last executing test programs:

24.164439647s ago: executing program 0 (id=1656):
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010000000000feffffff010000000800020003000000e2fce95426c41f97575a2e23d3ac983c1398b5006efe7a398061ced19c7a28ab2eb54a58db947d24530253b61ee4"], 0x1c}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x15)
sendmsg$netlink(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="e00000001300010000000000000000004015143f4529d72384a65b0f683ca0a21fdf11440000bf3bc8d961bdc2e3267150aaca5d87ea3a2d0572f6a7882ef366b38649334f9e14aa669004dbd601f7a573479bda64e1a21a8d8224968c420b2358508e8b0e65ea507a9d564c6e29ad53eb774cd5a8114674850d36744c882033716525c99530fc100d4a5998ba6bdfed"], 0xe0}], 0x1}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x12}, 0xffffff00, 0x0, 'ipvlan0\x00', 'pimreg1\x00', {}, {0xff}, 0x89, 0x3}, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2021, 0x0, [{0x0, 0x0, 0x80, 0x7}, {}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1df3}, {0x0, 0x2, 0x80}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {0x0, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xf}, {0x0, 0x0, 0x40}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100, 'syz1\x00', {0x7}}}}, {{@ip={@multicast2, @empty, 0xffffffff, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@delchain={0x24, 0x5f, 0xf31}, 0x24}}, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000006c80)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000880)=""/130, 0x82}, {&(0x7f0000000400)=""/13, 0xd}], 0x2}, 0x7}], 0x1, 0x2043, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})

23.998098008s ago: executing program 0 (id=1657):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
r2 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00')
sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd700000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32=r2, @ANYBLOB="5fd5dcc428946fca6aff46b8326cefd2e3d84f1f9821989888f056fb34affa02664e031f62e7eff54aaa511080e4b6f7236af0654682734c57d9f16aeab2d205e893d009261316d0ce1c8c4aba5d31f52f86ae3e62f2b5deabfea9e23bce19bd003376acf52e4e76ca9777d967ae19b373c579ffef3d002cbdefd807f9a03133a7fe658cc0f61eee6491d7fb8164f5937167a101b61d6e59647f206c759d3a20f3100866a0e052f77d9b4bfbc786333681c4ebf2caa5604c42ee5deb58e1a9"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000240)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf2501000000080005000100000006000600234e0000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e690100000001000000b6e901b9ff2f518c78042fb5427c010880"], 0x1d8}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e21, 0x6a27f823, @empty, 0xae42}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', 0x0})
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r7 = socket$netlink(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0600000004000000030000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000001c460992"], 0x48)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x68}}, 0x0)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000380)=@broute={'broute\x00', 0x5e04, 0x3, 0x90, [0x0, 0x0, 0x400000000400], 0x2, 0x0, &(0x7f0000000400)=[{}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x1}]}, 0x108)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r10, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x80)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r14=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010029bd7000000000000600000008000300", @ANYRES32=r14, @ANYBLOB="080085f9529d7f4ca56560347ac8b48cfdefcf320fc54f77ce49b7f05a016c0c3799e86d0d9785e3fe473115e330bee612736c01f1795e"], 0x24}}, 0xc0c4)

23.477645658s ago: executing program 0 (id=1662):
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$ppp(r1, &(0x7f00000005c0)="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", 0xaf6)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
tee(r0, r2, 0xaf5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001480)={r2, 0xe0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000580)=[0x0, 0x0, 0x0], &(0x7f0000001200)=[0x0, 0x0], <r3=>0x0, 0x34, &(0x7f0000001240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000012c0), &(0x7f0000001300), 0x8, 0xb5, 0x8, 0x8, &(0x7f0000001340)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000010c0)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYBLOB="f6820cddeaa44150ac0bf7e856f1bc835c858b2bef5f952cda2f07c07b96dd9e800718aa19f4b08cd9ed8384a70551f9ba1595145d7137ae9f509a3f424a9a76bdd10b577feb1884a62865b12257ca15987caafcfd8b4a3b14157c838e75df1faafea9370009e8da158b2e845eed7d45a721cfa502eceaf4ef7c2c1438778429c58cb7e5da20988c64e836bb6fc1f9fcd7ac04a2b5fbeb93debd940fb6db2cba289d877f1e2350a7b58fd17efd6fc0380ab2b5dc91be3c621bb612f109f524fcd2ae2371d8b5c1cca391953c7d8429b09091919cbd3db35015bdc5bc1da0505dfaec7cb6461c6859f03940feaccba8", @ANYRES8=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r5}, 0x10)
r6 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @remote}})
r7 = epoll_create1(0x0)
r8 = socket(0x1, 0x80802, 0x0)
r9 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r9, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r4}, 0x18)
setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000040)=0xa, 0x4)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

23.388703094s ago: executing program 0 (id=1665):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
r2 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00')
sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd700000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32=r2, @ANYBLOB="5fd5dcc428946fca6aff46b8326cefd2e3d84f1f9821989888f056fb34affa02664e031f62e7eff54aaa511080e4b6f7236af0654682734c57d9f16aeab2d205e893d009261316d0ce1c8c4aba5d31f52f86ae3e62f2b5deabfea9e23bce19bd003376acf52e4e76ca9777d967ae19b373c579ffef3d002cbdefd807f9a03133a7fe658cc0f61eee6491d7fb8164f5937167a101b61d6e59647f206c759d3a20f3100866a0e052f77d9b4bfbc786333681c4ebf2caa5604c42ee5deb58e1a9"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000240)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf2501000000080005000100000006000600234e0000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e690100000001000000b6e901b9ff2f518c78042fb5427c010880"], 0x1d8}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e21, 0x6a27f823, @empty, 0xae42}, 0x1c)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r7 = socket$netlink(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0600000004000000030000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000001c460992"], 0x48)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x68}}, 0x0)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000380)=@broute={'broute\x00', 0x5e04, 0x3, 0x90, [0x0, 0x0, 0x400000000400], 0x2, 0x0, &(0x7f0000000400)=[{}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x1}]}, 0x108)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r10, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x80)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r14=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r13, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0xfffffffc}, 0xc0c4)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x38, 0x3e, 0x1, 0x70bd29, 0x25dfdbfe, {0x1}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0x4, 0x6}, @typed={0x8, 0xe2, 0x0, 0x0, @uid}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)

19.889742334s ago: executing program 0 (id=1699):
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r0, 0x711, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0)

19.809315767s ago: executing program 0 (id=1701):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r0)
r2 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00')
sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd700000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32=r2, @ANYBLOB="5fd5dcc428946fca6aff46b8326cefd2e3d84f1f9821989888f056fb34affa02664e031f62e7eff54aaa511080e4b6f7236af0654682734c57d9f16aeab2d205e893d009261316d0ce1c8c4aba5d31f52f86ae3e62f2b5deabfea9e23bce19bd003376acf52e4e76ca9777d967ae19b373c579ffef3d002cbdefd807f9a03133a7fe658cc0f61eee6491d7fb8164f5937167a101b61d6e59647f206c759d3a20f3100866a0e052f77d9b4bfbc786333681c4ebf2caa5604c42ee5deb58e1a9"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000240)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf2501000000080005000100000006000600234e0000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e690100000001000000b6e901b9ff2f518c78042fb5427c010880"], 0x1d8}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e21, 0x6a27f823, @empty, 0xae42}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x12, 0x5, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xe}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0x5}]}, &(0x7f0000000600)='syzkaller\x00', 0x4, 0xa7, &(0x7f0000000640)=""/167, 0x40f00, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x4, 0x9, 0x2, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000980)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000009c0)=[{0x2, 0x2, 0x2, 0x3}, {0x5, 0x5, 0x2, 0xc}], 0x10, 0xdc49}, 0x94)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r7 = socket$netlink(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0600000004000000030000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000001c460992"], 0x48)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x68}}, 0x0)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000380)=@broute={'broute\x00', 0x5e04, 0x3, 0x90, [0x0, 0x0, 0x400000000400], 0x2, 0x0, &(0x7f0000000400)=[{}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x1}]}, 0x108)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r10, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x80)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r14=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r13, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0xc0c4)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x38, 0x3e, 0x1, 0x70bd29, 0x25dfdbfe, {0x1}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0x4, 0x6}, @typed={0x8, 0xe2, 0x0, 0x0, @uid}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)

17.238999365s ago: executing program 1 (id=1728):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth1_virt_wifi\x00', &(0x7f0000000240)=@ethtool_channels={0x3d, 0xfffffffd, 0x0, 0x0, 0x4, 0x80000000, 0x1, 0x0, 0x292}})
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x6, 0xa, [0x5, 0xb83f, 0xfc01, 0x0, 0x3, 0x3, 0xf63, 0x401, 0x1, 0x1]}, 0x1c)

17.158352968s ago: executing program 1 (id=1729):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x10)
close(r3)
sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB='\a\x00', @ANYRES32, @ANYBLOB="08000400000000000c0003000000000000000100080005000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800020000000000060006"], 0x50}}, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0xa}, 0x5, 0x0, 0xff, 0x1}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r4 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0)
r5 = socket(0x40000000015, 0x5, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffc}, 0x1c)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={<r8=>0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000500)={r8, @in6={{0xa, 0x4e24, 0xc, @empty, 0x7}}, 0x1c, 0x46}, 0x90)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000040)={r9, 0xffffea80}, &(0x7f0000000100)=0x8)
r10 = socket$inet6(0xa, 0x1, 0x0)
connect$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x18)
ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000340))
getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r9, 0x3}, &(0x7f0000000200)=0x8)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYBLOB='\b\x00'], 0x38}}, 0x0)
r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r12, 0x3fb, &(0x7f0000000080)="20e31347e43a0fdd1627dfcd87cc3807a7d9907b8b5a8e5ccd3810b00709ba902ef6a6745100c59472129daad5a24228b044268b9b9901a3bf0a45910e71ed8e59fb9c0c7f32b78470c07ac2ff5c52a98c329ac6729f7629b1e935831d125fc6b7fbe99564c4dc91a1181a051167e07b996915b5e8d3bb14ca9ca801827ab16d3b86693fd46f4eda3b29de3bc9551dfcd17201ff3cd8cf014a8efc9c3b1a66980200c9e387632f3acfff5bca05f1ced8d6def9914cd5ac6225831eee9ed71af669d5fd21f15308c7141cc1c2e8cf9a53f3d327a39c7b90abeb0be8e3d82e4f6857162a4201fb50334387ce822dd9ea435657f68d22c2c1dfddb91d008d323f4e1da3f66c60615c5bfed2f8558c0855c058500018eb26930783d93d79dc0ac2bf5a1d24b540f3b1ca18cebdcb566a6a109a3d8deb054fb073d4b8e2218dac9b43f3f87ac141dfe827034dda1dcf32aad0d655a786990cba62ed4caf110f00000000")

16.259922615s ago: executing program 1 (id=1734):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x30}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90)
socket$nl_netfilter(0x10, 0x3, 0xc)

16.207548053s ago: executing program 1 (id=1736):
close(0x3)
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000240)={r2, 0xb76e, 0x4, "fff0904d"}, 0xc)
r3 = socket(0x10, 0x3, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r4)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(r5, 0x1, 0x22, &(0x7f0000000080)=0xb, 0x4)
bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
recvmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x16, 0x0)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r4)
sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x1c, r6, 0x829, 0x4070bd2d, 0x25dfdbfe, {0x1e}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40240c4)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x1000, 0x4, 0x10000000, 0xc}, 0x10)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_getaddr={0x2c, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {}, [@IFA_CACHEINFO={0x14, 0x6, {0x1800000, 0x7fff, 0x6, 0xd7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000800)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000008009000100626f6e64000000000ca6120b16ad00028008000500ffffffff080003000000", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0)

16.150167259s ago: executing program 1 (id=1738):
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x44, 0xa, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7fff}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004001}, 0x20000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x4001, 0x3, 0x458, 0x0, 0xb, 0x148, 0x300, 0x148, 0x3c0, 0x230, 0x242, 0x3c0, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {}, 0x73}, 0x0, 0x2d0, 0x300, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0xe, 0x0, 0x6, './file0\x00'}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0xec010000, 0xa0, 0xc0, 0x0, {}, [@common=@ah={{0x30}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000006a0019012cbd700100008025020000000000000808000a0000000000080005"], 0xfe80}, 0x1, 0x0, 0x0, 0x40d0}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x22}, [@alu={0x4, 0x1, 0xb, 0x96bdff5043e24129, 0x9}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="b45cd516d50bf3aae9babff6891ddd394ce64f737dfed604519fcb36394f104b105a74e617799f7800601688a5d9aab783f8a931925fedc0af06891839d7f9958979636f00d95df2f6d0c4e5cda34d6ed8dfef857551df4862cccb54d1c147a46f3744f6f63788671f1110f1c21e398fbecc13036d509d875e563667b2cecc5d7d86a2d365424c30a27f1d7bbee63154f9e261d1405c4bef7fd163c8f147f79be02fe9dc1b3ed3d1250b6a90bd132b9101cd"], 0x20}}, 0x8004)
shutdown(r5, 0x0)

16.069843291s ago: executing program 2 (id=1740):
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x7a}}}}, [@NL80211_ATTR_FRAME={0x82, 0x33, @data_frame={@msdu=@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {}, @device_b, @from_mac=@broadcast, @broadcast, {0x0, 0x9}, "", @value={0xf, 0x1, 0x1, 0x0, 0x93}, @value=@ver_80211n={0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_b, @device_a, 0x3f, "bb22d25126442414d7ff48a21b58495ff26f3cfe1614fea8f1439844667366302a72e59be32f80fc222187a616befd2a51e1e90ecc0369d7c232ab689575e5"}, {@broadcast, @broadcast}]}}]}, 0xac}}, 0x0)
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[{0x18, 0x110, 0xc, ')'}], 0x18}, 0x0)

16.069098463s ago: executing program 2 (id=1741):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000000c0)={@multicast1, @remote}, 0xc)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000240)={0x3, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e20, @local}}}, 0x108)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @multicast1}}, 0x80f9, 0x85}, 0x0)
getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000000100)=""/231, &(0x7f0000000200)=0xe7)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7, 0x20000001, 0x2, 0x2cf, 0x8d2, 0x1}}, {0x6, 0x2, [0xffff]}}]}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x401}}]}, 0x68}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002500)={&(0x7f00000027c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c000000070000000d0000000000000a030000000000000002000006040000000b000000e00b00000d0000000e0000000c000000000000090300000000000000000000030000501135000005000000010000008b0c0000005f302e002e00350ae43a48ec5dc34e26e54da3f49feb4abbe9ae2160bb789da6660796641443e9b08a1249641eb16c5f2bf392a9e89e6aac0c739fc00556f4334ca34e3417c9c4f13d620f3e78cc5a74b3aaa3c52872a35c6fda2efd9a62607a620dc6522528062f391085fad5ec602eef291f8d49659e8b2f62bd510afc41d1e1a012c71c09e3ac489acef28a9c8bbac7ec3c11a860fd5b60"], &(0x7f0000001500)=""/4096, 0x6b, 0x1000, 0x1, 0x7}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000026c0)={0x11, 0x14, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x6}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x401}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, @map_fd={0x18, 0x4, 0x1, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000080)='syzkaller\x00', 0x80, 0x1000, &(0x7f0000000500)=""/4096, 0x41000, 0x44, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000002540)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000002580)={0x4, 0x10, 0x2, 0x1}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000025c0)=[0x1, 0xffffffffffffffff], &(0x7f0000002600)=[{0x5, 0x5, 0x8, 0x6}, {0x1, 0x2, 0x6, 0x4}, {0x5, 0x4, 0x10, 0x8}, {0x0, 0x2, 0x5, 0x8}, {0x1, 0x1, 0xc}, {0x3, 0x1, 0x8, 0x4}, {0x3, 0x2, 0xf, 0x4}, {0x2, 0x2, 0x1, 0x6}, {0x5, 0x2, 0xf, 0xc}], 0x10, 0x6a9360ca}, 0x94)
r6 = socket$inet6(0xa, 0x3, 0x103)
setsockopt$inet6_int(r6, 0x29, 0x43, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r7 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)=ANY=[@ANYBLOB="2800000000000000170100000200000010000001e49e8e2ac7b006627255987f887675ba0000000075a12099de089c826832ea"], 0x28}, 0x28000054)

15.989734334s ago: executing program 2 (id=1742):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000005000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000000000000084010500ac14143b000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000fc020000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff020000000000000000000000000001000000003c0000c1887d3700ac1414bb0000000000000000000000000000000001030000000000000000000000000000ff020000000000000000000000000001000000003c0000000200000020010000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000003c0000000200000000000000000000000000000000000000ffffffff0000000000000000000000000000000020010000000000000000000000000001f00000006c00000000000000ffffffff000000000000000000000000000000000100"/500], 0x23c}}, 0x0)

15.989506461s ago: executing program 2 (id=1743):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x1000000, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x12}}]}, {0xfffffffffffffeb7}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

15.757221614s ago: executing program 2 (id=1744):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000280)={'caif0\x00', 0x3})
socket$alg(0x26, 0x5, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="78000000030801020000000000000000000000020600024000000000540004800800014046aea47d08000b2704d60c0608000740000000000800094000000000080008400000a9c80800044000000008080005400000000808000840fffffe01080001400000000c080002400000000305000300ff"], 0x78}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100030e000000000000000000000005000600000000000a00000000000000fc000000000000000000000000000000000000000000000005000500000000000a00000000000000060100000000000000000000000000aa0100000000000000020013"], 0x70}}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000002c0)={<r6=>r0, 0x0, 0x7, 0xd86})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
pwritev(r7, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000200)="db", 0x1}], 0x2, 0x8040000, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r8, 0x58, 0xfffffffffffffffe}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x12, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xd}, [@alu={0x4, 0x1, 0x8, 0x3, 0x6, 0xffffffffffffffff, 0xfffffffffffffffc}, @ldst={0x2, 0x1, 0x4, 0x4, 0x8, 0x100, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @call={0x85, 0x0, 0x0, 0x82}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xb4b}, @generic={0xc, 0x6, 0xf, 0x9, 0x2}]}, &(0x7f0000000480)='GPL\x00', 0x9, 0x74, &(0x7f00000004c0)=""/116, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xb, 0x10001, 0xa28b}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000005c0)=[r7, r8], &(0x7f0000000600)=[{0x1, 0x5, 0xe, 0x1}, {0x1, 0x1, 0xf, 0x3}, {0x5, 0x3, 0x9, 0x5}, {0x3, 0x5, 0x10, 0x7}, {0x0, 0x1, 0x10, 0xa}, {0x3, 0x3, 0xa, 0x7}, {0x4, 0x2, 0x9, 0x7}], 0x10, 0xe}, 0x94)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)={0x9c, r10, 0x205, 0x24000000, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x52, 0xe, {{{}, {}, @device_b, @device_b, @from_mac=@device_b}, 0x0, @random=0xd6db, 0x5d7f, @void, @void, @val={0x3, 0x1, 0xb8}, @val={0x4, 0x6, {0xb, 0x2e, 0x100, 0x3}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x10, 0x1, 0x6, 0x0, {0x40009, 0xc9, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x308, 0xb, 0x4}}, @void, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x14, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x9, 0x3, "64b331bd4e"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x9c}}, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r10, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x40}, @void, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x80)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x42, 0x40, 0xc0, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r12}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r12, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001500)=@raw={'raw\x00', 0x8, 0x3, 0xa08, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x970, 0xffffffff, 0xffffffff, 0x970, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [], 0x0, 0x7}}}}, {{@ip={@loopback, @dev, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00'}, 0x0, 0x850, 0x870, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{}, {[{0x0, 0x2}]}, {[{}, {}, {}, {}, {}, {0x1ff}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7fff}]}]}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xffffffffffffff3b)

15.669818652s ago: executing program 2 (id=1745):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x15, 0x1, 0x3, 0xfffffff8}, {0x60, 0x8}, {}, {0x1, 0x0, 0x0, 0x3}, {0x6, 0x3}]})
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1, 0x0, 0x9}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x18, 0x76, 0xb0d, 0x4000, 0x0, {0x3}}, 0x18}, 0x1, 0x0, 0x0, 0x30008000}, 0x0)
r3 = socket$caif_stream(0x25, 0x1, 0x0)
setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x2, 'ip6gretap0\x00', {0xe105}, 0xfff8})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f000000af40)={&(0x7f0000009500)={0x10, 0x0, 0x0, 0x81880800}, 0xc, &(0x7f000000af00)={&(0x7f0000009580)=@newneigh={0x2c, 0x1c, 0x126, 0x70bd28, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x80, 0x20, 0x5}, [@NDA_SRC_VNI={0x8, 0xb, 0x1}, @NDA_LINK_NETNSID={0x8, 0xa, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x8000000)
bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
sendmsg$nl_route_sched(r5, 0x0, 0x2000400c)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x31)
r6 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfffe, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)

15.200183827s ago: executing program 1 (id=1746):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DONE(r0, 0x0, 0x21, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r3 = gettid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r3, @ANYBLOB="897a01d8d35c0f76f0790756e1e6b047164f181d1b2986e78ea64b9e89577a83458bdc99b03532a5ef5c292ad02a9979f61f4cf2ff530800f40a6743d33ef2d8caa7c1ee589b184841ec47efad35edca8fb7945754cfc130d5c53896e4bec38052348bf969b906b64286fde7855bb0b2153f96343c33d4fa"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)
syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/uts\x00')
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f00000023c0)=r3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r6=>0x0})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x4, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000020}, 0x800)
r8 = socket$tipc(0x1e, 0x2, 0x0)
connect$tipc(r8, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10)
sendmmsg$inet(r8, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="4167c4fd9ea8b423c01e798bbd631e888a04e31e6865a2d55b31833b82989759c0f3241bb5ebe979636a5f22244112d95d11a07cb172724ec37ef9faaf227d64f5190c9d82dfe194b2cf6d77e917e513170fa1e8e4c82dd9898b4ad23e677261595ec62844104d7ca15aa7eec90685ad92f2cd5b745910e47d703315a0d1d3a6d143575da2604e54bb1ddb295e590a1392770befa52aaf1651d375682bcf94e5da4ea37e1cde1d2a80890d896cfe4d08801bc50d9bc08480de2b2710b694ff7fb5bda12cd8a8cb8dc18bf0c265b71aef50ec0ee22e1968a4f3487d8487026bc2b721692064dcfdd1b6b6aec3e8da3d0ab7d3cc51e2db33c169e6354ea425fbfc1bc39057e64d3aff3749d60edcf0a50fe0e973b5ee3a7cd45ad967564fdbc9832869346037dabe420448b5089ab553c2c87e94befac8d3a0c2a56ca2ab778c2f34f571217c837580e8a524db35baea8024482bb32306182faaf39bb1c4e992c4440889e274952ed3d17d5e87224fec8048e6b7344270e046ab2fdda270ad4e5f651fd6eede5d42d9599265520d45d6f500fd733372a62ab4f496b56839b0d6418961a3b6016c26409daba4f2beeceeb38cc6ba75f57e8ee45d8a6c2ecc031c9469d937b9d7db91ded158ebd7f7d512d445f4104130a429ce7fce52d3fec37df953fc6e6adaa781b820b4bb6d4ffd2c10a16f9583890118793bae09157d3ac5625ad8e66a367488e2722bb82161661711d91a5540a92e3de7506861875575d40465cda28989cbc46fb3d80c2bc7e96afbde1cbd2e89103c55bde669c77b774ea570b26e93a1be5e50269ea5f3355869ac5a9701ac0e7d8f69b0a3186e118c6e2ce8e946c95bd729d94d237e5915e2711cc82826f147176a8a0555b9e11fb9a8ad736d016d202cea43b10a5102e48387ab70069b876051ac0557528c14748aa9cc0e0d9bf512533bdc83610d9f801ec4ed512a4a877e2f45b0cbe87ee25a314d481153eefe8643fb2f3e0478353552b0ae863635ab12e7bf0e4f046e8ba9cb7ce3189d52b2a27ff9e4eb5bf8b12d09d610705eec149589bdd38c951de63de4e3065e45eeb261a72c980349387514cb42467e1fe5812abaf4670e993c6fb561e5cccf7a472ee874bbfe73412bc63f706424f174afd1a3f16fb8b8305d932d33ab211d473d210b87e2f20b6ba951a2b98206793c04516fd57fc7365cec4a1831548470ebefe7f9487cc7b287b2f45eb69b4e165b9f3404d8ac84b2b57ace34de669a85fd885ecb055a6fd2ba5d5396737c702c082bfb35f3ccace91eacfc7a71b2bca1e228170ad6d194aa7c2dc2cf5f0bce153ac1befb2b82e6cf1f12d28812e309f5da0dbe1cad03172d296fa13247b1952ec988316f668aa65e1ca7e9e383b115ce5c25130955c118a0b4567bd180c07ce18bd0c459cc33ed7ba1c43262034a60711315ed81bbc95b7e3088dbd22b976fcd18bae330f08c89236f770478305fac20b5d9bd5cbc98c5c0f9713345c7362bc0e0bc78d212433bcdc6142989bc6ab82160df897825aa906d739dac905a434c90b2cbc72223011ea11480278b681cdcdf5fa63ac5f8b8f1f3ef7d4eb02f422e9fc52b98163630cd2f130f076a33bb011bb8e42800c9475f5cbee042b79fda44b6432b126f085a17553b82d9cae519ec239a9cccb99444f24b8f11e255e31e0d53a28e36949a3f8238c2ea3f4e3d8cf3b85b031c962504d00a4e7928b5fa2fab311bcc54d68738086ce70a8e5bdaf425033036a85e59aa3bb1b01f8b6c6a2e221c69e48565b55a196b2dc9cb067b4ccf8a7c81e31795a8b74e8940455126f19c8bbb9b941cc66c9443fd13e20c2074a9c3bc1740262c1fcb8e9ca5ac5729dfe6e25561eba41ccae8ca2e851affc1ab4ec912925ef7ccf72e97c577413260ccda170d75741336f837258a59da907460a2917f652c6e4ebc0467da8a95f2ceae9afcc4e0d1f4b95fc68b2f5e32af96fb12a8e7f3140dd235a30e5ad94e78cf58ad75ca8a871a70820090ba510e7563c0f78cf364369a51fa6683ff8d24924ceb922927eb0ba1395b7a4f37d92913a9688ef8428a887f1161f10aeab749f5ea8ca24e579008f542a9b785841dae071b94b5a8ba79985930f60ac2c93aa002d84b212e2e2b6c9c2a0694595dad99fd1f27d0044481ef5b364a059599ef982a114a61094b3b7d0f9a7b78d7615cc8573430e676987ab7421fde9abeb29e4529beb6a2724bed86a7b1d27ee73585892f083fad4307696a4166356b9c20a9579bbf3e8cda9ad7ec2b2bb973d05cf8d9457dc03eee2cfbf630dd917768ae652c0627e32ebb4c62951dfbd8e074dfdf02c5517ace50d5813c8d8d7f1fc0fc63a4fae5c2bcf26560c627500e03692384630be287790d545403adc500ef732d66e269b8b051aa57bb865a9b709c7a0426188daf29caf1d062b104592b4f6acc86895956d8085424dba0bfafdf900419f2227db1eca75b338091d23da2067566c6d54de1604bf8d4cce8a0b4484c4645a305861bc46ebccafbe500e01d51236b40027d1b2c7a72937b15899bb982c880d83ed6b70502bd0d68d2a2146a85c6518a11c386df610243ec513e7a284a81c841f9201ee3b9d3a8f44cdf52ec842e07c1f2f35e2a5b17278dce1f9b7fa09866ecb0d2e78fc8095b7dee81d3e308fd10a1490036194bfa89c118bd9c72d4747b90724d7bd0a7ead28c89c23cc6667c1a8b362ca5385d24b2c1265957764a4e46176365a5348bcf85c457921e7fa6c9e165b6c4d8bd9e8782c96839a5fd2679cd08f656ca5b41d00f8429d517a0d776049918e73b4a258fd2a1576b6420b67fc9ff3520556881ef4838e973f552edebde686af1d55e6172e5bb9b01543d32c0c7753b380dd9ed3f5c0b663a9b1bcb4bd36a365172aeee96a8d69c1e5c5b6c88fc9453ace6aa24bdfc1cfa27ea8cc36c80cace296259545a4e155d154ccbf00ae4ff912c583c871b7cdb46813584ea14bb6943d16b3f12e8fe149076e5e646e1dca0bf121a2e2fa09816e9056aa1143988ff17c21c49981445d98d88fd4bba6a59d9f97d301d90e3754103389b36308713c1ba31031e42f2d759343a95bbae9c01a3bb3e6b537b658d1c028c8ec3126bf79db223a3320e25a671ef834c924f02c1bbab338517accb8378f945cb1d65d4dff90f1e3af8168e33a5a124aef715b656075f6a62099afa110f2fe5eb83e0b3e36df91be2125be6500e5f3a81f8bc116f42734c784f6bb6c7e968610243b06026a9def4e85f8344fae36602aa3795cf71ecf7e57a3da0bef859daf649abc6390e86edaa84eefe48999ddba9067b90dd5ea2477f150ab588dadfe79ab7524157d1b94c738ca3345ce8657bfac981cb30b7c0f05f96dafcdce3e41471943609b121de1eda3e95a1c31bada084beec699512c7d5cec71e06a57c177ca1f383120bf46a9c805c9220d3d0c6807d60e6b7f9c80de1d815bdf1ebe62338862719eab55ef4971a69c76aa2f25c3c9d0c2e5c7857a86f9ab26c3c6aa395f2c366548f60a40abbe14dd011358d9b3695b8a091e16552478aeee1e2e91abd67deeb15732f428c3304a2bf2e4cbb3768875b35d126ca46d29e506ee1e0aba7a17eba27c19d7626064c0a17d7ee7f2f220e5e28bd7d691dffa84f2a2f92c924b87da382ae9a688ad4322fa0cc72604fc43e17002b8f3844a7431205de46818310d0fcf4676f45c9941dde767c9a4376e13cd7e91308cc0df25a4c79e390674fa0161695cc9e9bee12620d8571a4b3800370cd01bf0546758a048563539edf15d58b108159ea5fe0f038281c7855bbd92cc86de38df60b8597f4bce4ae9cae1647b5024bfb73630cdf4d1827a5f0ff779a1e6c6efbc6561d06b249986703b9dc61a63e2068e4786e6a8be34a808143301ef00f21bee8399d88ecffddb4867790d4d1cbe827a5a220834ba831d3ba424ff8fc9a99b175d2feca9f581e24bb69bdc4f64a6ea0c9c37d6976d15e9388519a2bed100a2a8358215a8b63b6e25a677875ee2bc3fd9c77783b39a166b863376b496775b83804a2c7f5363cca9ade819034afc2f7b40ffc316089556dec2e55e1bd92c9b905d6b1b9160d6c492d4384acd7e380874939b1ab02dbbacfbedd74cd524b4eab643e8b92d38d9fae446afd8d774d1c933bce8c341f0ff283acec3bbbbfdb06a15eb88ca6600542dda45334a374e31bae", 0xba7}], 0x5}}], 0x300, 0x0)
r9 = accept$unix(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000200)=0x6e)
recvmmsg$unix(r9, &(0x7f0000002240)=[{{&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000400)=""/89, 0x59}, {&(0x7f0000000480)=""/36, 0x24}, {&(0x7f00000004c0)=""/180, 0xb4}, {&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x5, &(0x7f0000001700)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000001800)=@abs, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000001880)=""/188, 0xbc}, {&(0x7f0000001940)=""/167, 0xa7}, {&(0x7f0000001a00)=""/9, 0x9}, {&(0x7f0000001a40)=""/135, 0x87}, {&(0x7f0000001b00)=""/205, 0xcd}, {&(0x7f0000001c00)=""/26, 0x1a}], 0x6, &(0x7f0000001cc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000001d00)=@abs, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001d80)=""/70, 0x46}], 0x1}}, {{&(0x7f0000001e40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001ec0)=""/61, 0x3d}, {&(0x7f0000001f00)=""/224, 0xe0}], 0x2}}, {{&(0x7f0000002040), 0x6e, &(0x7f0000002200)=[{&(0x7f00000021c0)=""/29, 0x1d}], 0x1}}], 0x5, 0x10002, &(0x7f0000002380)={0x77359400})
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r4)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x30, 0x7, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r13, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r6, @ANYBLOB="c46141a0c845c9a72f7680de078c359d26396001c6d7c4b4d80f82dfd579929490065b0673d5f6eab50456ad56aa44e8c6006d6ee93ff7cc3ce0435cb1c42fae019fd1d4ba02d04e5c33fb298166e20df03f38653ef3672c47024a9b3a39b04b040ce905377de40590d5d211646dd4201e793f6d39801f2a33f3a2fde03a942a0b34646d4fcb7891d7074cc8981f32c2a6d262"], 0x1c}}, 0x0)

4.027922319s ago: executing program 32 (id=1701):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r0)
r2 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00')
sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd700000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32=r2, @ANYBLOB="5fd5dcc428946fca6aff46b8326cefd2e3d84f1f9821989888f056fb34affa02664e031f62e7eff54aaa511080e4b6f7236af0654682734c57d9f16aeab2d205e893d009261316d0ce1c8c4aba5d31f52f86ae3e62f2b5deabfea9e23bce19bd003376acf52e4e76ca9777d967ae19b373c579ffef3d002cbdefd807f9a03133a7fe658cc0f61eee6491d7fb8164f5937167a101b61d6e59647f206c759d3a20f3100866a0e052f77d9b4bfbc786333681c4ebf2caa5604c42ee5deb58e1a9"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000240)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf2501000000080005000100000006000600234e0000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e690100000001000000b6e901b9ff2f518c78042fb5427c010880"], 0x1d8}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e21, 0x6a27f823, @empty, 0xae42}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x12, 0x5, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xe}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0x5}]}, &(0x7f0000000600)='syzkaller\x00', 0x4, 0xa7, &(0x7f0000000640)=""/167, 0x40f00, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x4, 0x9, 0x2, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000980)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000009c0)=[{0x2, 0x2, 0x2, 0x3}, {0x5, 0x5, 0x2, 0xc}], 0x10, 0xdc49}, 0x94)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r7 = socket$netlink(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0600000004000000030000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000001c460992"], 0x48)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x68}}, 0x0)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000380)=@broute={'broute\x00', 0x5e04, 0x3, 0x90, [0x0, 0x0, 0x400000000400], 0x2, 0x0, &(0x7f0000000400)=[{}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x1}]}, 0x108)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r10, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x80)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r14=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r13, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0xc0c4)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x38, 0x3e, 0x1, 0x70bd29, 0x25dfdbfe, {0x1}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0x4, 0x6}, @typed={0x8, 0xe2, 0x0, 0x0, @uid}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)

19.182434ms ago: executing program 33 (id=1746):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DONE(r0, 0x0, 0x21, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r3 = gettid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r3, @ANYBLOB="897a01d8d35c0f76f0790756e1e6b047164f181d1b2986e78ea64b9e89577a83458bdc99b03532a5ef5c292ad02a9979f61f4cf2ff530800f40a6743d33ef2d8caa7c1ee589b184841ec47efad35edca8fb7945754cfc130d5c53896e4bec38052348bf969b906b64286fde7855bb0b2153f96343c33d4fa"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)
syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/uts\x00')
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f00000023c0)=r3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r6=>0x0})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x4, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000020}, 0x800)
r8 = socket$tipc(0x1e, 0x2, 0x0)
connect$tipc(r8, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10)
sendmmsg$inet(r8, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0)
r9 = accept$unix(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000200)=0x6e)
recvmmsg$unix(r9, &(0x7f0000002240)=[{{&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000400)=""/89, 0x59}, {&(0x7f0000000480)=""/36, 0x24}, {&(0x7f00000004c0)=""/180, 0xb4}, {&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x5, &(0x7f0000001700)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000001800)=@abs, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000001880)=""/188, 0xbc}, {&(0x7f0000001940)=""/167, 0xa7}, {&(0x7f0000001a00)=""/9, 0x9}, {&(0x7f0000001a40)=""/135, 0x87}, {&(0x7f0000001b00)=""/205, 0xcd}, {&(0x7f0000001c00)=""/26, 0x1a}], 0x6, &(0x7f0000001cc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000001d00)=@abs, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001d80)=""/70, 0x46}], 0x1}}, {{&(0x7f0000001e40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001ec0)=""/61, 0x3d}, {&(0x7f0000001f00)=""/224, 0xe0}], 0x2}}, {{&(0x7f0000002040), 0x6e, &(0x7f0000002200)=[{&(0x7f00000021c0)=""/29, 0x1d}], 0x1}}], 0x5, 0x10002, &(0x7f0000002380)={0x77359400})
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r4)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x30, 0x7, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r13, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r6, @ANYBLOB="c46141a0c845c9a72f7680de078c359d26396001c6d7c4b4d80f82dfd579929490065b0673d5f6eab50456ad56aa44e8c6006d6ee93ff7cc3ce0435cb1c42fae019fd1d4ba02d04e5c33fb298166e20df03f38653ef3672c47024a9b3a39b04b040ce905377de40590d5d211646dd4201e793f6d39801f2a33f3a2fde03a942a0b34646d4fcb7891d7074cc8981f32c2a6d262"], 0x1c}}, 0x0)

0s ago: executing program 34 (id=1745):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x15, 0x1, 0x3, 0xfffffff8}, {0x60, 0x8}, {}, {0x1, 0x0, 0x0, 0x3}, {0x6, 0x3}]})
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1, 0x0, 0x9}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x18, 0x76, 0xb0d, 0x4000, 0x0, {0x3}}, 0x18}, 0x1, 0x0, 0x0, 0x30008000}, 0x0)
r3 = socket$caif_stream(0x25, 0x1, 0x0)
setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x2, 'ip6gretap0\x00', {0xe105}, 0xfff8})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f000000af40)={&(0x7f0000009500)={0x10, 0x0, 0x0, 0x81880800}, 0xc, &(0x7f000000af00)={&(0x7f0000009580)=@newneigh={0x2c, 0x1c, 0x126, 0x70bd28, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x80, 0x20, 0x5}, [@NDA_SRC_VNI={0x8, 0xb, 0x1}, @NDA_LINK_NETNSID={0x8, 0xa, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x8000000)
bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
sendmsg$nl_route_sched(r5, 0x0, 0x2000400c)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x31)
r6 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfffe, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)

kernel console output (not intermixed with test programs):

98'.
[  106.808779][ T7844] xt_cgroup: xt_cgroup: no path or classid specified
[  106.840811][ T7848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.600'.
[  106.862661][ T7848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.600'.
[  106.865846][ T7848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.600'.
[  106.869423][ T7848] netlink: 2 bytes leftover after parsing attributes in process `syz.1.600'.
[  106.956610][ T7854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.604'.
[  107.027669][ T7866] IPVS: length: 209 != 8
[  107.091530][ T7871] syzkaller1: entered promiscuous mode
[  107.095065][ T7871] syzkaller1: entered allmulticast mode
[  107.280847][ T7892] netlink: 16 bytes leftover after parsing attributes in process `syz.0.613'.
[  107.360876][ T7898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.616'.
[  107.388774][ T7898] 8021q: adding VLAN 0 to HW filter on device bond3
[  107.454752][ T7907] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  107.662826][ T7928] netlink: 'syz.1.629': attribute type 1 has an invalid length.
[  107.691469][ T7928] 8021q: adding VLAN 0 to HW filter on device bond4
[  107.712875][ T7928] bond4: (slave bridge2): making interface the new active one
[  107.725750][ T7928] bond4: (slave bridge2): Enslaving as an active interface with an up link
[  107.894731][   T33] audit: type=1800 audit(1752775550.361:5): pid=7944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.634" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=1034 res=0 errno=0
[  108.014114][ T7955] sctp: [Deprecated]: syz.2.636 (pid 7955) Use of int in max_burst socket option.
[  108.014114][ T7955] Use struct sctp_assoc_value instead
[  108.209930][ T7963] syzkaller0: entered promiscuous mode
[  108.211936][ T7963] syzkaller0: entered allmulticast mode
[  110.052692][ T7984] syz.2.645 uses old SIOCAX25GETINFO
[  110.121696][ T7992] netlink: 'syz.0.648': attribute type 4 has an invalid length.
[  110.189727][ T7996] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  111.300736][ T8053] xt_ipcomp: unknown flags F7
[  111.800160][ T8083] syzkaller1: entered promiscuous mode
[  111.802364][ T8083] syzkaller1: entered allmulticast mode
[  113.218530][   T60] block nbd0: Possible stuck request ffff888020990000: control (read@0,1024B). Runtime 30 seconds
[  113.222811][   T60] block nbd0: Possible stuck request ffff888020990200: control (read@1024,1024B). Runtime 30 seconds
[  113.229388][   T60] block nbd0: Possible stuck request ffff888020990400: control (read@2048,1024B). Runtime 30 seconds
[  113.233743][   T60] block nbd0: Possible stuck request ffff888020990600: control (read@3072,1024B). Runtime 30 seconds
[  132.419094][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.421272][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  143.297044][   T60] block nbd0: Possible stuck request ffff888020990000: control (read@0,1024B). Runtime 60 seconds
[  143.301143][   T60] block nbd0: Possible stuck request ffff888020990200: control (read@1024,1024B). Runtime 60 seconds
[  143.305315][   T60] block nbd0: Possible stuck request ffff888020990400: control (read@2048,1024B). Runtime 60 seconds
[  143.309890][   T60] block nbd0: Possible stuck request ffff888020990600: control (read@3072,1024B). Runtime 60 seconds
[  143.491543][ T5278] udevd[5278]: worker [5968] /devices/virtual/block/nbd0 is taking a long time
[  144.696256][ T8108] dvmrp0: entered allmulticast mode
[  144.713081][ T8097] openvswitch: netlink: Tunnel attr 226 out of range max 16
[  145.036220][ T8124] __nla_validate_parse: 10 callbacks suppressed
[  145.036236][ T8124] netlink: 164 bytes leftover after parsing attributes in process `syz.1.691'.
[  145.349037][ T8131] netlink: 24 bytes leftover after parsing attributes in process `syz.2.694'.
[  145.359036][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.694'.
[  145.368591][ T8131] netlink: 'syz.2.694': attribute type 39 has an invalid length.
[  145.661243][ T8145] ip6tnl1: entered promiscuous mode
[  145.663333][ T8145] ip6tnl1: entered allmulticast mode
[  145.668001][ T8145] team0: Device ip6tnl1 is of different type
[  145.710934][ T8149] netlink: 'syz.0.701': attribute type 1 has an invalid length.
[  145.768425][ T8153] @: renamed from veth0_vlan (while UP)
[  145.811812][ T8156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.705'.
[  145.943239][ T8166] netlink: 88 bytes leftover after parsing attributes in process `syz.0.708'.
[  145.946090][ T8166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.708'.
[  146.061266][ T8173] netlink: 28 bytes leftover after parsing attributes in process `syz.1.711'.
[  146.064957][ T8173] netlink: 'syz.1.711': attribute type 7 has an invalid length.
[  146.068422][ T8173] netlink: 'syz.1.711': attribute type 8 has an invalid length.
[  146.071492][ T8173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.711'.
[  146.083160][ T8173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.711'.
[  146.131855][ T8174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.709'.
[  146.700864][ T8183] xt_hashlimit: invalid interval
[  146.854699][ T8188] syzkaller1: entered promiscuous mode
[  146.857113][ T8188] syzkaller1: entered allmulticast mode
[  147.064892][ T8194] openvswitch: netlink: Tunnel attr 226 out of range max 16
[  147.119481][ T8196] netlink: 'syz.1.720': attribute type 4 has an invalid length.
[  147.340631][ T8208] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  147.353725][ T8091] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  147.357443][ T8091] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  147.377225][ T5860] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  147.434600][ T8219] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.439752][ T8219] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 57109 - 0
[  147.494219][ T8221] openvswitch: netlink: Tunnel attr 226 out of range max 16
[  147.504967][ T8219] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.509360][ T8219] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 57109 - 0
[  147.562576][ T8219] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.566583][ T8219] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 57109 - 0
[  147.623367][ T8219] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.628434][ T8219] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 57109 - 0
[  147.703285][ T8219] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 57109 - 0
[  147.706190][ T8219] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  147.718050][ T8219] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 57109 - 0
[  147.721304][ T8219] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  147.731675][ T8219] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 57109 - 0
[  147.734226][ T8219] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  147.743916][ T8219] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 57109 - 0
[  147.746581][ T8219] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  148.053815][   T33] audit: type=1800 audit(1752775590.521:6): pid=8223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.729" name="cgroup.controllers" dev="tmpfs" ino=1242 res=0 errno=0
[  148.081651][ T8229] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  148.336920][ T5860] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  148.419082][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  148.472877][ T8246] 0: left allmulticast mode
[  148.474465][ T8246] hsr_slave_0: left allmulticast mode
[  148.476165][ T8246] hsr_slave_1: left allmulticast mode
[  148.518587][ T8246] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  148.521349][ T8246] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  148.524149][ T8246] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  148.528141][ T8246] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  148.548514][ T8246] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  148.550709][ T8246] macsec1: left promiscuous mode
[  148.552171][ T8246] macsec1: left allmulticast mode
[  148.555620][ T8246] veth3: left promiscuous mode
[  148.562654][ T8249] netlink: 'syz.2.739': attribute type 4 has an invalid length.
[  148.574774][ T8247] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  148.578786][ T8247] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  148.582104][ T8247] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  148.585491][ T8247] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  148.594724][  T791] wg1 speed is unknown, defaulting to 1000
[  148.607332][  T791] syz0: Port: 1 Link DOWN
[  148.673756][ T8254] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  148.680299][ T8254] syzkaller0: entered promiscuous mode
[  148.682151][ T8254] syzkaller0: entered allmulticast mode
[  148.688077][ T8254] tipc: Resetting bearer <eth:syzkaller0>
[  148.691463][ T8253] tipc: Resetting bearer <eth:syzkaller0>
[  148.701054][ T8253] tipc: Disabling bearer <eth:syzkaller0>
[  150.231732][ T8306] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  150.235589][ T8308] x_tables: duplicate underflow at hook 1
[  150.239914][ T8308] bridge0: entered allmulticast mode
[  150.242614][ T8308] __nla_validate_parse: 15 callbacks suppressed
[  150.242627][ T8308] netlink: 84 bytes leftover after parsing attributes in process `syz.1.757'.
[  150.250326][ T8308] netem: invalid attributes len -16
[  150.252468][ T8308] netem: change failed
[  150.277925][ T8311] netlink: 20 bytes leftover after parsing attributes in process `syz.2.758'.
[  150.281309][ T8312] netlink: 20 bytes leftover after parsing attributes in process `syz.2.758'.
[  150.340520][ T8311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.758'.
[  150.352265][ T8312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.758'.
[  150.362828][ T8311] netlink: 24 bytes leftover after parsing attributes in process `syz.2.758'.
[  150.976527][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  152.358207][ T8334] tipc: New replicast peer: 255.255.255.255
[  152.361391][ T8334] tipc: Enabled bearer <udp:syz2>, priority 10
[  152.786928][ T8355] netlink: 16 bytes leftover after parsing attributes in process `syz.1.775'.
[  153.153658][ T8375] netlink: 27 bytes leftover after parsing attributes in process `syz.1.781'.
[  153.381783][ T8383] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  153.476652][ T5867] tipc: Node number set to 2305521987
[  153.672320][ T8404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.792'.
[  153.685122][ T8404] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  153.838632][ T8412] netlink: 20 bytes leftover after parsing attributes in process `syz.2.796'.
[  153.958528][ T8417] syzkaller1: entered promiscuous mode
[  153.966469][ T8417] syzkaller1: entered allmulticast mode
[  154.048500][ T8422] netlink: 'syz.1.799': attribute type 5 has an invalid length.
[  155.214517][ T8473] netlink: 'syz.0.821': attribute type 1 has an invalid length.
[  155.236198][ T8473] 8021q: adding VLAN 0 to HW filter on device bond2
[  155.251653][ T8474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.821'.
[  155.254445][ T8473] bond2: (slave bridge4): making interface the new active one
[  155.261131][ T8473] bond2: (slave bridge4): Enslaving as an active interface with an up link
[  155.520192][ T8500] openvswitch: netlink: IP tunnel dst address not specified
[  155.606080][ T8506] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  155.687899][ T8510] netlink: 44 bytes leftover after parsing attributes in process `syz.1.832'.
[  155.787423][ T8518] netlink: 96 bytes leftover after parsing attributes in process `syz.1.834'.
[  155.795498][ T8518] netlink: 68 bytes leftover after parsing attributes in process `syz.1.834'.
[  155.805062][ T8521] netlink: 28 bytes leftover after parsing attributes in process `syz.0.835'.
[  155.820543][ T8521] netlink: 28 bytes leftover after parsing attributes in process `syz.0.835'.
[  155.823605][ T8521] netlink: 'syz.0.835': attribute type 4 has an invalid length.
[  155.871224][ T8526] netlink: 104 bytes leftover after parsing attributes in process `syz.2.837'.
[  156.090268][ T8541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.843'.
[  156.133713][ T8544] netlink: 44 bytes leftover after parsing attributes in process `syz.0.847'.
[  156.182175][ T8547] netlink: 72 bytes leftover after parsing attributes in process `syz.0.848'.
[  156.272746][ T8541] infiniband syz1: set down
[  156.274994][ T8541] infiniband syz1: added bond0
[  156.323999][ T8541] RDS/IB: syz1: added
[  156.326178][ T8541] smc: adding ib device syz1 with port count 1
[  156.330193][ T8541] smc:    ib device syz1 port 1 has pnetid 
[  157.317218][ T8604] netlink: 'syz.1.863': attribute type 4 has an invalid length.
[  157.522590][ T8613] tap0: tun_chr_ioctl cmd 1074025677
[  157.524500][ T8613] tap0: linktype set to 270
[  157.812168][ T8618] syzkaller1: entered promiscuous mode
[  157.814441][ T8618] syzkaller1: entered allmulticast mode
[  157.935320][ T8624] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  157.943628][ T8624] CPU: 0 UID: 0 PID: 8624 Comm: syz.0.871 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  157.943643][ T8624] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  157.943650][ T8624] Call Trace:
[  157.943654][ T8624]  <TASK>
[  157.943659][ T8624]  dump_stack_lvl+0x189/0x250
[  157.943679][ T8624]  ? __pfx_dump_stack_lvl+0x10/0x10
[  157.943690][ T8624]  ? __pfx__printk+0x10/0x10
[  157.943703][ T8624]  ? kernfs_path_from_node+0x2c/0x260
[  157.943714][ T8624]  ? kernfs_path_from_node+0x2c/0x260
[  157.943721][ T8624]  ? kernfs_path_from_node+0x2c/0x260
[  157.943730][ T8624]  ? kernfs_path_from_node+0x22c/0x260
[  157.943737][ T8624]  ? kernfs_path_from_node+0x2c/0x260
[  157.943746][ T8624]  sysfs_warn_dup+0x8e/0xa0
[  157.943759][ T8624]  sysfs_do_create_link_sd+0xc0/0x110
[  157.943768][ T8624]  device_add_class_symlinks+0x1cf/0x240
[  157.943783][ T8624]  device_add+0x475/0xb50
[  157.943797][ T8624]  wiphy_register+0x199a/0x26b0
[  157.943817][ T8624]  ? __pfx_wiphy_register+0x10/0x10
[  157.943827][ T8624]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  157.943842][ T8624]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  157.943856][ T8624]  ieee80211_register_hw+0x33e1/0x4120
[  157.943877][ T8624]  ? ieee80211_register_hw+0x13f1/0x4120
[  157.943893][ T8624]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  157.943907][ T8624]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  157.943924][ T8624]  ? __hrtimer_setup+0x187/0x210
[  157.943934][ T8624]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  157.943950][ T8624]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  157.943977][ T8624]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  157.943988][ T8624]  ? trace_kmalloc+0x1f/0xd0
[  157.944001][ T8624]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  157.944013][ T8624]  ? kstrndup+0xbf/0x160
[  157.944027][ T8624]  hwsim_new_radio_nl+0xea4/0x1b10
[  157.944040][ T8624]  ? __pfx___nla_validate_parse+0x10/0x10
[  157.944058][ T8624]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  157.944076][ T8624]  ? __nla_parse+0x40/0x60
[  157.944093][ T8624]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  157.944115][ T8624]  genl_family_rcv_msg_doit+0x215/0x300
[  157.944136][ T8624]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  157.944162][ T8624]  ? bpf_lsm_capable+0x9/0x20
[  157.944191][ T8624]  ? security_capable+0x7e/0x2e0
[  157.944214][ T8624]  genl_rcv_msg+0x60e/0x790
[  157.944236][ T8624]  ? __pfx_genl_rcv_msg+0x10/0x10
[  157.944251][ T8624]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  157.944281][ T8624]  netlink_rcv_skb+0x208/0x470
[  157.944295][ T8624]  ? __pfx_genl_rcv_msg+0x10/0x10
[  157.944304][ T8624]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  157.944324][ T8624]  ? down_read+0x1ad/0x2e0
[  157.944335][ T8624]  genl_rcv+0x28/0x40
[  157.944342][ T8624]  netlink_unicast+0x75c/0x8e0
[  157.944358][ T8624]  netlink_sendmsg+0x805/0xb30
[  157.944373][ T8624]  ? __pfx_netlink_sendmsg+0x10/0x10
[  157.944386][ T8624]  ? aa_sock_msg_perm+0x94/0x160
[  157.944396][ T8624]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  157.944409][ T8624]  ? __pfx_netlink_sendmsg+0x10/0x10
[  157.944426][ T8624]  __sock_sendmsg+0x21c/0x270
[  157.944445][ T8624]  ____sys_sendmsg+0x505/0x830
[  157.944522][ T8624]  ? __pfx_____sys_sendmsg+0x10/0x10
[  157.944551][ T8624]  ? import_iovec+0x74/0xa0
[  157.944576][ T8624]  ___sys_sendmsg+0x21f/0x2a0
[  157.944596][ T8624]  ? __pfx____sys_sendmsg+0x10/0x10
[  157.944639][ T8624]  ? __fget_files+0x2a/0x420
[  157.944651][ T8624]  ? __fget_files+0x3a0/0x420
[  157.944673][ T8624]  __x64_sys_sendmsg+0x19b/0x260
[  157.944696][ T8624]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  157.944727][ T8624]  ? rcu_is_watching+0x15/0xb0
[  157.944745][ T8624]  ? do_syscall_64+0xbe/0x3b0
[  157.944764][ T8624]  do_syscall_64+0xfa/0x3b0
[  157.944777][ T8624]  ? lockdep_hardirqs_on+0x9c/0x150
[  157.944792][ T8624]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.944806][ T8624]  ? exc_page_fault+0x9f/0xf0
[  157.944823][ T8624]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.944837][ T8624] RIP: 0033:0x7f040ef8e929
[  157.944852][ T8624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  157.944859][ T8624] RSP: 002b:00007f040fe0c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  157.944869][ T8624] RAX: ffffffffffffffda RBX: 00007f040f1b5fa0 RCX: 00007f040ef8e929
[  157.944875][ T8624] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  157.944881][ T8624] RBP: 00007f040f010ca1 R08: 0000000000000000 R09: 0000000000000000
[  157.944886][ T8624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  157.944890][ T8624] R13: 0000000000000000 R14: 00007f040f1b5fa0 R15: 00007fff4be9fbc8
[  157.944904][ T8624]  </TASK>
[  158.222592][ T8633] wg1 speed is unknown, defaulting to 1000
[  158.640927][ T8650] netlink: 'syz.0.880': attribute type 4 has an invalid length.
[  158.656504][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  158.793128][ T8658] openvswitch: netlink: Message has 24 unknown bytes.
[  158.796850][ T8658] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  159.152964][ T8680] trusted_key: syz.2.894 sent an empty control message without MSG_MORE.
[  160.294420][ T8727] xt_TCPMSS: Only works on TCP SYN packets
[  160.530423][ T8742] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  160.535602][ T8742] CPU: 0 UID: 0 PID: 8742 Comm: syz.0.913 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  160.535627][ T8742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  160.535656][ T8742] Call Trace:
[  160.535664][ T8742]  <TASK>
[  160.535672][ T8742]  dump_stack_lvl+0x189/0x250
[  160.535703][ T8742]  ? __pfx_dump_stack_lvl+0x10/0x10
[  160.535720][ T8742]  ? __pfx__printk+0x10/0x10
[  160.535740][ T8742]  ? kernfs_path_from_node+0x2c/0x260
[  160.535754][ T8742]  ? kernfs_path_from_node+0x2c/0x260
[  160.535767][ T8742]  ? kernfs_path_from_node+0x2c/0x260
[  160.535781][ T8742]  ? kernfs_path_from_node+0x22c/0x260
[  160.535792][ T8742]  ? kernfs_path_from_node+0x2c/0x260
[  160.535805][ T8742]  sysfs_warn_dup+0x8e/0xa0
[  160.535825][ T8742]  sysfs_do_create_link_sd+0xc0/0x110
[  160.535839][ T8742]  device_add_class_symlinks+0x1cf/0x240
[  160.535867][ T8742]  device_add+0x475/0xb50
[  160.535892][ T8742]  wiphy_register+0x199a/0x26b0
[  160.535926][ T8742]  ? __pfx_wiphy_register+0x10/0x10
[  160.535946][ T8742]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  160.535973][ T8742]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  160.536000][ T8742]  ieee80211_register_hw+0x33e1/0x4120
[  160.536037][ T8742]  ? ieee80211_register_hw+0x13f1/0x4120
[  160.536066][ T8742]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  160.536088][ T8742]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  160.536143][ T8742]  ? __hrtimer_setup+0x187/0x210
[  160.536162][ T8742]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  160.536191][ T8742]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  160.536272][ T8742]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  160.536295][ T8742]  ? trace_kmalloc+0x1f/0xd0
[  160.536314][ T8742]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  160.536344][ T8742]  ? kstrndup+0xbf/0x160
[  160.536372][ T8742]  hwsim_new_radio_nl+0xea4/0x1b10
[  160.536395][ T8742]  ? __pfx___nla_validate_parse+0x10/0x10
[  160.536427][ T8742]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  160.536461][ T8742]  ? __nla_parse+0x40/0x60
[  160.536485][ T8742]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  160.536511][ T8742]  genl_family_rcv_msg_doit+0x215/0x300
[  160.536535][ T8742]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  160.536562][ T8742]  ? bpf_lsm_capable+0x9/0x20
[  160.536581][ T8742]  ? security_capable+0x7e/0x2e0
[  160.536601][ T8742]  genl_rcv_msg+0x60e/0x790
[  160.536619][ T8742]  ? __pfx_genl_rcv_msg+0x10/0x10
[  160.536636][ T8742]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  160.536670][ T8742]  netlink_rcv_skb+0x208/0x470
[  160.536693][ T8742]  ? __pfx_genl_rcv_msg+0x10/0x10
[  160.536713][ T8742]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  160.536753][ T8742]  ? down_read+0x1ad/0x2e0
[  160.536773][ T8742]  genl_rcv+0x28/0x40
[  160.536786][ T8742]  netlink_unicast+0x75c/0x8e0
[  160.536812][ T8742]  netlink_sendmsg+0x805/0xb30
[  160.536839][ T8742]  ? __pfx_netlink_sendmsg+0x10/0x10
[  160.536867][ T8742]  ? aa_sock_msg_perm+0x94/0x160
[  160.536890][ T8742]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  160.536911][ T8742]  ? __pfx_netlink_sendmsg+0x10/0x10
[  160.536932][ T8742]  __sock_sendmsg+0x21c/0x270
[  160.536954][ T8742]  ____sys_sendmsg+0x505/0x830
[  160.536982][ T8742]  ? __pfx_____sys_sendmsg+0x10/0x10
[  160.537013][ T8742]  ? import_iovec+0x74/0xa0
[  160.537040][ T8742]  ___sys_sendmsg+0x21f/0x2a0
[  160.537062][ T8742]  ? __pfx____sys_sendmsg+0x10/0x10
[  160.537117][ T8742]  ? __fget_files+0x2a/0x420
[  160.537131][ T8742]  ? __fget_files+0x3a0/0x420
[  160.537155][ T8742]  __x64_sys_sendmsg+0x19b/0x260
[  160.537182][ T8742]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  160.537215][ T8742]  ? rcu_is_watching+0x15/0xb0
[  160.537272][ T8742]  ? do_syscall_64+0xbe/0x3b0
[  160.537295][ T8742]  do_syscall_64+0xfa/0x3b0
[  160.537310][ T8742]  ? lockdep_hardirqs_on+0x9c/0x150
[  160.537332][ T8742]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.537348][ T8742]  ? exc_page_fault+0x9f/0xf0
[  160.537365][ T8742]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.537381][ T8742] RIP: 0033:0x7f040ef8e929
[  160.537397][ T8742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  160.537412][ T8742] RSP: 002b:00007f040fe0c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  160.537430][ T8742] RAX: ffffffffffffffda RBX: 00007f040f1b5fa0 RCX: 00007f040ef8e929
[  160.537442][ T8742] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  160.537450][ T8742] RBP: 00007f040f010ca1 R08: 0000000000000000 R09: 0000000000000000
[  160.537460][ T8742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  160.537467][ T8742] R13: 0000000000000000 R14: 00007f040f1b5fa0 R15: 00007fff4be9fbc8
[  160.537489][ T8742]  </TASK>
[  160.910736][ T8754] IPVS: persistence engine module ip_vs_pe_ not found
[  160.958508][ T8756] IPVS: persistence engine module ip_vs_pe_ not found
[  160.979638][ T8766] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  160.984159][ T8766] CPU: 0 UID: 0 PID: 8766 Comm: syz.1.922 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  160.984210][ T8766] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  160.984222][ T8766] Call Trace:
[  160.984230][ T8766]  <TASK>
[  160.984239][ T8766]  dump_stack_lvl+0x189/0x250
[  160.984271][ T8766]  ? __pfx_dump_stack_lvl+0x10/0x10
[  160.984292][ T8766]  ? __pfx__printk+0x10/0x10
[  160.984315][ T8766]  ? kernfs_path_from_node+0x2c/0x260
[  160.984332][ T8766]  ? kernfs_path_from_node+0x2c/0x260
[  160.984346][ T8766]  ? kernfs_path_from_node+0x2c/0x260
[  160.984361][ T8766]  ? kernfs_path_from_node+0x22c/0x260
[  160.984374][ T8766]  ? kernfs_path_from_node+0x2c/0x260
[  160.984392][ T8766]  sysfs_warn_dup+0x8e/0xa0
[  160.984414][ T8766]  sysfs_do_create_link_sd+0xc0/0x110
[  160.984430][ T8766]  device_add_class_symlinks+0x1cf/0x240
[  160.984456][ T8766]  device_add+0x475/0xb50
[  160.984482][ T8766]  wiphy_register+0x199a/0x26b0
[  160.984516][ T8766]  ? __pfx_wiphy_register+0x10/0x10
[  160.984533][ T8766]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  160.984560][ T8766]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  160.984584][ T8766]  ieee80211_register_hw+0x33e1/0x4120
[  160.984622][ T8766]  ? ieee80211_register_hw+0x13f1/0x4120
[  160.984651][ T8766]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  160.984677][ T8766]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  160.984708][ T8766]  ? __hrtimer_setup+0x187/0x210
[  160.984725][ T8766]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  160.984752][ T8766]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  160.984802][ T8766]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  160.984824][ T8766]  ? trace_kmalloc+0x1f/0xd0
[  160.984845][ T8766]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  160.984866][ T8766]  ? kstrndup+0xbf/0x160
[  160.984891][ T8766]  hwsim_new_radio_nl+0xea4/0x1b10
[  160.984915][ T8766]  ? __pfx___nla_validate_parse+0x10/0x10
[  160.984947][ T8766]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  160.984981][ T8766]  ? __nla_parse+0x40/0x60
[  160.985002][ T8766]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  160.985027][ T8766]  genl_family_rcv_msg_doit+0x215/0x300
[  160.985058][ T8766]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  160.985087][ T8766]  ? bpf_lsm_capable+0x9/0x20
[  160.985110][ T8766]  ? security_capable+0x7e/0x2e0
[  160.985133][ T8766]  genl_rcv_msg+0x60e/0x790
[  160.985156][ T8766]  ? __pfx_genl_rcv_msg+0x10/0x10
[  160.985171][ T8766]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  160.985239][ T8766]  netlink_rcv_skb+0x208/0x470
[  160.985264][ T8766]  ? __pfx_genl_rcv_msg+0x10/0x10
[  160.985281][ T8766]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  160.985317][ T8766]  ? down_read+0x1ad/0x2e0
[  160.985337][ T8766]  genl_rcv+0x28/0x40
[  160.985350][ T8766]  netlink_unicast+0x75c/0x8e0
[  160.985379][ T8766]  netlink_sendmsg+0x805/0xb30
[  160.985409][ T8766]  ? __pfx_netlink_sendmsg+0x10/0x10
[  160.985432][ T8766]  ? aa_sock_msg_perm+0x94/0x160
[  160.985450][ T8766]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  160.985466][ T8766]  ? __pfx_netlink_sendmsg+0x10/0x10
[  160.985488][ T8766]  __sock_sendmsg+0x21c/0x270
[  160.985510][ T8766]  ____sys_sendmsg+0x505/0x830
[  160.985538][ T8766]  ? __pfx_____sys_sendmsg+0x10/0x10
[  160.985569][ T8766]  ? import_iovec+0x74/0xa0
[  160.985593][ T8766]  ___sys_sendmsg+0x21f/0x2a0
[  160.985618][ T8766]  ? __pfx____sys_sendmsg+0x10/0x10
[  160.985675][ T8766]  ? __fget_files+0x2a/0x420
[  160.985689][ T8766]  ? __fget_files+0x3a0/0x420
[  160.985712][ T8766]  __x64_sys_sendmsg+0x19b/0x260
[  160.985759][ T8766]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  160.985794][ T8766]  ? rcu_is_watching+0x15/0xb0
[  160.985819][ T8766]  ? do_syscall_64+0xbe/0x3b0
[  160.985841][ T8766]  do_syscall_64+0xfa/0x3b0
[  160.985856][ T8766]  ? lockdep_hardirqs_on+0x9c/0x150
[  160.985872][ T8766]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.985887][ T8766]  ? exc_page_fault+0x9f/0xf0
[  160.985903][ T8766]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.985917][ T8766] RIP: 0033:0x7fa6f698e929
[  160.985934][ T8766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  160.985949][ T8766] RSP: 002b:00007fa6f778e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  160.985967][ T8766] RAX: ffffffffffffffda RBX: 00007fa6f6bb5fa0 RCX: 00007fa6f698e929
[  160.985980][ T8766] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  160.985990][ T8766] RBP: 00007fa6f6a10ca1 R08: 0000000000000000 R09: 0000000000000000
[  160.986000][ T8766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  160.986009][ T8766] R13: 0000000000000000 R14: 00007fa6f6bb5fa0 R15: 00007ffd5463a088
[  160.986041][ T8766]  </TASK>
[  161.184238][ T8772] openvswitch: netlink: Tunnel attr 226 out of range max 16
[  161.302185][ T8777] xt_CT: No such helper "syz0"
[  161.342143][ T8788] __nla_validate_parse: 16 callbacks suppressed
[  161.342184][ T8788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.929'.
[  161.417752][ T8795] netlink: 16 bytes leftover after parsing attributes in process `syz.2.933'.
[  161.688842][ T8802] openvswitch: netlink: Tunnel attr 226 out of range max 16
[  162.273706][ T8804] netlink: 76 bytes leftover after parsing attributes in process `syz.1.935'.
[  162.394220][ T8816] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  162.400907][ T8816] CPU: 1 UID: 0 PID: 8816 Comm: syz.1.941 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  162.400924][ T8816] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  162.400931][ T8816] Call Trace:
[  162.400936][ T8816]  <TASK>
[  162.400940][ T8816]  dump_stack_lvl+0x189/0x250
[  162.400961][ T8816]  ? __pfx_dump_stack_lvl+0x10/0x10
[  162.400973][ T8816]  ? __pfx__printk+0x10/0x10
[  162.400986][ T8816]  ? kernfs_path_from_node+0x2c/0x260
[  162.400996][ T8816]  ? kernfs_path_from_node+0x2c/0x260
[  162.401004][ T8816]  ? kernfs_path_from_node+0x2c/0x260
[  162.401013][ T8816]  ? kernfs_path_from_node+0x22c/0x260
[  162.401020][ T8816]  ? kernfs_path_from_node+0x2c/0x260
[  162.401029][ T8816]  sysfs_warn_dup+0x8e/0xa0
[  162.401042][ T8816]  sysfs_do_create_link_sd+0xc0/0x110
[  162.401080][ T8816]  device_add_class_symlinks+0x1cf/0x240
[  162.401098][ T8816]  device_add+0x475/0xb50
[  162.401113][ T8816]  wiphy_register+0x199a/0x26b0
[  162.401134][ T8816]  ? __pfx_wiphy_register+0x10/0x10
[  162.401143][ T8816]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  162.401166][ T8816]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  162.401182][ T8816]  ieee80211_register_hw+0x33e1/0x4120
[  162.401207][ T8816]  ? ieee80211_register_hw+0x13f1/0x4120
[  162.401224][ T8816]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  162.401240][ T8816]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  162.401258][ T8816]  ? __hrtimer_setup+0x187/0x210
[  162.401268][ T8816]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  162.401286][ T8816]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  162.401316][ T8816]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  162.401328][ T8816]  ? trace_kmalloc+0x1f/0xd0
[  162.401341][ T8816]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  162.401354][ T8816]  ? kstrndup+0xbf/0x160
[  162.401369][ T8816]  hwsim_new_radio_nl+0xea4/0x1b10
[  162.401383][ T8816]  ? __pfx___nla_validate_parse+0x10/0x10
[  162.401401][ T8816]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  162.401419][ T8816]  ? __nla_parse+0x40/0x60
[  162.401430][ T8816]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  162.401444][ T8816]  genl_family_rcv_msg_doit+0x215/0x300
[  162.401457][ T8816]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  162.401472][ T8816]  ? bpf_lsm_capable+0x9/0x20
[  162.401483][ T8816]  ? security_capable+0x7e/0x2e0
[  162.401495][ T8816]  genl_rcv_msg+0x60e/0x790
[  162.401507][ T8816]  ? __pfx_genl_rcv_msg+0x10/0x10
[  162.401515][ T8816]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  162.401534][ T8816]  netlink_rcv_skb+0x208/0x470
[  162.401545][ T8816]  ? __pfx_genl_rcv_msg+0x10/0x10
[  162.401554][ T8816]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  162.401574][ T8816]  ? down_read+0x1ad/0x2e0
[  162.401584][ T8816]  genl_rcv+0x28/0x40
[  162.401592][ T8816]  netlink_unicast+0x75c/0x8e0
[  162.401608][ T8816]  netlink_sendmsg+0x805/0xb30
[  162.401624][ T8816]  ? __pfx_netlink_sendmsg+0x10/0x10
[  162.401637][ T8816]  ? aa_sock_msg_perm+0x94/0x160
[  162.401647][ T8816]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  162.401656][ T8816]  ? __pfx_netlink_sendmsg+0x10/0x10
[  162.401668][ T8816]  __sock_sendmsg+0x21c/0x270
[  162.401680][ T8816]  ____sys_sendmsg+0x505/0x830
[  162.401696][ T8816]  ? __pfx_____sys_sendmsg+0x10/0x10
[  162.401713][ T8816]  ? import_iovec+0x74/0xa0
[  162.401726][ T8816]  ___sys_sendmsg+0x21f/0x2a0
[  162.401739][ T8816]  ? __pfx____sys_sendmsg+0x10/0x10
[  162.401770][ T8816]  ? __fget_files+0x2a/0x420
[  162.401778][ T8816]  ? __fget_files+0x3a0/0x420
[  162.401791][ T8816]  __x64_sys_sendmsg+0x19b/0x260
[  162.401805][ T8816]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  162.401822][ T8816]  ? rcu_is_watching+0x15/0xb0
[  162.401835][ T8816]  ? do_syscall_64+0xbe/0x3b0
[  162.401847][ T8816]  do_syscall_64+0xfa/0x3b0
[  162.401855][ T8816]  ? lockdep_hardirqs_on+0x9c/0x150
[  162.401863][ T8816]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.401871][ T8816]  ? exc_page_fault+0x9f/0xf0
[  162.401880][ T8816]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.401888][ T8816] RIP: 0033:0x7fa6f698e929
[  162.401899][ T8816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  162.401907][ T8816] RSP: 002b:00007fa6f778e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  162.401916][ T8816] RAX: ffffffffffffffda RBX: 00007fa6f6bb5fa0 RCX: 00007fa6f698e929
[  162.401924][ T8816] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  162.401930][ T8816] RBP: 00007fa6f6a10ca1 R08: 0000000000000000 R09: 0000000000000000
[  162.401935][ T8816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  162.401941][ T8816] R13: 0000000000000000 R14: 00007fa6f6bb5fa0 R15: 00007ffd5463a088
[  162.401955][ T8816]  </TASK>
[  162.621256][ T8818] netlink: 'syz.2.942': attribute type 9 has an invalid length.
[  162.624401][ T8818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.942'.
[  162.646265][ T8818] macvlan0: entered promiscuous mode
[  162.648287][ T8818] hsr0: entered promiscuous mode
[  162.650426][ T8818] macvlan0: entered allmulticast mode
[  162.652587][ T8818] hsr0: entered allmulticast mode
[  162.654402][ T8818] hsr_slave_0: entered allmulticast mode
[  162.658480][ T8818] hsr_slave_1: entered allmulticast mode
[  162.763687][ T8825] openvswitch: netlink: Tunnel attr 226 out of range max 16
[  162.883095][ T8843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.950'.
[  162.928241][ T8853] netlink: 84 bytes leftover after parsing attributes in process `syz.0.954'.
[  162.932099][ T8853] netlink: 84 bytes leftover after parsing attributes in process `syz.0.954'.
[  163.184935][ T8872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.962'.
[  163.192157][ T8872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.962'.
[  163.333257][ T8889] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  163.402527][ T8890] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  163.486096][ T8890] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  163.577388][ T8890] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  163.646108][ T8890] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  163.745789][ T8890] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  163.764051][ T8890] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  163.780900][ T8890] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  163.804322][ T8890] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  163.919534][ T8905] netlink: 16 bytes leftover after parsing attributes in process `syz.0.971'.
[  164.208204][ T8920] netlink: 'syz.2.976': attribute type 4 has an invalid length.
[  164.449427][ T8932] batadv_slave_0: entered promiscuous mode
[  164.480939][ T8940] syzkaller1: entered promiscuous mode
[  164.483330][ T8940] syzkaller1: entered allmulticast mode
[  165.119238][ T8988] netdevsim netdevsim2: Direct firmware load for .
[  165.119238][ T8988]  failed with error -2
[  165.123243][ T8988] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  165.123243][ T8988] 
[  165.628568][ T9010] netlink: 'syz.1.1010': attribute type 4 has an invalid length.
[  165.940390][ T8989] netdevsim netdevsim2: Direct firmware load for .
[  165.940390][ T8989]  failed with error -2
[  165.944351][ T8989] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  165.944351][ T8989] 
[  166.411374][ T9040] syzkaller1: entered promiscuous mode
[  166.413625][ T9040] syzkaller1: entered allmulticast mode
[  166.739997][ T9055] openvswitch: netlink: Tunnel attr 226 out of range max 16
[  166.923846][ T9066] __nla_validate_parse: 14 callbacks suppressed
[  166.923865][ T9066] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1027'.
[  167.003404][ T9070] syzkaller1: entered promiscuous mode
[  167.005735][ T9070] syzkaller1: entered allmulticast mode
[  167.017187][ T9073] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1030'.
[  167.178828][ T9081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1034'.
[  167.181959][ T9081] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1034'.
[  167.185294][ T9081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1034'.
[  167.189682][ T9081] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1034'.
[  167.194732][ T9081] netlink: 'syz.1.1034': attribute type 7 has an invalid length.
[  167.205830][ T9081] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1034'.
[  167.210104][ T9081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1034'.
[  167.214018][ T9081] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1034'.
[  167.495986][ T9097] syzkaller1: entered promiscuous mode
[  167.502055][ T9097] syzkaller1: entered allmulticast mode
[  167.512763][ T9097] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  167.685857][ T9104] syzkaller1: entered promiscuous mode
[  167.688284][ T9104] syzkaller1: entered allmulticast mode
[  167.968298][ T9107] netlink: 252 bytes leftover after parsing attributes in process `syz.1.1042'.
[  168.067407][ T9110] netlink: 'syz.2.1043': attribute type 29 has an invalid length.
[  168.084167][ T9109] netlink: 'syz.2.1043': attribute type 29 has an invalid length.
[  168.395790][ T9136] syzkaller1: entered promiscuous mode
[  168.402988][ T9136] syzkaller1: entered allmulticast mode
[  168.572998][ T9153] vlan2: entered promiscuous mode
[  168.574721][ T9153] vlan2: entered allmulticast mode
[  168.576242][ T9153] hsr_slave_1: entered allmulticast mode
[  168.617667][ T9155] netlink: 'syz.2.1058': attribute type 7 has an invalid length.
[  168.747639][ T9165] netlink: 'syz.0.1062': attribute type 4 has an invalid length.
[  169.023787][ T9194] netlink: 'syz.2.1070': attribute type 1 has an invalid length.
[  169.122478][ T9207] netlink: 'syz.2.1076': attribute type 5 has an invalid length.
[  169.158300][ T9214] nbd: illegal input index 65508
[  169.261898][ T9224] netlink: 'syz.1.1079': attribute type 13 has an invalid length.
[  169.265079][ T9224] netlink: 'syz.1.1079': attribute type 17 has an invalid length.
[  169.345910][ T9224] 8021q: adding VLAN 0 to HW filter on device 
[  169.350899][ T9224] 8021q: adding VLAN 0 to HW filter on device team0
[  169.362138][ T9224] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  169.388447][ T9227] wg1 speed is unknown, defaulting to 1000
[  169.454004][ T9224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  169.518854][ T9224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  169.581149][ T9220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.204806][ T9244] syzkaller1: entered promiscuous mode
[  170.219713][ T9244] syzkaller1: entered allmulticast mode
[  170.675042][ T9273] netlink: 'syz.2.1096': attribute type 39 has an invalid length.
[  170.762208][ T9287] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  170.944199][ T9302] x_tables: ip_tables: udp match: only valid for protocol 17
[  171.039579][ T9297] openvswitch: netlink: Tunnel attr 226 out of range max 16
[  171.311764][ T9339] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  171.316863][ T9339] CPU: 1 UID: 0 PID: 9339 Comm: syz.2.1118 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  171.316886][ T9339] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  171.316897][ T9339] Call Trace:
[  171.316903][ T9339]  <TASK>
[  171.316911][ T9339]  dump_stack_lvl+0x189/0x250
[  171.316942][ T9339]  ? __pfx_dump_stack_lvl+0x10/0x10
[  171.316962][ T9339]  ? __pfx__printk+0x10/0x10
[  171.316986][ T9339]  ? kernfs_path_from_node+0x2c/0x260
[  171.317005][ T9339]  ? kernfs_path_from_node+0x2c/0x260
[  171.317019][ T9339]  ? kernfs_path_from_node+0x2c/0x260
[  171.317036][ T9339]  ? kernfs_path_from_node+0x22c/0x260
[  171.317051][ T9339]  ? kernfs_path_from_node+0x2c/0x260
[  171.317071][ T9339]  sysfs_warn_dup+0x8e/0xa0
[  171.317096][ T9339]  sysfs_do_create_link_sd+0xc0/0x110
[  171.317114][ T9339]  device_add_class_symlinks+0x1cf/0x240
[  171.317141][ T9339]  device_add+0x475/0xb50
[  171.317167][ T9339]  wiphy_register+0x199a/0x26b0
[  171.317236][ T9339]  ? __pfx_wiphy_register+0x10/0x10
[  171.317272][ T9339]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  171.317303][ T9339]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  171.317330][ T9339]  ieee80211_register_hw+0x33e1/0x4120
[  171.317370][ T9339]  ? ieee80211_register_hw+0x13f1/0x4120
[  171.317400][ T9339]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  171.317426][ T9339]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  171.317456][ T9339]  ? __hrtimer_setup+0x187/0x210
[  171.317474][ T9339]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  171.317502][ T9339]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  171.317549][ T9339]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  171.317569][ T9339]  ? trace_kmalloc+0x1f/0xd0
[  171.317588][ T9339]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  171.317610][ T9339]  ? kstrndup+0xbf/0x160
[  171.317634][ T9339]  hwsim_new_radio_nl+0xea4/0x1b10
[  171.317657][ T9339]  ? __pfx___nla_validate_parse+0x10/0x10
[  171.317689][ T9339]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  171.317724][ T9339]  ? __nla_parse+0x40/0x60
[  171.317747][ T9339]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  171.317780][ T9339]  genl_family_rcv_msg_doit+0x215/0x300
[  171.317804][ T9339]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  171.317834][ T9339]  ? bpf_lsm_capable+0x9/0x20
[  171.317854][ T9339]  ? security_capable+0x7e/0x2e0
[  171.317876][ T9339]  genl_rcv_msg+0x60e/0x790
[  171.317897][ T9339]  ? __pfx_genl_rcv_msg+0x10/0x10
[  171.317911][ T9339]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  171.317945][ T9339]  netlink_rcv_skb+0x208/0x470
[  171.317966][ T9339]  ? __pfx_genl_rcv_msg+0x10/0x10
[  171.317983][ T9339]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  171.318018][ T9339]  ? down_read+0x1ad/0x2e0
[  171.318038][ T9339]  genl_rcv+0x28/0x40
[  171.318051][ T9339]  netlink_unicast+0x75c/0x8e0
[  171.318080][ T9339]  netlink_sendmsg+0x805/0xb30
[  171.318110][ T9339]  ? __pfx_netlink_sendmsg+0x10/0x10
[  171.318133][ T9339]  ? aa_sock_msg_perm+0x94/0x160
[  171.318152][ T9339]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  171.318168][ T9339]  ? __pfx_netlink_sendmsg+0x10/0x10
[  171.318221][ T9339]  __sock_sendmsg+0x21c/0x270
[  171.318252][ T9339]  ____sys_sendmsg+0x505/0x830
[  171.318284][ T9339]  ? __pfx_____sys_sendmsg+0x10/0x10
[  171.318316][ T9339]  ? import_iovec+0x74/0xa0
[  171.318339][ T9339]  ___sys_sendmsg+0x21f/0x2a0
[  171.318363][ T9339]  ? __pfx____sys_sendmsg+0x10/0x10
[  171.318420][ T9339]  ? __fget_files+0x2a/0x420
[  171.318441][ T9339]  ? __fget_files+0x3a0/0x420
[  171.318466][ T9339]  __x64_sys_sendmsg+0x19b/0x260
[  171.318493][ T9339]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  171.318527][ T9339]  ? rcu_is_watching+0x15/0xb0
[  171.318550][ T9339]  ? do_syscall_64+0xbe/0x3b0
[  171.318571][ T9339]  do_syscall_64+0xfa/0x3b0
[  171.318586][ T9339]  ? lockdep_hardirqs_on+0x9c/0x150
[  171.318600][ T9339]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.318615][ T9339]  ? exc_page_fault+0x9f/0xf0
[  171.318632][ T9339]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.318646][ T9339] RIP: 0033:0x7fbeb098e929
[  171.318662][ T9339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  171.318675][ T9339] RSP: 002b:00007fbeb1722038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  171.318694][ T9339] RAX: ffffffffffffffda RBX: 00007fbeb0bb5fa0 RCX: 00007fbeb098e929
[  171.318706][ T9339] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  171.318716][ T9339] RBP: 00007fbeb0a10ca1 R08: 0000000000000000 R09: 0000000000000000
[  171.318726][ T9339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  171.318735][ T9339] R13: 0000000000000000 R14: 00007fbeb0bb5fa0 R15: 00007fffda59f738
[  171.318761][ T9339]  </TASK>
[  171.399621][ T9345] syzkaller1: entered promiscuous mode
[  171.462976][ T9340] netlink: 'syz.0.1117': attribute type 83 has an invalid length.
[  171.503914][ T9345] syzkaller1: entered allmulticast mode
[  171.598359][ T9352] tipc: Can't bind to reserved service type 0
[  171.640227][ T9358] openvswitch: netlink: Tunnel attr 226 out of range max 16
[  171.793474][ T9384] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  171.797911][ T9384] CPU: 0 UID: 0 PID: 9384 Comm: syz.1.1133 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  171.797932][ T9384] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  171.797938][ T9384] Call Trace:
[  171.797943][ T9384]  <TASK>
[  171.797949][ T9384]  dump_stack_lvl+0x189/0x250
[  171.797969][ T9384]  ? __pfx_dump_stack_lvl+0x10/0x10
[  171.797981][ T9384]  ? __pfx__printk+0x10/0x10
[  171.798001][ T9384]  ? kernfs_path_from_node+0x2c/0x260
[  171.798013][ T9384]  ? kernfs_path_from_node+0x2c/0x260
[  171.798021][ T9384]  ? kernfs_path_from_node+0x2c/0x260
[  171.798031][ T9384]  ? kernfs_path_from_node+0x22c/0x260
[  171.798039][ T9384]  ? kernfs_path_from_node+0x2c/0x260
[  171.798050][ T9384]  sysfs_warn_dup+0x8e/0xa0
[  171.798066][ T9384]  sysfs_do_create_link_sd+0xc0/0x110
[  171.798076][ T9384]  device_add_class_symlinks+0x1cf/0x240
[  171.798091][ T9384]  device_add+0x475/0xb50
[  171.798105][ T9384]  wiphy_register+0x199a/0x26b0
[  171.798126][ T9384]  ? __pfx_wiphy_register+0x10/0x10
[  171.798166][ T9384]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  171.798184][ T9384]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  171.798200][ T9384]  ieee80211_register_hw+0x33e1/0x4120
[  171.798225][ T9384]  ? ieee80211_register_hw+0x13f1/0x4120
[  171.798241][ T9384]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  171.798257][ T9384]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  171.798275][ T9384]  ? __hrtimer_setup+0x187/0x210
[  171.798285][ T9384]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  171.798303][ T9384]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  171.798332][ T9384]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  171.798345][ T9384]  ? trace_kmalloc+0x1f/0xd0
[  171.798357][ T9384]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  171.798369][ T9384]  ? kstrndup+0xbf/0x160
[  171.798384][ T9384]  hwsim_new_radio_nl+0xea4/0x1b10
[  171.798398][ T9384]  ? __pfx___nla_validate_parse+0x10/0x10
[  171.798431][ T9384]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  171.798451][ T9384]  ? __nla_parse+0x40/0x60
[  171.798465][ T9384]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  171.798481][ T9384]  genl_family_rcv_msg_doit+0x215/0x300
[  171.798494][ T9384]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  171.798511][ T9384]  ? bpf_lsm_capable+0x9/0x20
[  171.798522][ T9384]  ? security_capable+0x7e/0x2e0
[  171.798535][ T9384]  genl_rcv_msg+0x60e/0x790
[  171.798546][ T9384]  ? __pfx_genl_rcv_msg+0x10/0x10
[  171.798554][ T9384]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  171.798573][ T9384]  netlink_rcv_skb+0x208/0x470
[  171.798585][ T9384]  ? __pfx_genl_rcv_msg+0x10/0x10
[  171.798594][ T9384]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  171.798614][ T9384]  ? down_read+0x1ad/0x2e0
[  171.798624][ T9384]  genl_rcv+0x28/0x40
[  171.798632][ T9384]  netlink_unicast+0x75c/0x8e0
[  171.798648][ T9384]  netlink_sendmsg+0x805/0xb30
[  171.798664][ T9384]  ? __pfx_netlink_sendmsg+0x10/0x10
[  171.798677][ T9384]  ? aa_sock_msg_perm+0x94/0x160
[  171.798688][ T9384]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  171.798697][ T9384]  ? __pfx_netlink_sendmsg+0x10/0x10
[  171.798709][ T9384]  __sock_sendmsg+0x21c/0x270
[  171.798721][ T9384]  ____sys_sendmsg+0x505/0x830
[  171.798736][ T9384]  ? __pfx_____sys_sendmsg+0x10/0x10
[  171.798753][ T9384]  ? import_iovec+0x74/0xa0
[  171.798767][ T9384]  ___sys_sendmsg+0x21f/0x2a0
[  171.798781][ T9384]  ? __pfx____sys_sendmsg+0x10/0x10
[  171.798811][ T9384]  ? __fget_files+0x2a/0x420
[  171.798819][ T9384]  ? __fget_files+0x3a0/0x420
[  171.798832][ T9384]  __x64_sys_sendmsg+0x19b/0x260
[  171.798846][ T9384]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  171.798863][ T9384]  ? rcu_is_watching+0x15/0xb0
[  171.798876][ T9384]  ? do_syscall_64+0xbe/0x3b0
[  171.798888][ T9384]  do_syscall_64+0xfa/0x3b0
[  171.798896][ T9384]  ? lockdep_hardirqs_on+0x9c/0x150
[  171.798904][ T9384]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.798913][ T9384]  ? exc_page_fault+0x9f/0xf0
[  171.798922][ T9384]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.798931][ T9384] RIP: 0033:0x7fa6f698e929
[  171.798940][ T9384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  171.798948][ T9384] RSP: 002b:00007fa6f778e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  171.798958][ T9384] RAX: ffffffffffffffda RBX: 00007fa6f6bb5fa0 RCX: 00007fa6f698e929
[  171.798965][ T9384] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  171.798971][ T9384] RBP: 00007fa6f6a10ca1 R08: 0000000000000000 R09: 0000000000000000
[  171.798977][ T9384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  171.798982][ T9384] R13: 0000000000000000 R14: 00007fa6f6bb5fa0 R15: 00007ffd5463a088
[  171.799003][ T9384]  </TASK>
[  171.969678][ T9386] __nla_validate_parse: 62 callbacks suppressed
[  171.969694][ T9386] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1132'.
[  172.055032][ T9395] xt_ecn: cannot match TCP bits for non-tcp packets
[  172.153829][ T9404] syzkaller1: entered promiscuous mode
[  172.156145][ T9404] syzkaller1: entered allmulticast mode
[  172.343434][ T9412] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  172.353015][ T9413] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  172.449886][ T9420] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  172.736517][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  172.904154][ T9438] wg1 speed is unknown, defaulting to 1000
[  173.172325][ T9442] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1150'.
[  173.241549][ T9445] syzkaller1: entered promiscuous mode
[  173.243408][ T9445] syzkaller1: entered allmulticast mode
[  173.409653][   T60] block nbd0: Possible stuck request ffff888020990000: control (read@0,1024B). Runtime 90 seconds
[  173.413735][   T60] block nbd0: Possible stuck request ffff888020990200: control (read@1024,1024B). Runtime 90 seconds
[  173.417941][   T60] block nbd0: Possible stuck request ffff888020990400: control (read@2048,1024B). Runtime 90 seconds
[  173.422119][   T60] block nbd0: Possible stuck request ffff888020990600: control (read@3072,1024B). Runtime 90 seconds
[  173.853246][ T9483] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1163'.
[  173.867913][ T9483] validate_nla: 2 callbacks suppressed
[  173.868029][ T9483] netlink: 'syz.2.1163': attribute type 3 has an invalid length.
[  173.872339][ T9483] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1163'.
[  173.981828][ T9491] openvswitch: netlink: IP tunnel dst address not specified
[  174.061633][ T9495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1167'.
[  174.064882][ T9495] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1167'.
[  174.182865][ T9502] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1169'.
[  175.391731][ T9579] wg1 speed is unknown, defaulting to 1000
[  175.605685][ T9596] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1187'.
[  176.041629][ T9617] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1193'.
[  176.046870][ T9617] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  176.163085][ T9622] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1195'.
[  176.360900][ T9630] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  176.555577][ T9647] netlink: 'syz.1.1205': attribute type 39 has an invalid length.
[  176.711962][ T9651] netlink: 'syz.1.1206': attribute type 4 has an invalid length.
[  176.815674][ T9653] netlink: 'syz.1.1207': attribute type 16 has an invalid length.
[  176.819488][ T9653] netlink: 'syz.1.1207': attribute type 17 has an invalid length.
[  176.863229][ T9653] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  176.867501][ T9653] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  176.870807][ T9653] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  176.874495][ T9653] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  176.963175][ T9661] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  176.973045][ T9661] CPU: 1 UID: 0 PID: 9661 Comm: syz.1.1209 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  176.973068][ T9661] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  176.973078][ T9661] Call Trace:
[  176.973085][ T9661]  <TASK>
[  176.973092][ T9661]  dump_stack_lvl+0x189/0x250
[  176.973122][ T9661]  ? __pfx_dump_stack_lvl+0x10/0x10
[  176.973142][ T9661]  ? __pfx__printk+0x10/0x10
[  176.973164][ T9661]  ? kernfs_path_from_node+0x2c/0x260
[  176.973181][ T9661]  ? kernfs_path_from_node+0x2c/0x260
[  176.973195][ T9661]  ? kernfs_path_from_node+0x2c/0x260
[  176.973211][ T9661]  ? kernfs_path_from_node+0x22c/0x260
[  176.973224][ T9661]  ? kernfs_path_from_node+0x2c/0x260
[  176.973241][ T9661]  sysfs_warn_dup+0x8e/0xa0
[  176.973263][ T9661]  sysfs_do_create_link_sd+0xc0/0x110
[  176.973280][ T9661]  device_add_class_symlinks+0x1cf/0x240
[  176.973305][ T9661]  device_add+0x475/0xb50
[  176.973331][ T9661]  wiphy_register+0x199a/0x26b0
[  176.973365][ T9661]  ? __pfx_wiphy_register+0x10/0x10
[  176.973382][ T9661]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  176.973409][ T9661]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  176.973434][ T9661]  ieee80211_register_hw+0x33e1/0x4120
[  176.973471][ T9661]  ? ieee80211_register_hw+0x13f1/0x4120
[  176.973499][ T9661]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  176.973524][ T9661]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  176.973562][ T9661]  ? __hrtimer_setup+0x187/0x210
[  176.973581][ T9661]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  176.973610][ T9661]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  176.973691][ T9661]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  176.973712][ T9661]  ? trace_kmalloc+0x1f/0xd0
[  176.973733][ T9661]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  176.973755][ T9661]  ? kstrndup+0xbf/0x160
[  176.973781][ T9661]  hwsim_new_radio_nl+0xea4/0x1b10
[  176.973826][ T9661]  ? __pfx___nla_validate_parse+0x10/0x10
[  176.973859][ T9661]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  176.973892][ T9661]  ? __nla_parse+0x40/0x60
[  176.973915][ T9661]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  176.973941][ T9661]  genl_family_rcv_msg_doit+0x215/0x300
[  176.973964][ T9661]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  176.973991][ T9661]  ? bpf_lsm_capable+0x9/0x20
[  176.974011][ T9661]  ? security_capable+0x7e/0x2e0
[  176.974034][ T9661]  genl_rcv_msg+0x60e/0x790
[  176.974055][ T9661]  ? __pfx_genl_rcv_msg+0x10/0x10
[  176.974069][ T9661]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  176.974102][ T9661]  netlink_rcv_skb+0x208/0x470
[  176.974124][ T9661]  ? __pfx_genl_rcv_msg+0x10/0x10
[  176.974140][ T9661]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  176.974175][ T9661]  ? down_read+0x1ad/0x2e0
[  176.974194][ T9661]  genl_rcv+0x28/0x40
[  176.974207][ T9661]  netlink_unicast+0x75c/0x8e0
[  176.974235][ T9661]  netlink_sendmsg+0x805/0xb30
[  176.974264][ T9661]  ? __pfx_netlink_sendmsg+0x10/0x10
[  176.974287][ T9661]  ? aa_sock_msg_perm+0x94/0x160
[  176.974304][ T9661]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  176.974321][ T9661]  ? __pfx_netlink_sendmsg+0x10/0x10
[  176.974342][ T9661]  __sock_sendmsg+0x21c/0x270
[  176.974364][ T9661]  ____sys_sendmsg+0x505/0x830
[  176.974391][ T9661]  ? __pfx_____sys_sendmsg+0x10/0x10
[  176.974421][ T9661]  ? import_iovec+0x74/0xa0
[  176.974445][ T9661]  ___sys_sendmsg+0x21f/0x2a0
[  176.974470][ T9661]  ? __pfx____sys_sendmsg+0x10/0x10
[  176.974524][ T9661]  ? __fget_files+0x2a/0x420
[  176.974537][ T9661]  ? __fget_files+0x3a0/0x420
[  176.974567][ T9661]  __x64_sys_sendmsg+0x19b/0x260
[  176.974592][ T9661]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  176.974624][ T9661]  ? rcu_is_watching+0x15/0xb0
[  176.974677][ T9661]  ? do_syscall_64+0xbe/0x3b0
[  176.974700][ T9661]  do_syscall_64+0xfa/0x3b0
[  176.974715][ T9661]  ? lockdep_hardirqs_on+0x9c/0x150
[  176.974729][ T9661]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.974745][ T9661]  ? exc_page_fault+0x9f/0xf0
[  176.974761][ T9661]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.974775][ T9661] RIP: 0033:0x7fa6f698e929
[  176.974790][ T9661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  176.974804][ T9661] RSP: 002b:00007fa6f778e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  176.974820][ T9661] RAX: ffffffffffffffda RBX: 00007fa6f6bb5fa0 RCX: 00007fa6f698e929
[  176.974831][ T9661] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  176.974841][ T9661] RBP: 00007fa6f6a10ca1 R08: 0000000000000000 R09: 0000000000000000
[  176.974850][ T9661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  176.974859][ T9661] R13: 0000000000000000 R14: 00007fa6f6bb5fa0 R15: 00007ffd5463a088
[  176.974885][ T9661]  </TASK>
[  177.519057][ T9686] __nla_validate_parse: 6 callbacks suppressed
[  177.519075][ T9686] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1217'.
[  177.543759][ T9688] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1218'.
[  177.549646][ T9688] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1218'.
[  177.553286][ T9688] netlink: 'syz.1.1218': attribute type 4 has an invalid length.
[  177.556957][ T9688] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1218'.
[  177.624735][ T9690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1219'.
[  177.631351][ T9690] netlink: 'syz.1.1219': attribute type 5 has an invalid length.
[  177.634509][ T9690] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1219'.
[  177.645287][ T9690] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  177.650907][ T9690] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  177.655380][ T9690] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  177.658711][ T9690] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  177.661747][ T9690] geneve2: entered promiscuous mode
[  177.663873][ T9690] geneve2: entered allmulticast mode
[  177.820346][ T9705] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1227'.
[  177.823602][ T9705] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1227'.
[  177.829205][ T9705] netlink: 'syz.0.1227': attribute type 4 has an invalid length.
[  177.868466][ T9707] veth0_virt_wifi: entered allmulticast mode
[  177.881177][ T9709] syzkaller1: entered promiscuous mode
[  177.882939][ T9709] syzkaller1: entered allmulticast mode
[  177.939296][ T9714] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  177.995214][ T9718] netlink: 'syz.1.1232': attribute type 1 has an invalid length.
[  178.013323][ T9718] bond5: entered promiscuous mode
[  178.015050][ T9718] bond5: entered allmulticast mode
[  178.022246][ T9718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1232'.
[  178.029978][ T9718] bridge4: the hash_elasticity option has been deprecated and is always 16
[  178.038219][ T9718] bond5: (slave bridge4): making interface the new active one
[  178.040783][ T9718] bridge4: entered promiscuous mode
[  178.042500][ T9718] bridge4: entered allmulticast mode
[  178.045043][ T9718] bond5: (slave bridge4): Enslaving as an active interface with an up link
[  178.117560][ T9729] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1237'.
[  178.123296][ T9729] netlink: 'syz.1.1237': attribute type 4 has an invalid length.
[  178.166952][ T9733] syzkaller1: entered promiscuous mode
[  178.169088][ T9733] syzkaller1: entered allmulticast mode
[  178.223630][ T9738] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  178.231779][ T9738] CPU: 1 UID: 0 PID: 9738 Comm: syz.0.1241 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  178.231805][ T9738] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  178.231814][ T9738] Call Trace:
[  178.231821][ T9738]  <TASK>
[  178.231828][ T9738]  dump_stack_lvl+0x189/0x250
[  178.231853][ T9738]  ? __pfx_dump_stack_lvl+0x10/0x10
[  178.231870][ T9738]  ? __pfx__printk+0x10/0x10
[  178.231889][ T9738]  ? kernfs_path_from_node+0x2c/0x260
[  178.231905][ T9738]  ? kernfs_path_from_node+0x2c/0x260
[  178.231917][ T9738]  ? kernfs_path_from_node+0x2c/0x260
[  178.231929][ T9738]  ? kernfs_path_from_node+0x22c/0x260
[  178.231938][ T9738]  ? kernfs_path_from_node+0x2c/0x260
[  178.231951][ T9738]  sysfs_warn_dup+0x8e/0xa0
[  178.231968][ T9738]  sysfs_do_create_link_sd+0xc0/0x110
[  178.231981][ T9738]  device_add_class_symlinks+0x1cf/0x240
[  178.232003][ T9738]  device_add+0x475/0xb50
[  178.232029][ T9738]  wiphy_register+0x199a/0x26b0
[  178.232060][ T9738]  ? __pfx_wiphy_register+0x10/0x10
[  178.232075][ T9738]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  178.232096][ T9738]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  178.232119][ T9738]  ieee80211_register_hw+0x33e1/0x4120
[  178.232147][ T9738]  ? ieee80211_register_hw+0x13f1/0x4120
[  178.232169][ T9738]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  178.232187][ T9738]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  178.232218][ T9738]  ? __hrtimer_setup+0x187/0x210
[  178.232243][ T9738]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  178.232268][ T9738]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  178.232308][ T9738]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  178.232332][ T9738]  ? trace_kmalloc+0x1f/0xd0
[  178.232349][ T9738]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  178.232372][ T9738]  ? kstrndup+0xbf/0x160
[  178.232393][ T9738]  hwsim_new_radio_nl+0xea4/0x1b10
[  178.232418][ T9738]  ? __pfx___nla_validate_parse+0x10/0x10
[  178.232444][ T9738]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  178.232479][ T9738]  ? __nla_parse+0x40/0x60
[  178.232497][ T9738]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  178.232548][ T9738]  genl_family_rcv_msg_doit+0x215/0x300
[  178.232567][ T9738]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  178.232590][ T9738]  ? bpf_lsm_capable+0x9/0x20
[  178.232608][ T9738]  ? security_capable+0x7e/0x2e0
[  178.232628][ T9738]  genl_rcv_msg+0x60e/0x790
[  178.232650][ T9738]  ? __pfx_genl_rcv_msg+0x10/0x10
[  178.232663][ T9738]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  178.232695][ T9738]  netlink_rcv_skb+0x208/0x470
[  178.232712][ T9738]  ? __pfx_genl_rcv_msg+0x10/0x10
[  178.232724][ T9738]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  178.232754][ T9738]  ? down_read+0x1ad/0x2e0
[  178.232773][ T9738]  genl_rcv+0x28/0x40
[  178.232785][ T9738]  netlink_unicast+0x75c/0x8e0
[  178.232831][ T9738]  netlink_sendmsg+0x805/0xb30
[  178.232861][ T9738]  ? __pfx_netlink_sendmsg+0x10/0x10
[  178.232883][ T9738]  ? aa_sock_msg_perm+0x94/0x160
[  178.232905][ T9738]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  178.232920][ T9738]  ? __pfx_netlink_sendmsg+0x10/0x10
[  178.232938][ T9738]  __sock_sendmsg+0x21c/0x270
[  178.232964][ T9738]  ____sys_sendmsg+0x505/0x830
[  178.232992][ T9738]  ? __pfx_____sys_sendmsg+0x10/0x10
[  178.233013][ T9738]  ? import_iovec+0x74/0xa0
[  178.233031][ T9738]  ___sys_sendmsg+0x21f/0x2a0
[  178.233053][ T9738]  ? __pfx____sys_sendmsg+0x10/0x10
[  178.233093][ T9738]  ? __fget_files+0x2a/0x420
[  178.233105][ T9738]  ? __fget_files+0x3a0/0x420
[  178.233123][ T9738]  __x64_sys_sendmsg+0x19b/0x260
[  178.233144][ T9738]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  178.233166][ T9738]  ? rcu_is_watching+0x15/0xb0
[  178.233182][ T9738]  ? do_syscall_64+0xbe/0x3b0
[  178.233198][ T9738]  do_syscall_64+0xfa/0x3b0
[  178.233213][ T9738]  ? lockdep_hardirqs_on+0x9c/0x150
[  178.233226][ T9738]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.233240][ T9738]  ? exc_page_fault+0x9f/0xf0
[  178.233255][ T9738]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.233270][ T9738] RIP: 0033:0x7f040ef8e929
[  178.233284][ T9738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  178.233297][ T9738] RSP: 002b:00007f040fe0c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  178.233314][ T9738] RAX: ffffffffffffffda RBX: 00007f040f1b5fa0 RCX: 00007f040ef8e929
[  178.233325][ T9738] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  178.233334][ T9738] RBP: 00007f040f010ca1 R08: 0000000000000000 R09: 0000000000000000
[  178.233342][ T9738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  178.233351][ T9738] R13: 0000000000000000 R14: 00007f040f1b5fa0 R15: 00007fff4be9fbc8
[  178.233375][ T9738]  </TASK>
[  178.430478][ T9743] delete_channel: no stack
[  178.434056][ T9743] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  178.788569][ T9768] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  179.041319][ T9790] netlink: 'syz.0.1259': attribute type 4 has an invalid length.
[  179.120407][ T9802] x_tables: unsorted underflow at hook 3
[  179.300912][ T9824] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  179.305350][ T9824] CPU: 1 UID: 0 PID: 9824 Comm: syz.2.1271 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  179.305372][ T9824] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  179.305383][ T9824] Call Trace:
[  179.305389][ T9824]  <TASK>
[  179.305398][ T9824]  dump_stack_lvl+0x189/0x250
[  179.305449][ T9824]  ? __pfx_dump_stack_lvl+0x10/0x10
[  179.305467][ T9824]  ? __pfx__printk+0x10/0x10
[  179.305488][ T9824]  ? kernfs_path_from_node+0x2c/0x260
[  179.305505][ T9824]  ? kernfs_path_from_node+0x2c/0x260
[  179.305518][ T9824]  ? kernfs_path_from_node+0x2c/0x260
[  179.305534][ T9824]  ? kernfs_path_from_node+0x22c/0x260
[  179.305542][ T9824]  ? kernfs_path_from_node+0x2c/0x260
[  179.305553][ T9824]  sysfs_warn_dup+0x8e/0xa0
[  179.305566][ T9824]  sysfs_do_create_link_sd+0xc0/0x110
[  179.305576][ T9824]  device_add_class_symlinks+0x1cf/0x240
[  179.305590][ T9824]  device_add+0x475/0xb50
[  179.305604][ T9824]  wiphy_register+0x199a/0x26b0
[  179.305623][ T9824]  ? __pfx_wiphy_register+0x10/0x10
[  179.305633][ T9824]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  179.305648][ T9824]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  179.305669][ T9824]  ieee80211_register_hw+0x33e1/0x4120
[  179.305701][ T9824]  ? ieee80211_register_hw+0x13f1/0x4120
[  179.305727][ T9824]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  179.305749][ T9824]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  179.305774][ T9824]  ? __hrtimer_setup+0x187/0x210
[  179.305789][ T9824]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  179.305814][ T9824]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  179.305859][ T9824]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  179.305877][ T9824]  ? trace_kmalloc+0x1f/0xd0
[  179.305896][ T9824]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  179.305916][ T9824]  ? kstrndup+0xbf/0x160
[  179.305939][ T9824]  hwsim_new_radio_nl+0xea4/0x1b10
[  179.305961][ T9824]  ? __pfx___nla_validate_parse+0x10/0x10
[  179.305990][ T9824]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  179.306014][ T9824]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  179.306038][ T9824]  ? __nla_parse+0x40/0x60
[  179.306058][ T9824]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  179.306077][ T9824]  genl_family_rcv_msg_doit+0x215/0x300
[  179.306097][ T9824]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  179.306133][ T9824]  ? bpf_lsm_capable+0x9/0x20
[  179.306154][ T9824]  ? security_capable+0x7e/0x2e0
[  179.306175][ T9824]  genl_rcv_msg+0x60e/0x790
[  179.306197][ T9824]  ? __pfx_genl_rcv_msg+0x10/0x10
[  179.306211][ T9824]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  179.306242][ T9824]  netlink_rcv_skb+0x208/0x470
[  179.306263][ T9824]  ? __pfx_genl_rcv_msg+0x10/0x10
[  179.306279][ T9824]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  179.306336][ T9824]  ? down_read+0x1ad/0x2e0
[  179.306358][ T9824]  genl_rcv+0x28/0x40
[  179.306372][ T9824]  netlink_unicast+0x75c/0x8e0
[  179.306402][ T9824]  netlink_sendmsg+0x805/0xb30
[  179.306463][ T9824]  ? __pfx_netlink_sendmsg+0x10/0x10
[  179.306507][ T9824]  ? aa_sock_msg_perm+0x94/0x160
[  179.306525][ T9824]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  179.306542][ T9824]  ? __pfx_netlink_sendmsg+0x10/0x10
[  179.306560][ T9824]  __sock_sendmsg+0x21c/0x270
[  179.306581][ T9824]  ____sys_sendmsg+0x505/0x830
[  179.306606][ T9824]  ? __pfx_____sys_sendmsg+0x10/0x10
[  179.306638][ T9824]  ? import_iovec+0x74/0xa0
[  179.306661][ T9824]  ___sys_sendmsg+0x21f/0x2a0
[  179.306686][ T9824]  ? __pfx____sys_sendmsg+0x10/0x10
[  179.306739][ T9824]  ? __fget_files+0x2a/0x420
[  179.306752][ T9824]  ? __fget_files+0x3a0/0x420
[  179.306775][ T9824]  __x64_sys_sendmsg+0x19b/0x260
[  179.306799][ T9824]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  179.306830][ T9824]  ? rcu_is_watching+0x15/0xb0
[  179.306853][ T9824]  ? do_syscall_64+0xbe/0x3b0
[  179.306873][ T9824]  do_syscall_64+0xfa/0x3b0
[  179.306888][ T9824]  ? lockdep_hardirqs_on+0x9c/0x150
[  179.306903][ T9824]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.306918][ T9824]  ? exc_page_fault+0x9f/0xf0
[  179.306934][ T9824]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.306949][ T9824] RIP: 0033:0x7fbeb098e929
[  179.306965][ T9824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  179.306978][ T9824] RSP: 002b:00007fbeb1722038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  179.306997][ T9824] RAX: ffffffffffffffda RBX: 00007fbeb0bb5fa0 RCX: 00007fbeb098e929
[  179.307008][ T9824] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  179.307018][ T9824] RBP: 00007fbeb0a10ca1 R08: 0000000000000000 R09: 0000000000000000
[  179.307027][ T9824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  179.307037][ T9824] R13: 0000000000000000 R14: 00007fbeb0bb5fa0 R15: 00007fffda59f738
[  179.307062][ T9824]  </TASK>
[  179.601214][ T9843] netlink: 'syz.2.1276': attribute type 4 has an invalid length.
[  179.639588][ T9842] wireguard0: entered promiscuous mode
[  179.641674][ T9842] wireguard0: entered allmulticast mode
[  179.754657][ T9862] veth1_macvtap: left promiscuous mode
[  179.760556][ T9862] macsec0: entered allmulticast mode
[  179.769625][ T9862] veth1_macvtap: entered promiscuous mode
[  179.772112][ T9862] veth1_macvtap: entered allmulticast mode
[  179.775940][ T9862] macsec0: left allmulticast mode
[  179.782284][ T9862] veth1_macvtap: left allmulticast mode
[  179.930979][ T9876] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  179.935571][ T9876] CPU: 0 UID: 0 PID: 9876 Comm: syz.1.1285 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  179.935594][ T9876] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  179.935605][ T9876] Call Trace:
[  179.935613][ T9876]  <TASK>
[  179.935622][ T9876]  dump_stack_lvl+0x189/0x250
[  179.935654][ T9876]  ? __pfx_dump_stack_lvl+0x10/0x10
[  179.935674][ T9876]  ? __pfx__printk+0x10/0x10
[  179.935696][ T9876]  ? kernfs_path_from_node+0x2c/0x260
[  179.935713][ T9876]  ? kernfs_path_from_node+0x2c/0x260
[  179.935726][ T9876]  ? kernfs_path_from_node+0x2c/0x260
[  179.935740][ T9876]  ? kernfs_path_from_node+0x22c/0x260
[  179.935753][ T9876]  ? kernfs_path_from_node+0x2c/0x260
[  179.935769][ T9876]  sysfs_warn_dup+0x8e/0xa0
[  179.935791][ T9876]  sysfs_do_create_link_sd+0xc0/0x110
[  179.935806][ T9876]  device_add_class_symlinks+0x1cf/0x240
[  179.935831][ T9876]  device_add+0x475/0xb50
[  179.935856][ T9876]  wiphy_register+0x199a/0x26b0
[  179.935888][ T9876]  ? __pfx_wiphy_register+0x10/0x10
[  179.935906][ T9876]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  179.935935][ T9876]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  179.935959][ T9876]  ieee80211_register_hw+0x33e1/0x4120
[  179.935995][ T9876]  ? ieee80211_register_hw+0x13f1/0x4120
[  179.936023][ T9876]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  179.936047][ T9876]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  179.936076][ T9876]  ? __hrtimer_setup+0x187/0x210
[  179.936092][ T9876]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  179.936121][ T9876]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  179.936167][ T9876]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  179.936194][ T9876]  ? trace_kmalloc+0x1f/0xd0
[  179.936214][ T9876]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  179.936237][ T9876]  ? kstrndup+0xbf/0x160
[  179.936261][ T9876]  hwsim_new_radio_nl+0xea4/0x1b10
[  179.936283][ T9876]  ? __pfx___nla_validate_parse+0x10/0x10
[  179.936336][ T9876]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  179.936397][ T9876]  ? __nla_parse+0x40/0x60
[  179.936417][ T9876]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  179.936441][ T9876]  genl_family_rcv_msg_doit+0x215/0x300
[  179.936463][ T9876]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  179.936491][ T9876]  ? bpf_lsm_capable+0x9/0x20
[  179.936515][ T9876]  ? security_capable+0x7e/0x2e0
[  179.936536][ T9876]  genl_rcv_msg+0x60e/0x790
[  179.936556][ T9876]  ? __pfx_genl_rcv_msg+0x10/0x10
[  179.936570][ T9876]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  179.936604][ T9876]  netlink_rcv_skb+0x208/0x470
[  179.936626][ T9876]  ? __pfx_genl_rcv_msg+0x10/0x10
[  179.936642][ T9876]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  179.936675][ T9876]  ? down_read+0x1ad/0x2e0
[  179.936694][ T9876]  genl_rcv+0x28/0x40
[  179.936707][ T9876]  netlink_unicast+0x75c/0x8e0
[  179.936735][ T9876]  netlink_sendmsg+0x805/0xb30
[  179.936761][ T9876]  ? __pfx_netlink_sendmsg+0x10/0x10
[  179.936783][ T9876]  ? aa_sock_msg_perm+0x94/0x160
[  179.936801][ T9876]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  179.936816][ T9876]  ? __pfx_netlink_sendmsg+0x10/0x10
[  179.936836][ T9876]  __sock_sendmsg+0x21c/0x270
[  179.936856][ T9876]  ____sys_sendmsg+0x505/0x830
[  179.936886][ T9876]  ? __pfx_____sys_sendmsg+0x10/0x10
[  179.936915][ T9876]  ? import_iovec+0x74/0xa0
[  179.936938][ T9876]  ___sys_sendmsg+0x21f/0x2a0
[  179.936961][ T9876]  ? __pfx____sys_sendmsg+0x10/0x10
[  179.937017][ T9876]  ? __fget_files+0x2a/0x420
[  179.937030][ T9876]  ? __fget_files+0x3a0/0x420
[  179.937053][ T9876]  __x64_sys_sendmsg+0x19b/0x260
[  179.937078][ T9876]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  179.937111][ T9876]  ? rcu_is_watching+0x15/0xb0
[  179.937133][ T9876]  ? do_syscall_64+0xbe/0x3b0
[  179.937154][ T9876]  do_syscall_64+0xfa/0x3b0
[  179.937169][ T9876]  ? lockdep_hardirqs_on+0x9c/0x150
[  179.937190][ T9876]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.937207][ T9876]  ? exc_page_fault+0x9f/0xf0
[  179.937225][ T9876]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.937240][ T9876] RIP: 0033:0x7fa6f698e929
[  179.937257][ T9876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  179.937272][ T9876] RSP: 002b:00007fa6f778e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  179.937290][ T9876] RAX: ffffffffffffffda RBX: 00007fa6f6bb5fa0 RCX: 00007fa6f698e929
[  179.937301][ T9876] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  179.937311][ T9876] RBP: 00007fa6f6a10ca1 R08: 0000000000000000 R09: 0000000000000000
[  179.937320][ T9876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  179.937328][ T9876] R13: 0000000000000000 R14: 00007fa6f6bb5fa0 R15: 00007ffd5463a088
[  179.937381][ T9876]  </TASK>
[  180.324216][ T9890] syzkaller1: entered promiscuous mode
[  180.326934][ T9890] syzkaller1: entered allmulticast mode
[  180.529658][ T9904] netlink: zone id is out of range
[  180.531727][ T9904] netlink: zone id is out of range
[  180.533754][ T9904] netlink: zone id is out of range
[  180.535745][ T9904] netlink: zone id is out of range
[  180.538775][ T9904] netlink: zone id is out of range
[  180.541368][ T9904] netlink: zone id is out of range
[  180.543322][ T9904] netlink: zone id is out of range
[  180.545258][ T9904] netlink: zone id is out of range
[  180.554101][ T9904] netlink: zone id is out of range
[  180.829157][ T9926] syzkaller1: entered promiscuous mode
[  180.836967][ T9926] syzkaller1: entered allmulticast mode
[  180.961765][ T9934] netlink: 'syz.0.1308': attribute type 21 has an invalid length.
[  181.302472][ T9960] syzkaller1: entered promiscuous mode
[  181.304412][ T9960] syzkaller1: entered allmulticast mode
[  181.502451][ T9968] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  181.510695][ T9968] CPU: 1 UID: 0 PID: 9968 Comm: syz.0.1321 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  181.510724][ T9968] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  181.510736][ T9968] Call Trace:
[  181.510744][ T9968]  <TASK>
[  181.510752][ T9968]  dump_stack_lvl+0x189/0x250
[  181.510784][ T9968]  ? __pfx_dump_stack_lvl+0x10/0x10
[  181.510803][ T9968]  ? __pfx__printk+0x10/0x10
[  181.510852][ T9968]  ? kernfs_path_from_node+0x2c/0x260
[  181.510870][ T9968]  ? kernfs_path_from_node+0x2c/0x260
[  181.510884][ T9968]  ? kernfs_path_from_node+0x2c/0x260
[  181.510902][ T9968]  ? kernfs_path_from_node+0x22c/0x260
[  181.510916][ T9968]  ? kernfs_path_from_node+0x2c/0x260
[  181.510935][ T9968]  sysfs_warn_dup+0x8e/0xa0
[  181.510961][ T9968]  sysfs_do_create_link_sd+0xc0/0x110
[  181.510979][ T9968]  device_add_class_symlinks+0x1cf/0x240
[  181.511027][ T9968]  device_add+0x475/0xb50
[  181.511055][ T9968]  wiphy_register+0x199a/0x26b0
[  181.511092][ T9968]  ? __pfx_wiphy_register+0x10/0x10
[  181.511110][ T9968]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  181.511137][ T9968]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  181.511162][ T9968]  ieee80211_register_hw+0x33e1/0x4120
[  181.511226][ T9968]  ? ieee80211_register_hw+0x13f1/0x4120
[  181.511255][ T9968]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  181.511277][ T9968]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  181.511306][ T9968]  ? __hrtimer_setup+0x187/0x210
[  181.511322][ T9968]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  181.511351][ T9968]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  181.511399][ T9968]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  181.511419][ T9968]  ? trace_kmalloc+0x1f/0xd0
[  181.511436][ T9968]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  181.511457][ T9968]  ? kstrndup+0xbf/0x160
[  181.511482][ T9968]  hwsim_new_radio_nl+0xea4/0x1b10
[  181.511505][ T9968]  ? __pfx___nla_validate_parse+0x10/0x10
[  181.511538][ T9968]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  181.511569][ T9968]  ? __nla_parse+0x40/0x60
[  181.511590][ T9968]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  181.511614][ T9968]  genl_family_rcv_msg_doit+0x215/0x300
[  181.511637][ T9968]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  181.511665][ T9968]  ? bpf_lsm_capable+0x9/0x20
[  181.511684][ T9968]  ? security_capable+0x7e/0x2e0
[  181.511709][ T9968]  genl_rcv_msg+0x60e/0x790
[  181.511733][ T9968]  ? __pfx_genl_rcv_msg+0x10/0x10
[  181.511749][ T9968]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  181.511786][ T9968]  netlink_rcv_skb+0x208/0x470
[  181.511809][ T9968]  ? __pfx_genl_rcv_msg+0x10/0x10
[  181.511826][ T9968]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  181.511862][ T9968]  ? down_read+0x1ad/0x2e0
[  181.511883][ T9968]  genl_rcv+0x28/0x40
[  181.511896][ T9968]  netlink_unicast+0x75c/0x8e0
[  181.511925][ T9968]  netlink_sendmsg+0x805/0xb30
[  181.511956][ T9968]  ? __pfx_netlink_sendmsg+0x10/0x10
[  181.511980][ T9968]  ? aa_sock_msg_perm+0x94/0x160
[  181.512007][ T9968]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  181.512026][ T9968]  ? __pfx_netlink_sendmsg+0x10/0x10
[  181.512049][ T9968]  __sock_sendmsg+0x21c/0x270
[  181.512073][ T9968]  ____sys_sendmsg+0x505/0x830
[  181.512102][ T9968]  ? __pfx_____sys_sendmsg+0x10/0x10
[  181.512132][ T9968]  ? import_iovec+0x74/0xa0
[  181.512157][ T9968]  ___sys_sendmsg+0x21f/0x2a0
[  181.512182][ T9968]  ? __pfx____sys_sendmsg+0x10/0x10
[  181.512272][ T9968]  ? __fget_files+0x2a/0x420
[  181.512286][ T9968]  ? __fget_files+0x3a0/0x420
[  181.512311][ T9968]  __x64_sys_sendmsg+0x19b/0x260
[  181.512339][ T9968]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  181.512371][ T9968]  ? rcu_is_watching+0x15/0xb0
[  181.512395][ T9968]  ? do_syscall_64+0xbe/0x3b0
[  181.512416][ T9968]  do_syscall_64+0xfa/0x3b0
[  181.512432][ T9968]  ? lockdep_hardirqs_on+0x9c/0x150
[  181.512446][ T9968]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.512462][ T9968]  ? exc_page_fault+0x9f/0xf0
[  181.512478][ T9968]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.512493][ T9968] RIP: 0033:0x7f040ef8e929
[  181.512509][ T9968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  181.512525][ T9968] RSP: 002b:00007f040fe0c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  181.512544][ T9968] RAX: ffffffffffffffda RBX: 00007f040f1b5fa0 RCX: 00007f040ef8e929
[  181.512556][ T9968] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  181.512567][ T9968] RBP: 00007f040f010ca1 R08: 0000000000000000 R09: 0000000000000000
[  181.512578][ T9968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  181.512587][ T9968] R13: 0000000000000000 R14: 00007f040f1b5fa0 R15: 00007fff4be9fbc8
[  181.512614][ T9968]  </TASK>
[  181.709753][ T9971] xt_CT: You must specify a L4 protocol and not use inversions on it
[  181.735807][ T9971] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000
[  181.931937][ T9987] tipc: Enabling of bearer <eth:vlan0> rejected, failed to enable media
[  181.936188][ T9987] netlink: 'syz.2.1328': attribute type 2 has an invalid length.
[  182.015755][ T9998] netlink: 'syz.0.1326': attribute type 1 has an invalid length.
[  182.081548][T10001] netlink: 'syz.2.1331': attribute type 178 has an invalid length.
[  182.387338][T10014] syzkaller1: entered promiscuous mode
[  182.389284][T10014] syzkaller1: entered allmulticast mode
[  182.733571][T10032] lo: entered allmulticast mode
[  182.743325][T10031] lo: left allmulticast mode
[  182.747237][ T5833] Bluetooth: hci2: command 0x0405 tx timeout
[  182.897471][T10046] xt_NFQUEUE: number of total queues is 0
[  183.020370][T10060] __nla_validate_parse: 25 callbacks suppressed
[  183.020392][T10060] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1350'.
[  183.028668][T10060] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1350'.
[  183.032357][T10060] netlink: 'syz.1.1350': attribute type 4 has an invalid length.
[  183.274805][T10073] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1356'.
[  183.417312][T10073] netlink: 'syz.2.1356': attribute type 1 has an invalid length.
[  183.425791][T10073] nbd: error processing sock list
[  183.432811][T10073] block nbd1: shutting down sockets
[  183.484782][T10100] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1364'.
[  183.491695][T10100] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1364'.
[  183.495272][T10100] netlink: 'syz.0.1364': attribute type 4 has an invalid length.
[  183.587339][T10107] team0: No ports can be present during mode change
[  183.671836][T10114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1368'.
[  183.753839][T10122] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1371'.
[  183.848954][T10127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1370'.
[  184.042476][T10137] syzkaller1: entered promiscuous mode
[  184.044678][T10137] syzkaller1: entered allmulticast mode
[  185.028586][T10158] netlink: 'syz.1.1383': attribute type 1 has an invalid length.
[  185.183719][T10165] net_ratelimit: 4057 callbacks suppressed
[  185.183740][T10165] openvswitch: netlink: Tunnel attr 226 out of range max 16
[  185.322111][T10173] netlink: 'syz.1.1388': attribute type 1 has an invalid length.
[  185.348516][T10173] bond6: entered promiscuous mode
[  185.350406][T10176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1389'.
[  185.350713][T10173] 8021q: adding VLAN 0 to HW filter on device bond6
[  185.383626][T10173] bond6: (slave bridge5): making interface the new active one
[  185.386871][T10173] bridge5: entered promiscuous mode
[  185.393908][T10173] bond6: (slave bridge5): Enslaving as an active interface with an up link
[  185.535751][T10190] netlink: 'syz.0.1392': attribute type 21 has an invalid length.
[  185.542768][T10190] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1392'.
[  185.547200][T10190] netlink: 'syz.0.1392': attribute type 5 has an invalid length.
[  185.551887][T10190] netlink: 'syz.0.1392': attribute type 6 has an invalid length.
[  185.673050][T10198] syzkaller0: entered allmulticast mode
[  185.708767][T10201] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 57109 - 0
[  185.712609][T10201] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  185.755407][T10201] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 57109 - 0
[  185.760648][T10201] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  185.790816][T10202] openvswitch: netlink: Tunnel attr 226 out of range max 16
[  185.830493][T10204] syzkaller0: entered promiscuous mode
[  185.832884][T10204] syzkaller0: entered allmulticast mode
[  185.862257][T10201] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 57109 - 0
[  185.865342][T10201] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  185.950802][T10201] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 57109 - 0
[  185.954691][T10201] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  186.076057][T10201] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 57109 - 0
[  186.086780][T10201] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  186.114170][T10201] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 57109 - 0
[  186.117621][T10201] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  186.135841][T10201] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 57109 - 0
[  186.154370][T10201] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  186.168611][T10201] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 57109 - 0
[  186.172311][T10201] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  186.539825][T10256] xt_connbytes: Forcing CT accounting to be enabled
[  186.543297][T10256] set match dimension is over the limit!
[  186.577637][T10256] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  186.591072][T10258] netlink: 'syz.1.1410': attribute type 7 has an invalid length.
[  186.593920][T10258] netlink: 'syz.1.1410': attribute type 8 has an invalid length.
[  187.460569][T10294] bridge_slave_0: entered allmulticast mode
[  187.709193][T10309] netlink: 'syz.2.1430': attribute type 4 has an invalid length.
[  187.750250][T10312] siw: device registration error -23
[  187.810446][T10314] syzkaller1: entered promiscuous mode
[  187.812268][T10314] syzkaller1: entered allmulticast mode
[  188.109463][T10327] __nla_validate_parse: 8 callbacks suppressed
[  188.109477][T10327] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1437'.
[  188.128190][T10325] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  188.149901][T10325] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1436'.
[  188.153382][T10325] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1436'.
[  188.210111][T10329] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1438'.
[  188.221450][T10329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1438'.
[  188.278365][T10329] wg1 speed is unknown, defaulting to 1000
[  188.282430][T10333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1440'.
[  188.474166][   T33] audit: type=1800 audit(1752775630.801:7): pid=10334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1438" name="memory.events" dev="tmpfs" ino=2568 res=0 errno=0
[  188.658681][T10347] syzkaller1: entered promiscuous mode
[  188.660556][T10347] syzkaller1: entered allmulticast mode
[  188.734187][T10353] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1448'.
[  188.793680][T10353] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1448'.
[  188.799334][T10353] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1448'.
[  189.052849][T10380] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1459'.
[  189.215282][T10392] openvswitch: netlink: Key 3 has unexpected len 2 expected 4
[  189.272608][T10403] netlink: 'syz.0.1468': attribute type 2 has an invalid length.
[  189.626840][T10442] netlink: 'syz.2.1475': attribute type 4 has an invalid length.
[  189.853031][T10448] openvswitch: netlink: Tunnel attr 226 out of range max 16
[  190.086605][T10469] syzkaller1: entered promiscuous mode
[  190.088536][T10469] syzkaller1: entered allmulticast mode
[  190.093337][T10471] validate_nla: 2 callbacks suppressed
[  190.093353][T10471] netlink: 'syz.1.1489': attribute type 23 has an invalid length.
[  190.311482][T10482] Cannot find del_set index 286 as target
[  190.420041][T10492] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  190.425887][T10492] CPU: 0 UID: 0 PID: 10492 Comm: syz.1.1496 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  190.425930][T10492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  190.425942][T10492] Call Trace:
[  190.425949][T10492]  <TASK>
[  190.425958][T10492]  dump_stack_lvl+0x189/0x250
[  190.425989][T10492]  ? __pfx_dump_stack_lvl+0x10/0x10
[  190.426009][T10492]  ? __pfx__printk+0x10/0x10
[  190.426030][T10492]  ? kernfs_path_from_node+0x2c/0x260
[  190.426048][T10492]  ? kernfs_path_from_node+0x2c/0x260
[  190.426062][T10492]  ? kernfs_path_from_node+0x2c/0x260
[  190.426080][T10492]  ? kernfs_path_from_node+0x22c/0x260
[  190.426092][T10492]  ? kernfs_path_from_node+0x2c/0x260
[  190.426109][T10492]  sysfs_warn_dup+0x8e/0xa0
[  190.426132][T10492]  sysfs_do_create_link_sd+0xc0/0x110
[  190.426149][T10492]  device_add_class_symlinks+0x1cf/0x240
[  190.426173][T10492]  device_add+0x475/0xb50
[  190.426208][T10492]  wiphy_register+0x199a/0x26b0
[  190.426243][T10492]  ? __pfx_wiphy_register+0x10/0x10
[  190.426262][T10492]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  190.426288][T10492]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  190.426361][T10492]  ieee80211_register_hw+0x33e1/0x4120
[  190.426399][T10492]  ? ieee80211_register_hw+0x13f1/0x4120
[  190.426428][T10492]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  190.426454][T10492]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  190.426486][T10492]  ? __hrtimer_setup+0x187/0x210
[  190.426503][T10492]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  190.426532][T10492]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  190.426594][T10492]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  190.426618][T10492]  ? trace_kmalloc+0x1f/0xd0
[  190.426637][T10492]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  190.426658][T10492]  ? kstrndup+0xbf/0x160
[  190.426684][T10492]  hwsim_new_radio_nl+0xea4/0x1b10
[  190.426709][T10492]  ? __pfx___nla_validate_parse+0x10/0x10
[  190.426738][T10492]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  190.426770][T10492]  ? __nla_parse+0x40/0x60
[  190.426793][T10492]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  190.426817][T10492]  genl_family_rcv_msg_doit+0x215/0x300
[  190.426836][T10492]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  190.426860][T10492]  ? bpf_lsm_capable+0x9/0x20
[  190.426881][T10492]  ? security_capable+0x7e/0x2e0
[  190.426903][T10492]  genl_rcv_msg+0x60e/0x790
[  190.426923][T10492]  ? __pfx_genl_rcv_msg+0x10/0x10
[  190.426939][T10492]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  190.426973][T10492]  netlink_rcv_skb+0x208/0x470
[  190.426995][T10492]  ? __pfx_genl_rcv_msg+0x10/0x10
[  190.427011][T10492]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  190.427047][T10492]  ? down_read+0x1ad/0x2e0
[  190.427066][T10492]  genl_rcv+0x28/0x40
[  190.427079][T10492]  netlink_unicast+0x75c/0x8e0
[  190.427107][T10492]  netlink_sendmsg+0x805/0xb30
[  190.427134][T10492]  ? __pfx_netlink_sendmsg+0x10/0x10
[  190.427155][T10492]  ? aa_sock_msg_perm+0x94/0x160
[  190.427174][T10492]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  190.427191][T10492]  ? __pfx_netlink_sendmsg+0x10/0x10
[  190.427222][T10492]  __sock_sendmsg+0x21c/0x270
[  190.427245][T10492]  ____sys_sendmsg+0x505/0x830
[  190.427274][T10492]  ? __pfx_____sys_sendmsg+0x10/0x10
[  190.427306][T10492]  ? import_iovec+0x74/0xa0
[  190.427361][T10492]  ___sys_sendmsg+0x21f/0x2a0
[  190.427387][T10492]  ? __pfx____sys_sendmsg+0x10/0x10
[  190.427442][T10492]  ? __fget_files+0x2a/0x420
[  190.427456][T10492]  ? __fget_files+0x3a0/0x420
[  190.427479][T10492]  __x64_sys_sendmsg+0x19b/0x260
[  190.427504][T10492]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  190.427530][T10492]  ? rcu_is_watching+0x15/0xb0
[  190.427552][T10492]  ? do_syscall_64+0xbe/0x3b0
[  190.427572][T10492]  do_syscall_64+0xfa/0x3b0
[  190.427587][T10492]  ? lockdep_hardirqs_on+0x9c/0x150
[  190.427603][T10492]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.427621][T10492]  ? exc_page_fault+0x9f/0xf0
[  190.427638][T10492]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.427655][T10492] RIP: 0033:0x7fa6f698e929
[  190.427673][T10492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  190.427689][T10492] RSP: 002b:00007fa6f778e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  190.427709][T10492] RAX: ffffffffffffffda RBX: 00007fa6f6bb5fa0 RCX: 00007fa6f698e929
[  190.427721][T10492] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  190.427729][T10492] RBP: 00007fa6f6a10ca1 R08: 0000000000000000 R09: 0000000000000000
[  190.427737][T10492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  190.427748][T10492] R13: 0000000000000000 R14: 00007fa6f6bb5fa0 R15: 00007ffd5463a088
[  190.427772][T10492]  </TASK>
[  190.727152][T10502] netlink: 'syz.2.1500': attribute type 4 has an invalid length.
[  190.818555][ T5833] Bluetooth: hci1: command 0x0406 tx timeout
[  191.241280][T10535] vlan0: entered promiscuous mode
[  191.243577][T10535] bond0: entered promiscuous mode
[  191.251388][T10535] bond0: (slave vlan0): Opening slave failed
[  191.435056][T10540] syzkaller0: entered promiscuous mode
[  191.437101][T10540] syzkaller0: entered allmulticast mode
[  193.046005][T10571] IPVS: Error joining to the multicast group
[  193.076780][ T5830] Bluetooth: hci2: link tx timeout
[  193.079281][ T5830] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  193.103953][T10576] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 57109 - 0
[  193.110215][T10576] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  193.152439][T10576] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 57109 - 0
[  193.161909][T10576] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  193.172333][T10580] __nla_validate_parse: 20 callbacks suppressed
[  193.172351][T10580] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1529'.
[  193.178725][T10580] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1529'.
[  193.182744][T10580] netlink: 'syz.2.1529': attribute type 4 has an invalid length.
[  193.211496][T10582] openvswitch: netlink: Tunnel attr 226 out of range max 16
[  193.211812][T10576] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 57109 - 0
[  193.221619][T10576] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  193.293836][T10576] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 57109 - 0
[  193.294832][T10587] netlink: 'syz.1.1531': attribute type 1 has an invalid length.
[  193.298949][T10576] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  193.303265][T10587] netlink: 'syz.1.1531': attribute type 11 has an invalid length.
[  193.309445][T10587] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1531'.
[  193.420068][T10576] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 57109 - 0
[  193.423384][T10576] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  193.440785][T10576] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 57109 - 0
[  193.444655][T10576] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  193.464355][T10593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1534'.
[  193.473324][T10576] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 57109 - 0
[  193.476792][T10576] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  193.495403][T10576] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 57109 - 0
[  193.499201][T10576] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  193.731608][T10601] nbd: nbd0 already in use
[  193.733594][T10601] block nbd0: NBD_DISCONNECT
[  193.735121][T10601] block nbd0: Send disconnect failed -32
[  193.738378][T10601] block nbd0: shutting down sockets
[  193.743984][    C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  193.747853][    C1] Buffer I/O error on dev nbd0, logical block 0, async page read
[  193.750444][    C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  193.753585][    C1] Buffer I/O error on dev nbd0, logical block 1, async page read
[  193.756606][    C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  193.760089][    C1] Buffer I/O error on dev nbd0, logical block 2, async page read
[  193.763122][    C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  193.766599][    C1] Buffer I/O error on dev nbd0, logical block 3, async page read
[  193.770913][ T5968] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  193.774623][ T5968] Buffer I/O error on dev nbd0, logical block 0, async page read
[  193.779116][ T5968] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  193.783774][ T5968] Buffer I/O error on dev nbd0, logical block 1, async page read
[  193.789040][ T5968] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  193.792715][ T5968] Buffer I/O error on dev nbd0, logical block 2, async page read
[  193.795815][ T5968] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  193.799806][ T5968] Buffer I/O error on dev nbd0, logical block 3, async page read
[  193.803326][ T5968] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  193.807884][ T5968] Buffer I/O error on dev nbd0, logical block 0, async page read
[  193.811138][ T5968] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  193.814733][ T5968] Buffer I/O error on dev nbd0, logical block 1, async page read
[  193.824914][ T5968] ldm_validate_partition_table(): Disk read failed.
[  193.830843][ T5968] Dev nbd0: unable to read RDB block 0
[  193.838727][ T5968]  nbd0: unable to read partition table
[  193.850732][ T5968] ldm_validate_partition_table(): Disk read failed.
[  193.854981][ T5968] Dev nbd0: unable to read RDB block 0
[  193.861828][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  193.872429][ T5968]  nbd0: unable to read partition table
[  194.526607][T10622] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1543'.
[  194.530021][T10622] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1543'.
[  194.549004][T10622] netlink: 'syz.2.1543': attribute type 4 has an invalid length.
[  194.840664][T10652] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1551'.
[  194.848608][T10652] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1551'.
[  194.854801][T10652] netlink: 'syz.2.1551': attribute type 4 has an invalid length.
[  194.965547][T10660] netlink: 'syz.1.1553': attribute type 12 has an invalid length.
[  194.971485][T10660] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1553'.
[  195.136729][ T5833] Bluetooth: hci2: command 0x0405 tx timeout
[  195.326261][T10670] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1559'.
[  195.925100][T10681] netlink: 'syz.1.1562': attribute type 4 has an invalid length.
[  195.984525][T10683] bridge6: the hash_elasticity option has been deprecated and is always 16
[  196.225613][T10693] netlink: 'syz.0.1568': attribute type 1 has an invalid length.
[  196.264645][T10693] 8021q: adding VLAN 0 to HW filter on device bond3
[  196.283099][T10693] 8021q: adding VLAN 0 to HW filter on device batadv2
[  196.292674][T10693] bond3: (slave batadv2): making interface the new active one
[  196.298328][T10693] bond3: (slave batadv2): Enslaving as an active interface with an up link
[  196.391261][T10704] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  196.393596][T10704] CPU: 0 UID: 0 PID: 10704 Comm: syz.1.1573 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  196.393613][T10704] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  196.393620][T10704] Call Trace:
[  196.393624][T10704]  <TASK>
[  196.393629][T10704]  dump_stack_lvl+0x189/0x250
[  196.393648][T10704]  ? __pfx_dump_stack_lvl+0x10/0x10
[  196.393658][T10704]  ? __pfx__printk+0x10/0x10
[  196.393671][T10704]  ? kernfs_path_from_node+0x2c/0x260
[  196.393681][T10704]  ? kernfs_path_from_node+0x2c/0x260
[  196.393688][T10704]  ? kernfs_path_from_node+0x2c/0x260
[  196.393697][T10704]  ? kernfs_path_from_node+0x22c/0x260
[  196.393704][T10704]  ? kernfs_path_from_node+0x2c/0x260
[  196.393713][T10704]  sysfs_warn_dup+0x8e/0xa0
[  196.393727][T10704]  sysfs_do_create_link_sd+0xc0/0x110
[  196.393736][T10704]  device_add_class_symlinks+0x1cf/0x240
[  196.393774][T10704]  device_add+0x475/0xb50
[  196.393788][T10704]  wiphy_register+0x199a/0x26b0
[  196.393808][T10704]  ? __pfx_wiphy_register+0x10/0x10
[  196.393818][T10704]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  196.393834][T10704]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  196.393849][T10704]  ieee80211_register_hw+0x33e1/0x4120
[  196.393871][T10704]  ? ieee80211_register_hw+0x13f1/0x4120
[  196.393887][T10704]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  196.393901][T10704]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  196.393920][T10704]  ? __hrtimer_setup+0x187/0x210
[  196.393931][T10704]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  196.393948][T10704]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  196.393974][T10704]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  196.393985][T10704]  ? trace_kmalloc+0x1f/0xd0
[  196.393997][T10704]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  196.394009][T10704]  ? kstrndup+0xbf/0x160
[  196.394024][T10704]  hwsim_new_radio_nl+0xea4/0x1b10
[  196.394037][T10704]  ? __pfx___nla_validate_parse+0x10/0x10
[  196.394055][T10704]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  196.394073][T10704]  ? __nla_parse+0x40/0x60
[  196.394084][T10704]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  196.394098][T10704]  genl_family_rcv_msg_doit+0x215/0x300
[  196.394111][T10704]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  196.394126][T10704]  ? bpf_lsm_capable+0x9/0x20
[  196.394138][T10704]  ? security_capable+0x7e/0x2e0
[  196.394151][T10704]  genl_rcv_msg+0x60e/0x790
[  196.394162][T10704]  ? __pfx_genl_rcv_msg+0x10/0x10
[  196.394171][T10704]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  196.394189][T10704]  netlink_rcv_skb+0x208/0x470
[  196.394201][T10704]  ? __pfx_genl_rcv_msg+0x10/0x10
[  196.394211][T10704]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  196.394230][T10704]  ? down_read+0x1ad/0x2e0
[  196.394241][T10704]  genl_rcv+0x28/0x40
[  196.394248][T10704]  netlink_unicast+0x75c/0x8e0
[  196.394264][T10704]  netlink_sendmsg+0x805/0xb30
[  196.394293][T10704]  ? __pfx_netlink_sendmsg+0x10/0x10
[  196.394308][T10704]  ? aa_sock_msg_perm+0x94/0x160
[  196.394320][T10704]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  196.394330][T10704]  ? __pfx_netlink_sendmsg+0x10/0x10
[  196.394341][T10704]  __sock_sendmsg+0x21c/0x270
[  196.394354][T10704]  ____sys_sendmsg+0x505/0x830
[  196.394376][T10704]  ? __pfx_____sys_sendmsg+0x10/0x10
[  196.394401][T10704]  ? import_iovec+0x74/0xa0
[  196.394421][T10704]  ___sys_sendmsg+0x21f/0x2a0
[  196.394439][T10704]  ? __pfx____sys_sendmsg+0x10/0x10
[  196.394484][T10704]  ? __fget_files+0x2a/0x420
[  196.394497][T10704]  ? __fget_files+0x3a0/0x420
[  196.394513][T10704]  __x64_sys_sendmsg+0x19b/0x260
[  196.394533][T10704]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  196.394559][T10704]  ? rcu_is_watching+0x15/0xb0
[  196.394579][T10704]  ? do_syscall_64+0xbe/0x3b0
[  196.394598][T10704]  do_syscall_64+0xfa/0x3b0
[  196.394618][T10704]  ? lockdep_hardirqs_on+0x9c/0x150
[  196.394632][T10704]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.394646][T10704]  ? exc_page_fault+0x9f/0xf0
[  196.394658][T10704]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.394670][T10704] RIP: 0033:0x7fa6f698e929
[  196.394684][T10704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  196.394694][T10704] RSP: 002b:00007fa6f778e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  196.394708][T10704] RAX: ffffffffffffffda RBX: 00007fa6f6bb5fa0 RCX: 00007fa6f698e929
[  196.394716][T10704] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005
[  196.394724][T10704] RBP: 00007fa6f6a10ca1 R08: 0000000000000000 R09: 0000000000000000
[  196.394733][T10704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  196.394769][T10704] R13: 0000000000000000 R14: 00007fa6f6bb5fa0 R15: 00007ffd5463a088
[  196.394791][T10704]  </TASK>
[  196.615101][T10712] netlink: 'syz.1.1576': attribute type 83 has an invalid length.
[  196.640003][T10714] syzkaller1: entered promiscuous mode
[  196.643873][T10714] syzkaller1: entered allmulticast mode
[  196.854418][T10722] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  196.859231][T10722] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  196.862107][T10722] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  196.864932][T10722] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  197.062930][T10729] netlink: 'syz.1.1582': attribute type 4 has an invalid length.
[  197.297466][T10744] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  197.302034][T10744] CPU: 1 UID: 0 PID: 10744 Comm: syz.1.1588 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  197.302052][T10744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  197.302059][T10744] Call Trace:
[  197.302064][T10744]  <TASK>
[  197.302069][T10744]  dump_stack_lvl+0x189/0x250
[  197.302089][T10744]  ? __pfx_dump_stack_lvl+0x10/0x10
[  197.302102][T10744]  ? __pfx__printk+0x10/0x10
[  197.302115][T10744]  ? kernfs_path_from_node+0x2c/0x260
[  197.302126][T10744]  ? kernfs_path_from_node+0x2c/0x260
[  197.302134][T10744]  ? kernfs_path_from_node+0x2c/0x260
[  197.302144][T10744]  ? kernfs_path_from_node+0x22c/0x260
[  197.302152][T10744]  ? kernfs_path_from_node+0x2c/0x260
[  197.302161][T10744]  sysfs_warn_dup+0x8e/0xa0
[  197.302174][T10744]  sysfs_do_create_link_sd+0xc0/0x110
[  197.302184][T10744]  device_add_class_symlinks+0x1cf/0x240
[  197.302199][T10744]  device_add+0x475/0xb50
[  197.302212][T10744]  wiphy_register+0x199a/0x26b0
[  197.302233][T10744]  ? __pfx_wiphy_register+0x10/0x10
[  197.302245][T10744]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  197.302261][T10744]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  197.302276][T10744]  ieee80211_register_hw+0x33e1/0x4120
[  197.302298][T10744]  ? ieee80211_register_hw+0x13f1/0x4120
[  197.302314][T10744]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  197.302327][T10744]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  197.302345][T10744]  ? __hrtimer_setup+0x187/0x210
[  197.302356][T10744]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  197.302371][T10744]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  197.302398][T10744]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  197.302410][T10744]  ? trace_kmalloc+0x1f/0xd0
[  197.302424][T10744]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  197.302437][T10744]  ? kstrndup+0xbf/0x160
[  197.302451][T10744]  hwsim_new_radio_nl+0xea4/0x1b10
[  197.302464][T10744]  ? __pfx___nla_validate_parse+0x10/0x10
[  197.302482][T10744]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  197.302500][T10744]  ? __nla_parse+0x40/0x60
[  197.302512][T10744]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  197.302525][T10744]  genl_family_rcv_msg_doit+0x215/0x300
[  197.302538][T10744]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  197.302553][T10744]  ? bpf_lsm_capable+0x9/0x20
[  197.302566][T10744]  ? security_capable+0x7e/0x2e0
[  197.302584][T10744]  genl_rcv_msg+0x60e/0x790
[  197.302603][T10744]  ? __pfx_genl_rcv_msg+0x10/0x10
[  197.302620][T10744]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  197.302686][T10744]  netlink_rcv_skb+0x208/0x470
[  197.302720][T10744]  ? __pfx_genl_rcv_msg+0x10/0x10
[  197.302740][T10744]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  197.302778][T10744]  ? down_read+0x1ad/0x2e0
[  197.302802][T10744]  genl_rcv+0x28/0x40
[  197.302816][T10744]  netlink_unicast+0x75c/0x8e0
[  197.302844][T10744]  netlink_sendmsg+0x805/0xb30
[  197.302874][T10744]  ? __pfx_netlink_sendmsg+0x10/0x10
[  197.302896][T10744]  ? aa_sock_msg_perm+0x94/0x160
[  197.302913][T10744]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  197.302932][T10744]  ? __pfx_netlink_sendmsg+0x10/0x10
[  197.302955][T10744]  __sock_sendmsg+0x21c/0x270
[  197.302970][T10744]  ____sys_sendmsg+0x505/0x830
[  197.302987][T10744]  ? __pfx_____sys_sendmsg+0x10/0x10
[  197.303006][T10744]  ? import_iovec+0x74/0xa0
[  197.303020][T10744]  ___sys_sendmsg+0x21f/0x2a0
[  197.303033][T10744]  ? __pfx____sys_sendmsg+0x10/0x10
[  197.303064][T10744]  ? __fget_files+0x2a/0x420
[  197.303073][T10744]  ? __fget_files+0x3a0/0x420
[  197.303086][T10744]  __x64_sys_sendmsg+0x19b/0x260
[  197.303099][T10744]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  197.303117][T10744]  ? rcu_is_watching+0x15/0xb0
[  197.303131][T10744]  ? do_syscall_64+0xbe/0x3b0
[  197.303143][T10744]  do_syscall_64+0xfa/0x3b0
[  197.303151][T10744]  ? lockdep_hardirqs_on+0x9c/0x150
[  197.303159][T10744]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.303168][T10744]  ? exc_page_fault+0x9f/0xf0
[  197.303177][T10744]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.303185][T10744] RIP: 0033:0x7fa6f698e929
[  197.303197][T10744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  197.303204][T10744] RSP: 002b:00007fa6f778e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  197.303214][T10744] RAX: ffffffffffffffda RBX: 00007fa6f6bb5fa0 RCX: 00007fa6f698e929
[  197.303222][T10744] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  197.303228][T10744] RBP: 00007fa6f6a10ca1 R08: 0000000000000000 R09: 0000000000000000
[  197.303234][T10744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  197.303240][T10744] R13: 0000000000000000 R14: 00007fa6f6bb5fa0 R15: 00007ffd5463a088
[  197.303255][T10744]  </TASK>
[  197.614138][T10751] netlink: 'syz.1.1590': attribute type 1 has an invalid length.
[  197.752797][T10769] 8021q: VLANs not supported on sit0
[  197.948959][T10783] openvswitch: netlink: Tunnel attr 226 out of range max 16
[  198.147135][T10800] syzkaller1: entered promiscuous mode
[  198.149320][T10800] syzkaller1: entered allmulticast mode
[  198.472640][T10823] __nla_validate_parse: 11 callbacks suppressed
[  198.472658][T10823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1617'.
[  198.564910][T10830] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  198.638394][T10836] tipc: Resetting bearer <eth:syzkaller0>
[  198.679584][T10829] tipc: Disabling bearer <eth:syzkaller0>
[  199.124894][T10856] openvswitch: netlink: Tunnel attr 226 out of range max 16
[  199.209983][T10859] netlink: 'syz.0.1627': attribute type 29 has an invalid length.
[  199.554871][T10863] 8021q: adding VLAN 0 to HW filter on device bond7
[  199.623883][T10869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1631'.
[  199.629514][T10869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1631'.
[  199.632501][T10869] netlink: 'syz.0.1631': attribute type 18 has an invalid length.
[  199.742082][T10875] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1634'.
[  199.746282][T10877] netlink: 'syz.2.1635': attribute type 83 has an invalid length.
[  199.751126][T10877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1635'.
[  199.956013][T10887] wg1 speed is unknown, defaulting to 1000
[  200.086217][T10892] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  200.172338][T10892] siw: device registration error -23
[  200.208707][T10907] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1643'.
[  200.212344][T10907] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1643'.
[  200.215843][T10907] netlink: 'syz.2.1643': attribute type 4 has an invalid length.
[  200.258065][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  200.283935][T10909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1644'.
[  200.405219][T10913] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1646'.
[  200.557898][T10919] Cannot find map_set index 0 as target
[  200.559832][T10919] Cannot find map_set index 0 as target
[  200.819206][T10934] TCP: TCP_TX_DELAY enabled
[  200.889125][T10933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1653'.
[  201.150355][T10949] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 57109 - 0
[  201.154201][T10949] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  201.227575][T10949] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 57109 - 0
[  201.233901][T10949] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  201.303129][T10949] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 57109 - 0
[  201.312106][T10949] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  201.345634][T10959] netlink: 'syz.1.1660': attribute type 4 has an invalid length.
[  201.372641][T10949] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 57109 - 0
[  201.384043][T10949] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  201.415782][T10961] xt_hashlimit: size too large, truncated to 1048576
[  201.473196][T10949] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 57109 - 0
[  201.481167][T10949] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  201.510346][T10949] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 57109 - 0
[  201.513805][T10949] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  201.532135][T10949] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 57109 - 0
[  201.535602][T10949] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  201.572951][T10949] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 57109 - 0
[  201.586188][T10949] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  201.723088][T10969] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  201.760193][T10971] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 57109 - 0
[  201.763466][T10971] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  201.795681][T10973] geneve2: left promiscuous mode
[  201.797393][T10973] geneve2: left allmulticast mode
[  201.799103][T10973] bond5: left promiscuous mode
[  201.800553][T10973] bridge4: left promiscuous mode
[  201.802137][T10973] bond5: left allmulticast mode
[  201.803777][T10973] bridge4: left allmulticast mode
[  201.805442][T10973] bond6: left promiscuous mode
[  201.811079][T10973] bridge5: left promiscuous mode
[  201.819621][T10971] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 57109 - 0
[  201.822568][T10971] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  201.859558][T10974] openvswitch: netlink: Tunnel attr 226 out of range max 16
[  201.870082][T10971] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 57109 - 0
[  201.875513][T10971] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  201.936622][T10971] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 57109 - 0
[  201.940601][T10971] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  202.164637][T10987] netlink: 'syz.1.1671': attribute type 4 has an invalid length.
[  202.279285][T10989] netlink: 'syz.1.1672': attribute type 10 has an invalid length.
[  202.333788][T10991] netlink: 'syz.1.1673': attribute type 7 has an invalid length.
[  203.423603][   T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  203.742089][T11018] netlink: 'syz.2.1682': attribute type 64 has an invalid length.
[  203.796826][T11018] __nla_validate_parse: 9 callbacks suppressed
[  203.796844][T11018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1682'.
[  203.817126][T11018] dvmrp0: left allmulticast mode
[  204.328212][T11024] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1683'.
[  204.331606][T11024] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1683'.
[  204.334501][T11024] netlink: 'syz.1.1683': attribute type 4 has an invalid length.
[  204.712120][T11046] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1691'.
[  204.768289][T11050] delete_channel: no stack
[  204.771188][T11050] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ1
[  205.026165][T11058] lo: entered allmulticast mode
[  205.028236][T11058] lo: left allmulticast mode
[  205.142843][T11062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1697'.
[  205.174450][T10971] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 57109 - 0
[  205.177332][T10971] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  205.188829][T10971] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 57109 - 0
[  205.191367][T10971] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  205.199263][T10971] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 57109 - 0
[  205.201841][T10971] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  205.216231][T10971] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 57109 - 0
[  205.225306][T10971] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  205.311030][T11068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1700'.
[  205.315968][T11068] netlink: 'syz.1.1700': attribute type 1 has an invalid length.
[  205.319051][T11068] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1700'.
[  205.343677][T11070] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 57109 - 0
[  205.348649][T11070] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  205.398242][T11070] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 57109 - 0
[  205.402116][T11070] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  205.420570][T11071] openvswitch: netlink: Tunnel attr 226 out of range max 16
[  205.453259][T11070] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 57109 - 0
[  205.458058][T11070] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  205.599950][T11070] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 57109 - 0
[  205.603190][T11070] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  206.069833][T11018] Set syz1 is full, maxelem 65536 reached
[  206.893868][T11113] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1714'.
[  206.959469][T11115] syzkaller1: entered promiscuous mode
[  206.961952][T11115] syzkaller1: entered allmulticast mode
[  207.185987][T11120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1717'.
[  207.920215][T11157] wg1 speed is unknown, defaulting to 1000
[  208.004046][T11165] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1729'.
[  208.921417][T11192] __nla_validate_parse: 3 callbacks suppressed
[  208.921429][T11192] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1736'.
[  209.222856][T11209] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1743'.
[  209.226489][T11209] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1743'.
[  209.230322][T11209] netlink: 'syz.2.1743': attribute type 4 has an invalid length.
[  209.241970][T11210] xt_bpf: check failed: parse error
[  221.300037][ T5219] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  221.304991][ T5219] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  221.308400][ T5219] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  221.311696][ T5219] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  221.314601][ T5219] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  225.479360][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  225.483856][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  225.488252][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  225.491651][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  225.495039][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  225.529377][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  225.532761][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  225.535626][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  225.540176][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  225.544180][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  282.340975][   T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  282.345740][   T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  282.349952][   T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  282.352823][   T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  282.355326][   T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  286.659004][T11247] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  286.665486][T11247] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  286.670783][T11247] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  286.678228][T11247] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  286.682502][T11247] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  286.686098][T11247] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  286.690262][T11247] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  286.694165][T11247] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  286.698094][T11247] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  286.704120][ T5832] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  314.666357][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
SYZFAIL: failed to recv rpc
[  314.668387][    C0] rcu: 	0-....: (10509 ticks this GP) idle=7594/1/0x4000000000000000 softirq=43107/43109 fqs=5207
[  314.673451][    C0] rcu: 	         hardirqs   softirqs   csw/system
[  314.675641][    C0] rcu: 	 number:     7780          0            0
[  314.677603][    C0] rcu: 	cputime:      357          0        52122   ==> 52480(ms)
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  314.679948][    C0] rcu: 	(t=10500 jiffies g=32077 q=2419 ncpus=2)
[  314.681999][    C0] CPU: 0 UID: 0 PID: 11214 Comm: syz.2.1745 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  314.682012][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  314.682020][    C0] RIP: 0010:lock_is_held_type+0x137/0x190
[  314.682041][    C0] Code: 01 75 44 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 4c 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 05 19 43 32 07 <48> 3b 44 24 08 75 43 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f
[  314.682050][    C0] RSP: 0018:ffffc9000739f008 EFLAGS: 00000206
[  314.682058][    C0] RAX: ffa76d6f9edfd900 RBX: 0000000000000001 RCX: ffa76d6f9edfd900
[  314.682064][    C0] RDX: ffff88810599d640 RSI: ffffffff8db837b9 RDI: ffffffff8be28c40
[  314.682070][    C0] RBP: 00000000ffffffff R08: ffff88810599d640 R09: 0000000000000002
[  314.682075][    C0] R10: 00000000ffffffff R11: 0000000000000002 R12: 0000000000000246
[  314.682081][    C0] R13: ffff88810599d640 R14: ffffffff8e13f160 R15: 0000000000000002
[  314.682086][    C0] FS:  00007fbeb17226c0(0000) GS:ffff8880b8626000(0000) knlGS:0000000000000000
[  314.682093][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  314.682098][    C0] CR2: 0000000000000000 CR3: 0000000109360000 CR4: 00000000000006f0
[  314.682121][    C0] Call Trace:
[  314.682127][    C0]  <TASK>
[  314.682135][    C0]  qdisc_lookup_rcu+0x32b/0x6d0
[  314.682148][    C0]  qdisc_tree_reduce_backlog+0x1b2/0x480
[  314.682158][    C0]  ? qdisc_tree_reduce_backlog+0x3c/0x480
[  314.682169][    C0]  fq_codel_change+0xa96/0xef0
[  314.682182][    C0]  ? __kmalloc_cache_noprof+0x230/0x3d0
[  314.682204][    C0]  ? __pfx_fq_codel_change+0x10/0x10
[  314.682214][    C0]  ? __sock_sendmsg+0x21c/0x270
[  314.682234][    C0]  fq_codel_init+0x355/0x960
[  314.682273][    C0]  ? lockdep_rtnl_is_held+0x26/0x40
[  314.682284][    C0]  ? __pfx_fq_codel_init+0x10/0x10
[  314.682294][    C0]  qdisc_create+0x7ac/0xea0
[  314.682308][    C0]  tc_modify_qdisc+0x1538/0x20e0
[  314.682317][    C0]  ? is_bpf_text_address+0x292/0x2b0
[  314.682334][    C0]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  314.682357][    C0]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  314.682365][    C0]  rtnetlink_rcv_msg+0x77c/0xb70
[  314.682378][    C0]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  314.682388][    C0]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  314.682406][    C0]  netlink_rcv_skb+0x208/0x470
[  314.682420][    C0]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  314.682432][    C0]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  314.682448][    C0]  ? netlink_deliver_tap+0x2e/0x1b0
[  314.682459][    C0]  ? netlink_deliver_tap+0x2e/0x1b0
[  314.682472][    C0]  netlink_unicast+0x75c/0x8e0
[  314.682486][    C0]  netlink_sendmsg+0x805/0xb30
[  314.682501][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  314.682513][    C0]  ? aa_sock_msg_perm+0x94/0x160
[  314.682525][    C0]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  314.682534][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  314.682545][    C0]  __sock_sendmsg+0x21c/0x270
[  314.682556][    C0]  ____sys_sendmsg+0x505/0x830
[  314.682571][    C0]  ? __pfx_____sys_sendmsg+0x10/0x10
[  314.682586][    C0]  ? import_iovec+0x74/0xa0
[  314.682600][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  314.682612][    C0]  ? __pfx____sys_sendmsg+0x10/0x10
[  314.682639][    C0]  ? __fget_files+0x2a/0x420
[  314.682646][    C0]  ? __fget_files+0x3a0/0x420
[  314.682658][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  314.682670][    C0]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  314.682686][    C0]  ? rcu_is_watching+0x15/0xb0
[  314.682698][    C0]  ? do_syscall_64+0xbe/0x3b0
[  314.682709][    C0]  do_syscall_64+0xfa/0x3b0
[  314.682718][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.682726][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  314.682736][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.682743][    C0] RIP: 0033:0x7fbeb098e929
[  314.682753][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  314.682760][    C0] RSP: 002b:00007fbeb1722038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  314.682768][    C0] RAX: ffffffffffffffda RBX: 00007fbeb0bb5fa0 RCX: 00007fbeb098e929
[  314.682774][    C0] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000009
[  314.682779][    C0] RBP: 00007fbeb0a10ca1 R08: 0000000000000000 R09: 0000000000000000
[  314.682784][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  314.682788][    C0] R13: 0000000000000000 R14: 00007fbeb0bb5fa0 R15: 00007fffda59f738
[  314.682800][    C0]  </TASK>

VM DIAGNOSIS:
18:09:17  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000073f0
R8 =ffff888107f08237 R9 =1ffff11020fe1046 R10=dffffc0000000000 R11=ffffffff85460dc0
R12=dffffc0000000000 R13=ffffffff99aee8ee R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460e3c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fbeb17226c0 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=0000000109360000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fbeb0b86478 00007fbeb0b86450 XMM03=00007fbeb0b86488 00007fbeb0b86480
XMM04=00007fbeb16ed100 00007fbeb0b86440 XMM05=00007fbeb0b86458 00007fbeb0b864a0
XMM06=00007fbeb0b86498 00007fbeb0b86490 XMM07=00007fbeb0b86488 00007fbeb0b86480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fbeb0a11df9
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000005 RBX=ffffffff8e13f160 RCX=0000000000000007 RDX=0000000000000000
RSI=0000000000000000 RDI=ffff888021200000 RBP=0000000000000000 RSP=ffffc90003296c68
R8 =0000000000000000 R9 =ffffffff8172aae5 R10=ffffc90003296eb8 R11=ffffffff81ad03a0
R12=0000000000020000 R13=0000000000000000 R14=0000000000000000 R15=ffff888021200af0
RIP=ffffffff819e4506 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd97bce7d60 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007fd97b1866a3 00007fd97b1866a3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0000000000000000 000000000001df8a
XMM06=1000000401000000 0806060100000007 XMM07=0060030000000000 0010004003021000
XMM08=3003401000029003 0100000000000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
