2}}, {0x1, 0x2, {0x1, 0x2}}, {0x9, 0x8, {0x1, 0x101}}, {0x2, 0x8, {0x3, 0x5}}, {0x8, 0x2, {0x0, 0x10001}}, {0x8, 0x7f, {0x3, 0xfffffffe}}, {0x800, 0x0, {0x0, 0xfff}}, {0x7fff, 0xcbe, {0x2, 0x7ff}}, {0x96, 0x9, {0x3, 0x3}}, {0x9, 0x1000, {0x2, 0x4}}, {0x40, 0x6, {0x1, 0x4}}, {0xfc00, 0x2, {0x2, 0x9}}, {0x3e, 0x40c0, {0x3}}, {0xe6, 0x9876, {0x1, 0x7ca}}, {0x4, 0x6c, {0x1, 0xff}}, {0xfff, 0x0, {0x1, 0x10}}, {0x800, 0x2, {0x3, 0x8}}, {0x1, 0x70, {0x3, 0x80000001}}, {0x7fff, 0x100, {0x2, 0xee68}}, {0x6, 0x9, {0x1, 0x2}}, {0x8000, 0x7bc3, {0x0, 0xfffffffd}}, {0xd16, 0xfffa, {0x3, 0x2f5}}, {0x2, 0xf67, {0x3, 0xfffffffb}}, {0x2, 0x2, {0x3}}, {0x7, 0xfffc, {0x3, 0x9}}, {0x0, 0xb37a, {0x0, 0xbd3}}, {0x943a, 0xd, {0x1, 0x5}}, {0x101, 0x1, {0x0, 0x5}}, {0x4, 0xfffa, {0x2, 0x7ff}}, {0x5, 0x7, {0x2, 0xffff}}, {0x10, 0x6, {0x1, 0x5}}, {0x5, 0x6, {0x2, 0x3}}, {0x1000, 0x9, {0x3, 0x8}}, {0x1, 0xb, {0x1, 0x3}}, {0x7e, 0x6, {0x2, 0xfffffe01}}, {0x0, 0xffff, {0x0, 0x60a}}, {0xb, 0xc5, {0x3, 0x2}}, {0x5, 0xa, {0x1, 0x547}}, {0x101, 0x9, {0x1, 0x1c000500}}, {0x80, 0x1, {0x2, 0x8}}]}}}, {{0x254, 0x1, {{0x0, 0x1}, 0x7f, 0x2, 0x9, 0x3, 0x5, 'syz1\x00', "12c854173b9708a36e0c1d4d7066fd35f5b4cc020620c330c1fe0bfed84b6880", "098574510f705b9c0c6e7d12116f105d728545608d37a3ba3a1734a8e53b30c2", [{0x4, 0x7, {0x1, 0x2}}, {0xfff, 0x2, {0x2, 0x4}}, {0x4, 0xfe9, {0x0, 0x6}}, {0x101, 0x6, {0x1, 0x3b}}, {0x882, 0x0, {0x3, 0x3}}, {0xfffc, 0xfff, {0x3}}, {0x8001, 0x5, {0x1, 0x9}}, {0x8, 0xe12, {0x2, 0x5}}, {0x2, 0xa, {0x1, 0x8}}, {0x6, 0x7, {0x0, 0x400}}, {0x3, 0x0, {0x0, 0x3b4651dd}}, {0x0, 0x31f1, {0x3, 0x3eab}}, {0x1, 0x5259, {0x2, 0x8}}, {0x1, 0x9, {0x1, 0x7}}, {0x9, 0x9b, {0x0, 0x17}}, {0xff, 0x6, {0x3, 0x8000}}, {0x1, 0x8934, {0x0, 0xfffffffe}}, {0xe7a, 0x7, {0x0, 0x401}}, {0xffff, 0x4f, {0x1, 0xc}}, {0x4, 0x101, {0x2, 0x101}}, {0x8, 0x4, {0x3, 0xda6}}, {0xc4, 0x6, {0x1, 0x5}}, {0x8, 0xe5, {0x3, 0x6}}, {0x2, 0x4, {0x1}}, {0x7, 0x401, {0x3, 0x3}}, {0x1000, 0x7390, {0x0, 0xe}}, {0x4, 0x100, {0x0, 0x4}}, {0x0, 0x6, {0x1, 0x1}}, {0x2, 0xb, {0x1, 0x4}}, {0x6, 0xe400, {0x1, 0x4}}, {0x28, 0xfa98, {0x1, 0x5}}, {0x7, 0x2, {0x0, 0x3}}, {0x0, 0x1, {0x2, 0x4}}, {0x4, 0x3, {0x2, 0xfffff801}}, {0x1155, 0x5, {0x2, 0xe33a}}, {0x1, 0x2, {0x1, 0x8}}, {0x3, 0x9, {0x0, 0x7c2c}}, {0x7, 0x101, {0x1, 0x1}}, {0x8, 0xb2, {0x3, 0x8000}}, {0x519e, 0x800, {0x2, 0x5}}]}}}, {{0x254, 0x1, {{0x0, 0x9}, 0x2f, 0x7, 0x9, 0x3, 0x21, 'syz0\x00', "8a1c8b18df8ff69f8eb583ec39f4816615a06d4f3913510fc532d04a071458c6", "73a927054e3204caca5a05669dfc8dba55c31500cb6d64d849f6ff9e175d72b6", [{0x200, 0x1, {0x0, 0x4}}, {0x9, 0x1, {0x1, 0x7}}, {0x6, 0x7000, {0x2, 0x6}}, {0xa, 0x7, {0x0, 0xc}}, {0x10, 0x165, {0x3, 0x7}}, {0x200, 0x1, {0x1, 0x9}}, {0x81, 0x3, {0x1, 0x100}}, {0x7, 0x7, {0x1, 0x7ff}}, {0x336, 0x4, {0x2, 0x3}}, {0x9, 0xf, {0x0, 0x2}}, {0x4, 0x81, {0x3, 0x7}}, {0x8001, 0x8000, {0x2, 0xa2b9}}, {0x3, 0x6ff0, {0x3}}, {0x1, 0x5, {0x2, 0x9}}, {0x7, 0x7, {0x2, 0x6}}, {0x8}, {0x7, 0x5, {0x3, 0x4}}, {0x0, 0x9, {0x3, 0x10000}}, {0xdb75, 0x0, {0x2, 0x7}}, {0x2, 0x9, {0x2, 0x5}}, {0x4, 0x2, {0x1, 0x7}}, {0x200, 0x3172, {0x2, 0x2d69}}, {0x28, 0x1c, {0x1, 0x1c}}, {0x8, 0x6, {0x3, 0x5}}, {0x8, 0x4e07, {0x2, 0xbe7}}, {0x9, 0x1, {0x2}}, {0x1000, 0x5, {0x2, 0x5}}, {0x9, 0x401, {0x3, 0x10001}}, {0x9, 0x9, {0x3}}, {0x6, 0x69, {0x3, 0xfff}}, {0x8, 0x9, {0x2, 0xc3}}, {0x9a8, 0x2bee, {0x1, 0xa1}}, {0x7, 0x7, {0x0, 0x1}}, {0x5, 0x2, {0x1, 0x5}}, {0xfff5, 0x3, {0x2, 0x2}}, {0xe, 0x9, {0x1, 0x60000}}, {0x62, 0x800, {0x0, 0x2}}, {0x200, 0x8, {0x0, 0x9}}, {0x10, 0x2, {0x0, 0xa}}, {0x6, 0x1, {0x2, 0xfffffffd}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x8850}, 0x80)

721.611209ms ago: executing program 3 (id=3138):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000007cc38af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000095"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0)
r2 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000001c0), &(0x7f0000000200)=0x14)
ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000180)=0x1)

650.18926ms ago: executing program 3 (id=3139):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
accept(r0, 0x0, &(0x7f0000000300))
bind$bt_l2cap(r1, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4}, 0xe)
connect$bt_l2cap(r1, &(0x7f0000000240)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x9, 0x4)
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @local, @local, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = socket(0x10, 0x80003, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x40000)
sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
syz_emit_ethernet(0x9a, &(0x7f00000001c0)={@random="ed4e0300", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "6bbe4d", 0x64, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], {0x4e20, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x2, "8c7c8db45d2c0ba8decba26565b12e6b32dd8c20597f6a5959d0921165374b57", "30ffdcbac90c2e58724369f6012f4b84", {"6854dedc3e3710b7a86a6efb5f14d84d", "18e136787f03e12095dc39942fb20364"}}}}}}}}, 0x0)
r9 = socket$kcm(0x11, 0x3, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000073000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r10}, 0x10)
setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000180)=r10, 0x4)
sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x2, 0x2}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000380)="27050200340f14000600002fb96dbcf706060000170008005f45f491bdd54e0400000000000000b8bf7256da82f600102cf6880b00000000010040570000000600004000000000fabad225cd57e0e347e98da2ac5dcb0f28c99f86991602ba0abdce443287360658d32a77eb0b859be11ac4fe80c70440efcb24aca42c342e5e9508efbfa347caf5a67925b5d712e8d794fc5a32", 0x94}, {&(0x7f0000000600)="1c393502dda1a67d93b1ceccbe972c4fef9c33ecf2d824f3a33513f45f807ee4636aad1b45472bbdc8e3a2275f2587f0da0b3ae419bed996116448f90d113ce98aa985f379d729430858f5cb9a668a1800bf2354b33cdff83033de518580a3080d7f4cc2406e071138439e1566dd17983ee153ab672f362d3292e24a9952f18ec3d8b37bb3391096c1d4442a754899299321c03cbcfb98a26994b2a072c2b9d9c70d619545e5f61b050e40166d2ff57dcc008f24fd5339e7bc21e25863f80d2487c30b6bf781608a31d68e9319ab1712d8f5bdde849c040417c864cbfd3923dcb9fc6bdc2ea53334184b03efcb631dc68f0a7b6e13eea4b80d4237120e32932ca4e2b50bad0a35496d36a191d91f03b477b9587bc0ba489932e34f819fa1524ebad53a3d94b46c6aeff4f42fa067729fbb2862c09d337a75e0c8429d4bfe0dee2e1e23e8c22787178600ecca135623731e4701f35bd4e7c936a8ee27010000002328a5aba1161b05889b045696721c79bff0547efe051f3c5de77fdd3c77afd41a1a7747a982b7efb0d6bac7d3ad1f9b7c3a5a1448b35696f03bca1c875e346edc55b7a271c3e5f3c0df72c8e4d7cccfa2e9b598f0ae06efbc1a5d5bd91aed6b32deccf7755cef50fab72633c802533b9d94f17f9be978f2514c47671575ee528fbdddc6194328e605e4d10e293756d20eb8a545f2bfe48df5d1d98a270458392a0a57647dcb8ee005e78877a072d12d0429b9b9957a695c3289b4a59469691115e6ba204181708b9d1ae47418ed594b8128f20c100f5485a84e60d73ab818da73fab78caf42afd1f89cdb29dfdd6676c55ea00d35321bc4878170c62b056b4e03ae556ac804026cabcbc8e79e7a18f2f56442cd650aa2bc88f62ebb65bfafd3e5b4c62ac2e720ff0fdf03c46889df55ff91058319c953f90cd6e7f7b15d56a58ff6128357510c4c618aa25434881d58c39092969ba1f7c444465f16d1f2561991e357bda928f2a50422f774f318fb41169a0d0324a8efd19b940a17c28cda06b750cd02155dadbd1dc695e190a997ae8f4bb8766983d8db8678a792e8f044b868549e9c60f7ce25a36300ce07f304e75d285e914b3aec703969df969b81bcd3732736dd99fcab1944c751f8ef4c34cbb86d5f27ef9982be245949d5579b540750d1eac428b0cd2541295b577573b27e9ecac3934987e85b44bc85e6e307cf6f5683bf1c817369d556a368bc5560a1737aa2bec3cac4689e04fbe851ed4b6c1a355950522f8918af3855fe97ec285da15a20e8119483e7419fa2b0639d5add10b396a8033ec2b98d9a9fca3fc4202d0a6bcfa55798eacafa4c8efafb73a2ab89bb58b0c20364a6ad9c233dfb1bdbb87b8f91e3ab9790e876f906107183419aa7480e327388c01d16b66bf3adf9e7e31c3fc518740446ed2a394e7699baf9408c62b4c0e7a11dec8f4a67e78a3f00bedae9f55f36c52a1fd4ee3a8be7285f9ca898ee63d3718a7c4603bcb9a24537b34a41a6c0eee4cc609b014d3f4fb928aa7e3fa7a4f97dcef5c0e526b650284ffeda82f603ed9ea1eb6627d29d8bcd6c7e6fe128b1c4463b2cfe50c0ff9a46090635dde4b4d4a984e5a91f7486856cd2bf85088fa4d27b219628be8cdba7004d00985a73fb5b0b4b0f96844e73a8ff7884bdee1a0d6e62decfeebfb56351c135e6580fd61ea806ee5592fe4ffba5c73b8a4a04d44aa52645320cb73fe0c5f14a971d3b3f64c85f5ebaab5e1a061f5186050230286331048e43368e45cfc88e8f4d0d3b1b86b64d5394bc68c2b754389b3c18a45c1edb0496dd88cb3113bbdf1a0f127eb8cd52caf8da95b83d0decad3775b2f2e43776d0d32d447cdd0b267b327744f3d9554f399d43ca1eda29c5c761b3936f845f0c4d1c090000004b5ab3291e06cd86de610f003236a11343d6f4ad02199717054ac15b0d0000000000007bd4bea33c0ca36e2c4209026849de21c1da1057f353cc824947d75119e4501b98cb9e621d0644e3f4a75353093557afcee7da41ad368fe1c3abc72fce462d6c75a6cbb426922772b9b262a861fbcefae86d6e8c5a8de6a1e8f03456c0a354277a2f3ff46a62b6d6cdee4febf23e2350f94b47a05a4d0e7da37a2e97b899d92ca1f3bd1cded5588593e8bb99b9dce0731fa1174de14b63be2bf7e424f870551f213fab437aac092c2e9798959fa3616465e2b36fd49cc9af902d47debec02558c036ed991f1a3895b37cd70f3c405cca362c885542fd976e73be4cf7580a0c4d5a9527c77c189573e3be07ed15472f6b012939abb5be9f3e8a5b720307fb2dbca48b35d121702cfb6b3690559b08fbeb77d53d37422d7f44fe269ac51665632bf070cfc7445741b70306cb3f19b7fbecd19a78092dfd086a0da019734d95660ba4e5ce5bcf25f09403c72e3ec902f3717cca0eca25e791c2b8c2b8988645afa2446d5218abce136c0dbbafb95e4f4727a29cc567b3f73d5dbc1aeee746653a7f5c445add24a9c1b67d1bfeec85d2a6478e80c3acdb9439aa46c8cf14a98ffa89790ef7a94b3146088566812e28ccbafb466772b7fbb98dcf1e792eb6d0de0829c3c49c5ecdeea3e80017324a0fe724565c4e7a242764e9012442cae44b57c7121889c044be05b5eca70efb649bb528e751f072af93ae2c5053fdce196cce158136f904cf64f2cb8becc2d024f5ec32a38d78b87a4dfe7c53769dadef890efd160e5162cedb18a756aed83edfb9efbbb3648eb399e61f80077e64b95eae9d17083aed05cfc2e148621e36be1f41d373c721a11804fce269c688b0c647d6e1083e336d1f7f90a7a080a83397773cc351531070af5c1a1418f28dce95c01052a314a9ebe39cb9cddb8e7855e58c4a636b7f6250ecad312ede18664c03d92e330935295a35ea3e0306f25ca971300f782ae2f6e79a513732d22ef9b9bc41d17df3352a855cdd19b18f5abd6e6420f4f42f01750a64f6acdb6b46622fafebe3e913c64a1a6a59f980e97deae0dc83c12ccae6b430d7a28f21c3e0e38b32f3d5f1d44927fc34ed5c9ddb5be8eb936dbdcd327b63ea69d86c2da15cb834a18ee51a44f2da7b11d79486942fd04eade92fe5d93342970ca4cc73861b15facf97e9c53c15488c5630b17b9364c58652cfa6de0918327498ba8d6120d3be9139c51a6e9017525772397529ddd4fd1905614fd1cc7f1370a577ad10ec9ea742f9aedc9fee42c3df38f4b35ccb1cf8590eaf770b3f74af21f5119ac238e82e92c83321b06f106530abbbd321c3e1dc948accdc21a586ff37253ad1d0c5bfb51541f876be1b6e4f490046204b9edfe9a9721b9019a495d1efed10d4570f4c75ac56aa862f738b46cfe8899f6d92e862611b35be8931a2460dc646ed332b3046baf48613bbb543f4abda22d3d62a484665ba5bbf8fec1bb199b430a6e96cfad417a1644cc5f7f640004836c60f15a174eb7eb1750a71a141549f393c7d88b8729a33f841f7f8f2bd03dccaaa825f2e29105f6b4c11ac8e06bb3be9dfdecce66294a0be9dbc5f40123644fcac59ed0c968eb62fb14d111e900ad1c038f17d5471ab088f704de7db35753f818f55669a76e621b29d975253d177791e1434644a81b2b8bc4c8e147961b4f1b7f3e225571fecb10906957791b27d35a89e3ce84c91a2dc60aee460d8f41eb7b5e171516ef34d8c7dbbc8122cdeffa51b5a393d2cae7f69826d342d4d81b58ca7ddb0e688a15b39a00ef1ae3d58b85d7d5f6fe0448a26c58fcdc234d5db337d1ab87e86f835663a4968c8bf5afd7cf80549f42588d9b8ea04ff3d9eac2b8ffd1155a504230103a68bd8b3c416a10d76cee236442a68393896587bc66c01a5f7f411325578d023d7619a89d0bcbbacae99b925fb72994e1ef4240cddad2294a56bec6d6243b95b04345c215bd48a3aa89786ba39b40101015d8bd038c32a7b0eb02a4eb5a640371d9b4af540eb99a1e26547cc214da21e9538754a802972411a0bf416707b95457d0b77daac9bdf27a82b9aa7992ad1d3815f9a56a746eefa6f7e1913b6e3e859b2cc7797adcae825b7aad17c11e66597042c327a6473489a9664c5ce0ff8b1ecfb691daa0bd50c17f4597826553686bc2e6f52585ffdfae76e26691699141a698e5b517e02130587ee503c7b5f638cbf32166b0d4ebe9222b6c9d50fb3db9d1ab060c31aabeef52cd51e5cf485eecc741e37a47c4996068f1d4b25f182b9d7bee4bec5cb070d3cea2f9762a41bb8d9ec5896ebcb2b17ca82f29bcce456412d8ed531afda50d259fcb7794216b6a9a873b6c3c4493c0c6d3e6a4f81f3b40dcc745a4e2383c678c472b1d5bf3ff02992bfe893a5bc96824039da1ee3cf8593e7d616d62f6e3c3e2c4e0cc58d5445998cf5b1c91c2468b2571b118709668efbbe72911f1bfa96b97c32f71cd7071f4c729e88631a89b53dd4bae6ef9c4ed082916e267479195599e9871b26b92c6885ded29f990070fddc4d8535088ddc70d6e83f797b6fa2260a92602eb90800000001cb7394f0c90fb5913b2f8d8d24c8f1056920e1facbe643dd49d8983b277da7282a986c28d5468aed9a4730579a20346d35f78b6bd2cacb4b9237fbfb0b7a2314105ff3b074a0e340b904e715e99c501e1435c15eaa262893c2883c90f26d2ff91792d46e4d867b62570e0c1e4739b8ac4fff8f778960de1ae40d4c85c51e1c47040bb2caeaf0c71dbb67c30715b8c14d6921831d7678522eeed29444df421ee206ca3be20d1b5fd2d2baf832f097fef590290eea77f8f3ed00b3984142d01def54bec0348be2216a8dad60838f3ad3595a744edeb6202dbcbd9c73a126a79cbefa43c7db0493103c2aa8fecb5cde1773ad0cdd03f5b0cfb02706420be6fccad116e9140501df48cdbf725611b398eb2b9e93f8da49e601099e0b2e880a95525b5f3f2edd74ae9d664ab61634ab53a1e2f3bf56add0a7f09c16853814b03a4212b9a0119420948da26bb171b288a66a2f0a4063754c2910512aa1cead69b94b498b5d4c44ce0a4aaa7855ee1a3b7ca738756a00a435062ccb86a40cc01f666d372f323e087ef5db2bc2d17ed1f72db14c52ca6723ce92ada6ff0c4f498d42d4218a9f799a216facb7377a1532e0755b894bfc0ee99a4072ac54ee5727846631574f348bf650e7d54b0ef3a1b5cc8233e660a2f10800001f6c23e08ff0ddb488b95504fc42508449b8fdd70afb387016e8c9206482c334f37d26fa3bdb6063f8147db9363e22c4b43b89ba0f68d06641fc1eb74fec0be4f59a17b274e0db67b2c0398250da219c9caf7e0f6cb1f828b6f89a67c8cfd0fe0132bd94261410f8d8d7eb", 0xec7}], 0x2}, 0x24044854)

590.978663ms ago: executing program 4 (id=3140):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010800000000084)
sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000100)="2f0efde75a5aa9b2cc85a489d090f563506f002ef0bc490a308b0f1517d08daafecc775414ab2247a0e470b225738127ae094b97e5242a733078411f71bb811ff3e56958aba01b131ab8a69ece042bfa611a14a1938af63db42b7fd114908305e06d8115a12f2393f5eba119fe2480785bf5a928dcab05c1065cb41a323ae475c28865088271519a0c6098b444bce0492dcc867f3687", 0x96}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x201, 0x40000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x1}], 0x1}}], 0x2, 0x4008040)

588.570055ms ago: executing program 3 (id=3141):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0xb0}, 0x1, 0x0, 0x0, 0x40088c4}, 0xc000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x30, r2, 0x1, 0x2, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8005}, 0x0)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRESHEX=r3, @ANYRESDEC=r4], 0x20}, 0x1, 0x0, 0x0, 0x4008811}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x56}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)

531.896626ms ago: executing program 4 (id=3142):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x21, 0xa, 0x81, 0x0, 0x9, 0x1, 0x5, 0x80, 0xff, 0x4, [0x3, 0x4, 0x4000e18, 0x972d, 0x3, 0x3fb, 0x6, 0x3]}})
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
r3 = socket$kcm(0x29, 0x0, 0x0)
r4 = socket(0x2c, 0x3, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r4}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r5, &(0x7f0000000200)}, 0x20)
getsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
r6 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x15, 0x0, 0x101}})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xf, 0x0, &(0x7f0000000340))
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x1, 0xfff1}, {0xffff, 0xffff}, {0x9, 0xffe0}}}, 0x24}}, 0x4000)
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x2000000, 0x0, 0x1, 0x5, {0x9, 0x0, 0x401, 0xfffb, 0x8000}, {0x9, 0x0, 0x4, 0x2, 0x66f, 0x5}, 0x6, 0x4, 0x3c2}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x5}}]}, 0x7c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)

531.493744ms ago: executing program 3 (id=3143):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0x10500, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$inet(0x2b, 0x801, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x30000000}, @ldst={0x1, 0x0, 0x6, 0x7}]}, &(0x7f00000002c0)='syzkaller\x00', 0x7, 0xd1, &(0x7f0000000300)=""/209, 0x41100, 0x4, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0xc, 0x5, 0x9}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000540)=[{0x1, 0x5, 0x0, 0xc}, {0x2, 0x1, 0x1, 0xc}, {0x5, 0x3, 0xe, 0x1}, {0x4, 0x1, 0xb, 0x4}], 0x10, 0x8}, 0x94)

391.129912ms ago: executing program 4 (id=3144):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x27, 0x8000, 0x81, 0xfffffffb}})
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r2, 0x8)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000180)={0x0, 0x80}, 0x8)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x34, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
socket$nl_route(0x10, 0x3, 0x0)

321.013266ms ago: executing program 4 (id=3145):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x68, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0x0, 0x1}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_EMATCHES={0x34, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x24, 0x1, 0x0, 0x0, {{0x9, 0x9, 0x40}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}]}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014)

158.696237ms ago: executing program 4 (id=3146):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r2)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r3, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@ip_retopts={{0x14, 0x110, 0xd, {[@timestamp_addr={0x44, 0x4, 0xfc}]}}}], 0x18}, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x4000010, r0, 0x2459000)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800"], 0x68}}, 0x0)
r5 = socket(0x27, 0x80000, 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x20, r7, 0xe985e4df3848afb5, 0x20, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}}, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r7, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20004804)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)

156.615713ms ago: executing program 2 (id=3147):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x1, 0x4}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000006000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ffc5000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

6.530228ms ago: executing program 2 (id=3148):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
listen(0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', <r1=>0x0})
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14)
setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x3e}, r1}, 0x14)
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0xc)
r2 = socket$netlink(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000f80)={'caif0\x00', 0x0})
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0)

0s ago: executing program 4 (id=3149):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x670, 0x0, 0x11, 0x148, 0x3f0, 0x0, 0x5d8, 0x2a8, 0x2a8, 0x5d8, 0x2a8, 0x3, 0x0, {[{{@ip={@empty, @remote, 0x0, 0x0, 'macvlan1\x00', 'ip_vti0\x00', {}, {}, 0x21, 0x2, 0x2}, 0x0, 0x2c8, 0x3f0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0xf0030000, './file0\x00'}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x4000000, 'system_u:object_r:crack_exec_t:s0\x00'}}}, {{@uncond, 0x0, 0x1b8, 0x1e8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@comment={{0x120}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x6d0)

kernel console output (not intermixed with test programs):

82.505049][T11332]  ? __pfx___nla_validate_parse+0x10/0x10
[  182.505067][T11332]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  182.505080][T11332]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  182.505095][T11332]  ? __nla_parse+0x40/0x60
[  182.505109][T11332]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  182.505123][T11332]  genl_family_rcv_msg_doit+0x215/0x300
[  182.505137][T11332]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  182.505152][T11332]  ? bpf_lsm_capable+0x9/0x20
[  182.505164][T11332]  ? security_capable+0x7e/0x2e0
[  182.505177][T11332]  genl_rcv_msg+0x60e/0x790
[  182.505189][T11332]  ? __pfx_genl_rcv_msg+0x10/0x10
[  182.505197][T11332]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  182.505216][T11332]  netlink_rcv_skb+0x208/0x470
[  182.505228][T11332]  ? __pfx_genl_rcv_msg+0x10/0x10
[  182.505237][T11332]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  182.505257][T11332]  ? down_read+0x1ad/0x2e0
[  182.505268][T11332]  genl_rcv+0x28/0x40
[  182.505275][T11332]  netlink_unicast+0x75c/0x8e0
[  182.505291][T11332]  netlink_sendmsg+0x805/0xb30
[  182.505307][T11332]  ? __pfx_netlink_sendmsg+0x10/0x10
[  182.505320][T11332]  ? aa_sock_msg_perm+0x94/0x160
[  182.505330][T11332]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  182.505340][T11332]  ? __pfx_netlink_sendmsg+0x10/0x10
[  182.505351][T11332]  __sock_sendmsg+0x21c/0x270
[  182.505364][T11332]  ____sys_sendmsg+0x505/0x830
[  182.505379][T11332]  ? __pfx_____sys_sendmsg+0x10/0x10
[  182.505396][T11332]  ? import_iovec+0x74/0xa0
[  182.505409][T11332]  ___sys_sendmsg+0x21f/0x2a0
[  182.505423][T11332]  ? __pfx____sys_sendmsg+0x10/0x10
[  182.505453][T11332]  ? __fget_files+0x2a/0x420
[  182.505461][T11332]  ? __fget_files+0x3a0/0x420
[  182.505474][T11332]  __x64_sys_sendmsg+0x19b/0x260
[  182.505487][T11332]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  182.505505][T11332]  ? rcu_is_watching+0x15/0xb0
[  182.505518][T11332]  ? do_syscall_64+0xbe/0x3b0
[  182.505530][T11332]  do_syscall_64+0xfa/0x3b0
[  182.505538][T11332]  ? lockdep_hardirqs_on+0x9c/0x150
[  182.505546][T11332]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.505556][T11332]  ? exc_page_fault+0x9f/0xf0
[  182.505566][T11332]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.505576][T11332] RIP: 0033:0x7f4e74d8e929
[  182.505587][T11332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  182.505595][T11332] RSP: 002b:00007f4e75c4a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  182.505607][T11332] RAX: ffffffffffffffda RBX: 00007f4e74fb5fa0 RCX: 00007f4e74d8e929
[  182.505614][T11332] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  182.505620][T11332] RBP: 00007f4e74e10ca1 R08: 0000000000000000 R09: 0000000000000000
[  182.505626][T11332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  182.505632][T11332] R13: 0000000000000000 R14: 00007f4e74fb5fa0 R15: 00007fffb689c2a8
[  182.505647][T11332]  </TASK>
[  182.682585][T11334] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1806'.
[  182.933580][T11360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1816'.
[  183.002085][T11368] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  183.007910][T11368] xt_SECMARK: invalid mode: 0
[  184.261404][T11411] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  184.269069][T11411] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  184.272034][T11411] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  184.275364][T11411] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  184.280705][T11411] geneve3: entered promiscuous mode
[  184.802435][T11437] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  184.818479][T11437] CPU: 1 UID: 0 PID: 11437 Comm: syz.0.1844 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  184.818497][T11437] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  184.818504][T11437] Call Trace:
[  184.818508][T11437]  <TASK>
[  184.818513][T11437]  dump_stack_lvl+0x189/0x250
[  184.818532][T11437]  ? __pfx_dump_stack_lvl+0x10/0x10
[  184.818543][T11437]  ? __pfx__printk+0x10/0x10
[  184.818555][T11437]  ? kernfs_path_from_node+0x2c/0x260
[  184.818566][T11437]  ? kernfs_path_from_node+0x2c/0x260
[  184.818589][T11437]  ? kernfs_path_from_node+0x2c/0x260
[  184.818625][T11437]  ? kernfs_path_from_node+0x22c/0x260
[  184.818634][T11437]  ? kernfs_path_from_node+0x2c/0x260
[  184.818644][T11437]  sysfs_warn_dup+0x8e/0xa0
[  184.818660][T11437]  sysfs_do_create_link_sd+0xc0/0x110
[  184.818670][T11437]  device_add_class_symlinks+0x1cf/0x240
[  184.818685][T11437]  device_add+0x475/0xb50
[  184.818700][T11437]  wiphy_register+0x199a/0x26b0
[  184.818719][T11437]  ? __pfx_wiphy_register+0x10/0x10
[  184.818728][T11437]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  184.818743][T11437]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  184.818757][T11437]  ieee80211_register_hw+0x33e1/0x4120
[  184.818779][T11437]  ? ieee80211_register_hw+0x13f1/0x4120
[  184.818796][T11437]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  184.818810][T11437]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  184.818827][T11437]  ? __hrtimer_setup+0x187/0x210
[  184.818836][T11437]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  184.818852][T11437]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  184.818881][T11437]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  184.818893][T11437]  ? trace_kmalloc+0x1f/0xd0
[  184.818904][T11437]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  184.818917][T11437]  ? kstrndup+0xbf/0x160
[  184.818931][T11437]  hwsim_new_radio_nl+0xea4/0x1b10
[  184.818944][T11437]  ? __pfx___nla_validate_parse+0x10/0x10
[  184.818961][T11437]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  184.818979][T11437]  ? __nla_parse+0x40/0x60
[  184.818990][T11437]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  184.819004][T11437]  genl_family_rcv_msg_doit+0x215/0x300
[  184.819017][T11437]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  184.819032][T11437]  ? bpf_lsm_capable+0x9/0x20
[  184.819042][T11437]  ? security_capable+0x7e/0x2e0
[  184.819054][T11437]  genl_rcv_msg+0x60e/0x790
[  184.819066][T11437]  ? __pfx_genl_rcv_msg+0x10/0x10
[  184.819074][T11437]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  184.819095][T11437]  netlink_rcv_skb+0x208/0x470
[  184.819108][T11437]  ? __pfx_genl_rcv_msg+0x10/0x10
[  184.819117][T11437]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  184.819137][T11437]  ? down_read+0x1ad/0x2e0
[  184.819149][T11437]  genl_rcv+0x28/0x40
[  184.819156][T11437]  netlink_unicast+0x75c/0x8e0
[  184.819172][T11437]  netlink_sendmsg+0x805/0xb30
[  184.819190][T11437]  ? __pfx_netlink_sendmsg+0x10/0x10
[  184.819204][T11437]  ? aa_sock_msg_perm+0x94/0x160
[  184.819214][T11437]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  184.819223][T11437]  ? __pfx_netlink_sendmsg+0x10/0x10
[  184.819235][T11437]  __sock_sendmsg+0x21c/0x270
[  184.819246][T11437]  ____sys_sendmsg+0x505/0x830
[  184.819262][T11437]  ? __pfx_____sys_sendmsg+0x10/0x10
[  184.819279][T11437]  ? import_iovec+0x74/0xa0
[  184.819292][T11437]  ___sys_sendmsg+0x21f/0x2a0
[  184.819306][T11437]  ? __pfx____sys_sendmsg+0x10/0x10
[  184.819336][T11437]  ? __fget_files+0x2a/0x420
[  184.819343][T11437]  ? __fget_files+0x3a0/0x420
[  184.819356][T11437]  __x64_sys_sendmsg+0x19b/0x260
[  184.819369][T11437]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  184.819387][T11437]  ? rcu_is_watching+0x15/0xb0
[  184.819399][T11437]  ? do_syscall_64+0xbe/0x3b0
[  184.819410][T11437]  do_syscall_64+0xfa/0x3b0
[  184.819418][T11437]  ? lockdep_hardirqs_on+0x9c/0x150
[  184.819426][T11437]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.819434][T11437]  ? exc_page_fault+0x9f/0xf0
[  184.819443][T11437]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.819451][T11437] RIP: 0033:0x7f573258e929
[  184.819467][T11437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  184.819476][T11437] RSP: 002b:00007f5733385038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  184.819486][T11437] RAX: ffffffffffffffda RBX: 00007f57327b5fa0 RCX: 00007f573258e929
[  184.819494][T11437] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  184.819500][T11437] RBP: 00007f5732610ca1 R08: 0000000000000000 R09: 0000000000000000
[  184.819505][T11437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  184.819510][T11437] R13: 0000000000000000 R14: 00007f57327b5fa0 R15: 00007fff56c98f38
[  184.819524][T11437]  </TASK>
[  185.245474][T11461] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.249266][T11461] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.252710][T11461] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.256137][T11461] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.275541][T11462] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  185.284148][T11462] CPU: 0 UID: 0 PID: 11462 Comm: syz.0.1855 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  185.284179][T11462] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  185.284190][T11462] Call Trace:
[  185.284197][T11462]  <TASK>
[  185.284205][T11462]  dump_stack_lvl+0x189/0x250
[  185.284236][T11462]  ? __pfx_dump_stack_lvl+0x10/0x10
[  185.284254][T11462]  ? __pfx__printk+0x10/0x10
[  185.284277][T11462]  ? kernfs_path_from_node+0x2c/0x260
[  185.284293][T11462]  ? kernfs_path_from_node+0x2c/0x260
[  185.284307][T11462]  ? kernfs_path_from_node+0x2c/0x260
[  185.284324][T11462]  ? kernfs_path_from_node+0x22c/0x260
[  185.284337][T11462]  ? kernfs_path_from_node+0x2c/0x260
[  185.284380][T11462]  sysfs_warn_dup+0x8e/0xa0
[  185.284405][T11462]  sysfs_do_create_link_sd+0xc0/0x110
[  185.284422][T11462]  device_add_class_symlinks+0x1cf/0x240
[  185.284449][T11462]  device_add+0x475/0xb50
[  185.284481][T11462]  wiphy_register+0x199a/0x26b0
[  185.284538][T11462]  ? __pfx_wiphy_register+0x10/0x10
[  185.284585][T11462]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  185.284613][T11462]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  185.284640][T11462]  ieee80211_register_hw+0x33e1/0x4120
[  185.284677][T11462]  ? ieee80211_register_hw+0x13f1/0x4120
[  185.284706][T11462]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  185.284730][T11462]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  185.284761][T11462]  ? __hrtimer_setup+0x187/0x210
[  185.284779][T11462]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  185.284807][T11462]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  185.284855][T11462]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  185.284875][T11462]  ? trace_kmalloc+0x1f/0xd0
[  185.284894][T11462]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  185.284915][T11462]  ? kstrndup+0xbf/0x160
[  185.284938][T11462]  hwsim_new_radio_nl+0xea4/0x1b10
[  185.284962][T11462]  ? __pfx___nla_validate_parse+0x10/0x10
[  185.284993][T11462]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  185.285019][T11462]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  185.285045][T11462]  ? __nla_parse+0x40/0x60
[  185.285065][T11462]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  185.285088][T11462]  genl_family_rcv_msg_doit+0x215/0x300
[  185.285110][T11462]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  185.285138][T11462]  ? bpf_lsm_capable+0x9/0x20
[  185.285158][T11462]  ? security_capable+0x7e/0x2e0
[  185.285180][T11462]  genl_rcv_msg+0x60e/0x790
[  185.285201][T11462]  ? __pfx_genl_rcv_msg+0x10/0x10
[  185.285214][T11462]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  185.285242][T11462]  netlink_rcv_skb+0x208/0x470
[  185.285265][T11462]  ? __pfx_genl_rcv_msg+0x10/0x10
[  185.285281][T11462]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  185.285316][T11462]  ? down_read+0x1ad/0x2e0
[  185.285336][T11462]  genl_rcv+0x28/0x40
[  185.285349][T11462]  netlink_unicast+0x75c/0x8e0
[  185.285377][T11462]  netlink_sendmsg+0x805/0xb30
[  185.285405][T11462]  ? __pfx_netlink_sendmsg+0x10/0x10
[  185.285425][T11462]  ? aa_sock_msg_perm+0x94/0x160
[  185.285441][T11462]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  185.285463][T11462]  ? __pfx_netlink_sendmsg+0x10/0x10
[  185.285482][T11462]  __sock_sendmsg+0x21c/0x270
[  185.285504][T11462]  ____sys_sendmsg+0x505/0x830
[  185.285531][T11462]  ? __pfx_____sys_sendmsg+0x10/0x10
[  185.285592][T11462]  ? import_iovec+0x74/0xa0
[  185.285616][T11462]  ___sys_sendmsg+0x21f/0x2a0
[  185.285640][T11462]  ? __pfx____sys_sendmsg+0x10/0x10
[  185.285691][T11462]  ? __fget_files+0x2a/0x420
[  185.285705][T11462]  ? __fget_files+0x3a0/0x420
[  185.285727][T11462]  __x64_sys_sendmsg+0x19b/0x260
[  185.285752][T11462]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  185.285782][T11462]  ? rcu_is_watching+0x15/0xb0
[  185.285804][T11462]  ? do_syscall_64+0xbe/0x3b0
[  185.285823][T11462]  do_syscall_64+0xfa/0x3b0
[  185.285837][T11462]  ? lockdep_hardirqs_on+0x9c/0x150
[  185.285852][T11462]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.285868][T11462]  ? exc_page_fault+0x9f/0xf0
[  185.285885][T11462]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.285899][T11462] RIP: 0033:0x7f573258e929
[  185.285914][T11462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  185.285928][T11462] RSP: 002b:00007f5733385038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  185.285945][T11462] RAX: ffffffffffffffda RBX: 00007f57327b5fa0 RCX: 00007f573258e929
[  185.285956][T11462] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  185.285966][T11462] RBP: 00007f5732610ca1 R08: 0000000000000000 R09: 0000000000000000
[  185.285976][T11462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  185.285984][T11462] R13: 0000000000000000 R14: 00007f57327b5fa0 R15: 00007fff56c98f38
[  185.286007][T11462]  </TASK>
[  186.036017][T11489] netlink: 'syz.3.1865': attribute type 1 has an invalid length.
[  186.106558][T11489] vlan2: entered allmulticast mode
[  186.111844][T11489] bond2: entered allmulticast mode
[  187.081485][T11526] __nla_validate_parse: 2 callbacks suppressed
[  187.081503][T11526] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1879'.
[  187.087198][T11526] nbd: illegal input index 65508
[  187.365429][T11555] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  187.374222][T11555] ip6erspan0: entered allmulticast mode
[  187.468803][T11554] delete_channel: no stack
[  187.474318][T11554] delete_channel: no stack
[  187.574755][T11572] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  187.577597][T11572] syzkaller0: entered promiscuous mode
[  187.586845][T11572] syzkaller0: entered allmulticast mode
[  187.603402][T11572] tipc: Resetting bearer <eth:syzkaller0>
[  187.607136][T11571] tipc: Resetting bearer <eth:syzkaller0>
[  187.619111][T11571] tipc: Disabling bearer <eth:syzkaller0>
[  187.639026][T11576] netlink: 'syz.2.1892': attribute type 1 has an invalid length.
[  187.643367][T11576] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1892'.
[  187.780457][T11582] wg1 speed is unknown, defaulting to 1000
[  187.839057][T11587] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  187.843873][T11587] CPU: 0 UID: 0 PID: 11587 Comm: syz.2.1896 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  187.843896][T11587] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  187.843907][T11587] Call Trace:
[  187.843915][T11587]  <TASK>
[  187.843924][T11587]  dump_stack_lvl+0x189/0x250
[  187.843955][T11587]  ? __pfx_dump_stack_lvl+0x10/0x10
[  187.843974][T11587]  ? __pfx__printk+0x10/0x10
[  187.843998][T11587]  ? kernfs_path_from_node+0x2c/0x260
[  187.844015][T11587]  ? kernfs_path_from_node+0x2c/0x260
[  187.844028][T11587]  ? kernfs_path_from_node+0x2c/0x260
[  187.844042][T11587]  ? kernfs_path_from_node+0x22c/0x260
[  187.844056][T11587]  ? kernfs_path_from_node+0x2c/0x260
[  187.844070][T11587]  sysfs_warn_dup+0x8e/0xa0
[  187.844086][T11587]  sysfs_do_create_link_sd+0xc0/0x110
[  187.844100][T11587]  device_add_class_symlinks+0x1cf/0x240
[  187.844124][T11587]  device_add+0x475/0xb50
[  187.844150][T11587]  wiphy_register+0x199a/0x26b0
[  187.844193][T11587]  ? __pfx_wiphy_register+0x10/0x10
[  187.844209][T11587]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  187.844232][T11587]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  187.844255][T11587]  ieee80211_register_hw+0x33e1/0x4120
[  187.844287][T11587]  ? ieee80211_register_hw+0x13f1/0x4120
[  187.844344][T11587]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  187.844371][T11587]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  187.844402][T11587]  ? __hrtimer_setup+0x187/0x210
[  187.844420][T11587]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  187.844452][T11587]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  187.844495][T11587]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  187.844515][T11587]  ? trace_kmalloc+0x1f/0xd0
[  187.844532][T11587]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  187.844554][T11587]  ? kstrndup+0xbf/0x160
[  187.844579][T11587]  hwsim_new_radio_nl+0xea4/0x1b10
[  187.844604][T11587]  ? __pfx___nla_validate_parse+0x10/0x10
[  187.844634][T11587]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  187.844666][T11587]  ? __nla_parse+0x40/0x60
[  187.844685][T11587]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  187.844711][T11587]  genl_family_rcv_msg_doit+0x215/0x300
[  187.844730][T11587]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  187.844755][T11587]  ? bpf_lsm_capable+0x9/0x20
[  187.844771][T11587]  ? security_capable+0x7e/0x2e0
[  187.844792][T11587]  genl_rcv_msg+0x60e/0x790
[  187.844814][T11587]  ? __pfx_genl_rcv_msg+0x10/0x10
[  187.844829][T11587]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  187.844861][T11587]  netlink_rcv_skb+0x208/0x470
[  187.844905][T11587]  ? __pfx_genl_rcv_msg+0x10/0x10
[  187.844922][T11587]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  187.844957][T11587]  ? down_read+0x1ad/0x2e0
[  187.844979][T11587]  genl_rcv+0x28/0x40
[  187.844993][T11587]  netlink_unicast+0x75c/0x8e0
[  187.845023][T11587]  netlink_sendmsg+0x805/0xb30
[  187.845055][T11587]  ? __pfx_netlink_sendmsg+0x10/0x10
[  187.845082][T11587]  ? aa_sock_msg_perm+0x94/0x160
[  187.845103][T11587]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  187.845121][T11587]  ? __pfx_netlink_sendmsg+0x10/0x10
[  187.845144][T11587]  __sock_sendmsg+0x21c/0x270
[  187.845163][T11587]  ____sys_sendmsg+0x505/0x830
[  187.845198][T11587]  ? __pfx_____sys_sendmsg+0x10/0x10
[  187.845230][T11587]  ? import_iovec+0x74/0xa0
[  187.845253][T11587]  ___sys_sendmsg+0x21f/0x2a0
[  187.845278][T11587]  ? __pfx____sys_sendmsg+0x10/0x10
[  187.845362][T11587]  ? __fget_files+0x2a/0x420
[  187.845379][T11587]  ? __fget_files+0x3a0/0x420
[  187.845403][T11587]  __x64_sys_sendmsg+0x19b/0x260
[  187.845430][T11587]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  187.845461][T11587]  ? rcu_is_watching+0x15/0xb0
[  187.845485][T11587]  ? do_syscall_64+0xbe/0x3b0
[  187.845506][T11587]  do_syscall_64+0xfa/0x3b0
[  187.845521][T11587]  ? lockdep_hardirqs_on+0x9c/0x150
[  187.845536][T11587]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.845553][T11587]  ? exc_page_fault+0x9f/0xf0
[  187.845571][T11587]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.845585][T11587] RIP: 0033:0x7fc134f8e929
[  187.845599][T11587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  187.845615][T11587] RSP: 002b:00007fc135d4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  187.845633][T11587] RAX: ffffffffffffffda RBX: 00007fc1351b5fa0 RCX: 00007fc134f8e929
[  187.845645][T11587] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  187.845656][T11587] RBP: 00007fc135010ca1 R08: 0000000000000000 R09: 0000000000000000
[  187.845666][T11587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  187.845676][T11587] R13: 0000000000000000 R14: 00007fc1351b5fa0 R15: 00007fffc95ea518
[  187.845695][T11587]  </TASK>
[  188.422670][T11607] IPv6: sit1: Disabled Multicast RS
[  188.479755][T11607] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1904'.
[  188.498038][T11610] xt_CT: No such helper "snmp_trap"
[  188.571953][T11623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1905'.
[  188.575319][T11623] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1905'.
[  188.579113][T11623] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1905'.
[  188.827764][T11628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1910'.
[  189.455285][T11639] netlink: 'syz.0.1915': attribute type 1 has an invalid length.
[  189.489696][T11639] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address
[  189.495322][T11639] bond4: (slave vxcan1): Error -95 calling set_mac_address
[  189.616568][T11648] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  189.623846][T11648] CPU: 0 UID: 0 PID: 11648 Comm: syz.0.1918 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  189.623869][T11648] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  189.623879][T11648] Call Trace:
[  189.623885][T11648]  <TASK>
[  189.623892][T11648]  dump_stack_lvl+0x189/0x250
[  189.623921][T11648]  ? __pfx_dump_stack_lvl+0x10/0x10
[  189.623942][T11648]  ? __pfx__printk+0x10/0x10
[  189.623963][T11648]  ? kernfs_path_from_node+0x2c/0x260
[  189.623981][T11648]  ? kernfs_path_from_node+0x2c/0x260
[  189.623995][T11648]  ? kernfs_path_from_node+0x2c/0x260
[  189.624012][T11648]  ? kernfs_path_from_node+0x22c/0x260
[  189.624027][T11648]  ? kernfs_path_from_node+0x2c/0x260
[  189.624045][T11648]  sysfs_warn_dup+0x8e/0xa0
[  189.624070][T11648]  sysfs_do_create_link_sd+0xc0/0x110
[  189.624086][T11648]  device_add_class_symlinks+0x1cf/0x240
[  189.624112][T11648]  device_add+0x475/0xb50
[  189.624173][T11648]  wiphy_register+0x199a/0x26b0
[  189.624209][T11648]  ? __pfx_wiphy_register+0x10/0x10
[  189.624234][T11648]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  189.624263][T11648]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  189.624291][T11648]  ieee80211_register_hw+0x33e1/0x4120
[  189.624331][T11648]  ? ieee80211_register_hw+0x13f1/0x4120
[  189.624360][T11648]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  189.624386][T11648]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  189.624416][T11648]  ? __hrtimer_setup+0x187/0x210
[  189.624433][T11648]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  189.624461][T11648]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  189.624511][T11648]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  189.624533][T11648]  ? trace_kmalloc+0x1f/0xd0
[  189.624551][T11648]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  189.624572][T11648]  ? kstrndup+0xbf/0x160
[  189.624596][T11648]  hwsim_new_radio_nl+0xea4/0x1b10
[  189.624620][T11648]  ? __pfx___nla_validate_parse+0x10/0x10
[  189.624650][T11648]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  189.624682][T11648]  ? __nla_parse+0x40/0x60
[  189.624701][T11648]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  189.624723][T11648]  genl_family_rcv_msg_doit+0x215/0x300
[  189.624747][T11648]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  189.624775][T11648]  ? bpf_lsm_capable+0x9/0x20
[  189.624795][T11648]  ? security_capable+0x7e/0x2e0
[  189.624816][T11648]  genl_rcv_msg+0x60e/0x790
[  189.624855][T11648]  ? __pfx_genl_rcv_msg+0x10/0x10
[  189.624873][T11648]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  189.624909][T11648]  netlink_rcv_skb+0x208/0x470
[  189.624933][T11648]  ? __pfx_genl_rcv_msg+0x10/0x10
[  189.624951][T11648]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  189.624986][T11648]  ? down_read+0x1ad/0x2e0
[  189.625006][T11648]  genl_rcv+0x28/0x40
[  189.625019][T11648]  netlink_unicast+0x75c/0x8e0
[  189.625048][T11648]  netlink_sendmsg+0x805/0xb30
[  189.625077][T11648]  ? __pfx_netlink_sendmsg+0x10/0x10
[  189.625099][T11648]  ? aa_sock_msg_perm+0x94/0x160
[  189.625116][T11648]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  189.625160][T11648]  ? __pfx_netlink_sendmsg+0x10/0x10
[  189.625184][T11648]  __sock_sendmsg+0x21c/0x270
[  189.625206][T11648]  ____sys_sendmsg+0x505/0x830
[  189.625241][T11648]  ? __pfx_____sys_sendmsg+0x10/0x10
[  189.625275][T11648]  ? import_iovec+0x74/0xa0
[  189.625300][T11648]  ___sys_sendmsg+0x21f/0x2a0
[  189.625326][T11648]  ? __pfx____sys_sendmsg+0x10/0x10
[  189.625380][T11648]  ? __fget_files+0x2a/0x420
[  189.625394][T11648]  ? __fget_files+0x3a0/0x420
[  189.625416][T11648]  __x64_sys_sendmsg+0x19b/0x260
[  189.625442][T11648]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  189.625474][T11648]  ? rcu_is_watching+0x15/0xb0
[  189.625496][T11648]  ? do_syscall_64+0xbe/0x3b0
[  189.625516][T11648]  do_syscall_64+0xfa/0x3b0
[  189.625531][T11648]  ? lockdep_hardirqs_on+0x9c/0x150
[  189.625546][T11648]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.625560][T11648]  ? exc_page_fault+0x9f/0xf0
[  189.625577][T11648]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.625591][T11648] RIP: 0033:0x7f573258e929
[  189.625607][T11648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  189.625621][T11648] RSP: 002b:00007f5733385038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  189.625640][T11648] RAX: ffffffffffffffda RBX: 00007f57327b5fa0 RCX: 00007f573258e929
[  189.625652][T11648] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  189.625663][T11648] RBP: 00007f5732610ca1 R08: 0000000000000000 R09: 0000000000000000
[  189.625673][T11648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  189.625682][T11648] R13: 0000000000000000 R14: 00007f57327b5fa0 R15: 00007fff56c98f38
[  189.625709][T11648]  </TASK>
[  189.946359][T11655] netlink: 844 bytes leftover after parsing attributes in process `syz.0.1921'.
[  189.965669][T11659] netlink: 'syz.2.1919': attribute type 11 has an invalid length.
[  189.970418][T11659] netlink: 'syz.2.1919': attribute type 4 has an invalid length.
[  189.974734][T11659] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1919'.
[  190.155590][T11668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1923'.
[  190.634562][ T5298] hid-generic 0005:0000:0005.0001: item fetching failed at offset 0/3
[  190.638742][ T5298] hid-generic 0005:0000:0005.0001: probe with driver hid-generic failed with error -22
[  190.757257][T11683] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  190.872596][ T5220] Bluetooth: hci1: command 0x0401 tx timeout
[  190.941400][T11692] sit1: entered promiscuous mode
[  190.945787][T11693] tipc: Resetting bearer <eth:syzkaller0>
[  190.976990][T11696] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  190.981260][T11696] CPU: 1 UID: 0 PID: 11696 Comm: syz.2.1933 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  190.981285][T11696] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  190.981297][T11696] Call Trace:
[  190.981303][T11696]  <TASK>
[  190.981311][T11696]  dump_stack_lvl+0x189/0x250
[  190.981336][T11696]  ? __pfx_dump_stack_lvl+0x10/0x10
[  190.981352][T11696]  ? __pfx__printk+0x10/0x10
[  190.981372][T11696]  ? kernfs_path_from_node+0x2c/0x260
[  190.981387][T11696]  ? kernfs_path_from_node+0x2c/0x260
[  190.981402][T11696]  ? kernfs_path_from_node+0x2c/0x260
[  190.981419][T11696]  ? kernfs_path_from_node+0x22c/0x260
[  190.981433][T11696]  ? kernfs_path_from_node+0x2c/0x260
[  190.981473][T11696]  sysfs_warn_dup+0x8e/0xa0
[  190.981495][T11696]  sysfs_do_create_link_sd+0xc0/0x110
[  190.981509][T11696]  device_add_class_symlinks+0x1cf/0x240
[  190.981536][T11696]  device_add+0x475/0xb50
[  190.981562][T11696]  wiphy_register+0x199a/0x26b0
[  190.981583][T11696]  ? __pfx_wiphy_register+0x10/0x10
[  190.981593][T11696]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  190.981607][T11696]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  190.981621][T11696]  ieee80211_register_hw+0x33e1/0x4120
[  190.981642][T11696]  ? ieee80211_register_hw+0x13f1/0x4120
[  190.981658][T11696]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  190.981672][T11696]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  190.981689][T11696]  ? __hrtimer_setup+0x187/0x210
[  190.981699][T11696]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  190.981726][T11696]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  190.981774][T11696]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  190.981794][T11696]  ? trace_kmalloc+0x1f/0xd0
[  190.981805][T11696]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  190.981816][T11696]  ? kstrndup+0xbf/0x160
[  190.981830][T11696]  hwsim_new_radio_nl+0xea4/0x1b10
[  190.981843][T11696]  ? __pfx___nla_validate_parse+0x10/0x10
[  190.981860][T11696]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  190.981879][T11696]  ? __nla_parse+0x40/0x60
[  190.981891][T11696]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  190.981905][T11696]  genl_family_rcv_msg_doit+0x215/0x300
[  190.981922][T11696]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  190.981947][T11696]  ? bpf_lsm_capable+0x9/0x20
[  190.981967][T11696]  ? security_capable+0x7e/0x2e0
[  190.981987][T11696]  genl_rcv_msg+0x60e/0x790
[  190.982038][T11696]  ? __pfx_genl_rcv_msg+0x10/0x10
[  190.982050][T11696]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  190.982070][T11696]  netlink_rcv_skb+0x208/0x470
[  190.982083][T11696]  ? __pfx_genl_rcv_msg+0x10/0x10
[  190.982093][T11696]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  190.982115][T11696]  ? down_read+0x1ad/0x2e0
[  190.982136][T11696]  genl_rcv+0x28/0x40
[  190.982150][T11696]  netlink_unicast+0x75c/0x8e0
[  190.982181][T11696]  netlink_sendmsg+0x805/0xb30
[  190.982212][T11696]  ? __pfx_netlink_sendmsg+0x10/0x10
[  190.982228][T11696]  ? aa_sock_msg_perm+0x94/0x160
[  190.982245][T11696]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  190.982260][T11696]  ? __pfx_netlink_sendmsg+0x10/0x10
[  190.982282][T11696]  __sock_sendmsg+0x21c/0x270
[  190.982301][T11696]  ____sys_sendmsg+0x505/0x830
[  190.982330][T11696]  ? __pfx_____sys_sendmsg+0x10/0x10
[  190.982360][T11696]  ? import_iovec+0x74/0xa0
[  190.982384][T11696]  ___sys_sendmsg+0x21f/0x2a0
[  190.982409][T11696]  ? __pfx____sys_sendmsg+0x10/0x10
[  190.982459][T11696]  ? __fget_files+0x2a/0x420
[  190.982466][T11696]  ? __fget_files+0x3a0/0x420
[  190.982479][T11696]  __x64_sys_sendmsg+0x19b/0x260
[  190.982493][T11696]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  190.982523][T11696]  ? rcu_is_watching+0x15/0xb0
[  190.982545][T11696]  ? do_syscall_64+0xbe/0x3b0
[  190.982566][T11696]  do_syscall_64+0xfa/0x3b0
[  190.982582][T11696]  ? lockdep_hardirqs_on+0x9c/0x150
[  190.982596][T11696]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.982611][T11696]  ? exc_page_fault+0x9f/0xf0
[  190.982629][T11696]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.982643][T11696] RIP: 0033:0x7fc134f8e929
[  190.982658][T11696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  190.982674][T11696] RSP: 002b:00007fc135d4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  190.982694][T11696] RAX: ffffffffffffffda RBX: 00007fc1351b5fa0 RCX: 00007fc134f8e929
[  190.982706][T11696] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  190.982717][T11696] RBP: 00007fc135010ca1 R08: 0000000000000000 R09: 0000000000000000
[  190.982728][T11696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  190.982737][T11696] R13: 0000000000000000 R14: 00007fc1351b5fa0 R15: 00007fffc95ea518
[  190.982763][T11696]  </TASK>
[  191.564749][T11725] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  191.569226][T11725] CPU: 1 UID: 0 PID: 11725 Comm: syz.2.1944 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  191.569252][T11725] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  191.569262][T11725] Call Trace:
[  191.569270][T11725]  <TASK>
[  191.569278][T11725]  dump_stack_lvl+0x189/0x250
[  191.569306][T11725]  ? __pfx_dump_stack_lvl+0x10/0x10
[  191.569319][T11725]  ? __pfx__printk+0x10/0x10
[  191.569331][T11725]  ? kernfs_path_from_node+0x2c/0x260
[  191.569342][T11725]  ? kernfs_path_from_node+0x2c/0x260
[  191.569350][T11725]  ? kernfs_path_from_node+0x2c/0x260
[  191.569359][T11725]  ? kernfs_path_from_node+0x22c/0x260
[  191.569367][T11725]  ? kernfs_path_from_node+0x2c/0x260
[  191.569376][T11725]  sysfs_warn_dup+0x8e/0xa0
[  191.569389][T11725]  sysfs_do_create_link_sd+0xc0/0x110
[  191.569398][T11725]  device_add_class_symlinks+0x1cf/0x240
[  191.569412][T11725]  device_add+0x475/0xb50
[  191.569426][T11725]  wiphy_register+0x199a/0x26b0
[  191.569445][T11725]  ? __pfx_wiphy_register+0x10/0x10
[  191.569455][T11725]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  191.569469][T11725]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  191.569484][T11725]  ieee80211_register_hw+0x33e1/0x4120
[  191.569506][T11725]  ? ieee80211_register_hw+0x13f1/0x4120
[  191.569522][T11725]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  191.569536][T11725]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  191.569553][T11725]  ? __hrtimer_setup+0x187/0x210
[  191.569562][T11725]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  191.569577][T11725]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  191.569606][T11725]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  191.569618][T11725]  ? trace_kmalloc+0x1f/0xd0
[  191.569629][T11725]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  191.569640][T11725]  ? kstrndup+0xbf/0x160
[  191.569654][T11725]  hwsim_new_radio_nl+0xea4/0x1b10
[  191.569667][T11725]  ? __pfx___nla_validate_parse+0x10/0x10
[  191.569684][T11725]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  191.569702][T11725]  ? __nla_parse+0x40/0x60
[  191.569714][T11725]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  191.569727][T11725]  genl_family_rcv_msg_doit+0x215/0x300
[  191.569740][T11725]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  191.569755][T11725]  ? bpf_lsm_capable+0x9/0x20
[  191.569766][T11725]  ? security_capable+0x7e/0x2e0
[  191.569778][T11725]  genl_rcv_msg+0x60e/0x790
[  191.569798][T11725]  ? __pfx_genl_rcv_msg+0x10/0x10
[  191.569807][T11725]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  191.569826][T11725]  netlink_rcv_skb+0x208/0x470
[  191.569841][T11725]  ? __pfx_genl_rcv_msg+0x10/0x10
[  191.569851][T11725]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  191.569872][T11725]  ? down_read+0x1ad/0x2e0
[  191.569885][T11725]  genl_rcv+0x28/0x40
[  191.569893][T11725]  netlink_unicast+0x75c/0x8e0
[  191.569909][T11725]  netlink_sendmsg+0x805/0xb30
[  191.569926][T11725]  ? __pfx_netlink_sendmsg+0x10/0x10
[  191.569939][T11725]  ? aa_sock_msg_perm+0x94/0x160
[  191.569980][T11725]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  191.569990][T11725]  ? __pfx_netlink_sendmsg+0x10/0x10
[  191.570003][T11725]  __sock_sendmsg+0x21c/0x270
[  191.570017][T11725]  ____sys_sendmsg+0x505/0x830
[  191.570033][T11725]  ? __pfx_____sys_sendmsg+0x10/0x10
[  191.570050][T11725]  ? import_iovec+0x74/0xa0
[  191.570063][T11725]  ___sys_sendmsg+0x21f/0x2a0
[  191.570077][T11725]  ? __pfx____sys_sendmsg+0x10/0x10
[  191.570107][T11725]  ? __fget_files+0x2a/0x420
[  191.570114][T11725]  ? __fget_files+0x3a0/0x420
[  191.570127][T11725]  __x64_sys_sendmsg+0x19b/0x260
[  191.570141][T11725]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  191.570158][T11725]  ? rcu_is_watching+0x15/0xb0
[  191.570171][T11725]  ? do_syscall_64+0xbe/0x3b0
[  191.570183][T11725]  do_syscall_64+0xfa/0x3b0
[  191.570191][T11725]  ? lockdep_hardirqs_on+0x9c/0x150
[  191.570199][T11725]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.570207][T11725]  ? exc_page_fault+0x9f/0xf0
[  191.570216][T11725]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.570224][T11725] RIP: 0033:0x7fc134f8e929
[  191.570235][T11725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  191.570242][T11725] RSP: 002b:00007fc135d4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  191.570253][T11725] RAX: ffffffffffffffda RBX: 00007fc1351b5fa0 RCX: 00007fc134f8e929
[  191.570259][T11725] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  191.570266][T11725] RBP: 00007fc135010ca1 R08: 0000000000000000 R09: 0000000000000000
[  191.570272][T11725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  191.570278][T11725] R13: 0000000000000000 R14: 00007fc1351b5fa0 R15: 00007fffc95ea518
[  191.570292][T11725]  </TASK>
[  192.137116][T11754] __nla_validate_parse: 8 callbacks suppressed
[  192.137137][T11754] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1956'.
[  192.138713][T11752] bridge3: entered allmulticast mode
[  192.221301][T11758] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1958'.
[  192.615355][T11786] netlink: 'syz.0.1967': attribute type 1 has an invalid length.
[  193.177395][T11799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1972'.
[  193.195159][T11799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1972'.
[  193.326280][T11807] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1976'.
[  193.342544][T11807] netlink: 'syz.3.1976': attribute type 29 has an invalid length.
[  193.441505][T11813] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1978'.
[  193.453656][T11815] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  193.457980][T11815] CPU: 1 UID: 0 PID: 11815 Comm: syz.3.1979 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  193.458005][T11815] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  193.458015][T11815] Call Trace:
[  193.458024][T11815]  <TASK>
[  193.458033][T11815]  dump_stack_lvl+0x189/0x250
[  193.458067][T11815]  ? __pfx_dump_stack_lvl+0x10/0x10
[  193.458085][T11815]  ? __pfx__printk+0x10/0x10
[  193.458130][T11815]  ? kernfs_path_from_node+0x2c/0x260
[  193.458150][T11815]  ? kernfs_path_from_node+0x2c/0x260
[  193.458164][T11815]  ? kernfs_path_from_node+0x2c/0x260
[  193.458181][T11815]  ? kernfs_path_from_node+0x22c/0x260
[  193.458194][T11815]  ? kernfs_path_from_node+0x2c/0x260
[  193.458211][T11815]  sysfs_warn_dup+0x8e/0xa0
[  193.458235][T11815]  sysfs_do_create_link_sd+0xc0/0x110
[  193.458252][T11815]  device_add_class_symlinks+0x1cf/0x240
[  193.458276][T11815]  device_add+0x475/0xb50
[  193.458291][T11815]  wiphy_register+0x199a/0x26b0
[  193.458313][T11815]  ? __pfx_wiphy_register+0x10/0x10
[  193.458323][T11815]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  193.458339][T11815]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  193.458354][T11815]  ieee80211_register_hw+0x33e1/0x4120
[  193.458376][T11815]  ? ieee80211_register_hw+0x13f1/0x4120
[  193.458391][T11815]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  193.458405][T11815]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  193.458423][T11815]  ? __hrtimer_setup+0x187/0x210
[  193.458433][T11815]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  193.458454][T11815]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  193.458510][T11815]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  193.458533][T11815]  ? trace_kmalloc+0x1f/0xd0
[  193.458552][T11815]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  193.458565][T11815]  ? kstrndup+0xbf/0x160
[  193.458579][T11815]  hwsim_new_radio_nl+0xea4/0x1b10
[  193.458593][T11815]  ? __pfx___nla_validate_parse+0x10/0x10
[  193.458611][T11815]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  193.458629][T11815]  ? __nla_parse+0x40/0x60
[  193.458640][T11815]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  193.458656][T11815]  genl_family_rcv_msg_doit+0x215/0x300
[  193.458668][T11815]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  193.458683][T11815]  ? bpf_lsm_capable+0x9/0x20
[  193.458695][T11815]  ? security_capable+0x7e/0x2e0
[  193.458707][T11815]  genl_rcv_msg+0x60e/0x790
[  193.458719][T11815]  ? __pfx_genl_rcv_msg+0x10/0x10
[  193.458727][T11815]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  193.458752][T11815]  netlink_rcv_skb+0x208/0x470
[  193.458807][T11815]  ? __pfx_genl_rcv_msg+0x10/0x10
[  193.458823][T11815]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  193.458856][T11815]  ? down_read+0x1ad/0x2e0
[  193.458869][T11815]  genl_rcv+0x28/0x40
[  193.458878][T11815]  netlink_unicast+0x75c/0x8e0
[  193.458893][T11815]  netlink_sendmsg+0x805/0xb30
[  193.458909][T11815]  ? __pfx_netlink_sendmsg+0x10/0x10
[  193.458923][T11815]  ? aa_sock_msg_perm+0x94/0x160
[  193.458935][T11815]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  193.458945][T11815]  ? __pfx_netlink_sendmsg+0x10/0x10
[  193.458956][T11815]  __sock_sendmsg+0x21c/0x270
[  193.458969][T11815]  ____sys_sendmsg+0x505/0x830
[  193.458992][T11815]  ? __pfx_____sys_sendmsg+0x10/0x10
[  193.459019][T11815]  ? import_iovec+0x74/0xa0
[  193.459042][T11815]  ___sys_sendmsg+0x21f/0x2a0
[  193.459056][T11815]  ? __pfx____sys_sendmsg+0x10/0x10
[  193.459087][T11815]  ? __fget_files+0x2a/0x420
[  193.459096][T11815]  ? __fget_files+0x3a0/0x420
[  193.459109][T11815]  __x64_sys_sendmsg+0x19b/0x260
[  193.459123][T11815]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  193.459141][T11815]  ? rcu_is_watching+0x15/0xb0
[  193.459154][T11815]  ? do_syscall_64+0xbe/0x3b0
[  193.459166][T11815]  do_syscall_64+0xfa/0x3b0
[  193.459174][T11815]  ? lockdep_hardirqs_on+0x9c/0x150
[  193.459183][T11815]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.459193][T11815]  ? exc_page_fault+0x9f/0xf0
[  193.459202][T11815]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.459212][T11815] RIP: 0033:0x7f4e74d8e929
[  193.459222][T11815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  193.459231][T11815] RSP: 002b:00007f4e75c4a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  193.459242][T11815] RAX: ffffffffffffffda RBX: 00007f4e74fb5fa0 RCX: 00007f4e74d8e929
[  193.459248][T11815] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  193.459254][T11815] RBP: 00007f4e74e10ca1 R08: 0000000000000000 R09: 0000000000000000
[  193.459259][T11815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  193.459265][T11815] R13: 0000000000000000 R14: 00007f4e74fb5fa0 R15: 00007fffb689c2a8
[  193.459280][T11815]  </TASK>
[  193.804473][T11833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1981'.
[  193.808600][T11833] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  193.812274][T11833] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7)
[  193.935318][T11849] can: request_module (can-proto-4) failed.
[  194.006930][T11854] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  194.011790][T11854] CPU: 1 UID: 0 PID: 11854 Comm: syz.0.1994 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  194.011814][T11854] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  194.011824][T11854] Call Trace:
[  194.011832][T11854]  <TASK>
[  194.011841][T11854]  dump_stack_lvl+0x189/0x250
[  194.011870][T11854]  ? __pfx_dump_stack_lvl+0x10/0x10
[  194.011891][T11854]  ? __pfx__printk+0x10/0x10
[  194.011914][T11854]  ? kernfs_path_from_node+0x2c/0x260
[  194.011933][T11854]  ? kernfs_path_from_node+0x2c/0x260
[  194.011946][T11854]  ? kernfs_path_from_node+0x2c/0x260
[  194.011962][T11854]  ? kernfs_path_from_node+0x22c/0x260
[  194.011975][T11854]  ? kernfs_path_from_node+0x2c/0x260
[  194.011993][T11854]  sysfs_warn_dup+0x8e/0xa0
[  194.012017][T11854]  sysfs_do_create_link_sd+0xc0/0x110
[  194.012035][T11854]  device_add_class_symlinks+0x1cf/0x240
[  194.012062][T11854]  device_add+0x475/0xb50
[  194.012088][T11854]  wiphy_register+0x199a/0x26b0
[  194.012124][T11854]  ? __pfx_wiphy_register+0x10/0x10
[  194.012142][T11854]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  194.012170][T11854]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  194.012195][T11854]  ieee80211_register_hw+0x33e1/0x4120
[  194.012233][T11854]  ? ieee80211_register_hw+0x13f1/0x4120
[  194.012263][T11854]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  194.012289][T11854]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  194.012321][T11854]  ? __hrtimer_setup+0x187/0x210
[  194.012338][T11854]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  194.012365][T11854]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  194.012414][T11854]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  194.012436][T11854]  ? trace_kmalloc+0x1f/0xd0
[  194.012455][T11854]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  194.012477][T11854]  ? kstrndup+0xbf/0x160
[  194.012502][T11854]  hwsim_new_radio_nl+0xea4/0x1b10
[  194.012526][T11854]  ? __pfx___nla_validate_parse+0x10/0x10
[  194.012558][T11854]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  194.012597][T11854]  ? __nla_parse+0x40/0x60
[  194.012620][T11854]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  194.012647][T11854]  genl_family_rcv_msg_doit+0x215/0x300
[  194.012670][T11854]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  194.012697][T11854]  ? bpf_lsm_capable+0x9/0x20
[  194.012749][T11854]  ? security_capable+0x7e/0x2e0
[  194.012775][T11854]  genl_rcv_msg+0x60e/0x790
[  194.012797][T11854]  ? __pfx_genl_rcv_msg+0x10/0x10
[  194.012813][T11854]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  194.012847][T11854]  netlink_rcv_skb+0x208/0x470
[  194.012868][T11854]  ? __pfx_genl_rcv_msg+0x10/0x10
[  194.012884][T11854]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  194.012917][T11854]  ? down_read+0x1ad/0x2e0
[  194.012935][T11854]  genl_rcv+0x28/0x40
[  194.012949][T11854]  netlink_unicast+0x75c/0x8e0
[  194.012976][T11854]  netlink_sendmsg+0x805/0xb30
[  194.013005][T11854]  ? __pfx_netlink_sendmsg+0x10/0x10
[  194.013030][T11854]  ? aa_sock_msg_perm+0x94/0x160
[  194.013048][T11854]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  194.013065][T11854]  ? __pfx_netlink_sendmsg+0x10/0x10
[  194.013086][T11854]  __sock_sendmsg+0x21c/0x270
[  194.013107][T11854]  ____sys_sendmsg+0x505/0x830
[  194.013135][T11854]  ? __pfx_____sys_sendmsg+0x10/0x10
[  194.013167][T11854]  ? import_iovec+0x74/0xa0
[  194.013191][T11854]  ___sys_sendmsg+0x21f/0x2a0
[  194.013216][T11854]  ? __pfx____sys_sendmsg+0x10/0x10
[  194.013272][T11854]  ? __fget_files+0x2a/0x420
[  194.013286][T11854]  ? __fget_files+0x3a0/0x420
[  194.013309][T11854]  __x64_sys_sendmsg+0x19b/0x260
[  194.013335][T11854]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  194.013367][T11854]  ? rcu_is_watching+0x15/0xb0
[  194.013390][T11854]  ? do_syscall_64+0xbe/0x3b0
[  194.013412][T11854]  do_syscall_64+0xfa/0x3b0
[  194.013426][T11854]  ? lockdep_hardirqs_on+0x9c/0x150
[  194.013441][T11854]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  194.013459][T11854]  ? exc_page_fault+0x9f/0xf0
[  194.013475][T11854]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  194.013491][T11854] RIP: 0033:0x7f573258e929
[  194.013507][T11854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  194.013520][T11854] RSP: 002b:00007f5733385038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  194.013538][T11854] RAX: ffffffffffffffda RBX: 00007f57327b5fa0 RCX: 00007f573258e929
[  194.013549][T11854] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  194.013560][T11854] RBP: 00007f5732610ca1 R08: 0000000000000000 R09: 0000000000000000
[  194.013570][T11854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  194.013587][T11854] R13: 0000000000000000 R14: 00007f57327b5fa0 R15: 00007fff56c98f38
[  194.013613][T11854]  </TASK>
[  194.409336][T11874] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2001'.
[  194.420641][T11874] IPv6: Can't replace route, no match found
[  194.684975][T11890] netlink: 'syz.2.2007': attribute type 21 has an invalid length.
[  194.690266][T11890] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2007'.
[  194.693027][T11890] netlink: 'syz.2.2007': attribute type 4 has an invalid length.
[  194.695683][T11890] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2007'.
[  194.986773][T11925] netlink: 'syz.0.2021': attribute type 1 has an invalid length.
[  195.007300][T11925] 8021q: adding VLAN 0 to HW filter on device bond5
[  195.061062][T11929] wg1 speed is unknown, defaulting to 1000
[  195.144708][T11941] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.477539][T11957] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  195.567748][T11960] netlink: 'syz.2.2034': attribute type 1 has an invalid length.
[  195.711386][T11962] wg1 speed is unknown, defaulting to 1000
[  196.280223][T12000] netlink: 'syz.3.2049': attribute type 4 has an invalid length.
[  196.289041][T12000] netlink: 'syz.3.2049': attribute type 4 has an invalid length.
[  196.592296][T12028] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  197.081465][T12050] netlink: 'syz.0.2068': attribute type 21 has an invalid length.
[  197.314191][T12064] netlink: 'syz.0.2073': attribute type 32 has an invalid length.
[  197.317571][T12064] __nla_validate_parse: 14 callbacks suppressed
[  197.317585][T12064] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2073'.
[  197.468866][T12077] mac80211_hwsim hwsim36 syzkaller0: left promiscuous mode
[  197.471176][T12077] mac80211_hwsim hwsim36 syzkaller0: left allmulticast mode
[  197.474393][T12077] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  197.481346][T12077] netdevsim netdevsim3: Direct firmware load for 2Q failed with error -2
[  197.484144][T12077] netdevsim netdevsim3: Falling back to sysfs fallback for: 2Q
[  198.114954][T12086] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2079'.
[  198.280682][T12090] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2081'.
[  198.344894][T12092] bridge7: the hash_elasticity option has been deprecated and is always 16
[  198.348576][T12092] bridge7: entered allmulticast mode
[  198.405137][T12098] netlink: 'syz.3.2084': attribute type 21 has an invalid length.
[  198.408846][T12098] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2084'.
[  198.604008][T12112] netlink: 'syz.3.2090': attribute type 1 has an invalid length.
[  198.667352][T12115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2091'.
[  198.714046][T12117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2092'.
[  198.848491][T12134] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  198.940911][T12142] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2098'.
[  199.039900][T12148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2104'.
[  199.158716][T12156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2107'.
[  199.197252][T12155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2106'.
[  199.208702][T12156] x_tables: duplicate underflow at hook 1
[  199.282641][T12163] bridge_slave_0: left allmulticast mode
[  199.285220][T12163] bridge_slave_0: left promiscuous mode
[  199.287663][T12163] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.311917][T12163] bridge_slave_1: left allmulticast mode
[  199.315687][T12163] bridge_slave_1: left promiscuous mode
[  199.318032][T12163] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.345779][T12163] team0: Port device team_slave_0 removed
[  199.373393][T12163] team0: Port device team_slave_1 removed
[  199.375526][T12163] batman_adv: batadv0: Removing interface: batadv_slave_0
[  199.379942][T12163] batman_adv: batadv0: Removing interface: batadv_slave_1
[  199.385873][T12163] bond2: (slave vcan1): Releasing backup interface
[  199.393091][T12163] vcan1: left promiscuous mode
[  199.410525][T12168] team0: Mode changed to "activebackup"
[  199.452220][T12163] DL<Y: renamed from lo
[  199.770304][T12187] tipc: Resetting bearer <eth:syzkaller0>
[  200.269960][T12229] wg2: left promiscuous mode
[  200.271520][T12229] wg2: left allmulticast mode
[  200.287353][T12229] wg2: entered promiscuous mode
[  200.289554][T12229] wg2: entered allmulticast mode
[  200.740203][T12254] netlink: 'syz.3.2144': attribute type 1 has an invalid length.
[  201.900275][T12307] geneve1: left promiscuous mode
[  201.902502][T12307] bond1: left promiscuous mode
[  202.323058][T12343] Cannot find add_set index 0 as target
[  202.580932][T12373] Cannot find add_set index 0 as target
[  202.605863][T12375] netlink: 'syz.3.2189': attribute type 7 has an invalid length.
[  202.612085][T12375] netlink: 'syz.3.2189': attribute type 8 has an invalid length.
[  202.614582][T12375] netlink: 'syz.3.2189': attribute type 4 has an invalid length.
[  202.616978][T12375] __nla_validate_parse: 22 callbacks suppressed
[  202.616986][T12375] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2189'.
[  202.957564][T12412] xt_socket: unknown flags 0xfc
[  203.090106][T12412] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  203.094069][T12413] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  203.613741][T12445] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2213'.
[  203.618024][T12446] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2213'.
[  203.696893][T12450] Cannot find add_set index 0 as target
[  203.828716][T12455] wg1 speed is unknown, defaulting to 1000
[  204.374392][T12510] xt_hashlimit: size too large, truncated to 1048576
[  204.379388][T12505] pim6reg1: entered promiscuous mode
[  204.381026][T12505] pim6reg1: entered allmulticast mode
[  204.674946][T12526] Cannot find add_set index 0 as target
[  204.680555][T12529] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2233'.
[  204.718744][T12534] netlink: 'syz.3.2235': attribute type 1 has an invalid length.
[  204.721254][T12534] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.2235'.
[  204.896471][T12548] Cannot find add_set index 0 as target
[  205.127963][T12564] wg2: left promiscuous mode
[  205.130617][T12564] wg2: left allmulticast mode
[  205.156091][T12564] wg2: entered promiscuous mode
[  205.158560][T12564] wg2: entered allmulticast mode
[  205.364398][   T54] Bluetooth: hci3: link tx timeout
[  205.367077][   T54] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  205.370324][   T54] Bluetooth: hci3: link tx timeout
[  205.371949][   T54] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  205.374362][   T54] Bluetooth: hci3: link tx timeout
[  205.376083][   T54] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  205.387461][T12576] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  205.473272][T12588] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2254'.
[  205.479933][T12588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2254'.
[  205.530877][T12588] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2254'.
[  205.600451][T12590] wg2: left promiscuous mode
[  205.602558][T12590] wg2: left allmulticast mode
[  205.636973][T12590] wg2: entered promiscuous mode
[  205.640063][T12590] wg2: entered allmulticast mode
[  205.940997][T12628] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2267'.
[  206.065466][T12639] netlink: 'syz.0.2269': attribute type 1 has an invalid length.
[  206.116896][T12639] 8021q: adding VLAN 0 to HW filter on device bond6
[  206.176940][T12645] bond6: (slave veth5): Enslaving as an active interface with a down link
[  206.220425][T12639] vlan0: entered allmulticast mode
[  206.222613][T12639] bond6: entered allmulticast mode
[  206.226407][T12639] bond6: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  206.423784][T12661] wg2: entered promiscuous mode
[  206.428329][T12661] wg2: entered allmulticast mode
[  206.591999][T12677] netlink: 'syz.0.2284': attribute type 1 has an invalid length.
[  206.755853][T12688] wg2: left promiscuous mode
[  206.757827][T12688] wg2: left allmulticast mode
[  206.791446][T12688] wg2: entered promiscuous mode
[  206.793009][T12688] wg2: entered allmulticast mode
[  206.869182][T12690] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  206.913769][T12690] tipc: Resetting bearer <eth:syzkaller0>
[  206.927634][T12689] tipc: Disabling bearer <eth:syzkaller0>
[  207.058079][T12700] netlink: 320 bytes leftover after parsing attributes in process `syz.0.2293'.
[  207.097017][T12703] Cannot find add_set index 0 as target
[  207.428269][   T54] Bluetooth: hci3: command 0x0419 tx timeout
[  207.504853][T12721] syzkaller0: entered promiscuous mode
[  207.507102][T12721] syzkaller0: entered allmulticast mode
[  208.065919][T12763] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2317'.
[  208.219401][T12781] wg2: entered promiscuous mode
[  208.221305][T12781] wg2: entered allmulticast mode
[  208.296436][T12792] netlink: 'syz.2.2328': attribute type 1 has an invalid length.
[  208.303858][T12792] netlink: 'syz.2.2328': attribute type 1 has an invalid length.
[  208.328979][T12794] wg1 speed is unknown, defaulting to 1000
[  208.539533][T12803] Cannot find add_set index 0 as target
[  208.651628][T12805] bridge0: port 1(ipvlan0) entered blocking state
[  208.654044][T12805] bridge0: port 1(ipvlan0) entered disabled state
[  208.656229][T12805] ipvlan0: entered allmulticast mode
[  208.657927][T12805] bridge0: entered allmulticast mode
[  208.661820][T12805] ipvlan0: left allmulticast mode
[  208.663428][T12805] bridge0: left allmulticast mode
[  208.673560][T12807] wg2: left promiscuous mode
[  208.674994][T12807] wg2: left allmulticast mode
[  208.692225][T12807] wg2: entered promiscuous mode
[  208.693992][T12807] wg2: entered allmulticast mode
[  209.166087][T12832] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  209.355471][T12837] netlink: 'syz.3.2343': attribute type 4 has an invalid length.
[  209.622274][T12844] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2345'.
[  210.184290][T12870] netlink: 'syz.3.2351': attribute type 1 has an invalid length.
[  210.532939][T12888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2359'.
[  210.620912][T12898] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2363'.
[  210.741301][T12905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2365'.
[  210.754061][T12908] Cannot find add_set index 0 as target
[  210.928832][T12919] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2370'.
[  211.166919][T12938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2379'.
[  211.181184][T12938] macvtap1: entered promiscuous mode
[  211.183434][T12938] batadv0: entered promiscuous mode
[  211.185663][T12938] macvtap1: entered allmulticast mode
[  211.187828][T12938] batadv0: entered allmulticast mode
[  211.195627][T12938] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  211.200498][T12938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2379'.
[  211.205018][T12938] batadv0: left allmulticast mode
[  211.207112][T12938] batadv0: left promiscuous mode
[  211.284657][T12945] sock: sock_timestamping_bind_phc: sock not bind to device
[  211.401972][T12955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2387'.
[  211.461699][T12959] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  211.465705][T12959] syzkaller0: entered promiscuous mode
[  211.467851][T12959] syzkaller0: entered allmulticast mode
[  211.479997][T12961] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2390'.
[  211.494191][T12959] tipc: Resetting bearer <eth:syzkaller0>
[  211.513562][T12958] tipc: Resetting bearer <eth:syzkaller0>
[  211.537913][T12958] tipc: Disabling bearer <eth:syzkaller0>
[  212.060777][T12987] Cannot find add_set index 0 as target
[  212.401001][T13017] Cannot find add_set index 0 as target
[  212.638560][ T5860] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  212.757842][T13037] tipc: Disabling bearer <eth:team0>
[  213.398936][T13062] __nla_validate_parse: 5 callbacks suppressed
[  213.398949][T13062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2423'.
[  213.770291][T13091] veth2: entered allmulticast mode
[  213.955156][T13098] netlink: 'syz.2.2435': attribute type 10 has an invalid length.
[  213.959470][T13098] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2435'.
[  213.963390][T13098] !: entered promiscuous mode
[  213.969314][T13098] bridge0: port 1(0!) entered blocking state
[  213.972058][T13098] bridge0: port 1(0!) entered disabled state
[  213.974719][T13098] !: entered allmulticast mode
[  214.372285][T13113] Cannot find add_set index 0 as target
[  215.677889][T13143] xt_ecn: cannot match TCP bits for non-tcp packets
[  215.681594][T13143] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2449'.
[  216.501860][T13154] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2454'.
[  216.551925][  T790] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0
[  216.563554][  T790] hid-generic 0005:16C0:5505.0002: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa
[  216.667010][T13163] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2457'.
[  216.749350][T13168] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2459'.
[  216.752531][T13168] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2459'.
[  216.756067][T13168] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  216.813719][T13170] syzkaller0: entered promiscuous mode
[  216.815463][T13170] syzkaller0: entered allmulticast mode
[  216.936105][T13172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2461'.
[  217.313963][T13187] wg2: left promiscuous mode
[  217.315913][T13187] wg2: left allmulticast mode
[  217.331565][T13187] wg2: entered promiscuous mode
[  217.333598][T13187] wg2: entered allmulticast mode
[  217.708976][T13217] syz_tun: left allmulticast mode
[  218.355044][T13239] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2487'.
[  218.428625][T13244] !: left allmulticast mode
[  218.430783][T13244] bridge0: port 1(0!) entered disabled state
[  218.471916][T13244] bridge0: left promiscuous mode
[  218.475127][T13244] !: left promiscuous mode
[  218.482946][T13244] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  218.610733][T13250] IPVS: set_ctl: invalid protocol: 41 172.20.20.28:20001
[  218.947338][T13285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2504'.
[  218.951193][T13285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2504'.
[  219.330615][T13321] bond0: (slave wlan1): Releasing backup interface
[  219.406731][T13321] team0: Mode "activebacuup" not found
[  219.430191][T13324] team0: Mode "activebacuup" not found
[  219.535134][T13336] xt_hashlimit: size too large, truncated to 1048576
[  219.538063][T13336] xt_hashlimit: max too large, truncated to 1048576
[  219.565945][T13336] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  219.663179][T13340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2523'.
[  219.709400][T13342] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2524'.
[  220.674651][T13359] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2528'.
[  220.678487][T13359] bond0: invalid ARP target 0.0.0.0 specified for addition
[  220.681389][T13359] bond0: option arp_ip_target: invalid value (0)
[  220.692387][T13361] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  220.692899][T13359] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2528'.
[  220.702090][T13359] bond0: invalid ARP target 0.0.0.0 specified for addition
[  220.705007][T13359] bond0: option arp_ip_target: invalid value (0)
[  221.618717][T13390] netlink: 'syz.3.2541': attribute type 4 has an invalid length.
[  221.624674][T13390] netlink: 'syz.3.2541': attribute type 4 has an invalid length.
[  222.545369][T13409] pimreg: tun_chr_ioctl cmd 2147767506
[  222.786965][T13426] wg1 speed is unknown, defaulting to 1000
[  222.791833][T13428] netlink: 'syz.3.2556': attribute type 21 has an invalid length.
[  222.794243][T13428] IPv6: NLM_F_CREATE should be specified when creating new route
[  222.893942][T13435] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2557'.
[  225.134077][T13490] netlink: 'syz.3.2580': attribute type 10 has an invalid length.
[  225.165496][T13492] wg2: left promiscuous mode
[  225.167016][T13492] wg2: left allmulticast mode
[  225.178527][T13492] wg2: entered promiscuous mode
[  225.180528][T13492] wg2: entered allmulticast mode
[  225.347252][T13505] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2587'.
[  225.973639][T13538] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  226.457348][T13548] xt_hashlimit: overflow, try lower: 72057594037927936/255
[  226.623633][T13551] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2602'.
[  227.208014][T13561] wg2: left promiscuous mode
[  227.211585][T13561] wg2: left allmulticast mode
[  227.226553][T13561] wg2: entered promiscuous mode
[  227.231302][T13561] wg2: entered allmulticast mode
[  227.390669][T13563] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2607'.
[  227.493115][T13575] wg2: left promiscuous mode
[  227.495029][T13575] wg2: left allmulticast mode
[  227.522930][T13575] wg2: entered promiscuous mode
[  227.524857][T13575] wg2: entered allmulticast mode
[  227.736713][T13589] netlink: 'syz.2.2618': attribute type 1 has an invalid length.
[  227.741827][T13589] netlink: 'syz.2.2618': attribute type 1 has an invalid length.
[  227.744883][T13589] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2618'.
[  227.849134][T13597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2621'.
[  228.289408][T13629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2632'.
[  228.496581][T13640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2637'.
[  228.518958][T13640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2637'.
[  228.660689][T13647] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  228.771850][T13649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2641'.
[  228.794882][   T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  228.816708][   T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  228.823868][   T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  228.832208][   T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  228.840933][   T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  228.895254][T13650] wg1 speed is unknown, defaulting to 1000
[  228.950107][T13659] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2645'.
[  229.075551][T13666] vlan2: entered promiscuous mode
[  229.078256][T13666] bridge0: entered promiscuous mode
[  229.080046][T13666] vlan2: entered allmulticast mode
[  229.081642][T13666] bridge0: entered allmulticast mode
[  229.106575][T13650] chnl_net:caif_netlink_parms(): no params data found
[  229.229346][T13650] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.231812][T13650] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.234330][T13650] bridge_slave_0: entered allmulticast mode
[  229.237247][T13650] bridge_slave_0: entered promiscuous mode
[  229.246237][T13650] bridge0: port 2(bridge_slave_1) entered blocking state
[  229.249961][T13650] bridge0: port 2(bridge_slave_1) entered disabled state
[  229.252685][T13650] bridge_slave_1: entered allmulticast mode
[  229.255650][T13650] bridge_slave_1: entered promiscuous mode
[  229.295770][T13650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  229.301696][T13650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  229.336572][T13650] team0: Port device team_slave_0 added
[  229.340635][T13650] team0: Port device team_slave_1 added
[  229.374710][T13650] batman_adv: batadv0: Adding interface: batadv_slave_0
[  229.377625][T13650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  229.382086][T13690] netlink: 'syz.3.2655': attribute type 21 has an invalid length.
[  229.387844][T13650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  229.399573][T13650] batman_adv: batadv0: Adding interface: batadv_slave_1
[  229.403124][T13650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  229.417188][T13650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  229.483091][T13650] hsr_slave_0: entered promiscuous mode
[  229.486553][T13650] hsr_slave_1: entered promiscuous mode
[  229.490170][T13650] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  229.493187][T13650] Cannot create hsr debugfs directory
[  229.673855][T13650] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  229.682440][T13650] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  229.690152][T13650] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  229.696915][T13650] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  229.732996][T13650] bridge0: port 2(bridge_slave_1) entered blocking state
[  229.735956][T13650] bridge0: port 2(bridge_slave_1) entered forwarding state
[  229.739054][T13650] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.741886][T13650] bridge0: port 1(bridge_slave_0) entered forwarding state
[  229.797332][T13650] 8021q: adding VLAN 0 to HW filter on device bond0
[  229.809963][   T64] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.813126][   T64] bridge0: port 2(bridge_slave_1) entered disabled state
[  229.828743][T13650] 8021q: adding VLAN 0 to HW filter on device team0
[  229.839494][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.841872][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  229.850285][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  229.852648][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  230.021882][T13650] 8021q: adding VLAN 0 to HW filter on device batadv0
[  230.226778][T13720] wg2: left promiscuous mode
[  230.229449][T13720] wg2: left allmulticast mode
[  230.254701][T13720] wg2: entered promiscuous mode
[  230.256882][T13720] wg2: entered allmulticast mode
[  230.279241][T13650] veth0_vlan: entered promiscuous mode
[  230.293991][T13650] veth1_vlan: entered promiscuous mode
[  230.339037][T13650] veth0_macvtap: entered promiscuous mode
[  230.345432][T13650] veth1_macvtap: entered promiscuous mode
[  230.373229][T13650] batman_adv: batadv0: Interface activated: batadv_slave_0
[  230.385379][T13650] batman_adv: batadv0: Interface activated: batadv_slave_1
[  230.391233][T13650] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  230.394585][T13650] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  230.397897][T13650] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  230.405011][T13650] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  230.498393][T12487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  230.501927][T12487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  230.555208][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  230.559540][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  230.845165][T13751] xt_hashlimit: overflow, try lower: 6/0
[  230.868721][   T54] Bluetooth: hci4: command tx timeout
[  230.922495][T13757] netlink: 'syz.4.2676': attribute type 10 has an invalid length.
[  230.927107][T13759] __nla_validate_parse: 4 callbacks suppressed
[  230.927155][T13759] netlink: 212280 bytes leftover after parsing attributes in process `syz.2.2677'.
[  230.935236][T13757] 8021q: adding VLAN 0 to HW filter on device bond0
[  230.945658][T13757] team0: Port device bond0 added
[  231.072573][T13769] Cannot find add_set index 0 as target
[  231.139084][T13774] netlink: 'syz.2.2683': attribute type 1 has an invalid length.
[  231.142505][T13774] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2683'.
[  231.400270][T13791] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  231.405723][T13791] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  231.411411][T13791] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  231.416619][T13791] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  231.423281][T13791] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  231.429041][T13791] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  231.434149][T13791] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  231.439439][T13791] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  231.444507][T13791] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  231.449687][T13791] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  231.454727][T13791] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  231.463125][T13791] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  231.468056][T13791] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  231.473465][T13791] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  231.478482][T13791] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  231.483643][T13791] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  231.489538][T13791] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  231.494676][T13791] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  231.499988][T13791] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  231.505649][T13791] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  231.518775][T13791] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  231.523884][T13791] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  231.529665][T13791] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  231.534898][T13791] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  231.540347][T13791] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  231.545438][T13791] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  231.550684][T13791] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  231.555780][T13791] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  231.560975][T13791] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  231.566122][T13791] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  231.571359][T13791] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  231.576414][T13791] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  231.581650][T13791] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  231.794571][T13817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2693'.
[  231.853334][T13819] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2696'.
[  231.915064][T13821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2697'.
[  232.678858][T13858] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2710'.
[  232.959207][ T5840] Bluetooth: hci2: command 0x0405 tx timeout
[  232.962565][ T5838] Bluetooth: hci4: command 0x041b tx timeout
[  232.978546][T13870] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  233.173982][T13885] netlink: 'syz.2.2716': attribute type 1 has an invalid length.
[  233.445093][T13898] netlink: 'syz.2.2720': attribute type 1 has an invalid length.
[  233.622165][T13909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2723'.
[  233.802273][T13931] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2730'.
[  233.870814][T13927] wg1 speed is unknown, defaulting to 1000
[  234.174918][T13954] netlink: 'syz.2.2737': attribute type 22 has an invalid length.
[  234.178015][T13954] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2737'.
[  234.464073][T13972] netlink: 'syz.2.2744': attribute type 1 has an invalid length.
[  234.534969][T13977] xt_addrtype: ipv6 does not support BROADCAST matching
[  234.912595][T13995] x_tables: duplicate underflow at hook 1
[  235.028601][ T5838] Bluetooth: hci4: command 0x041b tx timeout
[  235.144818][T14001] 8021q: VLANs not supported on bond0
[  235.615480][T14025] netlink: 'syz.4.2764': attribute type 2 has an invalid length.
[  235.830778][T14033] netlink: 212892 bytes leftover after parsing attributes in process `syz.2.2766'.
[  235.957968][T14037] x_tables: ip6_tables: cgroup match: used from hooks FORWARD, but only valid from INPUT/OUTPUT/POSTROUTING
[  236.209184][T14048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2773'.
[  236.217715][T14048] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2773'.
[  236.372713][T14057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2776'.
[  236.392509][T14057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2776'.
[  236.552513][T14064] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  236.668038][T14083] netlink: 'syz.3.2784': attribute type 1 has an invalid length.
[  236.674492][T14083] netlink: 'syz.3.2784': attribute type 3 has an invalid length.
[  236.677265][T14083] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2784'.
[  236.683643][T14083] NCSI netlink: No device for ifindex 246
[  236.702319][T14085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2785'.
[  236.748323][T14092] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2787'.
[  236.754354][T14090] xt_hashlimit: size too large, truncated to 1048576
[  236.758448][T14092] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2787'.
[  237.108498][ T5220] Bluetooth: hci4: command 0x041b tx timeout
[  237.125545][T14130] xt_TCPMSS: Only works on TCP SYN packets
[  237.212414][T14133] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2801'.
[  237.215557][T14133] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2801'.
[  237.955315][T14196] 8021q: adding VLAN 0 to HW filter on device bond3
[  238.150370][T14206] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  238.157272][T14207] syz.3.2825: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  238.166108][T14207] CPU: 0 UID: 0 PID: 14207 Comm: syz.3.2825 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  238.166133][T14207] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  238.166142][T14207] Call Trace:
[  238.166148][T14207]  <TASK>
[  238.166156][T14207]  dump_stack_lvl+0x189/0x250
[  238.166182][T14207]  ? __pfx_dump_stack_lvl+0x10/0x10
[  238.166198][T14207]  ? __pfx__printk+0x10/0x10
[  238.166217][T14207]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  238.166235][T14207]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  238.166254][T14207]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  238.166273][T14207]  warn_alloc+0x214/0x310
[  238.166287][T14207]  ? stack_depot_save_flags+0x40/0x900
[  238.166304][T14207]  ? __pfx_warn_alloc+0x10/0x10
[  238.166318][T14207]  ? kasan_save_track+0x4f/0x80
[  238.166337][T14207]  ? xskq_create+0x56/0x170
[  238.166349][T14207]  ? xsk_init_queue+0xb0/0x110
[  238.166359][T14207]  ? xsk_setsockopt+0x43f/0x710
[  238.166378][T14207]  ? do_sock_setsockopt+0x17c/0x1b0
[  238.166397][T14207]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  238.166445][T14207]  ? do_syscall_64+0xfa/0x3b0
[  238.166459][T14207]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.166479][T14207]  __vmalloc_node_range_noprof+0x125/0x12f0
[  238.166524][T14207]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  238.166548][T14207]  ? __kasan_kmalloc+0x93/0xb0
[  238.166569][T14207]  vmalloc_user_noprof+0xad/0xf0
[  238.166588][T14207]  ? xskq_create+0xbf/0x170
[  238.166601][T14207]  xskq_create+0xbf/0x170
[  238.166616][T14207]  xsk_init_queue+0xb0/0x110
[  238.166631][T14207]  xsk_setsockopt+0x43f/0x710
[  238.166653][T14207]  ? __pfx_xsk_setsockopt+0x10/0x10
[  238.166672][T14207]  ? __fget_files+0x2a/0x420
[  238.166683][T14207]  ? aa_sock_opt_perm+0x74/0x110
[  238.166699][T14207]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  238.166712][T14207]  ? __pfx_xsk_setsockopt+0x10/0x10
[  238.166732][T14207]  do_sock_setsockopt+0x17c/0x1b0
[  238.166752][T14207]  __x64_sys_setsockopt+0x13f/0x1b0
[  238.166772][T14207]  do_syscall_64+0xfa/0x3b0
[  238.166786][T14207]  ? lockdep_hardirqs_on+0x9c/0x150
[  238.166800][T14207]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.166812][T14207]  ? exc_page_fault+0x9f/0xf0
[  238.166825][T14207]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.166838][T14207] RIP: 0033:0x7f4e74d8e929
[  238.166852][T14207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  238.166884][T14207] RSP: 002b:00007f4e75c08038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  238.166899][T14207] RAX: ffffffffffffffda RBX: 00007f4e74fb6160 RCX: 00007f4e74d8e929
[  238.166908][T14207] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  238.166916][T14207] RBP: 00007f4e74e10ca1 R08: 0000000000000004 R09: 0000000000000000
[  238.166924][T14207] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  238.166932][T14207] R13: 0000000000000001 R14: 00007f4e74fb6160 R15: 00007fffb689c2a8
[  238.166954][T14207]  </TASK>
[  238.167052][T14207] Mem-Info:
[  238.285114][T14207] active_anon:12885 inactive_anon:0 isolated_anon:0
[  238.285114][T14207]  active_file:1383 inactive_file:38282 isolated_file:0
[  238.285114][T14207]  unevictable:1768 dirty:308 writeback:0
[  238.285114][T14207]  slab_reclaimable:10433 slab_unreclaimable:84279
[  238.285114][T14207]  mapped:23406 shmem:2419 pagetables:1227
[  238.285114][T14207]  sec_pagetables:0 bounce:0
[  238.285114][T14207]  kernel_misc_reclaimable:0
[  238.285114][T14207]  free:241641 free_pcp:22851 free_cma:0
[  238.302341][T14207] Node 0 active_anon:13084kB inactive_anon:0kB active_file:3320kB inactive_file:22888kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:75960kB dirty:464kB writeback:0kB shmem:5032kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5432kB pagetables:2896kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  238.341680][T14207] Node 1 active_anon:38320kB inactive_anon:0kB active_file:2212kB inactive_file:130240kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:17664kB dirty:768kB writeback:0kB shmem:4644kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7444kB pagetables:2080kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  238.354092][T14207] Node 0 DMA free:15308kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB
[  238.365198][T14207] lowmem_reserve[]: 0 812 812 812 812
[  238.367345][T14207] Node 0 DMA32 free:298820kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13084kB inactive_anon:0kB active_file:3320kB inactive_file:22888kB unevictable:3536kB writepending:464kB present:1556484kB managed:831988kB mlocked:0kB bounce:0kB free_pcp:35340kB local_pcp:18748kB free_cma:0kB
[  238.379599][T14207] lowmem_reserve[]: 0 0 0 0 0
[  238.381500][T14207] Node 1 DMA32 free:441168kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:16864kB local_pcp:8912kB free_cma:0kB
[  238.392922][T14207] lowmem_reserve[]: 0 0 854 854 854
[  238.395005][T14207] Node 1 Normal free:211268kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38316kB inactive_anon:0kB active_file:2212kB inactive_file:130240kB unevictable:3536kB writepending:768kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:39472kB local_pcp:19416kB free_cma:0kB
[  238.409053][T14207] lowmem_reserve[]: 0 0 0 0 0
[  238.410975][T14207] Node 0 DMA: 7*4kB (UM) 6*8kB (UM) 6*16kB (UM) 7*32kB (UM) 7*64kB (UM) 7*128kB (UM) 7*256kB (UM) 7*512kB (UM) 8*1024kB (UM) 0*2048kB 0*4096kB = 15308kB
[  238.416897][T14207] Node 0 DMA32: 555*4kB (UME) 123*8kB (UME) 74*16kB (UM) 71*32kB (UM) 62*64kB (UME) 136*128kB (UME) 194*256kB (UME) 152*512kB (UM) 140*1024kB (UME) 0*2048kB 0*4096kB = 298884kB
[  238.443306][T14207] Node 1 DMA32: 52*4kB (UME) 34*8kB (U) 29*16kB (UME) 23*32kB (U) 23*64kB (U) 24*128kB (UM) 23*256kB (UE) 22*512kB (UE) 22*1024kB (UME) 3*2048kB (UME) 95*4096kB (UM) = 441168kB
[  238.457552][T14207] Node 1 Normal: 1303*4kB (UM) 595*8kB (UME) 495*16kB (UM) 39*32kB (UME) 294*64kB (UME) 144*128kB (UM) 115*256kB (UME) 75*512kB (UME) 69*1024kB (UME) 6*2048kB (UME) 1*4096kB (U) = 211268kB
[  238.466727][T14207] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  238.476918][T14207] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  238.497358][T14207] 42084 total pagecache pages
[  238.507543][T14207] 0 pages in swap cache
[  238.511444][T14207] Free swap  = 124996kB
[  238.513167][T14207] Total swap = 124996kB
[  238.514820][T14207] 786301 pages RAM
[  238.538265][T14207] 0 pages HighMem/MovableOnly
[  238.540165][T14207] 241056 pages reserved
[  238.541774][T14207] 0 pages cma reserved
[  238.603723][T14229] wg2: left promiscuous mode
[  238.605671][T14229] wg2: left allmulticast mode
[  238.714030][T14236] wg2: entered promiscuous mode
[  238.718595][T14236] wg2: entered allmulticast mode
[  239.188611][ T5220] Bluetooth: hci4: command 0x041b tx timeout
[  239.199781][T14260] wg2: left promiscuous mode
[  239.201797][T14260] wg2: left allmulticast mode
[  239.237391][T14260] wg2: entered promiscuous mode
[  239.239865][T14260] wg2: entered allmulticast mode
[  239.572187][T14274] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.575149][T14274] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.685304][T14274] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  239.696331][T14274] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  239.781182][T14274] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  239.784730][T14274] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  239.789632][T14274] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  239.793206][T14274] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  239.832127][T14284] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  239.834943][T14283] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  239.930760][T14295] x_tables: ip_tables: rpfilter.0 match: invalid size 8 (kernel) != (user) 568
[  239.969714][T14300] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  239.972033][T14300] IPv6: NLM_F_CREATE should be set when creating new route
[  239.974393][T14300] IPv6: NLM_F_CREATE should be set when creating new route
[  239.976560][T14300] IPv6: NLM_F_CREATE should be set when creating new route
[  240.041831][T14308] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  240.046082][T14308] CPU: 1 UID: 0 PID: 14308 Comm: syz.4.2860 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  240.046108][T14308] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  240.046119][T14308] Call Trace:
[  240.046127][T14308]  <TASK>
[  240.046135][T14308]  dump_stack_lvl+0x189/0x250
[  240.046166][T14308]  ? __pfx_dump_stack_lvl+0x10/0x10
[  240.046186][T14308]  ? __pfx__printk+0x10/0x10
[  240.046215][T14308]  ? kernfs_path_from_node+0x2c/0x260
[  240.046264][T14308]  ? kernfs_path_from_node+0x2c/0x260
[  240.046279][T14308]  ? kernfs_path_from_node+0x2c/0x260
[  240.046296][T14308]  ? kernfs_path_from_node+0x22c/0x260
[  240.046309][T14308]  ? kernfs_path_from_node+0x2c/0x260
[  240.046327][T14308]  sysfs_warn_dup+0x8e/0xa0
[  240.046350][T14308]  sysfs_do_create_link_sd+0xc0/0x110
[  240.046367][T14308]  device_add_class_symlinks+0x1cf/0x240
[  240.046394][T14308]  device_add+0x475/0xb50
[  240.046419][T14308]  wiphy_register+0x199a/0x26b0
[  240.046454][T14308]  ? __pfx_wiphy_register+0x10/0x10
[  240.046470][T14308]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  240.046497][T14308]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  240.046521][T14308]  ieee80211_register_hw+0x33e1/0x4120
[  240.046545][T14308]  ? ieee80211_register_hw+0x13f1/0x4120
[  240.046562][T14308]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  240.046576][T14308]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  240.046596][T14308]  ? __hrtimer_setup+0x187/0x210
[  240.046612][T14308]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  240.046640][T14308]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  240.046687][T14308]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  240.046707][T14308]  ? trace_kmalloc+0x1f/0xd0
[  240.046727][T14308]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  240.046749][T14308]  ? kstrndup+0xbf/0x160
[  240.046805][T14308]  hwsim_new_radio_nl+0xea4/0x1b10
[  240.046832][T14308]  ? __pfx___nla_validate_parse+0x10/0x10
[  240.046865][T14308]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  240.046897][T14308]  ? __nla_parse+0x40/0x60
[  240.046917][T14308]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  240.046942][T14308]  genl_family_rcv_msg_doit+0x215/0x300
[  240.046965][T14308]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  240.046994][T14308]  ? bpf_lsm_capable+0x9/0x20
[  240.047015][T14308]  ? security_capable+0x7e/0x2e0
[  240.047036][T14308]  genl_rcv_msg+0x60e/0x790
[  240.047058][T14308]  ? __pfx_genl_rcv_msg+0x10/0x10
[  240.047073][T14308]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  240.047126][T14308]  netlink_rcv_skb+0x208/0x470
[  240.047146][T14308]  ? __pfx_genl_rcv_msg+0x10/0x10
[  240.047156][T14308]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  240.047177][T14308]  ? down_read+0x1ad/0x2e0
[  240.047189][T14308]  genl_rcv+0x28/0x40
[  240.047202][T14308]  netlink_unicast+0x75c/0x8e0
[  240.047219][T14308]  netlink_sendmsg+0x805/0xb30
[  240.047257][T14308]  ? __pfx_netlink_sendmsg+0x10/0x10
[  240.047272][T14308]  ? aa_sock_msg_perm+0x94/0x160
[  240.047284][T14308]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  240.047296][T14308]  ? __pfx_netlink_sendmsg+0x10/0x10
[  240.047309][T14308]  __sock_sendmsg+0x21c/0x270
[  240.047321][T14308]  ____sys_sendmsg+0x505/0x830
[  240.047338][T14308]  ? __pfx_____sys_sendmsg+0x10/0x10
[  240.047355][T14308]  ? import_iovec+0x74/0xa0
[  240.047369][T14308]  ___sys_sendmsg+0x21f/0x2a0
[  240.047382][T14308]  ? __pfx____sys_sendmsg+0x10/0x10
[  240.047413][T14308]  ? __fget_files+0x2a/0x420
[  240.047421][T14308]  ? __fget_files+0x3a0/0x420
[  240.047434][T14308]  __x64_sys_sendmsg+0x19b/0x260
[  240.047456][T14308]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  240.047486][T14308]  ? rcu_is_watching+0x15/0xb0
[  240.047509][T14308]  ? do_syscall_64+0xbe/0x3b0
[  240.047533][T14308]  do_syscall_64+0xfa/0x3b0
[  240.047549][T14308]  ? lockdep_hardirqs_on+0x9c/0x150
[  240.047566][T14308]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.047583][T14308]  ? exc_page_fault+0x9f/0xf0
[  240.047599][T14308]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.047615][T14308] RIP: 0033:0x7f5460d8e929
[  240.047632][T14308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  240.047646][T14308] RSP: 002b:00007f5461cb5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  240.047664][T14308] RAX: ffffffffffffffda RBX: 00007f5460fb5fa0 RCX: 00007f5460d8e929
[  240.047675][T14308] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  240.047684][T14308] RBP: 00007f5460e10ca1 R08: 0000000000000000 R09: 0000000000000000
[  240.047695][T14308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  240.047705][T14308] R13: 0000000000000000 R14: 00007f5460fb5fa0 R15: 00007ffe1c4b1928
[  240.047734][T14308]  </TASK>
[  240.272275][T14313] wg2: entered promiscuous mode
[  240.274499][T14313] wg2: entered allmulticast mode
[  240.418654][T14324] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  240.423180][T14324] CPU: 1 UID: 0 PID: 14324 Comm: syz.2.2868 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  240.423227][T14324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  240.423239][T14324] Call Trace:
[  240.423247][T14324]  <TASK>
[  240.423256][T14324]  dump_stack_lvl+0x189/0x250
[  240.423287][T14324]  ? __pfx_dump_stack_lvl+0x10/0x10
[  240.423308][T14324]  ? __pfx__printk+0x10/0x10
[  240.423331][T14324]  ? kernfs_path_from_node+0x2c/0x260
[  240.423348][T14324]  ? kernfs_path_from_node+0x2c/0x260
[  240.423362][T14324]  ? kernfs_path_from_node+0x2c/0x260
[  240.423378][T14324]  ? kernfs_path_from_node+0x22c/0x260
[  240.423391][T14324]  ? kernfs_path_from_node+0x2c/0x260
[  240.423408][T14324]  sysfs_warn_dup+0x8e/0xa0
[  240.423431][T14324]  sysfs_do_create_link_sd+0xc0/0x110
[  240.423448][T14324]  device_add_class_symlinks+0x1cf/0x240
[  240.423471][T14324]  device_add+0x475/0xb50
[  240.423494][T14324]  wiphy_register+0x199a/0x26b0
[  240.423525][T14324]  ? __pfx_wiphy_register+0x10/0x10
[  240.423541][T14324]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  240.423564][T14324]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  240.423588][T14324]  ieee80211_register_hw+0x33e1/0x4120
[  240.423623][T14324]  ? ieee80211_register_hw+0x13f1/0x4120
[  240.423650][T14324]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  240.423673][T14324]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  240.423702][T14324]  ? __hrtimer_setup+0x187/0x210
[  240.423720][T14324]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  240.423749][T14324]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  240.423793][T14324]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  240.423812][T14324]  ? trace_kmalloc+0x1f/0xd0
[  240.423831][T14324]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  240.423852][T14324]  ? kstrndup+0xbf/0x160
[  240.423874][T14324]  hwsim_new_radio_nl+0xea4/0x1b10
[  240.423889][T14324]  ? __pfx___nla_validate_parse+0x10/0x10
[  240.423910][T14324]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  240.423930][T14324]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  240.423946][T14324]  ? __nla_parse+0x40/0x60
[  240.423958][T14324]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  240.423971][T14324]  genl_family_rcv_msg_doit+0x215/0x300
[  240.423984][T14324]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  240.424000][T14324]  ? bpf_lsm_capable+0x9/0x20
[  240.424012][T14324]  ? security_capable+0x7e/0x2e0
[  240.424026][T14324]  genl_rcv_msg+0x60e/0x790
[  240.424037][T14324]  ? __pfx_genl_rcv_msg+0x10/0x10
[  240.424045][T14324]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  240.424064][T14324]  netlink_rcv_skb+0x208/0x470
[  240.424076][T14324]  ? __pfx_genl_rcv_msg+0x10/0x10
[  240.424085][T14324]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  240.424104][T14324]  ? down_read+0x1ad/0x2e0
[  240.424115][T14324]  genl_rcv+0x28/0x40
[  240.424123][T14324]  netlink_unicast+0x75c/0x8e0
[  240.424138][T14324]  netlink_sendmsg+0x805/0xb30
[  240.424154][T14324]  ? __pfx_netlink_sendmsg+0x10/0x10
[  240.424167][T14324]  ? aa_sock_msg_perm+0x94/0x160
[  240.424177][T14324]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  240.424186][T14324]  ? __pfx_netlink_sendmsg+0x10/0x10
[  240.424224][T14324]  __sock_sendmsg+0x21c/0x270
[  240.424238][T14324]  ____sys_sendmsg+0x505/0x830
[  240.424255][T14324]  ? __pfx_____sys_sendmsg+0x10/0x10
[  240.424273][T14324]  ? import_iovec+0x74/0xa0
[  240.424286][T14324]  ___sys_sendmsg+0x21f/0x2a0
[  240.424300][T14324]  ? __pfx____sys_sendmsg+0x10/0x10
[  240.424330][T14324]  ? __fget_files+0x2a/0x420
[  240.424337][T14324]  ? __fget_files+0x3a0/0x420
[  240.424350][T14324]  __x64_sys_sendmsg+0x19b/0x260
[  240.424363][T14324]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  240.424381][T14324]  ? rcu_is_watching+0x15/0xb0
[  240.424394][T14324]  ? do_syscall_64+0xbe/0x3b0
[  240.424405][T14324]  do_syscall_64+0xfa/0x3b0
[  240.424413][T14324]  ? lockdep_hardirqs_on+0x9c/0x150
[  240.424421][T14324]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.424430][T14324]  ? exc_page_fault+0x9f/0xf0
[  240.424439][T14324]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.424448][T14324] RIP: 0033:0x7fc134f8e929
[  240.424459][T14324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  240.424467][T14324] RSP: 002b:00007fc135d4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  240.424478][T14324] RAX: ffffffffffffffda RBX: 00007fc1351b5fa0 RCX: 00007fc134f8e929
[  240.424485][T14324] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  240.424491][T14324] RBP: 00007fc135010ca1 R08: 0000000000000000 R09: 0000000000000000
[  240.424497][T14324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  240.424502][T14324] R13: 0000000000000000 R14: 00007fc1351b5fa0 R15: 00007fffc95ea518
[  240.424517][T14324]  </TASK>
[  240.771581][T14341] wg1 speed is unknown, defaulting to 1000
[  240.853457][T14347] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  240.917483][T14351] netlink: 'syz.2.2878': attribute type 21 has an invalid length.
[  240.964725][T14351] x_tables: duplicate underflow at hook 3
[  241.254934][T14369] netlink: 'syz.4.2884': attribute type 1 has an invalid length.
[  241.257939][T14369] __nla_validate_parse: 15 callbacks suppressed
[  241.257954][T14369] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2884'.
[  241.278625][ T5220] Bluetooth: hci4: command 0x041b tx timeout
[  241.328444][T14376] netlink: 'syz.4.2884': attribute type 13 has an invalid length.
[  241.330883][T14376] netlink: 'syz.4.2884': attribute type 17 has an invalid length.
[  241.481869][T14376] 8021q: adding VLAN 0 to HW filter on device bond0
[  241.486861][T14376] 8021q: adding VLAN 0 to HW filter on device team0
[  241.495085][T14376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  241.532341][T14379] wg1 speed is unknown, defaulting to 1000
[  241.674206][T14392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2891'.
[  241.682425][T14392] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[  241.684795][T14392] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  241.775255][T14397] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  241.782720][T14397] CPU: 1 UID: 0 PID: 14397 Comm: syz.2.2893 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  241.782737][T14397] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  241.782744][T14397] Call Trace:
[  241.782749][T14397]  <TASK>
[  241.782754][T14397]  dump_stack_lvl+0x189/0x250
[  241.782774][T14397]  ? __pfx_dump_stack_lvl+0x10/0x10
[  241.782785][T14397]  ? __pfx__printk+0x10/0x10
[  241.782798][T14397]  ? kernfs_path_from_node+0x2c/0x260
[  241.782809][T14397]  ? kernfs_path_from_node+0x2c/0x260
[  241.782817][T14397]  ? kernfs_path_from_node+0x2c/0x260
[  241.782825][T14397]  ? kernfs_path_from_node+0x22c/0x260
[  241.782833][T14397]  ? kernfs_path_from_node+0x2c/0x260
[  241.782842][T14397]  sysfs_warn_dup+0x8e/0xa0
[  241.782855][T14397]  sysfs_do_create_link_sd+0xc0/0x110
[  241.782865][T14397]  device_add_class_symlinks+0x1cf/0x240
[  241.782880][T14397]  device_add+0x475/0xb50
[  241.782894][T14397]  wiphy_register+0x199a/0x26b0
[  241.782917][T14397]  ? __pfx_wiphy_register+0x10/0x10
[  241.782927][T14397]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  241.782942][T14397]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  241.782956][T14397]  ieee80211_register_hw+0x33e1/0x4120
[  241.782979][T14397]  ? ieee80211_register_hw+0x13f1/0x4120
[  241.782995][T14397]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  241.783015][T14397]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  241.783034][T14397]  ? __hrtimer_setup+0x187/0x210
[  241.783045][T14397]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  241.783084][T14397]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  241.783112][T14397]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  241.783124][T14397]  ? trace_kmalloc+0x1f/0xd0
[  241.783137][T14397]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  241.783148][T14397]  ? kstrndup+0xbf/0x160
[  241.783162][T14397]  hwsim_new_radio_nl+0xea4/0x1b10
[  241.783175][T14397]  ? __pfx___nla_validate_parse+0x10/0x10
[  241.783194][T14397]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  241.783207][T14397]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  241.783221][T14397]  ? __nla_parse+0x40/0x60
[  241.783232][T14397]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  241.783245][T14397]  genl_family_rcv_msg_doit+0x215/0x300
[  241.783258][T14397]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  241.783275][T14397]  ? bpf_lsm_capable+0x9/0x20
[  241.783286][T14397]  ? security_capable+0x7e/0x2e0
[  241.783298][T14397]  genl_rcv_msg+0x60e/0x790
[  241.783310][T14397]  ? __pfx_genl_rcv_msg+0x10/0x10
[  241.783318][T14397]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  241.783336][T14397]  netlink_rcv_skb+0x208/0x470
[  241.783348][T14397]  ? __pfx_genl_rcv_msg+0x10/0x10
[  241.783358][T14397]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  241.783377][T14397]  ? down_read+0x1ad/0x2e0
[  241.783388][T14397]  genl_rcv+0x28/0x40
[  241.783395][T14397]  netlink_unicast+0x75c/0x8e0
[  241.783411][T14397]  netlink_sendmsg+0x805/0xb30
[  241.783427][T14397]  ? __pfx_netlink_sendmsg+0x10/0x10
[  241.783439][T14397]  ? aa_sock_msg_perm+0x94/0x160
[  241.783450][T14397]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  241.783459][T14397]  ? __pfx_netlink_sendmsg+0x10/0x10
[  241.783471][T14397]  __sock_sendmsg+0x21c/0x270
[  241.783483][T14397]  ____sys_sendmsg+0x505/0x830
[  241.783499][T14397]  ? __pfx_____sys_sendmsg+0x10/0x10
[  241.783516][T14397]  ? import_iovec+0x74/0xa0
[  241.783529][T14397]  ___sys_sendmsg+0x21f/0x2a0
[  241.783542][T14397]  ? __pfx____sys_sendmsg+0x10/0x10
[  241.783572][T14397]  ? __fget_files+0x2a/0x420
[  241.783580][T14397]  ? __fget_files+0x3a0/0x420
[  241.783592][T14397]  __x64_sys_sendmsg+0x19b/0x260
[  241.783606][T14397]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  241.783624][T14397]  ? rcu_is_watching+0x15/0xb0
[  241.783637][T14397]  ? do_syscall_64+0xbe/0x3b0
[  241.783649][T14397]  do_syscall_64+0xfa/0x3b0
[  241.783657][T14397]  ? lockdep_hardirqs_on+0x9c/0x150
[  241.783665][T14397]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.783674][T14397]  ? exc_page_fault+0x9f/0xf0
[  241.783683][T14397]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.783691][T14397] RIP: 0033:0x7fc134f8e929
[  241.783701][T14397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  241.783709][T14397] RSP: 002b:00007fc135d4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  241.783720][T14397] RAX: ffffffffffffffda RBX: 00007fc1351b5fa0 RCX: 00007fc134f8e929
[  241.783726][T14397] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  241.783732][T14397] RBP: 00007fc135010ca1 R08: 0000000000000000 R09: 0000000000000000
[  241.783754][T14397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  241.783760][T14397] R13: 0000000000000000 R14: 00007fc1351b5fa0 R15: 00007fffc95ea518
[  241.783776][T14397]  </TASK>
[  241.983646][T14398] wg1 speed is unknown, defaulting to 1000
[  242.064184][T14376] syz.4.2884 (14376) used greatest stack depth: 19168 bytes left
[  242.246002][T14408] !: renamed from dummy0 (while UP)
[  243.037293][T14416] wg1 speed is unknown, defaulting to 1000
[  243.089517][T14448] wg2: left promiscuous mode
[  243.091525][T14448] wg2: left allmulticast mode
[  243.136651][T14448] wg2: entered promiscuous mode
[  243.138891][T14448] wg2: entered allmulticast mode
[  243.348684][ T5220] Bluetooth: hci4: command 0x041b tx timeout
[  243.476442][T14464] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  243.827371][T14483] wg2: left promiscuous mode
[  243.832358][T14483] wg2: left allmulticast mode
[  243.866957][T14483] wg2: entered promiscuous mode
[  243.871538][T14483] wg2: entered allmulticast mode
[  243.918047][T14487] wg2: left promiscuous mode
[  243.921989][T14487] wg2: left allmulticast mode
[  243.934066][T14487] wg2: entered promiscuous mode
[  243.935810][T14487] wg2: entered allmulticast mode
[  243.949730][T14489] xt_TPROXY: Can be used only with -p tcp or -p udp
[  244.094163][T14505] wg2: left promiscuous mode
[  244.095778][T14505] wg2: left allmulticast mode
[  244.107677][T14505] wg2: entered promiscuous mode
[  244.111996][T14505] wg2: entered allmulticast mode
[  244.147435][T14513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2918'.
[  244.216239][T14517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2920'.
[  244.293093][T14522] netlink: 'syz.4.2922': attribute type 39 has an invalid length.
[  244.577169][T14537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2929'.
[  244.603023][T14544] netlink: 'syz.2.2931': attribute type 10 has an invalid length.
[  244.605969][T14544] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2931'.
[  244.611651][T14544] bridge0: port 1(0!) entered blocking state
[  244.613909][T14544] bridge0: port 1(0!) entered disabled state
[  244.615932][T14544] !: entered allmulticast mode
[  244.620640][T14544] !: entered promiscuous mode
[  244.707914][T14557] veth3: entered promiscuous mode
[  244.734701][T14557] netlink: 'syz.2.2934': attribute type 3 has an invalid length.
[  244.742119][T14557] syzkaller1: entered promiscuous mode
[  244.744245][T14557] syzkaller1: entered allmulticast mode
[  244.943139][T14575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2940'.
[  245.213675][T14588] xt_bpf: check failed: parse error
[  245.576071][T14602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2951'.
[  245.879257][T14617] wg2: left promiscuous mode
[  245.881099][T14617] wg2: left allmulticast mode
[  245.893870][T14619] xt_hashlimit: max too large, truncated to 1048576
[  245.896407][T14619] xt_hashlimit: overflow, rate too high: 0
[  245.923134][T14619] netlink: 83 bytes leftover after parsing attributes in process `syz.4.2957'.
[  245.926754][T14617] wg2: entered promiscuous mode
[  245.932817][T14617] wg2: entered allmulticast mode
[  246.194214][T14633] xt_time: invalid argument - start or stop time greater than 23:59:59
[  246.238063][T14633] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2961'.
[  246.372693][T14650] wg2: left promiscuous mode
[  246.374204][T14650] wg2: left allmulticast mode
[  246.391979][T14650] wg2: entered promiscuous mode
[  246.393575][T14650] wg2: entered allmulticast mode
[  246.407874][T14652] netlink: 'syz.2.2968': attribute type 1 has an invalid length.
[  246.449304][T14652] 8021q: adding VLAN 0 to HW filter on device bond7
[  246.464060][T14659] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2970'.
[  246.589425][T14669] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2975'.
[  246.685297][T14679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2975'.
[  246.762226][T14683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2980'.
[  246.773752][T14683] netlink: 'syz.2.2980': attribute type 11 has an invalid length.
[  246.777097][T14683] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2980'.
[  247.005647][T14698] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  247.009515][T14698] CPU: 1 UID: 0 PID: 14698 Comm: syz.2.2983 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  247.009530][T14698] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  247.009536][T14698] Call Trace:
[  247.009541][T14698]  <TASK>
[  247.009545][T14698]  dump_stack_lvl+0x189/0x250
[  247.009590][T14698]  ? __pfx_dump_stack_lvl+0x10/0x10
[  247.009602][T14698]  ? __pfx__printk+0x10/0x10
[  247.009615][T14698]  ? kernfs_path_from_node+0x2c/0x260
[  247.009625][T14698]  ? kernfs_path_from_node+0x2c/0x260
[  247.009633][T14698]  ? kernfs_path_from_node+0x2c/0x260
[  247.009643][T14698]  ? kernfs_path_from_node+0x22c/0x260
[  247.009651][T14698]  ? kernfs_path_from_node+0x2c/0x260
[  247.009661][T14698]  sysfs_warn_dup+0x8e/0xa0
[  247.009674][T14698]  sysfs_do_create_link_sd+0xc0/0x110
[  247.009684][T14698]  device_add_class_symlinks+0x1cf/0x240
[  247.009698][T14698]  device_add+0x475/0xb50
[  247.009713][T14698]  wiphy_register+0x199a/0x26b0
[  247.009733][T14698]  ? __pfx_wiphy_register+0x10/0x10
[  247.009744][T14698]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  247.009759][T14698]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  247.009773][T14698]  ieee80211_register_hw+0x33e1/0x4120
[  247.009795][T14698]  ? ieee80211_register_hw+0x13f1/0x4120
[  247.009812][T14698]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  247.009827][T14698]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  247.009845][T14698]  ? __hrtimer_setup+0x187/0x210
[  247.009855][T14698]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  247.009870][T14698]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  247.009914][T14698]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  247.009926][T14698]  ? trace_kmalloc+0x1f/0xd0
[  247.009939][T14698]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  247.009952][T14698]  ? kstrndup+0xbf/0x160
[  247.009967][T14698]  hwsim_new_radio_nl+0xea4/0x1b10
[  247.009982][T14698]  ? __pfx___nla_validate_parse+0x10/0x10
[  247.010001][T14698]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  247.010019][T14698]  ? __nla_parse+0x40/0x60
[  247.010031][T14698]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  247.010046][T14698]  genl_family_rcv_msg_doit+0x215/0x300
[  247.010058][T14698]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  247.010073][T14698]  ? bpf_lsm_capable+0x9/0x20
[  247.010085][T14698]  ? security_capable+0x7e/0x2e0
[  247.010099][T14698]  genl_rcv_msg+0x60e/0x790
[  247.010113][T14698]  ? __pfx_genl_rcv_msg+0x10/0x10
[  247.010121][T14698]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  247.010140][T14698]  netlink_rcv_skb+0x208/0x470
[  247.010151][T14698]  ? __pfx_genl_rcv_msg+0x10/0x10
[  247.010161][T14698]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  247.010180][T14698]  ? down_read+0x1ad/0x2e0
[  247.010191][T14698]  genl_rcv+0x28/0x40
[  247.010198][T14698]  netlink_unicast+0x75c/0x8e0
[  247.010214][T14698]  netlink_sendmsg+0x805/0xb30
[  247.010237][T14698]  ? __pfx_netlink_sendmsg+0x10/0x10
[  247.010250][T14698]  ? aa_sock_msg_perm+0x94/0x160
[  247.010262][T14698]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  247.010272][T14698]  ? __pfx_netlink_sendmsg+0x10/0x10
[  247.010284][T14698]  __sock_sendmsg+0x21c/0x270
[  247.010296][T14698]  ____sys_sendmsg+0x505/0x830
[  247.010312][T14698]  ? __pfx_____sys_sendmsg+0x10/0x10
[  247.010329][T14698]  ? import_iovec+0x74/0xa0
[  247.010342][T14698]  ___sys_sendmsg+0x21f/0x2a0
[  247.010355][T14698]  ? __pfx____sys_sendmsg+0x10/0x10
[  247.010386][T14698]  ? __fget_files+0x2a/0x420
[  247.010393][T14698]  ? __fget_files+0x3a0/0x420
[  247.010406][T14698]  __x64_sys_sendmsg+0x19b/0x260
[  247.010420][T14698]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  247.010437][T14698]  ? rcu_is_watching+0x15/0xb0
[  247.010450][T14698]  ? do_syscall_64+0xbe/0x3b0
[  247.010462][T14698]  do_syscall_64+0xfa/0x3b0
[  247.010470][T14698]  ? lockdep_hardirqs_on+0x9c/0x150
[  247.010478][T14698]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.010486][T14698]  ? exc_page_fault+0x9f/0xf0
[  247.010496][T14698]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.010504][T14698] RIP: 0033:0x7fc134f8e929
[  247.010514][T14698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  247.010522][T14698] RSP: 002b:00007fc135d4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  247.010533][T14698] RAX: ffffffffffffffda RBX: 00007fc1351b5fa0 RCX: 00007fc134f8e929
[  247.010539][T14698] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  247.010545][T14698] RBP: 00007fc135010ca1 R08: 0000000000000000 R09: 0000000000000000
[  247.010573][T14698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  247.010579][T14698] R13: 0000000000000000 R14: 00007fc1351b5fa0 R15: 00007fffc95ea518
[  247.010595][T14698]  </TASK>
[  247.195879][T14701] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  247.211725][T14701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2984'.
[  247.217429][T14704] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  247.225086][T14703] wg2: left promiscuous mode
[  247.226692][T14703] wg2: left allmulticast mode
[  247.246646][T14703] wg2: entered promiscuous mode
[  247.248889][T14703] wg2: entered allmulticast mode
[  247.320162][T14710] netlink: 'syz.2.2987': attribute type 21 has an invalid length.
[  247.342567][T14712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2988'.
[  247.351270][T14712] netdevsim netdevsim4: Direct firmware load for .
[  247.351270][T14712]  failed with error -2
[  247.355758][T14712] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  247.355758][T14712] 
[  247.411411][T14718] unsupported nlmsg_type 40
[  247.659916][T14740] wg2: left promiscuous mode
[  247.661862][T14740] wg2: left allmulticast mode
[  247.685085][T14740] wg2: entered promiscuous mode
[  247.686756][T14740] wg2: entered allmulticast mode
[  247.789308][T14748] netlink: 'syz.4.3003': attribute type 21 has an invalid length.
[  247.793113][T14750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3004'.
[  247.886588][T14756] IPv6: Can't replace route, no match found
[  247.892543][T14758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3007'.
[  247.907984][T14760] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  247.923435][T14760] CPU: 1 UID: 0 PID: 14760 Comm: syz.4.3008 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  247.923456][T14760] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  247.923484][T14760] Call Trace:
[  247.923489][T14760]  <TASK>
[  247.923494][T14760]  dump_stack_lvl+0x189/0x250
[  247.923515][T14760]  ? __pfx_dump_stack_lvl+0x10/0x10
[  247.923526][T14760]  ? __pfx__printk+0x10/0x10
[  247.923539][T14760]  ? kernfs_path_from_node+0x2c/0x260
[  247.923550][T14760]  ? kernfs_path_from_node+0x2c/0x260
[  247.923558][T14760]  ? kernfs_path_from_node+0x2c/0x260
[  247.923567][T14760]  ? kernfs_path_from_node+0x22c/0x260
[  247.923575][T14760]  ? kernfs_path_from_node+0x2c/0x260
[  247.923585][T14760]  sysfs_warn_dup+0x8e/0xa0
[  247.923599][T14760]  sysfs_do_create_link_sd+0xc0/0x110
[  247.923609][T14760]  device_add_class_symlinks+0x1cf/0x240
[  247.923624][T14760]  device_add+0x475/0xb50
[  247.923638][T14760]  wiphy_register+0x199a/0x26b0
[  247.923659][T14760]  ? __pfx_wiphy_register+0x10/0x10
[  247.923669][T14760]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  247.923684][T14760]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  247.923698][T14760]  ieee80211_register_hw+0x33e1/0x4120
[  247.923719][T14760]  ? ieee80211_register_hw+0x13f1/0x4120
[  247.923735][T14760]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  247.923749][T14760]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  247.923766][T14760]  ? __hrtimer_setup+0x187/0x210
[  247.923776][T14760]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  247.923791][T14760]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  247.923818][T14760]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  247.923830][T14760]  ? trace_kmalloc+0x1f/0xd0
[  247.923844][T14760]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  247.923855][T14760]  ? kstrndup+0xbf/0x160
[  247.923869][T14760]  hwsim_new_radio_nl+0xea4/0x1b10
[  247.923882][T14760]  ? __pfx___nla_validate_parse+0x10/0x10
[  247.923900][T14760]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  247.923918][T14760]  ? __nla_parse+0x40/0x60
[  247.923930][T14760]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  247.923944][T14760]  genl_family_rcv_msg_doit+0x215/0x300
[  247.923956][T14760]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  247.923971][T14760]  ? bpf_lsm_capable+0x9/0x20
[  247.923983][T14760]  ? security_capable+0x7e/0x2e0
[  247.923995][T14760]  genl_rcv_msg+0x60e/0x790
[  247.924007][T14760]  ? __pfx_genl_rcv_msg+0x10/0x10
[  247.924015][T14760]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  247.924033][T14760]  netlink_rcv_skb+0x208/0x470
[  247.924046][T14760]  ? __pfx_genl_rcv_msg+0x10/0x10
[  247.924055][T14760]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  247.924074][T14760]  ? down_read+0x1ad/0x2e0
[  247.924085][T14760]  genl_rcv+0x28/0x40
[  247.924093][T14760]  netlink_unicast+0x75c/0x8e0
[  247.924109][T14760]  netlink_sendmsg+0x805/0xb30
[  247.924126][T14760]  ? __pfx_netlink_sendmsg+0x10/0x10
[  247.924138][T14760]  ? aa_sock_msg_perm+0x94/0x160
[  247.924148][T14760]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  247.924157][T14760]  ? __pfx_netlink_sendmsg+0x10/0x10
[  247.924171][T14760]  __sock_sendmsg+0x21c/0x270
[  247.924184][T14760]  ____sys_sendmsg+0x505/0x830
[  247.924200][T14760]  ? __pfx_____sys_sendmsg+0x10/0x10
[  247.924235][T14760]  ? import_iovec+0x74/0xa0
[  247.924252][T14760]  ___sys_sendmsg+0x21f/0x2a0
[  247.924267][T14760]  ? __pfx____sys_sendmsg+0x10/0x10
[  247.924298][T14760]  ? __fget_files+0x2a/0x420
[  247.924307][T14760]  ? __fget_files+0x3a0/0x420
[  247.924320][T14760]  __x64_sys_sendmsg+0x19b/0x260
[  247.924335][T14760]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  247.924353][T14760]  ? rcu_is_watching+0x15/0xb0
[  247.924366][T14760]  ? do_syscall_64+0xbe/0x3b0
[  247.924377][T14760]  do_syscall_64+0xfa/0x3b0
[  247.924386][T14760]  ? lockdep_hardirqs_on+0x9c/0x150
[  247.924394][T14760]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.924403][T14760]  ? exc_page_fault+0x9f/0xf0
[  247.924412][T14760]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.924425][T14760] RIP: 0033:0x7f5460d8e929
[  247.924435][T14760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  247.924444][T14760] RSP: 002b:00007f5461cb5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  247.924454][T14760] RAX: ffffffffffffffda RBX: 00007f5460fb5fa0 RCX: 00007f5460d8e929
[  247.924501][T14760] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  247.924508][T14760] RBP: 00007f5460e10ca1 R08: 0000000000000000 R09: 0000000000000000
[  247.924514][T14760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  247.924520][T14760] R13: 0000000000000000 R14: 00007f5460fb5fa0 R15: 00007ffe1c4b1928
[  247.924536][T14760]  </TASK>
[  248.182537][T14774] wg2: left promiscuous mode
[  248.184012][T14774] wg2: left allmulticast mode
[  248.184985][T14772] netlink: 'syz.4.3012': attribute type 1 has an invalid length.
[  248.187739][T14772] netlink: 'syz.4.3012': attribute type 3 has an invalid length.
[  248.191085][T14772] netlink: 'syz.4.3012': attribute type 1 has an invalid length.
[  248.194166][T14772] netlink: 204 bytes leftover after parsing attributes in process `syz.4.3012'.
[  248.196921][T14772] NCSI netlink: No device for ifindex 0
[  248.201892][T14774] wg2: entered promiscuous mode
[  248.203653][T14774] wg2: entered allmulticast mode
[  248.454028][T14792] wg2: left promiscuous mode
[  248.457002][T14792] wg2: left allmulticast mode
[  248.486197][T14792] wg2: entered promiscuous mode
[  248.492468][T14792] wg2: entered allmulticast mode
[  248.770890][T14823] netlink: 'syz.4.3030': attribute type 10 has an invalid length.
[  248.774268][T14823] !: entered promiscuous mode
[  248.776334][T14823] !: entered allmulticast mode
[  248.778617][T14823] bridge0: port 3(0!) entered blocking state
[  248.781152][T14823] bridge0: port 3(0!) entered disabled state
[  248.785119][T14823] bridge0: port 3(0!) entered blocking state
[  248.787374][T14823] bridge0: port 3(0!) entered forwarding state
[  249.574596][T14866] 8021q: adding VLAN 0 to HW filter on device bond8
[  249.584546][T14866] bond0: (slave bond8): Enslaving as a backup interface with a down link
[  249.685335][T14877] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  249.753512][T14885] netlink: 'syz.4.3052': attribute type 1 has an invalid length.
[  249.810401][T14887] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[  249.882498][T14898] wg1 speed is unknown, defaulting to 1000
[  249.943607][T14900] sctp: [Deprecated]: syz.2.3058 (pid 14900) Use of struct sctp_assoc_value in delayed_ack socket option.
[  249.943607][T14900] Use struct sctp_sack_info instead
[  250.097992][T14913] tap0: tun_chr_ioctl cmd 1074025676
[  250.103108][T14913] tap0: owner set to 0
[  250.219688][T14918] xt_CT: No such helper "snmp"
[  250.549554][T14934] x_tables: unsorted underflow at hook 2
[  250.732827][T14949] smc: net device bond0 applied user defined pnetid SYZ2
[  251.290234][T14983] Cannot find del_set index 1 as target
[  251.925983][T14988] __nla_validate_parse: 9 callbacks suppressed
[  251.925996][T14988] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3086'.
[  251.934236][T14988] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3086'.
[  251.937761][T14990] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3088'.
[  251.940303][T14988] netlink: 'syz.4.3086': attribute type 2 has an invalid length.
[  251.943389][T14988] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3086'.
[  252.062043][T15004] netlink: 'syz.3.3092': attribute type 1 has an invalid length.
[  252.578465][T15018] block nbd1: server does not support multiple connections per device.
[  252.586903][T15018] block nbd1: shutting down sockets
[  252.725909][T15027] Cannot find add_set index 0 as target
[  252.937361][T15031] syzkaller0: entered allmulticast mode
[  253.112028][T15037] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3102'.
[  253.150165][T15043] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3105'.
[  253.150692][T15044] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3105'.
[  253.259679][T15046] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  253.318888][T15051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3107'.
[  253.331831][T15051] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3107'.
[  253.335419][T15051] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3107'.
[  253.590522][T15069] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check.
[  253.600078][T15069] netlink: 'syz.4.3112': attribute type 1 has an invalid length.
[  253.665142][T15063] gretap1: entered promiscuous mode
[  254.429339][T15135] netlink: 'syz.3.3134': attribute type 7 has an invalid length.
[  254.431863][T15135] netlink: 'syz.3.3134': attribute type 8 has an invalid length.
[  254.457331][T15137] netlink: 'syz.4.3135': attribute type 10 has an invalid length.
[  255.308285][ T8332] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  256.333752][   T12] bridge0: port 3(0!) entered disabled state
[  256.339958][   T12] bridge_slave_1: left allmulticast mode
[  256.342254][   T12] bridge_slave_1: left promiscuous mode
[  256.344352][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  256.349183][   T12] bridge_slave_0: left allmulticast mode
[  256.351005][   T12] bridge_slave_0: left promiscuous mode
[  256.352971][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  256.766397][   T12] team0: Port device bond0 removed
[  256.773108][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  256.778374][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  256.783201][   T12] bond0 (unregistering): Released all slaves
[  256.987071][   T12] hsr_slave_0: left promiscuous mode
[  256.989546][   T12] hsr_slave_1: left promiscuous mode
[  256.991796][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  256.994929][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  257.386947][   T12] team0 (unregistering): Port device team_slave_1 removed
[  257.424564][   T12] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
18:16:17  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000001 RBX=0000000000000000 RCX=4c8ae174754f9500 RDX=0000000000000000
RSI=ffffffff8db837b9 RDI=ffffffff8be28c40 RBP=ffffffff8229bc09 RSP=ffffc900035df468
R8 =0000000000000000 R9 =ffffffff8229bc09 R10=dffffc0000000000 R11=fffff940008db787
R12=0000000000000002 R13=ffffffff8e13f160 R14=0000000000000000 R15=0000000000000246
RIP=ffffffff819e3f4d RFL=00000057 [---ZAPC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb6e12e7d60 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007fb6e07866a3 00007fb6e07866a3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0106a0881000019b 8004010000140806
XMM06=060168c204808208 00019be003001000 XMM07=019bd00300100001 9bc003021000019b
XMM08=b003281000019a90 030000000b25dfdb XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffff92000499e80 RBX=ffffffff8b6d00ba RCX=0befbc139b65b400 RDX=dffffc0000000000
RSI=ffffffff8b6d00ba RDI=ffffc900024cf3c8 RBP=dffffc0000000000 RSP=ffffc900024cf2f8
R8 =ffffc900024cf490 R9 =0000000000000009 R10=ffffc900024cf418 R11=ffffffff81ad03a0
R12=ffff888030fdb980 R13=ffffc900024cf400 R14=ffffc900024cf3c8 R15=ffffc900024cf3c8
RIP=ffffffff8172aa94 RFL=00000a02 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558db28500 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5461ae56c0 CR3=0000000032928000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f4e74e11df9
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
