last executing test programs:

2.368993145s ago: executing program 0 (id=3691):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x15c, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x148, 0x1, [@m_nat={0x144, 0x1b, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x4, 0x0, 0x87}, @multicast1, @dev={0xac, 0x14, 0x14, 0xf}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x8, 0xffffffffffffffff, 0x6, 0x7}, @loopback, @broadcast, 0x80, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x5, 0x5, 0xa7, 0xffff0001}, @broadcast, @multicast1, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x40, 0x4, 0x0, 0x3, 0x9711}, @multicast1, @multicast1, 0x95c5050eeb275cf0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff, 0xfffffffb, 0x736fe187decc650e, 0x101, 0x30000}, @remote, @local, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xd, 0xb111, 0x8, 0x838, 0x2a}, @private=0xa010101, @rand_addr=0x64010102, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x18, 0x5af3, 0x8, 0x9, 0xcd}, @private=0xa010100, @multicast1, 0xff}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'})
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x9, 0x8, 0x4, 0x4009, 0xa, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value=0x3f000000}, 0x48)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000080), 0x4)
sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r4)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000100080c10000000000000000000", 0x58}], 0x1)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x18, 0x24, 0x301, 0x0, 0x80, {0x11}, [@nested={0x4, 0x12f}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000040))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="796100000000000000007e00000033000300", @ANYRES32=0x0, @ANYBLOB="a739dfe54ad99ffa18c27526b51001fb4f778791377c"], 0x1c}}, 0x4000054)
r9 = socket(0x10, 0x803, 0x0)
sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

2.143218432s ago: executing program 2 (id=3699):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="7a0a00ff00000000711044000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e40)={0x14, 0x2b, 0xb, 0x0, 0x0, {0x8}}, 0x14}}, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000004ac0)=0x2c, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000280)="680ee119d8a8207afa5cb5848816d2ad7b2b77339e07", 0x0, 0x2}, 0x20)
syz_emit_ethernet(0x1e, &(0x7f00000002c0)={@local, @remote, @void, {@can={0xc, {{0x1, 0x1, 0x1}, 0x4, 0x2, 0x0, 0x0, "60d91cc4f57c26dd"}}}}, &(0x7f0000000300)={0x1, 0x1, [0x921, 0x45c, 0x4a7, 0x65f]})
socket(0x1, 0x803, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket(0x0, 0x3, 0x5)
setsockopt$inet6_tcp_int(r6, 0x6, 0x8, &(0x7f0000000340)=0x8, 0x4)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x50, 0x9, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000047}, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r8, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)
sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)
socket(0x2, 0x80805, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1}}]}}, &(0x7f0000000080)=""/106, 0x3e, 0x6a, 0x1}, 0x20)

2.015658906s ago: executing program 2 (id=3702):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$kcm(0x2b, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="54000000000000000000000400000000000000600000000100010001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030000000000000000100000001"], 0x88}, 0x0)
close(r0)

2.015356s ago: executing program 2 (id=3703):
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=<r0=>0xffffffffffffffff, 0x0, 0xb56039c214c1041d, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = socket$inet6(0xa, 0x3, 0x2f)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x14, 0x8, 0xffff, 0x0, 0xa, 0x50, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x5}, 0x0, 0x0, 0x1, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, 0x0, @in=@remote, 0xfffffffc, 0x0, 0x2}}, 0xe8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r3, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='rxrpc_peer\x00', r4, 0x0, 0xfffffffffffffff9}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='rxrpc_peer\x00', r4}, 0x18)
r5 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24)
sendmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x32400, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x20, 0x70bd2a, 0x25dfdbfe}, 0x14}}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x1f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

1.868813813s ago: executing program 2 (id=3707):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r3, 0x10c, 0x4, &(0x7f0000000040), 0x4)
sendmsg$inet(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41)
recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000030400000000fedbdf2500000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e00", @ANYRES32, @ANYBLOB="050001"], 0x44}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="b40000001500010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0800040000e40000140001000000000000000000cc0c3ae27f00000114000100fe8000000000000000000000000000aa2c00"], 0xb4}}, 0x0)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000140)=[{{}, {0x4, 0x0, 0x1, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x3, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x3, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x4}}, {{0x4, 0x1, 0x1}, {0x1, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}, {{0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x1}}], 0xfd68)
sendmsg$inet(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="fc", 0x1}], 0x1}, 0x41)
recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2002)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004)
recvmmsg(r0, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000005c0)=""/260, 0x111}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f00000018c0)=""/4119, 0x100d}, {&(0x7f00000017c0)=""/220, 0x7d}, {&(0x7f0000000f40)=""/218, 0xda}], 0x6}, 0x80000002}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @loopback}}, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/173}]}, 0x10}, {{&(0x7f00000004c0)=@nl, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000780)=""/133}, {&(0x7f0000000840)=""/189}, {&(0x7f00000003c0)=""/26}, {&(0x7f0000003940)=""/4096}, {&(0x7f0000000400)=""/54}, {&(0x7f0000000900)=""/246}, {&(0x7f0000000a00)=""/206}, {&(0x7f0000000b00)=""/143}, {&(0x7f0000000bc0)=""/83}], 0x0, &(0x7f0000000d00)=""/236}, 0xffffffff}], 0x4, 0x40001020, 0x0)

1.614557149s ago: executing program 1 (id=3712):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000008a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xd}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x3cc0, 0xe, 0xa, 0x401, 0x0, 0x20000000, {0x0, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x354c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7fffffff}]}, {0x1f0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1e4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x59, 0x1, "91f8136a160ce6ebfe3db7d5f505bdd0ae37dfa668e8d49327cb9ae1dd192641b1c425b27e5468006807f45ff4734df5341c4ad2b30fd0bf2795c5c0eda3fa8a59eba33736adb59e8f5b46a01a37325e299d384c27"}, @NFTA_DATA_VALUE={0x57, 0x1, "bc6668d30935c95b9c751ec4c31a95c18df3e6b04be20099a8604ae18c5f603dcd094bc9e8f2902f741f670386c3ad6893a30c4236c210344295bdabc88343c1344c0fbf82f9630d18c61151b7705a33cff0d3"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xc8, 0x1, "d66024b8525e38b8572a7262ec80125ceef4bc580e89ecea073ab2ce1def8e4b49ce13df721c96f0fe033cec0c366a9914003b4e61b17801f41cf47c90038e745f83d3287dba5425cae391c08e377fa6fdc80d976e0aa768668fc496d0efd03db313bc9f654246cca1ee41c6afe7788fc9047e3aeb742622a9919c7a3833b0f325ad27f29d85d88d2bbc62929a2cffee8a67a203ec22836c3c4567a221f85c0d16a67391a28943b42c2b4af361faf67b1e43e87f2ab4aad9e0eceb534672364f747094e7"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x1094, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1040, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0x26, 0x6, 0x1, 0x0, "ac6cb51c314ddb582feae23af64b181e6b4bd45cee84833aabe0194c76d2e86026cb"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x15a0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x119c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xf3, 0x1, "fb83e5d545033ad4595a574583564098b736e9267cf61ec5a6551cea9d5427a68e332e6d920dc8dfe9afe5c247588b0c15a9cfa24d01ae968224b616beadad1a95c30dfcc4aeff53507de5e06128c39e61e2212196d43342f6b54a87194cb49114dcb4d7e95dbc1d6ca94b86ba4ba599b73fef96765fe2e83b0e8d0753097a2c7dc082d7695154d80bb3fb26eaf3fbab904e2c9d8dc57cf735bbdde9a6c350b70ada1e6033729b42611c40f850b982e59d7c9c5bf2e455dbb7f44bfb857ac9a608103e4d24d5077021004617c15cd2880a91c699d900991d210e83786bd6ee62786f19d93225851d90018e34921cae"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x56, 0x1, "1a4a6575eb24f2019e8570c565694a5ba525e28e49f03e0625075dc0d214356e506a0c530a9e150a89e91ff651e99f01a14cd963d4b4bcea4145a1fab2cbc45ebb5b7cdf08345cea0e51bf2ef2d63c267114"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_DATA={0x1d8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x14, 0x1, "b98d784d6b271d4e39ed9a7f821c0c17"}, @NFTA_DATA_VALUE={0xe2, 0x1, "bd2e4bf31a31672f1ae7497d4675217da437462d889fc6f6b8145489dc4da69f0a3eebc6db2e6dda71e9239ccee0825bb5781727a4061c91eadf378a81be3a95629e4ca337f330f5d8b58a2481a65deb09c39806c22b6a5e093bc6402048147cb752fcf75ec8352c7955109cff7e4f6b09c46a1470a042bc5ea284f91145448de81a2b0709424ccce0f2c92265216628ae00f329982b93bfb64685388650d5b3ed7647c0c5fadd4196140287164d65a20b2429b7a9552c7204b1534505be505e1d7784ce8bc70465b5f78071a1184c520fa18947183e79343cefdd4707f7"}, @NFTA_DATA_VALUE={0x67, 0x1, "80288651b6348be75cf2ad60aa62756eb39e05af54a4b1b7e33fac75c319adf8dd49785b6c0c0973e449a82010ce71f0ec1e23348cb6ee5c23ad0eec249488a7f4a4b08893353959dae79f7fa9a5d9a13fddd46b3d0008b7f4990deea958e3afe7eeba"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_DATA={0x130, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xa6, 0x1, "7fc16c21db78cae4e44ba0e3c6cf40e87876c94ab0d16b13b2bf7d707c3df2db7f92305de57f114ccccb8b328e0fff271b366988ad1cb0a8e927ccbb47941b5f777f48e539549c4b1a5f0bfede51f5cd2b71a1d2bed909155d89d362168e953558cf943d5219aa6997755aa603a537790b9af2097a3744bb88d0d927a399b15988d49724a47cf68d80055fc12a3ce3467d2f6a0bc7e8b7c8692f3b2b47d365e407bb"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0xffffff83, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_USERDATA={0x4}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0xdd, 0x6, 0x1, 0x0, "fa48f2bac2962aa39b8d79d426a51f7d301b73ab26f0142b0549d21ca13e1f0457c0ed1513aa1ec11e37bf378d6fc66bbdd309ccacbaeaeaa7e250d8b06a1b55d5c458f3750688b55a7ab775d62672b717dc4d9749c97a42f7f1718f588a8cde4a9af9332044c0afc22b177b7d3ad1060e200c27da4779492dad71bfb2d48444e9db23c7a7c677d3f22bacb2d75b3b154556d026df213b85733ea3aa745f9c8bbbff3aa6b971e09384a627b654772ad3d2d7a36c0064a19ebac04555cbe68036a7172152a411039c3a70adc25c556e68d96067f7f6cfd1ca54"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xffffffffffffffff}]}, {0x328, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xdb, 0x6, 0x1, 0x0, "95669f4a51c5b0d470e9102bf5fef8ac745eb54116d061c0574b2772103ab33fddb60a214a4a35ababe0bc9e9e506bfa304514e9a9b92d196ce50ccbf5107367e69562cc3631c5f9fcb10b3e241062d14c375e0e3d9575ee8732b5ce8b2df0bc76395c3e4d3b223e26d8f3c90d3a34e652636492976f7ef52e498b8ec3bdfcc1e69a8b0665d063bcce617157ac53e436c5ceed65869f550c139b1695470d7dbe91267a11154cc49966a080e950b48015edead14b9e256563323be5ee0bb3fe517804d304c7992cb033a8254f0c7600ddf810dc2c5aab3b"}, @NFTA_SET_ELEM_KEY={0x1bc, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x68, 0x1, "a3a0e8eea329d34ce11c55a5c555b34a512b7aeff44f488c49a807d1a9885c8841d882218a8e9c03d87dbd147123f161e6b3f6cf8a38c5efa5000f404b89a758e8e2ea07b7c98ceb998d7b6e744ab5711b486f4a29fe7c11174ec14591eda1448b2eec90"}, @NFTA_DATA_VALUE={0xe2, 0x1, "d9c9563bc994bba7387074ce6a0b205e989e6f052f7ac4b6bd1e895734a43108fdb869c9738043e160da05d094800542966e095a4ed561e05e3be1ebf14bf37be40edb907fa816e4e153fd318bc16f524b0ff7fe43f8e520bde7d9e7fb3f6a09c2cb211cfafba0c58aa687a401ad98366e2edd7432d75f9b0c88dd564f6efefaba7171e26a516688f33baffe1ffc398285820aef0e469dfb787a9b3a0c3fa0ecee53d53fece61156784429b96f2a1c07fb77e04ac8f2edfb9fd98b7f0b47c6f06278b23c0c02aff72cf94c5d6173a6447e21b60fdeb1a63b7edd50c1dfdd"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x34, 0x1, "9b99ff55cc60c4ce2c8b82f608c83a62a3b249b36766be93b354adcf2a1081db811ef0ea977840b478f69ad493797eee"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_EXPR={0x50, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3ff}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x400}, @NFTA_SET_ELEM_EXPR={0x30, 0x7, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xe1}, @NFTA_BYTEORDER_OP={0x8}]}}}]}, {0x530, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x338, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xdb, 0x1, "8b1978b0d52509288abc1ee1d524024f3b1a774b5274ffb43d04249d55111bff4c67b8ef99e26a486b830aa83649a0f389f0a6f38139db82fc8fc5386d4387b254a19c504d1610930ca1b81fb8246da5c84c718a83dee59519b581ebc2697991ef60229f7fad64617f130b6ad527f44e97825a40f905909c2cd08dfa79edf0f559b173d264b1c3bae0aa075682ca1b897b8a4bf1ea2afcf6676027ef83b1d972279285e4f5678c55db57527845b0b1179529e996afb2ad9e6d3ddbb38435f8c53e65d7f4973ede14b4503023709219528a51fb869fbbea"}, @NFTA_DATA_VALUE={0xa2, 0x1, "869761196a76120193f19c55b62b4e30a671ee51c9022638f30a30a89d44beb048a2e59e986fb2742a6e2dcd83cc9c6411798c28f2a16ceb84232924c33ea463e0131096d815f0c5edae0cf4ddf012f02a5108e55dbd3034c29cd973888a051f179369e577ec46cc0cb9e6cac38028b01f7f93b40499c94999737206b2e637416f344b576e88ef67d49fc4722aad270c06513da9f60c61dff4cd064fd2a4"}, @NFTA_DATA_VALUE={0xcd, 0x1, "0f159fcc3375d6b95c6c26f9ceb950b928ddfe545bba8bf5424ebaa0363281470f3d9f9eb9540c7742e246df6d4851b2dc0b7b7ec9fa06d3cabe0522dfd6192966d8c428cfcc66dda67037b6d84b1e0a24391f396882953d3209a5033078e8f643cab1b42a17295eb4b83abbe13464314041544622ca17e5d0437237d4bb57f6879dae0342e042cac5b46f5b27b2a6db33f4cba59793cbe20ce5832536f4b3a3cd3e5f25f52187cec152cd3d82019766eaf3cffa6603fa2e80437567e4807a4481ef299663bda1e7c2"}, @NFTA_DATA_VALUE={0xd0, 0x1, "3d8b63395daa6b3eb9acb620bed2f70bad2db46fee53c2fe2e2593bc5b43be7065cfbada646789ddc896c8023827059ea461e5a543493d398a597bdad85608f0836f0296d9a8b672667f94d96981810ef255782b1465eec62dae6207de0edbfaceb999c17e834e6dc2f92ea5b058fe38b2d47b8a29e22b7a19df35942d162d6d9c84a7d2c9b86bf8366aa1e924a6cda5d07df69ed0fc22634044898b701fbaf4724235b5dbb0217e8a86a33beb95535bf6b62436bbd378a56e38488923e9eb5081df1d4d60b0e04d7fa67938"}]}, @NFTA_SET_ELEM_DATA={0xbc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x7f, 0x1, "4cbe6feba994a9f77db12374063f8f2555a3919bb8def687cdae7c4af98b8817a58ffe29c1a2a10203b0e2d36e2fbd98c16ccc82a833e605380231a200b6d94b702d3d6a68f90315b65aa3461c2d17bef4f0de2f11f072f81545d261f38c19e87a24b833868f267fc2cf5008073239e933120064d28739145a4231"}, @NFTA_DATA_VALUE={0x2c, 0x1, "f3cb0748d72fc859e1f6ab69fce25e2bf39adce3f07d93af5878e46ef797ba45a60a6d5126eb02ee"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x120, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbd, 0x1, "e6cc0ca2fefe2e109dad03746deb8a287d25810a73cd0b926ccf38fd79cba9137a0ed0482dec076517f1f5c263c7fb0d158787051a0ccf40e83583bf0123320d681ffc10575f725862b19f3a09146479a5bd3074d4c8984842b1842c678047fd1cbcb2f6a4e97cfb1d3aece8dc45d991afe851b6c50896dc389d9c70bb9d716057bc9c8091ef117cdba66b99dab48c5a852b30f32ba5c26b8096679f995e2c6dff88264e2896d903d5df9543760be3a25e16ef5a2c03b02852"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x26c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x14c, 0xb, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffff0}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}]}}}, {0x38, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_RT_DREG={0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x40, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x9}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_OSF_TTL={0x5, 0x2, 0x7}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_OSF_TTL={0x5, 0x2, 0x68}, @NFTA_OSF_TTL={0x5, 0x2, 0x9}]}}}, {0x40, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_SET_ELEM_USERDATA={0x86, 0x6, 0x1, 0x0, "165faaeb7d09b5f7c908857a8ac72c7e9cb5f710b64ce6060b8726c3abf2dbd2e2c095c6cf59edff19b74530c9f960f46ad6e3b24667daf4d3c5700a1d26a28cf8d699ec94417351d129fa7207277cb0d594610a8c6f1eab58aebc89b5ca81e37b454ae4d31d8456f46499baefee608552656eb54fccceb543a8cb8406c47f9df39e"}, @NFTA_SET_ELEM_USERDATA={0x93, 0x6, 0x1, 0x0, "25ba0423b0f8f7536341b7349c8b7a05cfbf57a7a4d4e407e861c95c7b5093e33d36b9bcd3abc231d42be5aa1dc6e53f01b0ba97eeffdc2fbe88affbc5336b1b60451e044aadcc789d53ffb0fdf8453d91c2b696d9af18f2bf2db6c6ee4ac8e04f57091cc8ee0d745cdf10013e1a6ffdd3daa4052b442bdb0236f8903506791a424a888a1d98acef676537c7dac2bc"}]}, {0x238, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffe00000000000}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffff9}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY={0xfc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xaa, 0x1, "26ded426f7ca587a48e90dbdd02c5be064ed46d4ad5e3cafd3c80aea7bbc1ac66ee8541bc5ba452e2063727a0cad6a5380c935de1d1dd9b45a486260417aa42365bda4d2a0e881736f28e1a542c7d39d41e903eeff5e0e2cf587b4d13fb0580eb99f6ffae64aa89126bfc4765b28f8bab345b5517113ca02379c7bdecd18127f7ff39e5703b5b4482233789bf897b97919bba362194f2d976b15c5dd61a1cf043db9ba751d68"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x30, 0x1, "a640e54b41b5ec0fcf829873109ca10bc88b1acc38ed358c072509071d560ae39cc6382d3ae7c781ca8d50bf"}]}, @NFTA_SET_ELEM_KEY={0xd4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xb4, 0x1, "6a9f8da14a669e4a8cf8f7df6d2c64c4c284c22d2de6058dff35a5eb25d215dfcba9164b5196a279ccc9860834e4a00f69664b8027b3eb06bec7768429d732588de87e1c94c55aecfa7aef09bab3bf2b38797b0b21fcb4f6491e912814773ab33a5a86b4f2b7519b13a0ba3729d22b0ca28e90d02c6057301d40a408113c150cb2b3862eff0262abbaa7628f6f390c8d6b8493275fb2021e3d4bdc4cd5055885820fc7463a9a4140e164105ea45674e0"}]}, @NFTA_SET_ELEM_KEY={0x20, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1a, 0x1, "aaa17fca6f6b578829cf2c9bc4387ed83579ffc38d2b"}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x70ec}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x38, 0x7, 0x0, 0x1, @last={{0x9}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xfff}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffeffff}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x230, 0x3, 0x0, 0x1, [{0x21c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, @NFTA_SET_ELEM_DATA={0x14, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd, 0x1, "e15408e06ec44ee871"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_DATA={0x1c8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x32, 0x1, "6bbcdb191bf78ef04d1b6609e5c9753a5202008c3cdb3b068a4713edd0a3a1b2635dbe8a11a67fdaceabcf7e2a92"}, @NFTA_DATA_VALUE={0xa, 0x1, "02cf3b44228a"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x40, 0x1, "4445fa5a58f27ee1a66ad4107ea8838a539abf9d5278fd63a098c6447ae1c0fb747e242d1776fb0426b09aabd544641c69b1af34edd96f49fd377b0e"}, @NFTA_DATA_VALUE={0x16, 0x1, "ce9f67753fb52022a6becf0f4d02a5998410"}, @NFTA_DATA_VALUE={0xda, 0x1, "c7625608820d56ebf3b282af7dd05a4ae84f816da5314811169e5964113da1cfd0cfdf43c3023b702a80015f55e5e47d972532bc75724b14f66206ed064a0451bf30617a6b7ab822bd4728b8ab858c968895826bfbb7a40dc2535b54f24f216063589ac41a0269a210b2978a94db98c108d7ab6a00510d8eb18ca6f9c24d294dfc45c3bd800c22fbc59bb6677e1c3bb8fdf48a5d48b4d0ab705c418031ed2a6c7ea612b0210455f413e2431e0cf318f0e9bd585c19f6ae7c732faa309a35fabd1475904918efe1dbc38fcaee3d36e178ce3f433e6feb"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4cc, 0x3, 0x0, 0x1, [{0x4}, {0x2c0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0xc0, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x74, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x64, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x24, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_FROM_DATA={0x4}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_DATA={0x94, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}]}, @NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_KEY={0x144, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x12, 0x1, "2ce2968a0a01ae42dfb4279bdfbd"}, @NFTA_DATA_VALUE={0x3e, 0x1, "ef486039bfc32b46466b1c86db05c605ba23ac0813bfc12ce82d5666654b97a3608cc729cd28dd29de70c76cd771e7afd5cb9f7593b157e7a488"}, @NFTA_DATA_VALUE={0x46, 0x1, "90277306796af5da874c184630e048be4aa05b547c43415a33a6b927091215c83b048b9681ee7982739c641410ea212b90476c2ba0e524f1aef2be45ec7688465035"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x47, 0x1, "b755dc3bdb11a314448c3dc0e1d0157bfb1483580e1a3dbab9596df94ffd30f0128466bd65966df3f628f3afc487990e2ff052d36dd0623df28df767843996f3f60255"}]}]}, {0x204, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1f4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6d, 0x1, "cc6ecd1e04fa249dbfc1eb3d541d7efe5138e5efdd2ae37c1e2f853b289b4522b072686bccb7068fa3afe56f7287aa05e4d5d0491f5e041eac5d3db7136f8b123e37ca0d9870412ad99748e9412027fee4f35a701d317afbfb007107801f05bab27593f2183178cae0"}, @NFTA_DATA_VALUE={0xf0, 0x1, "630824a48353c590b1d6ab036372657912a87f5b5736da7caf8f20a829b8c9e552013118028683036a09aa418a2e2e87e52f3465331842c29a3c74fcb300836c5fa59c6f4630a5b3a8a570e6d75175ca186315ac43efecd9f3af073d54c3e5676f76ab5dc7648f421fc4d500216387871949dcad8e3a79a7b43742d3ddc2ab3df823efce4160e84e7b43b63a45b78f316b4acc3111b33d1bba6618f841d417d88856d20919f405cfb683cbdafa6937b4090852e627ce91527f5bdcd96bddbc187f12f9d2a12b8fe24cd50ecb6c4b774eafc00881d95dde1f3006dab3a41c5e072f73cafff4dbc14e6a094a5f"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x27, 0x1, "b3949866f0ea7f12931ff378cae7e3d8267589e9b43566b2889d1b5ec59227db5cb696"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3d80}, 0x1, 0x0, 0x0, 0x20008041}, 0x0)

1.613563751s ago: executing program 1 (id=3713):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000080)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @val={@val={0x88a8, 0x7, 0x0, 0x3}, {0x8100, 0x6, 0x1, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x4004, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010102, @multicast1}, {0xa003, 0x6558, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x9, 0x0, @val=0x80}}}}}}}}, 0x3a)

1.485389285s ago: executing program 0 (id=3714):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004)
recvmmsg(r0, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000005c0)=""/260, 0x104}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f00000018c0)=""/4119, 0x100d}, {&(0x7f00000017c0)=""/220, 0x7d}, {&(0x7f0000000f40)=""/218, 0xda}], 0x6}, 0x80000002}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @loopback}}, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/173, 0x20}]}, 0x10}, {{&(0x7f00000004c0)=@nl, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000780)=""/133}, {&(0x7f0000000840)=""/189}, {&(0x7f00000003c0)=""/26}, {&(0x7f0000003940)=""/4096}, {&(0x7f0000000400)=""/54}, {&(0x7f0000000900)=""/246}, {&(0x7f0000000a00)=""/206}, {&(0x7f0000000b00)=""/143}, {&(0x7f0000000bc0)=""/83}], 0x0, &(0x7f0000000d00)=""/236}, 0xffffffff}], 0x4, 0x40001020, 0x0)

1.485038367s ago: executing program 1 (id=3715):
r0 = socket$netlink(0x10, 0x3, 0x13)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async, rerun: 64)
recvfrom$x25(0xffffffffffffffff, &(0x7f0000000100)=""/41, 0x29, 0x101, 0x0, 0x0) (async, rerun: 64)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8011}, 0x10)
sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000120001000000000000000000100000000c40000000000000000000000c001d"], 0x2c}], 0x1}, 0x0)

1.435171464s ago: executing program 0 (id=3716):
r0 = accept4$llc(0xffffffffffffffff, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000300)=0x10, 0x0)
getsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000340), &(0x7f0000000380)=0x4)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x200, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40140}}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
connect$netlink(r2, &(0x7f0000000180), 0xc)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12)
shutdown(r1, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000003c0)={<r3=>r0})
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000740)={0x130, 0x9, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x30, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6c}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xa, 0x1a, '&.$[-\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xc, 0x1a, '[&(\xe4#-\n\x00'}}]}, @IPSET_ATTR_ADT={0x74, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xc, 0x1a, 'ethtool\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x10}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR2={0x5, 0x15, 0x10}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x6}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xfffb}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4}, 0x4880)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006b113a00000000009f000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001", @ANYRES64=r4], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x880)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_LABEL={0x8, 0x5, 0x199d2}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="b5bf0000005cd5e5709bf203d10000000000010100000400028004000300"], 0x1c}}, 0x0)

1.434456735s ago: executing program 0 (id=3717):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa04, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="ec00000021000100fcffffff000000000a010101000000000000000000000000fc02000000003a00000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00001000000000009c0011000000739d2b2784a30000000000000000ffffac1414a2ff0100000000000000000000000000010a010102000000000000000000000000fc0200000000000000003300000000003c"], 0xec}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)

1.375203418s ago: executing program 1 (id=3718):
r0 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000100))
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="31200000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b00001aae21"], 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)

1.373423501s ago: executing program 0 (id=3719):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)
close(r1)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="930b7ff022790e2e8c2501000000100002800c00018008000100feffff7f04000180"], 0x28}}, 0x804)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0x8, 0x1, 0xfffffe00, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, &(0x7f0000000300)=0x2, 0x4)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x939e02dc105d5baa, 0x2}, {0xe}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)
recvmmsg(r6, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000640)=""/211, 0xd3}, {&(0x7f00000052c0)=""/232, 0xe8}, {&(0x7f0000003080)=""/4093, 0xffd}, {&(0x7f0000000540)=""/212, 0xd4}, {&(0x7f0000000180)=""/189, 0xbd}], 0x5}, 0x8}], 0x1, 0x0, 0x0)

1.284953705s ago: executing program 1 (id=3720):
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10)
r2 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000080), 0x2, 0x0)
r5 = epoll_create1(0x0)
sendfile(r5, r4, &(0x7f00000000c0)=0xd, 0x4)
sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080)
sendmsg$inet(r2, 0x0, 0x240448c4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="fd012bbd7000fddbdf250e00000008000300", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x2000080}, 0x400c8c0)

74.908419ms ago: executing program 1 (id=3721):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002900), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00', <r2=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0xc3c, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}]}, 0x4c}}, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003280)={&(0x7f0000003200)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x40c4)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)

72.087496ms ago: executing program 2 (id=3722):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x90, r1, 0x205, 0x24000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x52, 0xe, {{{}, {}, @device_b, @device_b, @from_mac=@device_b}, 0x0, @random=0xd6db, 0x5d7f, @void, @void, @val={0x3, 0x1, 0xb8}, @val={0x4, 0x6, {0xb, 0x2e, 0x100, 0x3}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x10, 0x1, 0x6, 0x0, {0x40009, 0xc9, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x308, 0xb, 0x4}}, @void, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x90}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fcdbdf251b00000008009a000210"], 0x20}}, 0x40090)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000240)="d2ff03076003008cb89e08f088a8acc05024", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x90, r1, 0x205, 0x24000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x52, 0xe, {{{}, {}, @device_b, @device_b, @from_mac=@device_b}, 0x0, @random=0xd6db, 0x5d7f, @void, @void, @val={0x3, 0x1, 0xb8}, @val={0x4, 0x6, {0xb, 0x2e, 0x100, 0x3}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x10, 0x1, 0x6, 0x0, {0x40009, 0xc9, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x308, 0xb, 0x4}}, @void, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x90}}, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fcdbdf251b00000008009a000210"], 0x20}}, 0x40090) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000240)="d2ff03076003008cb89e08f088a8acc05024", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async)

5.111601ms ago: executing program 0 (id=3723):
connect$pppoe(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="d7880df4be1df454134de698f93656dbb7021736"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x18)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000009c0)={<r5=>0x0, 0x2, 0xf000}, &(0x7f0000000a00)=0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000b40)={r5, @in6={{0xa, 0x4e20, 0x4, @private0, 0xff}}}, 0x84)
sendmmsg$inet6(r4, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000005c0)="8c7f924c55205cbf860621af9cffa024f339da7627d94ad102646641643a0295beead32ec1c0f6549e114ed345f8abb0c7096bf936fbe530e377ef9e15ddf1af09eb058230e647585f856a22a1b6c6c8273c8d617589b13a507333f8", 0x5c}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e22, 0x200006, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000500)='\x00', 0x1}], 0x1}}], 0x2, 0x4048010)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r6}, 0x18)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="14000000dbd625174bc93b"], 0x14}}, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x1000})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x4, 0x4, 0x20006}, 0x50)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{r7, <r8=>0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)='%+9llu \x00'}, 0x20)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r9, @ANYBLOB="0000000002000000b705000008000000850000005e000000"], &(0x7f00000001c0)='GPL\x00', 0x8, 0xff8, &(0x7f0000002e00)=""/4088, 0x0, 0xa}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3c756697f260f2c0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x9, 0x55, &(0x7f0000000180)=""/85, 0x41100, 0x32, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r6, 0x0, &(0x7f0000000980)=[r7, r8, r7, r7, r7, 0xffffffffffffffff, r7, r7, 0x1]}, 0x94)
close(r3)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='5\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32=r2, @ANYBLOB="0df49af092"], 0x20)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'macvlan0\x00', <r10=>0x0})
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e0044000280060002000100000008000100010000000800030003000000080007000500000008000100100000000600020001000000100005800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r10, @ANYBLOB="08000a00fb"], 0x84}}, 0x20008040)
r12 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000140)={'veth0_to_batadv\x00', &(0x7f0000000cc0)=@ethtool_dump={0x3e, 0x9, 0x4, 0xbe, "be4b1580e5eb9e1f148c1f23f68aa88e4e14984f31913039c0deeeee0f72affc09ce4ea81194e9f8787296f15f5dad04000000000000008c77e9a0c2ce8343f9d6e6205987a9b35658157274c4303dae94b668db284b8132a9c6bf34ed1fad7fe2f866f1512b00ffe26c771719260b06e23d660e99641da6f5416951e51e971c94d7a310e06165b3bca085274ce0c0fe0166192073999275c75aa5504cdb9971c2795281010f068ea8fcbb551da015821a31f7b366b13840a25729d8318f"}})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x4, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="660a00000000000061117c000000000085000000ce00000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x1}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x0, 0x1, 0x1, 0x1c0, {{0x5, 0x4, 0x3, 0x3d, 0x14, 0x67, 0x0, 0x3e, 0x4, 0x0, @broadcast, @empty}}}})

0s ago: executing program 2 (id=3724):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYRES8, @ANYRES32=r0], 0x60}}, 0x2008000) (async)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYRES8, @ANYRES32=r0], 0x60}}, 0x2008000)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_int(r2, 0x29, 0x50, 0x0, &(0x7f00000002c0))
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a01020000000000000000070000060900010073797a31000000005800048054000180090001006d6574610000000044000280080001400000000c0800034000000000080002400000000d080001400000000808000240000000090800014000000009080002400000001808000140000000a4"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000)
socketpair$unix(0x1, 0x1, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netpci0\x00', <r4=>0x0})
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1865ce351d0000000000006bd0badb00030000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x40000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9) (async)
socket$netlink(0x10, 0x3, 0x9)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x89fb, 0x0)
socket$netlink(0x10, 0x3, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x9)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) (async)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r9, 0x8923, &(0x7f0000000000)={'bridge_slave_0\x00', 0x1})
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x0)

kernel console output (not intermixed with test programs):

up+0x187/0x210
[  171.210939][T12781]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  171.210954][T12781]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  171.210981][T12781]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  171.210992][T12781]  ? trace_kmalloc+0x1f/0xd0
[  171.211030][T12781]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  171.211042][T12781]  ? kstrndup+0xbf/0x160
[  171.211056][T12781]  hwsim_new_radio_nl+0xea4/0x1b10
[  171.211071][T12781]  ? __pfx___nla_validate_parse+0x10/0x10
[  171.211096][T12781]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  171.211116][T12781]  ? __nla_parse+0x40/0x60
[  171.211128][T12781]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  171.211142][T12781]  genl_family_rcv_msg_doit+0x215/0x300
[  171.211156][T12781]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  171.211174][T12781]  ? bpf_lsm_capable+0x9/0x20
[  171.211187][T12781]  ? security_capable+0x7e/0x2e0
[  171.211200][T12781]  genl_rcv_msg+0x60e/0x790
[  171.211213][T12781]  ? __pfx_genl_rcv_msg+0x10/0x10
[  171.211222][T12781]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  171.211242][T12781]  netlink_rcv_skb+0x208/0x470
[  171.211256][T12781]  ? __pfx_genl_rcv_msg+0x10/0x10
[  171.211266][T12781]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  171.211286][T12781]  ? down_read+0x1ad/0x2e0
[  171.211297][T12781]  genl_rcv+0x28/0x40
[  171.211305][T12781]  netlink_unicast+0x75c/0x8e0
[  171.211321][T12781]  netlink_sendmsg+0x805/0xb30
[  171.211337][T12781]  ? __pfx_netlink_sendmsg+0x10/0x10
[  171.211350][T12781]  ? aa_sock_msg_perm+0x94/0x160
[  171.211360][T12781]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  171.211368][T12781]  ? __pfx_netlink_sendmsg+0x10/0x10
[  171.211380][T12781]  __sock_sendmsg+0x21c/0x270
[  171.211393][T12781]  ____sys_sendmsg+0x505/0x830
[  171.211409][T12781]  ? __pfx_____sys_sendmsg+0x10/0x10
[  171.211426][T12781]  ? import_iovec+0x74/0xa0
[  171.211440][T12781]  ___sys_sendmsg+0x21f/0x2a0
[  171.211454][T12781]  ? __pfx____sys_sendmsg+0x10/0x10
[  171.211484][T12781]  ? __fget_files+0x2a/0x420
[  171.211492][T12781]  ? __fget_files+0x3a0/0x420
[  171.211505][T12781]  __x64_sys_sendmsg+0x19b/0x260
[  171.211519][T12781]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  171.211552][T12781]  ? rcu_is_watching+0x15/0xb0
[  171.211567][T12781]  ? do_syscall_64+0xbe/0x3b0
[  171.211579][T12781]  do_syscall_64+0xfa/0x3b0
[  171.211588][T12781]  ? lockdep_hardirqs_on+0x9c/0x150
[  171.211596][T12781]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.211606][T12781]  ? exc_page_fault+0x9f/0xf0
[  171.211615][T12781]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.211623][T12781] RIP: 0033:0x7f8daed8e9a9
[  171.211633][T12781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  171.211640][T12781] RSP: 002b:00007f8daebf7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  171.211650][T12781] RAX: ffffffffffffffda RBX: 00007f8daefb5fa0 RCX: 00007f8daed8e9a9
[  171.211656][T12781] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  171.211662][T12781] RBP: 00007f8daee10ca1 R08: 0000000000000000 R09: 0000000000000000
[  171.211681][T12781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  171.211686][T12781] R13: 0000000000000000 R14: 00007f8daefb5fa0 R15: 00007ffcdb036b18
[  171.211701][T12781]  </TASK>
[  171.311491][T12784] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  171.355431][T12771] lo speed is unknown, defaulting to 1000
[  171.379688][T12779] tipc: Resetting bearer <eth:syzkaller0>
[  171.413959][T12778] tipc: Resetting bearer <eth:syzkaller0>
[  171.416166][T12786] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2117'.
[  171.426224][T12778] tipc: Disabling bearer <eth:syzkaller0>
[  171.649293][T12799] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2122'.
[  171.654758][T12799] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2122'.
[  171.703385][T12796] caif0: entered promiscuous mode
[  171.704955][T12796] caif0: entered allmulticast mode
[  171.718667][T12801] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  171.723594][T12801] CPU: 1 UID: 0 PID: 12801 Comm: syz.1.2123 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  171.723608][T12801] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  171.723614][T12801] Call Trace:
[  171.723618][T12801]  <TASK>
[  171.723623][T12801]  dump_stack_lvl+0x189/0x250
[  171.723639][T12801]  ? __pfx_dump_stack_lvl+0x10/0x10
[  171.723650][T12801]  ? __pfx__printk+0x10/0x10
[  171.723663][T12801]  ? kernfs_path_from_node+0x2c/0x260
[  171.723672][T12801]  ? kernfs_path_from_node+0x2c/0x260
[  171.723679][T12801]  ? kernfs_path_from_node+0x2c/0x260
[  171.723688][T12801]  ? kernfs_path_from_node+0x22c/0x260
[  171.723695][T12801]  ? kernfs_path_from_node+0x2c/0x260
[  171.723704][T12801]  sysfs_warn_dup+0x8e/0xa0
[  171.723717][T12801]  sysfs_do_create_link_sd+0xc0/0x110
[  171.723727][T12801]  device_add_class_symlinks+0x1cf/0x240
[  171.723742][T12801]  device_add+0x475/0xb50
[  171.723756][T12801]  wiphy_register+0x199a/0x26b0
[  171.723775][T12801]  ? __pfx_wiphy_register+0x10/0x10
[  171.723785][T12801]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  171.723800][T12801]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  171.723814][T12801]  ieee80211_register_hw+0x33e1/0x4120
[  171.723834][T12801]  ? ieee80211_register_hw+0x14a1/0x4120
[  171.723851][T12801]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  171.723865][T12801]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  171.723900][T12801]  ? __hrtimer_setup+0x187/0x210
[  171.723911][T12801]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  171.723928][T12801]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  171.723978][T12801]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  171.723991][T12801]  ? trace_kmalloc+0x1f/0xd0
[  171.724002][T12801]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  171.724014][T12801]  ? kstrndup+0xbf/0x160
[  171.724028][T12801]  hwsim_new_radio_nl+0xea4/0x1b10
[  171.724042][T12801]  ? __pfx___nla_validate_parse+0x10/0x10
[  171.724059][T12801]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  171.724078][T12801]  ? __nla_parse+0x40/0x60
[  171.724089][T12801]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  171.724104][T12801]  genl_family_rcv_msg_doit+0x215/0x300
[  171.724123][T12801]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  171.724139][T12801]  ? bpf_lsm_capable+0x9/0x20
[  171.724151][T12801]  ? security_capable+0x7e/0x2e0
[  171.724164][T12801]  genl_rcv_msg+0x60e/0x790
[  171.724176][T12801]  ? __pfx_genl_rcv_msg+0x10/0x10
[  171.724185][T12801]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  171.724204][T12801]  netlink_rcv_skb+0x208/0x470
[  171.724217][T12801]  ? __pfx_genl_rcv_msg+0x10/0x10
[  171.724226][T12801]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  171.724246][T12801]  ? down_read+0x1ad/0x2e0
[  171.724258][T12801]  genl_rcv+0x28/0x40
[  171.724265][T12801]  netlink_unicast+0x75c/0x8e0
[  171.724281][T12801]  netlink_sendmsg+0x805/0xb30
[  171.724297][T12801]  ? __pfx_netlink_sendmsg+0x10/0x10
[  171.724310][T12801]  ? aa_sock_msg_perm+0x94/0x160
[  171.724320][T12801]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  171.724329][T12801]  ? __pfx_netlink_sendmsg+0x10/0x10
[  171.724340][T12801]  __sock_sendmsg+0x21c/0x270
[  171.724352][T12801]  ____sys_sendmsg+0x505/0x830
[  171.724367][T12801]  ? __pfx_____sys_sendmsg+0x10/0x10
[  171.724384][T12801]  ? import_iovec+0x74/0xa0
[  171.724398][T12801]  ___sys_sendmsg+0x21f/0x2a0
[  171.724411][T12801]  ? __pfx____sys_sendmsg+0x10/0x10
[  171.724442][T12801]  ? __fget_files+0x2a/0x420
[  171.724450][T12801]  ? __fget_files+0x3a0/0x420
[  171.724463][T12801]  __x64_sys_sendmsg+0x19b/0x260
[  171.724476][T12801]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  171.724494][T12801]  ? rcu_is_watching+0x15/0xb0
[  171.724506][T12801]  ? do_syscall_64+0xbe/0x3b0
[  171.724518][T12801]  do_syscall_64+0xfa/0x3b0
[  171.724526][T12801]  ? lockdep_hardirqs_on+0x9c/0x150
[  171.724534][T12801]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.724543][T12801]  ? exc_page_fault+0x9f/0xf0
[  171.724552][T12801]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.724560][T12801] RIP: 0033:0x7f8daed8e9a9
[  171.724569][T12801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  171.724577][T12801] RSP: 002b:00007f8daebf7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  171.724586][T12801] RAX: ffffffffffffffda RBX: 00007f8daefb5fa0 RCX: 00007f8daed8e9a9
[  171.724592][T12801] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  171.724598][T12801] RBP: 00007f8daee10ca1 R08: 0000000000000000 R09: 0000000000000000
[  171.724603][T12801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  171.724607][T12801] R13: 0000000000000000 R14: 00007f8daefb5fa0 R15: 00007ffcdb036b18
[  171.724622][T12801]  </TASK>
[  171.889394][T12803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2124'.
[  171.982714][T12809] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  172.092022][T12818] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  172.129897][T12824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2133'.
[  172.550161][T12881] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2151'.
[  172.557601][T12880] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2151'.
[  172.616940][T12888] pim6reg1: entered promiscuous mode
[  172.618563][T12888] pim6reg1: entered allmulticast mode
[  172.623201][T12887] netlink: 'syz.1.2154': attribute type 1 has an invalid length.
[  172.664584][T12894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2155'.
[  172.737692][T12902] netlink: 'syz.0.2158': attribute type 5 has an invalid length.
[  172.853984][T12919] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  172.856853][T12919] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  172.947955][T12920] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20002 - 0
[  172.950679][T12920] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20002 - 0
[  172.954638][T12920] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20002 - 0
[  172.957131][T12920] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20002 - 0
[  172.959936][T12920] geneve2: entered promiscuous mode
[  173.040023][T12938] netlink: 'syz.2.2170': attribute type 1 has an invalid length.
[  173.071413][T12938] xt_CT: No such helper "snmp"
[  173.214305][T12958] ipt_ECN: cannot use operation on non-tcp rule
[  173.324463][T12966] syzkaller0: entered allmulticast mode
[  173.336889][T12966] syzkaller0 (unregistering): left allmulticast mode
[  173.612261][T12980] x_tables: ip6_tables: dccp match: only valid for protocol 33
[  173.884934][T13015] team0: entered promiscuous mode
[  173.886807][T13015] team0: entered allmulticast mode
[  174.306403][T13084] netlink: 'syz.0.2214': attribute type 1 has an invalid length.
[  174.328653][T13084] 8021q: adding VLAN 0 to HW filter on device bond10
[  174.355363][T13084] vlan0: entered promiscuous mode
[  174.357003][T13084] bond10: entered promiscuous mode
[  174.363440][T13084] vlan0: entered allmulticast mode
[  174.365037][T13084] bond10: entered allmulticast mode
[  174.375093][T13085] bond10: (slave gretap2): making interface the new active one
[  174.377796][T13085] gretap2: entered promiscuous mode
[  174.379733][T13085] gretap2: entered allmulticast mode
[  174.388058][T13085] bond10: (slave gretap2): Enslaving as an active interface with an up link
[  174.397695][T13085] syz.0.2214 (13085) used greatest stack depth: 18480 bytes left
[  174.459204][T13105] netlink: 'syz.0.2218': attribute type 1 has an invalid length.
[  174.462282][T13105] netlink: 'syz.0.2218': attribute type 2 has an invalid length.
[  174.778649][T13142] geneve0: entered promiscuous mode
[  174.926498][T13152] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  174.962817][T13152] bond2: (slave erspan0): Releasing active interface
[  174.973120][T13152] bond0: (slave bridge0): Releasing backup interface
[  175.006365][T13152] team0: Port device bond0 removed
[  175.012029][T13152] bridge_slave_0: left allmulticast mode
[  175.013956][T13152] bridge_slave_0: left promiscuous mode
[  175.015929][T13152] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.025319][T13152] bridge_slave_1: left allmulticast mode
[  175.027036][T13152] bridge_slave_1: left promiscuous mode
[  175.032211][T13152] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.043075][T13155] netlink: 'syz.1.2233': attribute type 10 has an invalid length.
[  175.049676][T13152] bond0: (slave bond_slave_0): Releasing backup interface
[  175.056012][T13152] bond_slave_0: left allmulticast mode
[  175.065243][T13152] bond0: (slave bond_slave_1): Releasing backup interface
[  175.068409][T13152] bond_slave_1: left allmulticast mode
[  175.071335][T13152] team0: Port device team_slave_1 removed
[  175.073588][T13152] batman_adv: batadv0: Removing interface: batadv_slave_1
[  175.077195][T13152] bond2: (slave veth3): Releasing active interface
[  175.085158][T13155] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  175.089134][T13155] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  175.095251][T13155] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  175.108292][T13152] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  175.118030][T13152] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  175.197147][T13160] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  175.210329][T13160] xt_connbytes: Forcing CT accounting to be enabled
[  175.213531][T13160] xt_bpf: check failed: parse error
[  175.534548][T13170] __nla_validate_parse: 20 callbacks suppressed
[  175.534566][T13170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2240'.
[  175.606488][T13181] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  175.788971][T13198] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2248'.
[  175.807726][T13200] tipc: Enabling of bearer <eth:macvtap0> rejected, failed to enable media
[  175.865243][T13208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2252'.
[  176.025341][T13227] x_tables: duplicate underflow at hook 1
[  176.058422][T13232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2262'.
[  176.062751][T13232] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2262'.
[  176.087535][T13237] ip6t_srh: unknown srh match flags  4000
[  176.103629][T13236] syzkaller0: entered promiscuous mode
[  176.105287][T13236] syzkaller0: entered allmulticast mode
[  176.359784][T13247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2267'.
[  177.478618][T13280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2275'.
[  177.481481][T13280] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  177.486104][T13280] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7)
[  177.524060][T13280] netlink: 'syz.2.2275': attribute type 3 has an invalid length.
[  177.527424][T13280] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2275'.
[  177.556418][T13285] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2276'.
[  177.593719][T13290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2280'.
[  177.594426][T13293] xt_recent: Unsupported userspace flags (00000048)
[  177.687430][T13307] netlink: 'syz.2.2286': attribute type 7 has an invalid length.
[  177.689833][T13307] netlink: 'syz.2.2286': attribute type 8 has an invalid length.
[  177.760243][   T33] kauditd_printk_skb: 29 callbacks suppressed
[  177.760255][   T33] audit: type=1107 audit(1753102706.855:41): pid=13314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  177.766333][   T33] audit: type=1107 audit(1753102706.855:42): pid=13314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  177.844680][T13331] : entered allmulticast mode
[  177.975024][T13348] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  178.146945][T13370] netlink: 'syz.1.2309': attribute type 2 has an invalid length.
[  178.149614][T13370] netlink: 'syz.1.2309': attribute type 1 has an invalid length.
[  178.153710][T13370] netlink: 'syz.1.2309': attribute type 1 has an invalid length.
[  178.225114][T13375] netlink: 'syz.1.2309': attribute type 13 has an invalid length.
[  178.227542][T13375] netlink: 'syz.1.2309': attribute type 17 has an invalid length.
[  178.243593][T13375] erspan0: left allmulticast mode
[  178.271157][T13375] 8021q: adding VLAN 0 to HW filter on device bond0
[  178.282520][T13375] 8021q: adding VLAN 0 to HW filter on device team0
[  178.296598][T13375] 8021q: adding VLAN 0 to HW filter on device batadv0
[  178.308715][T13375] wireguard: wg1: Could not create IPv4 socket
[  178.311069][T13375] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  178.356353][T13370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  178.560926][T13411] netlink: 'syz.0.2320': attribute type 1 has an invalid length.
[  179.907779][T13480] SET target dimension over the limit!
[  180.241770][T13507] block nbd0: server does not support multiple connections per device.
[  180.246823][T13507] block nbd0: shutting down sockets
[  180.404044][T13525] netlink: 'syz.2.2355': attribute type 1 has an invalid length.
[  180.450184][T13533] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  180.489015][ T5221] Bluetooth: hci1: command 0x0406 tx timeout
[  180.724595][T13552] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:20002
[  180.785498][T13568] lo speed is unknown, defaulting to 1000
[  183.765751][T13574] __nla_validate_parse: 14 callbacks suppressed
[  183.765764][T13574] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2373'.
[  183.833043][T13578] x_tables: duplicate underflow at hook 2
[  183.920275][T13580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2375'.
[  183.932314][T13580] xfrm1: entered promiscuous mode
[  183.933981][T13580] xfrm1: entered allmulticast mode
[  183.973362][T13587] netlink: 'syz.2.2377': attribute type 21 has an invalid length.
[  184.000216][T13587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2377'.
[  184.127511][T13601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2382'.
[  184.244458][T13609] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2385'.
[  184.247911][T13609] batadv_slave_1: entered promiscuous mode
[  184.250082][T13609] batadv_slave_1: left promiscuous mode
[  184.385751][T13617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2389'.
[  184.388640][T13617] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2389'.
[  184.501234][T13630] netlink: 'syz.2.2393': attribute type 7 has an invalid length.
[  184.508931][T13630] netlink: 'syz.2.2393': attribute type 8 has an invalid length.
[  184.513473][T13630] netlink: 'syz.2.2393': attribute type 4 has an invalid length.
[  184.515768][T13630] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2393'.
[  184.519302][T13630] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2393'.
[  184.526026][T13630] 0: renamed from hsr_slave_1 (while UP)
[  184.529277][T13630] 0: entered allmulticast mode
[  184.531177][T13630] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  184.599727][T13639] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2396'.
[  184.667234][T13644] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  184.675598][T13644] vxcan0: entered promiscuous mode
[  184.676852][T13639] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  184.767437][T13651] netlink: 'syz.0.2400': attribute type 83 has an invalid length.
[  184.847453][T13658] netlink: 'syz.0.2403': attribute type 1 has an invalid length.
[  184.867808][T13658] 8021q: adding VLAN 0 to HW filter on device bond11
[  184.894757][T13658] netlink: 'syz.0.2403': attribute type 10 has an invalid length.
[  184.935982][T13672] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  184.973534][T13676] netlink: 'syz.2.2406': attribute type 21 has an invalid length.
[  185.034039][T13681] netlink: 'syz.1.2411': attribute type 1 has an invalid length.
[  185.306093][T13712] netlink: 'syz.1.2420': attribute type 1 has an invalid length.
[  185.420381][T13719] tipc: New replicast peer: 255.255.255.255
[  185.423907][T13719] tipc: Enabled bearer <udp:syz2>, priority 10
[  185.624662][T13729] IPv6: sit3: Disabled Multicast RS
[  185.875721][T13747] xt_CT: You must specify a L4 protocol and not use inversions on it
[  186.030457][T13754] tls_set_device_offload_rx: netdev not found
[  186.521191][T13736] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  186.656264][T13766] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  186.661090][T13771] lo speed is unknown, defaulting to 1000
[  186.668439][T13771] lo speed is unknown, defaulting to 1000
[  186.674684][T13771] lo speed is unknown, defaulting to 1000
[  186.684948][T13771] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  186.694085][T13771] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  186.717894][T13771] lo speed is unknown, defaulting to 1000
[  186.720994][T13771] lo speed is unknown, defaulting to 1000
[  186.729410][T13771] lo speed is unknown, defaulting to 1000
[  186.926870][T13797] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  186.935093][T13798] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  187.364586][T13825] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  187.368824][T13825] tipc: Resetting bearer <eth:syzkaller0>
[  187.373742][T13824] tipc: Disabling bearer <eth:syzkaller0>
[  188.427531][T13882] xt_policy: too many policy elements
[  188.429371][T13882] xt_policy: too many policy elements
[  188.445296][T13882] x_tables: duplicate underflow at hook 1
[  188.577611][T13901] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  188.820704][T13919] ip6erspan0: entered promiscuous mode
[  189.106647][T13940] __nla_validate_parse: 89 callbacks suppressed
[  189.106659][T13940] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2486'.
[  189.116810][T13940] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2486'.
[  189.362831][  T189] wlan1: Trigger new scan to find an IBSS to join
[  189.465762][T13960] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2493'.
[  189.468872][T13960] nbd: illegal input index 65508
[  189.587713][T13968] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2497'.
[  189.607047][T13970] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2498'.
[  189.777671][T13987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2505'.
[  190.070305][T14014] xt_TCPMSS: Only works on TCP SYN packets
[  190.096875][T14016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2516'.
[  190.101224][T14018] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2516'.
[  190.104284][T14016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2516'.
[  190.108106][T14019] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2514'.
[  190.119211][T14019] validate_nla: 4 callbacks suppressed
[  190.119223][T14019] netlink: 'syz.0.2514': attribute type 23 has an invalid length.
[  190.260419][T14032] blkio.reset_stats is deprecated
[  191.288010][T14050] unknown channel width for channel at 909000KHz?
[  191.955586][T14100] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  192.322852][ T1089] wlan1: Trigger new scan to find an IBSS to join
[  192.988756][T14122] lo speed is unknown, defaulting to 1000
[  193.100381][T14122] lo speed is unknown, defaulting to 1000
[  193.257660][T14144] netlink: 'syz.2.2553': attribute type 1 has an invalid length.
[  193.260129][T14144] block nbd0: Unsupported socket: shutdown callout must be supported.
[  193.319975][T14152] netlink: 'syz.1.2555': attribute type 10 has an invalid length.
[  193.331828][T14152] netlink: 'syz.1.2555': attribute type 10 has an invalid length.
[  193.621039][T14173] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  193.648554][T14176] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  193.676668][T14176] lo speed is unknown, defaulting to 1000
[  193.773173][T14176] lo speed is unknown, defaulting to 1000
[  193.809577][T14175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  194.539081][T14217] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  194.586347][T14221] __nla_validate_parse: 15 callbacks suppressed
[  194.586357][T14221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2579'.
[  194.647002][T14224] netlink: 'syz.2.2577': attribute type 4 has an invalid length.
[  195.304502][T14228] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2580'.
[  195.362657][T12689] wlan1: Trigger new scan to find an IBSS to join
[  195.568144][T14245] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2586'.
[  195.572676][T14245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2586'.
[  195.897860][T14263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2592'.
[  195.940919][T14265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2593'.
[  195.944848][T14265] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2593'.
[  195.979549][T14260] veth3: left promiscuous mode
[  195.982803][T14260] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  195.985494][T14260] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  195.988229][T14260] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  195.990888][T14260] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  196.003665][T14260] team1: left promiscuous mode
[  196.006174][T14260] team1: left allmulticast mode
[  196.008839][T14260] gtp0: left promiscuous mode
[  196.010520][T14260] gtp0: left allmulticast mode
[  196.024807][T14260] gtp1: left promiscuous mode
[  196.026494][T14260] gtp1: left allmulticast mode
[  196.034640][T14260] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20002 - 0
[  196.037387][T14260] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20002 - 0
[  196.040251][T14260] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20002 - 0
[  196.043808][T14260] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20002 - 0
[  196.046607][T14260] geneve2: left promiscuous mode
[  196.262290][T12689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.316444][T14290] netlink: 'syz.1.2602': attribute type 3 has an invalid length.
[  196.319642][T14290] netlink: 'syz.1.2602': attribute type 6 has an invalid length.
[  196.329786][T14290] wg2: entered promiscuous mode
[  196.331475][T14290] wg2: entered allmulticast mode
[  196.420094][T14295] pim6reg1: entered promiscuous mode
[  196.422160][T14295] pim6reg1: entered allmulticast mode
[  196.879702][T14302] 8021q: adding VLAN 0 to HW filter on device bond4
[  197.069035][T14313] netlink: 'syz.0.2610': attribute type 1 has an invalid length.
[  197.072042][T14316] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  197.073445][T14313] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2610'.
[  197.183151][T14323] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2614'.
[  197.197509][T14324] 8021q: adding VLAN 0 to HW filter on device bond12
[  197.343162][T14347] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  197.346222][T14347] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  197.378425][T14352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  197.936304][T14359] sctp: [Deprecated]: syz.2.2625 (pid 14359) Use of int in max_burst socket option deprecated.
[  197.936304][T14359] Use struct sctp_assoc_value instead
[  198.331629][T14376] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2631'.
[  198.435535][ T5866] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  198.530583][T14395] block nbd0: not configured, cannot reconfigure
[  198.578679][T14397] macsec1: entered promiscuous mode
[  198.717194][T14410] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  198.724819][T14412] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  198.774354][T14411] tipc: Disabling bearer <eth:syzkaller0>
[  199.384082][T14490] wlan1: mtu greater than device maximum
[  199.494418][T14496] syzkaller1: entered promiscuous mode
[  199.496818][T14496] syzkaller1: entered allmulticast mode
[  199.555168][T14497] bond0: (slave wlan1): Releasing backup interface
[  199.557967][T14497] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  199.962439][T14538] x_tables: duplicate underflow at hook 3
[  200.032311][T14542] __nla_validate_parse: 4 callbacks suppressed
[  200.032347][T14542] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2678'.
[  200.039178][T14542] netlink: 'syz.2.2678': attribute type 11 has an invalid length.
[  200.247876][T14567] netlink: 'syz.1.2687': attribute type 1 has an invalid length.
[  200.282882][T14567] 8021q: adding VLAN 0 to HW filter on device bond5
[  200.288568][T14572] netlink: 'syz.0.2688': attribute type 1 has an invalid length.
[  200.291014][T14572] netlink: 'syz.0.2688': attribute type 3 has an invalid length.
[  200.293833][T14572] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2688'.
[  200.296537][T14572] NCSI netlink: No device for ifindex 246
[  200.349675][T14578] openvswitch: netlink: Duplicate or invalid key (type 0).
[  200.364171][T14578] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  200.368708][T14582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2693'.
[  200.500179][T14597] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2699'.
[  200.820843][T14634] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2709'.
[  200.867990][T14640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2710'.
[  200.871720][T14640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2710'.
[  200.888146][T14640] bridge0: port 2(vlan2) entered blocking state
[  200.889698][T14642] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2708'.
[  200.891776][T14640] bridge0: port 2(vlan2) entered disabled state
[  200.903074][T14640] vlan2: entered allmulticast mode
[  200.904757][T14640] bridge0: entered allmulticast mode
[  200.908158][T14640] vlan2: left allmulticast mode
[  200.909702][T14640] bridge0: left allmulticast mode
[  200.980350][T14646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2712'.
[  201.040156][T14648] netlink: 159784 bytes leftover after parsing attributes in process `syz.0.2713'.
[  201.184915][T14659] netlink: 'syz.2.2716': attribute type 1 has an invalid length.
[  201.283427][T14661] sctp: [Deprecated]: syz.2.2717 (pid 14661) Use of int in maxseg socket option.
[  201.283427][T14661] Use struct sctp_assoc_value instead
[  202.023196][T14688] block nbd0: server does not support multiple connections per device.
[  202.026205][T14688] block nbd0: shutting down sockets
[  202.240879][T14725] syzkaller1: entered promiscuous mode
[  202.243172][T14725] syzkaller1: entered allmulticast mode
[  202.245197][T14721] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  202.246284][T14725] netlink: 'syz.2.2735': attribute type 49 has an invalid length.
[  202.247442][T14721] IPv6: NLM_F_CREATE should be set when creating new route
[  202.328429][T14730] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2
[  202.331289][T14730] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0
[  202.397218][T14734] netlink: 'syz.2.2739': attribute type 1 has an invalid length.
[  202.649186][T14755] netlink: 'syz.1.2746': attribute type 3 has an invalid length.
[  202.908967][T14771] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  202.934371][T14771] lo speed is unknown, defaulting to 1000
[  203.024779][T14771] lo speed is unknown, defaulting to 1000
[  203.616386][T14822] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  204.069872][T14846] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) !
[  204.075127][T14847] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) !
[  204.204656][T14855] xt_connbytes: Forcing CT accounting to be enabled
[  204.329412][T14867] netlink: 'syz.2.2786': attribute type 10 has an invalid length.
[  204.340609][T14867] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  204.785801][T14923] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  204.986835][T14940] x_tables: duplicate underflow at hook 2
[  205.057105][T14953] __nla_validate_parse: 24 callbacks suppressed
[  205.057118][T14953] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2811'.
[  205.083683][T14956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2809'.
[  205.119703][T14956] netlink: 'syz.0.2809': attribute type 2 has an invalid length.
[  205.130781][T14955] lo speed is unknown, defaulting to 1000
[  205.233940][T14955] lo speed is unknown, defaulting to 1000
[  205.886580][T14969] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0
[  205.957702][T14974] can: request_module (can-proto-4) failed.
[  206.100972][T14994] netlink: 'syz.0.2820': attribute type 1 has an invalid length.
[  206.111360][T14994] netlink: 'syz.0.2820': attribute type 2 has an invalid length.
[  206.119265][T14994] netlink: 'syz.0.2820': attribute type 1 has an invalid length.
[  206.121798][T14994] netlink: 'syz.0.2820': attribute type 2 has an invalid length.
[  206.126969][T14994] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  206.302613][T15015] Unsupported ieee802154 address type: 0
[  206.537845][T15035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2836'.
[  206.544662][T15034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2836'.
[  206.551143][T15034] 8021q: VLANs not supported on ipvlan1
[  206.681331][T15039] bond5: left allmulticast mode
[  206.685288][T15039] bridge0: port 1(bond5) entered disabled state
[  206.689484][T15039] batman_adv: batadv0: Interface deactivated: gretap1
[  206.692261][T15039] batman_adv: batadv0: Removing interface: gretap1
[  206.696024][T15039] bond6: (slave bond7): Releasing backup interface
[  206.698243][T15039] bond6: (slave bond7): the permanent HWaddr of slave - b2:41:d5:ea:ea:76 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  206.709229][T15039] bond6: (slave bond8): making interface the new active one
[  206.715819][T15039] bond6: (slave bond8): Releasing backup interface
[  206.730025][T15039] bond10: (slave gretap2): Releasing active interface
[  206.734128][T15041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2835'.
[  206.737697][T15039] gretap2: left promiscuous mode
[  206.739839][T15039] gretap2: left allmulticast mode
[  206.742282][T15041] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2835'.
[  206.745439][T15041] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2835'.
[  207.104765][T15043] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  207.164154][T15044] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  207.359524][T15060] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2843'.
[  207.365172][T15056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2842'.
[  207.408130][T15064] syz.1.2844 uses old SIOCAX25GETINFO
[  207.419308][T15060] dvmrp0: left allmulticast mode
[  207.605761][T15079] veth0: entered allmulticast mode
[  207.640949][T15083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2851'.
[  207.669915][T15086] netlink: 'syz.1.2852': attribute type 2 has an invalid length.
[  207.743362][T15095] dummy0: entered allmulticast mode
[  207.890680][T15107] netlink: 'syz.1.2857': attribute type 10 has an invalid length.
[  207.988973][T15114] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  208.482653][T12689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  208.485405][T12689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  208.488238][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  208.576105][T15093] dummy0: left allmulticast mode
[  209.306678][T15197] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  209.310577][T15197] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  209.318997][T15197] netlink: 'syz.1.2881': attribute type 3 has an invalid length.
[  209.321516][T15197] netlink: 'syz.1.2881': attribute type 1 has an invalid length.
[  209.582815][T15210] netlink: 'syz.1.2886': attribute type 13 has an invalid length.
[  209.585376][T15210] netlink: 'syz.1.2886': attribute type 17 has an invalid length.
[  209.605823][T15210] 8021q: adding VLAN 0 to HW filter on device bond0
[  209.610283][T15210] 8021q: adding VLAN 0 to HW filter on device batadv0
[  209.623885][T15210] wg2: left promiscuous mode
[  209.625473][T15210] wg2: left allmulticast mode
[  209.643639][T15210] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  209.647255][T15210] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  209.653039][T15210] veth1_macvtap: left promiscuous mode
[  209.655777][T15210] veth0_macvtap: left promiscuous mode
[  209.658285][T15210] veth1_macvtap: entered promiscuous mode
[  209.660836][T15210] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  209.663836][T15210] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  209.666337][T15210] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  209.668900][T15210] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  209.687709][T15210] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  209.690351][T15210] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  209.693089][T15210] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  209.695527][T15210] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  209.699255][T15210] 8021q: adding VLAN 0 to HW filter on device bond1
[  209.727790][T15210] 8021q: adding VLAN 0 to HW filter on device bond2
[  209.744548][T15210] 8021q: adding VLAN 0 to HW filter on device team1
[  209.758351][T15210] 8021q: adding VLAN 0 to HW filter on device bond3
[  209.773250][T15210] 8021q: adding VLAN 0 to HW filter on device bond4
[  209.777651][T15210] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  209.805200][T15209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  209.873489][T15209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  209.928175][T15209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  209.975687][T15220] netlink: 'syz.0.2889': attribute type 5 has an invalid length.
[  209.978376][T15219] netlink: 'syz.0.2889': attribute type 5 has an invalid length.
[  210.342898][T15250] __nla_validate_parse: 42 callbacks suppressed
[  210.342910][T15250] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2900'.
[  210.477929][T15270] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2906'.
[  210.479979][T15268] netlink: 'syz.1.2905': attribute type 9 has an invalid length.
[  210.490247][T15268] netlink: 'syz.1.2905': attribute type 7 has an invalid length.
[  210.554912][T15278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2908'.
[  210.559753][T15278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2908'.
[  210.584626][T15278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2908'.
[  210.587730][T15278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2908'.
[  210.590582][T15278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2908'.
[  210.893225][T15302] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2915'.
[  211.184543][T15312] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  211.208827][T15312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2917'.
[  211.220153][T15312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2917'.
[  211.269827][T15312] siw: device registration error -23
[  211.575098][T15320] block nbd0: shutting down sockets
[  212.465819][T15433] tipc: Enabling of bearer <et:g> rejected, media not registered
[  212.779039][T15464] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  212.787084][T15464] macvtap0: entered allmulticast mode
[  212.788909][T15464] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode
[  212.792127][T15464] batman_adv: batadv0: Adding interface: macvtap0
[  212.794202][T15464] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1038) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  212.805840][T15464] batman_adv: batadv0: Interface activated: macvtap0
[  212.824447][T15466] lo speed is unknown, defaulting to 1000
[  212.918878][T15466] lo speed is unknown, defaulting to 1000
[  213.190867][T15473] syzkaller0: entered promiscuous mode
[  213.193377][T15473] syzkaller0: entered allmulticast mode
[  213.315411][T15476] openvswitch: netlink: Key type 30 is not supported
[  215.388869][T15525] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  215.417260][T15525] 8021q: adding VLAN 0 to HW filter on device bond13
[  215.495013][T15539] __nla_validate_parse: 22 callbacks suppressed
[  215.495027][T15539] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2983'.
[  215.517057][T15539] bond14: entered promiscuous mode
[  215.518995][T15539] 8021q: adding VLAN 0 to HW filter on device bond14
[  215.553950][T15549] sctp: [Deprecated]: syz.0.2985 (pid 15549) Use of int in max_burst socket option deprecated.
[  215.553950][T15549] Use struct sctp_assoc_value instead
[  215.646875][T15562] validate_nla: 9 callbacks suppressed
[  215.646888][T15562] netlink: 'syz.0.2988': attribute type 5 has an invalid length.
[  215.905699][T15586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2994'.
[  216.053999][T15598] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2998'.
[  216.202840][  T234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  216.207633][  T234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  216.294151][T15624] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3007'.
[  216.335622][T15621] syzkaller0: entered promiscuous mode
[  216.337427][T15621] syzkaller0: entered allmulticast mode
[  217.502813][T15635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3011'.
[  217.589634][T15645] netlink: 'syz.1.3013': attribute type 26 has an invalid length.
[  217.604609][T15649] netlink: 'syz.2.3015': attribute type 29 has an invalid length.
[  217.608784][T15649] netlink: 'syz.2.3015': attribute type 29 has an invalid length.
[  217.615826][T15649] netlink: 500 bytes leftover after parsing attributes in process `syz.2.3015'.
[  217.618976][T15649] unsupported nla_type 58
[  217.680054][T15657] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3016'.
[  217.723353][T15663] netlink: 'syz.1.3021': attribute type 11 has an invalid length.
[  217.796368][T15668] netlink: 332 bytes leftover after parsing attributes in process `syz.1.3024'.
[  217.803203][T15668] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3024'.
[  217.807335][T15668] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3024'.
[  217.890154][T15673] lo speed is unknown, defaulting to 1000
[  217.957534][T15690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  217.993763][T15695] batadv1: entered promiscuous mode
[  217.995580][T15695] batadv1: entered allmulticast mode
[  218.016690][T15683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  218.026035][T15697] openvswitch: netlink: Flow key attr not present in new flow.
[  218.035478][T15673] lo speed is unknown, defaulting to 1000
[  218.082366][T15673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  218.156475][T15707] Bluetooth: MGMT ver 1.23
[  218.191518][T15710] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 101
[  218.315179][T15730] set match dimension is over the limit!
[  218.861979][T15764] nbd: socks must be embedded in a SOCK_ITEM attr
[  218.864046][T15764] block nbd0: shutting down sockets
[  218.942896][T15763] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  219.590310][T15845] Bluetooth: hci0: Opcode 0x080f failed: -22
[  219.669507][T15850] xt_hashlimit: size too large, truncated to 1048576
[  219.865342][T15866] sctp: [Deprecated]: syz.0.3076 (pid 15866) Use of struct sctp_assoc_value in delayed_ack socket option.
[  219.865342][T15866] Use struct sctp_sack_info instead
[  220.096059][T15894] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  220.099515][T15894] CPU: 1 UID: 0 PID: 15894 Comm: syz.2.3084 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  220.099530][T15894] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  220.099537][T15894] Call Trace:
[  220.099543][T15894]  <TASK>
[  220.099549][T15894]  dump_stack_lvl+0x189/0x250
[  220.099571][T15894]  ? __pfx_dump_stack_lvl+0x10/0x10
[  220.099583][T15894]  ? __pfx__printk+0x10/0x10
[  220.099598][T15894]  ? kernfs_path_from_node+0x2c/0x260
[  220.099608][T15894]  ? kernfs_path_from_node+0x2c/0x260
[  220.099616][T15894]  ? kernfs_path_from_node+0x2c/0x260
[  220.099625][T15894]  ? kernfs_path_from_node+0x22c/0x260
[  220.099632][T15894]  ? kernfs_path_from_node+0x2c/0x260
[  220.099642][T15894]  sysfs_warn_dup+0x8e/0xa0
[  220.099655][T15894]  sysfs_do_create_link_sd+0xc0/0x110
[  220.099665][T15894]  device_add_class_symlinks+0x1cf/0x240
[  220.099681][T15894]  device_add+0x475/0xb50
[  220.099695][T15894]  wiphy_register+0x199a/0x26b0
[  220.099716][T15894]  ? __pfx_wiphy_register+0x10/0x10
[  220.099727][T15894]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  220.099744][T15894]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  220.099761][T15894]  ieee80211_register_hw+0x33e1/0x4120
[  220.099783][T15894]  ? ieee80211_register_hw+0x14a1/0x4120
[  220.099799][T15894]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  220.099813][T15894]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  220.099832][T15894]  ? __hrtimer_setup+0x187/0x210
[  220.099842][T15894]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  220.099861][T15894]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  220.099886][T15894]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  220.099899][T15894]  ? trace_kmalloc+0x1f/0xd0
[  220.099912][T15894]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  220.099924][T15894]  ? kstrndup+0xbf/0x160
[  220.099938][T15894]  hwsim_new_radio_nl+0xea4/0x1b10
[  220.099951][T15894]  ? __pfx___nla_validate_parse+0x10/0x10
[  220.099969][T15894]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  220.100012][T15894]  ? __nla_parse+0x40/0x60
[  220.100026][T15894]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  220.100043][T15894]  genl_family_rcv_msg_doit+0x215/0x300
[  220.100057][T15894]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  220.100076][T15894]  ? bpf_lsm_capable+0x9/0x20
[  220.100087][T15894]  ? security_capable+0x7e/0x2e0
[  220.100100][T15894]  genl_rcv_msg+0x60e/0x790
[  220.100112][T15894]  ? __pfx_genl_rcv_msg+0x10/0x10
[  220.100121][T15894]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  220.100140][T15894]  netlink_rcv_skb+0x208/0x470
[  220.100153][T15894]  ? __pfx_genl_rcv_msg+0x10/0x10
[  220.100162][T15894]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  220.100182][T15894]  ? down_read+0x1ad/0x2e0
[  220.100194][T15894]  genl_rcv+0x28/0x40
[  220.100202][T15894]  netlink_unicast+0x75c/0x8e0
[  220.100218][T15894]  netlink_sendmsg+0x805/0xb30
[  220.100234][T15894]  ? __pfx_netlink_sendmsg+0x10/0x10
[  220.100248][T15894]  ? aa_sock_msg_perm+0x94/0x160
[  220.100258][T15894]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  220.100267][T15894]  ? __pfx_netlink_sendmsg+0x10/0x10
[  220.100279][T15894]  __sock_sendmsg+0x21c/0x270
[  220.100291][T15894]  ____sys_sendmsg+0x505/0x830
[  220.100307][T15894]  ? __pfx_____sys_sendmsg+0x10/0x10
[  220.100324][T15894]  ? import_iovec+0x74/0xa0
[  220.100338][T15894]  ___sys_sendmsg+0x21f/0x2a0
[  220.100352][T15894]  ? __pfx____sys_sendmsg+0x10/0x10
[  220.100381][T15894]  ? __fget_files+0x2a/0x420
[  220.100390][T15894]  ? __fget_files+0x3a0/0x420
[  220.100403][T15894]  __x64_sys_sendmsg+0x19b/0x260
[  220.100417][T15894]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  220.100435][T15894]  ? rcu_is_watching+0x15/0xb0
[  220.100448][T15894]  ? do_syscall_64+0xbe/0x3b0
[  220.100460][T15894]  do_syscall_64+0xfa/0x3b0
[  220.100469][T15894]  ? lockdep_hardirqs_on+0x9c/0x150
[  220.100477][T15894]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.100488][T15894]  ? exc_page_fault+0x9f/0xf0
[  220.100498][T15894]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.100507][T15894] RIP: 0033:0x7f775018e9a9
[  220.100518][T15894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  220.100527][T15894] RSP: 002b:00007f7750f3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  220.100539][T15894] RAX: ffffffffffffffda RBX: 00007f77503b5fa0 RCX: 00007f775018e9a9
[  220.100547][T15894] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  220.100554][T15894] RBP: 00007f7750210ca1 R08: 0000000000000000 R09: 0000000000000000
[  220.100560][T15894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  220.100566][T15894] R13: 0000000000000000 R14: 00007f77503b5fa0 R15: 00007ffc1f017508
[  220.100581][T15894]  </TASK>
[  220.616204][T15938] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  220.711138][T15950] __nla_validate_parse: 14 callbacks suppressed
[  220.711153][T15950] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3100'.
[  220.834169][T15965] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3105'.
[  221.024481][ T5867] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6
[  221.224326][T16010] xt_policy: neither incoming nor outgoing policy selected
[  221.416958][T16028] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  221.419661][T16028] syzkaller0: entered promiscuous mode
[  221.423653][T16028] syzkaller0: entered allmulticast mode
[  221.428740][T16028] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3121'.
[  221.433434][T16028] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3121'.
[  221.450748][T16028] tipc: Resetting bearer <eth:syzkaller0>
[  221.455094][T16027] tipc: Resetting bearer <eth:syzkaller0>
[  221.467430][T16027] tipc: Disabling bearer <eth:syzkaller0>
[  221.601947][ T5840] Bluetooth: hci0: command tx timeout
[  221.607852][T16032] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  221.652393][T16034] syzkaller0: entered promiscuous mode
[  221.654133][T16034] syzkaller0: entered allmulticast mode
[  221.794661][T16036] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3125'.
[  221.798347][T16036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3125'.
[  221.811444][T16036] netlink: 'syz.0.3125': attribute type 5 has an invalid length.
[  221.841497][T16040] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  221.971352][T16053] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  222.070192][T16076] netlink: 'syz.2.3138': attribute type 10 has an invalid length.
[  222.074489][T16076] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3138'.
[  222.151436][T16088] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  222.175506][T16090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3143'.
[  222.241180][T16099] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3145'.
[  222.318213][T16103] netlink: 212892 bytes leftover after parsing attributes in process `syz.0.3146'.
[  222.406154][T16101] syzkaller0: entered allmulticast mode
[  222.412454][T16101] syzkaller0 (unregistering): left allmulticast mode
[  222.439677][T16106] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  222.446497][T16106] syzkaller0: entered promiscuous mode
[  222.448376][T16106] syzkaller0: entered allmulticast mode
[  222.467340][T16106] tipc: Resetting bearer <eth:syzkaller0>
[  222.474232][T16105] tipc: Resetting bearer <eth:syzkaller0>
[  222.492465][T16105] tipc: Disabling bearer <eth:syzkaller0>
[  222.691037][T16142] bridge_slave_0: default FDB implementation only supports local addresses
[  222.729976][T16147] nft_compat: unsupported protocol 0
[  223.675850][T16173] netlink: 'syz.1.3167': attribute type 11 has an invalid length.
[  223.675874][T16174] netlink: 'syz.1.3167': attribute type 11 has an invalid length.
[  223.723814][T16176] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  223.728097][T16176] CPU: 1 UID: 0 PID: 16176 Comm: syz.1.3168 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  223.728112][T16176] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  223.728119][T16176] Call Trace:
[  223.728125][T16176]  <TASK>
[  223.728130][T16176]  dump_stack_lvl+0x189/0x250
[  223.728150][T16176]  ? __pfx_dump_stack_lvl+0x10/0x10
[  223.728164][T16176]  ? __pfx__printk+0x10/0x10
[  223.728177][T16176]  ? kernfs_path_from_node+0x2c/0x260
[  223.728187][T16176]  ? kernfs_path_from_node+0x2c/0x260
[  223.728194][T16176]  ? kernfs_path_from_node+0x2c/0x260
[  223.728203][T16176]  ? kernfs_path_from_node+0x22c/0x260
[  223.728211][T16176]  ? kernfs_path_from_node+0x2c/0x260
[  223.728220][T16176]  sysfs_warn_dup+0x8e/0xa0
[  223.728234][T16176]  sysfs_do_create_link_sd+0xc0/0x110
[  223.728243][T16176]  device_add_class_symlinks+0x1cf/0x240
[  223.728259][T16176]  device_add+0x475/0xb50
[  223.728273][T16176]  wiphy_register+0x199a/0x26b0
[  223.728295][T16176]  ? __pfx_wiphy_register+0x10/0x10
[  223.728306][T16176]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  223.728322][T16176]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  223.728336][T16176]  ieee80211_register_hw+0x33e1/0x4120
[  223.728357][T16176]  ? ieee80211_register_hw+0x14a1/0x4120
[  223.728374][T16176]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  223.728388][T16176]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  223.728406][T16176]  ? __hrtimer_setup+0x187/0x210
[  223.728416][T16176]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  223.728432][T16176]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  223.728459][T16176]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  223.728471][T16176]  ? trace_kmalloc+0x1f/0xd0
[  223.728485][T16176]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  223.728498][T16176]  ? kstrndup+0xbf/0x160
[  223.728513][T16176]  hwsim_new_radio_nl+0xea4/0x1b10
[  223.728527][T16176]  ? __pfx___nla_validate_parse+0x10/0x10
[  223.728545][T16176]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  223.728563][T16176]  ? __nla_parse+0x40/0x60
[  223.728575][T16176]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  223.728590][T16176]  genl_family_rcv_msg_doit+0x215/0x300
[  223.728603][T16176]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  223.728618][T16176]  ? bpf_lsm_capable+0x9/0x20
[  223.728631][T16176]  ? security_capable+0x7e/0x2e0
[  223.728645][T16176]  genl_rcv_msg+0x60e/0x790
[  223.728658][T16176]  ? __pfx_genl_rcv_msg+0x10/0x10
[  223.728667][T16176]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  223.728686][T16176]  netlink_rcv_skb+0x208/0x470
[  223.728731][T16176]  ? __pfx_genl_rcv_msg+0x10/0x10
[  223.728742][T16176]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  223.728765][T16176]  ? down_read+0x1ad/0x2e0
[  223.728784][T16176]  genl_rcv+0x28/0x40
[  223.728796][T16176]  netlink_unicast+0x75c/0x8e0
[  223.728825][T16176]  netlink_sendmsg+0x805/0xb30
[  223.728856][T16176]  ? __pfx_netlink_sendmsg+0x10/0x10
[  223.728879][T16176]  ? aa_sock_msg_perm+0x94/0x160
[  223.728897][T16176]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  223.728914][T16176]  ? __pfx_netlink_sendmsg+0x10/0x10
[  223.728935][T16176]  __sock_sendmsg+0x21c/0x270
[  223.728955][T16176]  ____sys_sendmsg+0x505/0x830
[  223.728982][T16176]  ? __pfx_____sys_sendmsg+0x10/0x10
[  223.729001][T16176]  ? import_iovec+0x74/0xa0
[  223.729016][T16176]  ___sys_sendmsg+0x21f/0x2a0
[  223.729031][T16176]  ? __pfx____sys_sendmsg+0x10/0x10
[  223.729063][T16176]  ? __fget_files+0x2a/0x420
[  223.729071][T16176]  ? __fget_files+0x3a0/0x420
[  223.729084][T16176]  __x64_sys_sendmsg+0x19b/0x260
[  223.729098][T16176]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  223.729116][T16176]  ? rcu_is_watching+0x15/0xb0
[  223.729130][T16176]  ? do_syscall_64+0xbe/0x3b0
[  223.729143][T16176]  do_syscall_64+0xfa/0x3b0
[  223.729151][T16176]  ? lockdep_hardirqs_on+0x9c/0x150
[  223.729160][T16176]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.729169][T16176]  ? exc_page_fault+0x9f/0xf0
[  223.729179][T16176]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.729188][T16176] RIP: 0033:0x7f8daed8e9a9
[  223.729200][T16176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  223.729211][T16176] RSP: 002b:00007f8daebf7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  223.729223][T16176] RAX: ffffffffffffffda RBX: 00007f8daefb5fa0 RCX: 00007f8daed8e9a9
[  223.729230][T16176] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  223.729236][T16176] RBP: 00007f8daee10ca1 R08: 0000000000000000 R09: 0000000000000000
[  223.729244][T16176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  223.729250][T16176] R13: 0000000000000000 R14: 00007f8daefb5fa0 R15: 00007ffcdb036b18
[  223.729265][T16176]  </TASK>
[  223.928660][T16182] netlink: 'syz.0.3170': attribute type 1 has an invalid length.
[  224.134611][T16198] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  224.138223][T16198] CPU: 1 UID: 0 PID: 16198 Comm: syz.0.3175 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  224.138237][T16198] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  224.138244][T16198] Call Trace:
[  224.138250][T16198]  <TASK>
[  224.138256][T16198]  dump_stack_lvl+0x189/0x250
[  224.138277][T16198]  ? __pfx_dump_stack_lvl+0x10/0x10
[  224.138288][T16198]  ? __pfx__printk+0x10/0x10
[  224.138301][T16198]  ? kernfs_path_from_node+0x2c/0x260
[  224.138312][T16198]  ? kernfs_path_from_node+0x2c/0x260
[  224.138321][T16198]  ? kernfs_path_from_node+0x2c/0x260
[  224.138331][T16198]  ? kernfs_path_from_node+0x22c/0x260
[  224.138339][T16198]  ? kernfs_path_from_node+0x2c/0x260
[  224.138349][T16198]  sysfs_warn_dup+0x8e/0xa0
[  224.138363][T16198]  sysfs_do_create_link_sd+0xc0/0x110
[  224.138373][T16198]  device_add_class_symlinks+0x1cf/0x240
[  224.138389][T16198]  device_add+0x475/0xb50
[  224.138403][T16198]  wiphy_register+0x199a/0x26b0
[  224.138424][T16198]  ? __pfx_wiphy_register+0x10/0x10
[  224.138434][T16198]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  224.138449][T16198]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  224.138464][T16198]  ieee80211_register_hw+0x33e1/0x4120
[  224.138485][T16198]  ? ieee80211_register_hw+0x14a1/0x4120
[  224.138501][T16198]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  224.138515][T16198]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  224.138533][T16198]  ? __hrtimer_setup+0x187/0x210
[  224.138543][T16198]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  224.138560][T16198]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  224.138587][T16198]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  224.138599][T16198]  ? trace_kmalloc+0x1f/0xd0
[  224.138616][T16198]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  224.138629][T16198]  ? kstrndup+0xbf/0x160
[  224.138644][T16198]  hwsim_new_radio_nl+0xea4/0x1b10
[  224.138684][T16198]  ? __pfx___nla_validate_parse+0x10/0x10
[  224.138704][T16198]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  224.138719][T16198]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  224.138737][T16198]  ? __nla_parse+0x40/0x60
[  224.138751][T16198]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  224.138765][T16198]  genl_family_rcv_msg_doit+0x215/0x300
[  224.138780][T16198]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  224.138795][T16198]  ? bpf_lsm_capable+0x9/0x20
[  224.138807][T16198]  ? security_capable+0x7e/0x2e0
[  224.138821][T16198]  genl_rcv_msg+0x60e/0x790
[  224.138834][T16198]  ? __pfx_genl_rcv_msg+0x10/0x10
[  224.138843][T16198]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  224.138862][T16198]  netlink_rcv_skb+0x208/0x470
[  224.138874][T16198]  ? __pfx_genl_rcv_msg+0x10/0x10
[  224.138884][T16198]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  224.138903][T16198]  ? down_read+0x1ad/0x2e0
[  224.138915][T16198]  genl_rcv+0x28/0x40
[  224.138923][T16198]  netlink_unicast+0x75c/0x8e0
[  224.138939][T16198]  netlink_sendmsg+0x805/0xb30
[  224.138955][T16198]  ? __pfx_netlink_sendmsg+0x10/0x10
[  224.138969][T16198]  ? aa_sock_msg_perm+0x94/0x160
[  224.138979][T16198]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  224.138988][T16198]  ? __pfx_netlink_sendmsg+0x10/0x10
[  224.139000][T16198]  __sock_sendmsg+0x21c/0x270
[  224.139013][T16198]  ____sys_sendmsg+0x505/0x830
[  224.139028][T16198]  ? __pfx_____sys_sendmsg+0x10/0x10
[  224.139045][T16198]  ? import_iovec+0x74/0xa0
[  224.139059][T16198]  ___sys_sendmsg+0x21f/0x2a0
[  224.139073][T16198]  ? __pfx____sys_sendmsg+0x10/0x10
[  224.139103][T16198]  ? __fget_files+0x2a/0x420
[  224.139111][T16198]  ? __fget_files+0x3a0/0x420
[  224.139124][T16198]  __x64_sys_sendmsg+0x19b/0x260
[  224.139138][T16198]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  224.139157][T16198]  ? rcu_is_watching+0x15/0xb0
[  224.139170][T16198]  ? do_syscall_64+0xbe/0x3b0
[  224.139183][T16198]  do_syscall_64+0xfa/0x3b0
[  224.139192][T16198]  ? lockdep_hardirqs_on+0x9c/0x150
[  224.139200][T16198]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.139210][T16198]  ? exc_page_fault+0x9f/0xf0
[  224.139219][T16198]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.139228][T16198] RIP: 0033:0x7f869c98e9a9
[  224.139239][T16198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  224.139248][T16198] RSP: 002b:00007f869d79c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  224.139259][T16198] RAX: ffffffffffffffda RBX: 00007f869cbb5fa0 RCX: 00007f869c98e9a9
[  224.139266][T16198] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  224.139272][T16198] RBP: 00007f869ca10ca1 R08: 0000000000000000 R09: 0000000000000000
[  224.139279][T16198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  224.139285][T16198] R13: 0000000000000000 R14: 00007f869cbb5fa0 R15: 00007ffcaa00a758
[  224.139301][T16198]  </TASK>
[  224.337563][T16200] syz_tun: left allmulticast mode
[  224.342934][T16200] 8021q: adding VLAN 0 to HW filter on device team0
[  224.347090][T16200] caif0: left promiscuous mode
[  224.348743][T16200] caif0: left allmulticast mode
[  224.350349][T16200] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  224.389312][T16202] netlink: 'syz.0.3177': attribute type 5 has an invalid length.
[  224.396386][T16202] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  224.649402][T16213] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  224.670035][T16213] syzkaller0: entered promiscuous mode
[  224.673208][T16213] syzkaller0: entered allmulticast mode
[  225.773606][ T2302] tipc: Node number set to 4111760228
[  225.903223][T16214] tipc: Resetting bearer <eth:syzkaller0>
[  225.912259][T16212] tipc: Resetting bearer <eth:syzkaller0>
[  225.924109][T16212] tipc: Disabling bearer <eth:syzkaller0>
[  226.126124][T16237] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.128917][T16237] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.131797][T16237] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.134518][T16237] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.149594][T16237] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[  226.164434][T16237] xfrm2: left promiscuous mode
[  226.165987][T16237] xfrm2: left allmulticast mode
[  226.186674][T16237] vlan0: left promiscuous mode
[  226.188177][T16237] bond10: left promiscuous mode
[  226.189742][T16237] vlan0: left allmulticast mode
[  226.191275][T16237] bond10: left allmulticast mode
[  226.195256][T16237] ip6erspan0: left promiscuous mode
[  226.203096][T16237] bond14: left promiscuous mode
[  226.205908][T16241] __nla_validate_parse: 11 callbacks suppressed
[  226.209940][T16241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3186'.
[  226.255844][T16245] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3188'.
[  226.285781][T16245] 0: renamed from hsr0
[  226.290596][T16245] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  226.294002][T16245] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  226.297209][T16245] 0: entered allmulticast mode
[  226.298843][T16245] hsr_slave_0: entered allmulticast mode
[  226.300645][T16245] hsr_slave_1: entered allmulticast mode
[  226.303264][T16245] 8021q: adding VLAN 0 to HW filter on device 70
[  226.305883][T16245] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  226.479587][T16256] netlink: 'syz.1.3192': attribute type 11 has an invalid length.
[  226.482616][T16256] netlink: 'syz.1.3192': attribute type 11 has an invalid length.
[  226.485614][T16256] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3192'.
[  226.599188][T16262] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  226.604502][T16262] CPU: 0 UID: 0 PID: 16262 Comm: syz.1.3193 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  226.604518][T16262] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  226.604526][T16262] Call Trace:
[  226.604531][T16262]  <TASK>
[  226.604537][T16262]  dump_stack_lvl+0x189/0x250
[  226.604559][T16262]  ? __pfx_dump_stack_lvl+0x10/0x10
[  226.604571][T16262]  ? __pfx__printk+0x10/0x10
[  226.604586][T16262]  ? kernfs_path_from_node+0x2c/0x260
[  226.604597][T16262]  ? kernfs_path_from_node+0x2c/0x260
[  226.604604][T16262]  ? kernfs_path_from_node+0x2c/0x260
[  226.604613][T16262]  ? kernfs_path_from_node+0x22c/0x260
[  226.604621][T16262]  ? kernfs_path_from_node+0x2c/0x260
[  226.604630][T16262]  sysfs_warn_dup+0x8e/0xa0
[  226.604645][T16262]  sysfs_do_create_link_sd+0xc0/0x110
[  226.604654][T16262]  device_add_class_symlinks+0x1cf/0x240
[  226.604672][T16262]  device_add+0x475/0xb50
[  226.604688][T16262]  wiphy_register+0x199a/0x26b0
[  226.604711][T16262]  ? __pfx_wiphy_register+0x10/0x10
[  226.604721][T16262]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  226.604737][T16262]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  226.604752][T16262]  ieee80211_register_hw+0x33e1/0x4120
[  226.604777][T16262]  ? ieee80211_register_hw+0x14a1/0x4120
[  226.604793][T16262]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  226.604808][T16262]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  226.604826][T16262]  ? __hrtimer_setup+0x187/0x210
[  226.604837][T16262]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  226.604853][T16262]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  226.604880][T16262]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  226.604892][T16262]  ? trace_kmalloc+0x1f/0xd0
[  226.604906][T16262]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  226.604919][T16262]  ? kstrndup+0xbf/0x160
[  226.604933][T16262]  hwsim_new_radio_nl+0xea4/0x1b10
[  226.604947][T16262]  ? __pfx___nla_validate_parse+0x10/0x10
[  226.604966][T16262]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  226.604985][T16262]  ? __nla_parse+0x40/0x60
[  226.604997][T16262]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  226.605012][T16262]  genl_family_rcv_msg_doit+0x215/0x300
[  226.605024][T16262]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  226.605040][T16262]  ? bpf_lsm_capable+0x9/0x20
[  226.605052][T16262]  ? security_capable+0x7e/0x2e0
[  226.605065][T16262]  genl_rcv_msg+0x60e/0x790
[  226.605077][T16262]  ? __pfx_genl_rcv_msg+0x10/0x10
[  226.605086][T16262]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  226.605105][T16262]  netlink_rcv_skb+0x208/0x470
[  226.605118][T16262]  ? __pfx_genl_rcv_msg+0x10/0x10
[  226.605127][T16262]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  226.605148][T16262]  ? down_read+0x1ad/0x2e0
[  226.605159][T16262]  genl_rcv+0x28/0x40
[  226.605167][T16262]  netlink_unicast+0x75c/0x8e0
[  226.605183][T16262]  netlink_sendmsg+0x805/0xb30
[  226.605200][T16262]  ? __pfx_netlink_sendmsg+0x10/0x10
[  226.605213][T16262]  ? aa_sock_msg_perm+0x94/0x160
[  226.605224][T16262]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  226.605233][T16262]  ? __pfx_netlink_sendmsg+0x10/0x10
[  226.605246][T16262]  __sock_sendmsg+0x21c/0x270
[  226.605258][T16262]  ____sys_sendmsg+0x505/0x830
[  226.605274][T16262]  ? __pfx_____sys_sendmsg+0x10/0x10
[  226.605291][T16262]  ? import_iovec+0x74/0xa0
[  226.605305][T16262]  ___sys_sendmsg+0x21f/0x2a0
[  226.605319][T16262]  ? __pfx____sys_sendmsg+0x10/0x10
[  226.605349][T16262]  ? __fget_files+0x2a/0x420
[  226.605357][T16262]  ? __fget_files+0x3a0/0x420
[  226.605371][T16262]  __x64_sys_sendmsg+0x19b/0x260
[  226.605385][T16262]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  226.605407][T16262]  ? do_syscall_64+0xbe/0x3b0
[  226.605419][T16262]  do_syscall_64+0xfa/0x3b0
[  226.605428][T16262]  ? lockdep_hardirqs_on+0x9c/0x150
[  226.605443][T16262]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.605478][T16262]  ? exc_page_fault+0x9f/0xf0
[  226.605490][T16262]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.605499][T16262] RIP: 0033:0x7f8daed8e9a9
[  226.605509][T16262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  226.605518][T16262] RSP: 002b:00007f8daebf7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  226.605530][T16262] RAX: ffffffffffffffda RBX: 00007f8daefb5fa0 RCX: 00007f8daed8e9a9
[  226.605553][T16262] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  226.605559][T16262] RBP: 00007f8daee10ca1 R08: 0000000000000000 R09: 0000000000000000
[  226.605566][T16262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  226.605572][T16262] R13: 0000000000000000 R14: 00007f8daefb5fa0 R15: 00007ffcdb036b18
[  226.605588][T16262]  </TASK>
[  226.818168][T16269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3195'.
[  227.246582][T16288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3202'.
[  227.889652][T16296] netlink: 'syz.0.3203': attribute type 3 has an invalid length.
[  227.914665][T16290] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3204'.
[  227.966338][T16305] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3209'.
[  228.036780][T16314] netlink: 316 bytes leftover after parsing attributes in process `syz.0.3213'.
[  228.039623][T16314] openvswitch: netlink: Flow key attr not present in new flow.
[  228.127288][T16319] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.3214'.
[  228.315955][T16350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3224'.
[  228.376592][T16360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  228.417669][T16362] 8021q: adding VLAN 0 to HW filter on device bond16
[  228.424233][T16362] bond0: (slave bond16): Enslaving as an active interface with an up link
[  228.579169][T16373] tipc: New replicast peer: 255.255.255.255
[  228.593788][T16373] tipc: Enabled bearer <udp:syz2>, priority 10
[  229.347123][T16376] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  229.689006][T16417] netlink: 'syz.0.3245': attribute type 4 has an invalid length.
[  229.724979][T16417] netlink: 'syz.0.3245': attribute type 4 has an invalid length.
[  230.540525][T16479] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  230.556122][T16471] netlink: 'syz.2.3263': attribute type 10 has an invalid length.
[  230.707392][T16485] syzkaller1: entered promiscuous mode
[  230.709195][T16485] syzkaller1: entered allmulticast mode
[  230.998480][T16518] lo speed is unknown, defaulting to 1000
[  231.009017][T16520] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  231.028314][T16520] tipc: Disabling bearer <eth:syzkaller0>
[  231.126214][T16518] lo speed is unknown, defaulting to 1000
[  231.230680][T16533] netlink: 'syz.2.3280': attribute type 1 has an invalid length.
[  231.277990][T16533] 8021q: adding VLAN 0 to HW filter on device bond5
[  231.289551][T16533] gretap0: left allmulticast mode
[  231.294856][T16533] gretap0: left promiscuous mode
[  231.296584][T16533] bridge0: port 1(gretap0) entered disabled state
[  231.326429][T16533] bond2: (slave ip6gretap1): Removing an active aggregator
[  231.331448][T16533] bond2: (slave ip6gretap1): Releasing backup interface
[  231.340129][T16533] batman_adv: batadv0: Interface deactivated: gretap2
[  231.342507][T16533] batman_adv: batadv0: Removing interface: gretap2
[  231.350804][ T2302] lo speed is unknown, defaulting to 1000
[  231.395256][T16540] __nla_validate_parse: 12 callbacks suppressed
[  231.395269][T16540] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3283'.
[  231.400566][T16541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3283'.
[  231.479980][T16543] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3284'.
[  231.748635][T16571] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  231.766699][T16571] CPU: 1 UID: 0 PID: 16571 Comm: syz.2.3292 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  231.766736][T16571] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  231.766744][T16571] Call Trace:
[  231.766749][T16571]  <TASK>
[  231.766756][T16571]  dump_stack_lvl+0x189/0x250
[  231.766776][T16571]  ? __pfx_dump_stack_lvl+0x10/0x10
[  231.766788][T16571]  ? __pfx__printk+0x10/0x10
[  231.766803][T16571]  ? kernfs_path_from_node+0x2c/0x260
[  231.766814][T16571]  ? kernfs_path_from_node+0x2c/0x260
[  231.766821][T16571]  ? kernfs_path_from_node+0x2c/0x260
[  231.766830][T16571]  ? kernfs_path_from_node+0x22c/0x260
[  231.766838][T16571]  ? kernfs_path_from_node+0x2c/0x260
[  231.766848][T16571]  sysfs_warn_dup+0x8e/0xa0
[  231.766863][T16571]  sysfs_do_create_link_sd+0xc0/0x110
[  231.766874][T16571]  device_add_class_symlinks+0x1cf/0x240
[  231.766890][T16571]  device_add+0x475/0xb50
[  231.766904][T16571]  wiphy_register+0x199a/0x26b0
[  231.766940][T16571]  ? __pfx_wiphy_register+0x10/0x10
[  231.766951][T16571]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  231.766967][T16571]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  231.766982][T16571]  ieee80211_register_hw+0x33e1/0x4120
[  231.767010][T16571]  ? ieee80211_register_hw+0x14a1/0x4120
[  231.767050][T16571]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  231.767068][T16571]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  231.767090][T16571]  ? __hrtimer_setup+0x187/0x210
[  231.767100][T16571]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  231.767118][T16571]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  231.767148][T16571]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  231.767161][T16571]  ? trace_kmalloc+0x1f/0xd0
[  231.767175][T16571]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  231.767188][T16571]  ? kstrndup+0xbf/0x160
[  231.767202][T16571]  hwsim_new_radio_nl+0xea4/0x1b10
[  231.767216][T16571]  ? __pfx___nla_validate_parse+0x10/0x10
[  231.767235][T16571]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  231.767249][T16571]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  231.767263][T16571]  ? __nla_parse+0x40/0x60
[  231.767275][T16571]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  231.767288][T16571]  genl_family_rcv_msg_doit+0x215/0x300
[  231.767301][T16571]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  231.767317][T16571]  ? bpf_lsm_capable+0x9/0x20
[  231.767329][T16571]  ? security_capable+0x7e/0x2e0
[  231.767344][T16571]  genl_rcv_msg+0x60e/0x790
[  231.767357][T16571]  ? __pfx_genl_rcv_msg+0x10/0x10
[  231.767365][T16571]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  231.767384][T16571]  netlink_rcv_skb+0x208/0x470
[  231.767398][T16571]  ? __pfx_genl_rcv_msg+0x10/0x10
[  231.767408][T16571]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  231.767428][T16571]  ? down_read+0x1ad/0x2e0
[  231.767439][T16571]  genl_rcv+0x28/0x40
[  231.767447][T16571]  netlink_unicast+0x75c/0x8e0
[  231.767463][T16571]  netlink_sendmsg+0x805/0xb30
[  231.767480][T16571]  ? __pfx_netlink_sendmsg+0x10/0x10
[  231.767493][T16571]  ? aa_sock_msg_perm+0x94/0x160
[  231.767504][T16571]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  231.767514][T16571]  ? __pfx_netlink_sendmsg+0x10/0x10
[  231.767526][T16571]  __sock_sendmsg+0x21c/0x270
[  231.767538][T16571]  ____sys_sendmsg+0x505/0x830
[  231.767554][T16571]  ? __pfx_____sys_sendmsg+0x10/0x10
[  231.767571][T16571]  ? import_iovec+0x74/0xa0
[  231.767585][T16571]  ___sys_sendmsg+0x21f/0x2a0
[  231.767599][T16571]  ? __pfx____sys_sendmsg+0x10/0x10
[  231.767630][T16571]  ? __fget_files+0x2a/0x420
[  231.767638][T16571]  ? __fget_files+0x3a0/0x420
[  231.767652][T16571]  __x64_sys_sendmsg+0x19b/0x260
[  231.767666][T16571]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  231.767688][T16571]  ? do_syscall_64+0xbe/0x3b0
[  231.767700][T16571]  do_syscall_64+0xfa/0x3b0
[  231.767709][T16571]  ? lockdep_hardirqs_on+0x9c/0x150
[  231.767718][T16571]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.767728][T16571]  ? exc_page_fault+0x9f/0xf0
[  231.767738][T16571]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.767746][T16571] RIP: 0033:0x7f775018e9a9
[  231.767758][T16571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  231.767767][T16571] RSP: 002b:00007f7750f3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  231.767778][T16571] RAX: ffffffffffffffda RBX: 00007f77503b5fa0 RCX: 00007f775018e9a9
[  231.767786][T16571] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  231.767792][T16571] RBP: 00007f7750210ca1 R08: 0000000000000000 R09: 0000000000000000
[  231.767799][T16571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  231.767805][T16571] R13: 0000000000000000 R14: 00007f77503b5fa0 R15: 00007ffc1f017508
[  231.767821][T16571]  </TASK>
[  231.960397][T16578] netlink: 'syz.2.3295': attribute type 21 has an invalid length.
[  231.964048][T16578] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3295'.
[  231.967287][T16578] netlink: 'syz.2.3295': attribute type 5 has an invalid length.
[  231.970067][T16578] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3295'.
[  232.491319][T16618] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3307'.
[  232.495341][T16618] sctp: [Deprecated]: syz.2.3307 (pid 16618) Use of int in max_burst socket option.
[  232.495341][T16618] Use struct sctp_assoc_value instead
[  232.529687][T16623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3308'.
[  232.545673][T16623] bond6: entered promiscuous mode
[  232.547318][T16623] bond6: entered allmulticast mode
[  232.551317][T16623] 8021q: adding VLAN 0 to HW filter on device bond6
[  232.714736][T16642] netlink: 'syz.0.3313': attribute type 27 has an invalid length.
[  232.900134][T16663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3320'.
[  233.012791][T16668] 8021q: adding VLAN 0 to HW filter on device bond6
[  233.015626][T16668] bridge0: port 1(bond6) entered blocking state
[  233.018441][T16668] bridge0: port 1(bond6) entered disabled state
[  233.021098][T16668] bond6: entered allmulticast mode
[  233.024902][T16668] bond6: entered promiscuous mode
[  233.027302][T16668] bridge0: port 1(bond6) entered blocking state
[  233.029675][T16668] bridge0: port 1(bond6) entered forwarding state
[  233.036481][ T1089] bridge0: port 1(bond6) entered disabled state
[  233.147640][T16680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3326'.
[  233.235836][T16683] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3327'.
[  234.263393][T16752] lo speed is unknown, defaulting to 1000
[  234.370008][T16752] lo speed is unknown, defaulting to 1000
[  235.954335][T16777] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  235.957929][T16777] CPU: 1 UID: 0 PID: 16777 Comm: syz.0.3353 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  235.957947][T16777] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  235.957955][T16777] Call Trace:
[  235.957960][T16777]  <TASK>
[  235.957966][T16777]  dump_stack_lvl+0x189/0x250
[  235.957987][T16777]  ? __pfx_dump_stack_lvl+0x10/0x10
[  235.957998][T16777]  ? __pfx__printk+0x10/0x10
[  235.958012][T16777]  ? kernfs_path_from_node+0x2c/0x260
[  235.958022][T16777]  ? kernfs_path_from_node+0x2c/0x260
[  235.958030][T16777]  ? kernfs_path_from_node+0x2c/0x260
[  235.958039][T16777]  ? kernfs_path_from_node+0x22c/0x260
[  235.958047][T16777]  ? kernfs_path_from_node+0x2c/0x260
[  235.958056][T16777]  sysfs_warn_dup+0x8e/0xa0
[  235.958070][T16777]  sysfs_do_create_link_sd+0xc0/0x110
[  235.958080][T16777]  device_add_class_symlinks+0x1cf/0x240
[  235.958096][T16777]  device_add+0x475/0xb50
[  235.958110][T16777]  wiphy_register+0x199a/0x26b0
[  235.958132][T16777]  ? __pfx_wiphy_register+0x10/0x10
[  235.958143][T16777]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  235.958159][T16777]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  235.958174][T16777]  ieee80211_register_hw+0x33e1/0x4120
[  235.958196][T16777]  ? ieee80211_register_hw+0x14a1/0x4120
[  235.958212][T16777]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  235.958227][T16777]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  235.958245][T16777]  ? __hrtimer_setup+0x187/0x210
[  235.958255][T16777]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  235.958272][T16777]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  235.958300][T16777]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  235.958312][T16777]  ? trace_kmalloc+0x1f/0xd0
[  235.958324][T16777]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  235.958337][T16777]  ? kstrndup+0xbf/0x160
[  235.958350][T16777]  hwsim_new_radio_nl+0xea4/0x1b10
[  235.958364][T16777]  ? __pfx___nla_validate_parse+0x10/0x10
[  235.958383][T16777]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  235.958396][T16777]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  235.958410][T16777]  ? __nla_parse+0x40/0x60
[  235.958422][T16777]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  235.958435][T16777]  genl_family_rcv_msg_doit+0x215/0x300
[  235.958448][T16777]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  235.958464][T16777]  ? bpf_lsm_capable+0x9/0x20
[  235.958475][T16777]  ? security_capable+0x7e/0x2e0
[  235.958488][T16777]  genl_rcv_msg+0x60e/0x790
[  235.958500][T16777]  ? __pfx_genl_rcv_msg+0x10/0x10
[  235.958508][T16777]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  235.958527][T16777]  netlink_rcv_skb+0x208/0x470
[  235.958540][T16777]  ? __pfx_genl_rcv_msg+0x10/0x10
[  235.958550][T16777]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  235.958570][T16777]  ? down_read+0x1ad/0x2e0
[  235.958581][T16777]  genl_rcv+0x28/0x40
[  235.958589][T16777]  netlink_unicast+0x75c/0x8e0
[  235.958605][T16777]  netlink_sendmsg+0x805/0xb30
[  235.958621][T16777]  ? __pfx_netlink_sendmsg+0x10/0x10
[  235.958635][T16777]  ? aa_sock_msg_perm+0x94/0x160
[  235.958646][T16777]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  235.958655][T16777]  ? __pfx_netlink_sendmsg+0x10/0x10
[  235.958667][T16777]  __sock_sendmsg+0x21c/0x270
[  235.958679][T16777]  ____sys_sendmsg+0x505/0x830
[  235.958727][T16777]  ? __pfx_____sys_sendmsg+0x10/0x10
[  235.958746][T16777]  ? import_iovec+0x74/0xa0
[  235.958761][T16777]  ___sys_sendmsg+0x21f/0x2a0
[  235.958775][T16777]  ? __pfx____sys_sendmsg+0x10/0x10
[  235.958809][T16777]  ? __fget_files+0x2a/0x420
[  235.958818][T16777]  ? __fget_files+0x3a0/0x420
[  235.958831][T16777]  __x64_sys_sendmsg+0x19b/0x260
[  235.958845][T16777]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  235.958867][T16777]  ? do_syscall_64+0xbe/0x3b0
[  235.958879][T16777]  do_syscall_64+0xfa/0x3b0
[  235.958888][T16777]  ? lockdep_hardirqs_on+0x9c/0x150
[  235.958897][T16777]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.958906][T16777]  ? exc_page_fault+0x9f/0xf0
[  235.958915][T16777]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.958924][T16777] RIP: 0033:0x7f869c98e9a9
[  235.958935][T16777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  235.958943][T16777] RSP: 002b:00007f869d79c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  235.958954][T16777] RAX: ffffffffffffffda RBX: 00007f869cbb5fa0 RCX: 00007f869c98e9a9
[  235.958962][T16777] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  235.958969][T16777] RBP: 00007f869ca10ca1 R08: 0000000000000000 R09: 0000000000000000
[  235.958975][T16777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  235.958981][T16777] R13: 0000000000000000 R14: 00007f869cbb5fa0 R15: 00007ffcaa00a758
[  235.958998][T16777]  </TASK>
[  235.977426][T16779] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  236.106563][T16779] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  236.125245][T16782] 8021q: VLANs not supported on ipvlan1
[  236.144629][T16781] lo speed is unknown, defaulting to 1000
[  236.185010][T16789] netlink: 'syz.1.3356': attribute type 2 has an invalid length.
[  236.348502][T16781] lo speed is unknown, defaulting to 1000
[  236.456985][T16806] syzkaller1: entered promiscuous mode
[  236.458841][T16806] syzkaller1: entered allmulticast mode
[  236.598554][T16816] openvswitch: netlink: Key type 239 is out of range max 32
[  236.623712][T16817] __nla_validate_parse: 46 callbacks suppressed
[  236.623726][T16817] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3364'.
[  236.678939][T16825] syzkaller1: entered promiscuous mode
[  236.680728][T16825] syzkaller1: entered allmulticast mode
[  236.869649][T16835] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.3370'.
[  236.875997][T16835] openvswitch: netlink: IP tunnel dst address not specified
[  236.879343][T16835] xt_hashlimit: size too large, truncated to 1048576
[  236.888524][T16835] xt_hashlimit: max too large, truncated to 1048576
[  236.891496][T16835] netlink: 'syz.2.3370': attribute type 10 has an invalid length.
[  236.941378][T16851] gtp0: entered promiscuous mode
[  236.960963][T16851] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3374'.
[  237.118479][T16864] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3380'.
[  237.247021][T16880] sctp: [Deprecated]: syz.2.3386 (pid 16880) Use of struct sctp_assoc_value in delayed_ack socket option.
[  237.247021][T16880] Use struct sctp_sack_info instead
[  237.264206][T16881] sctp: [Deprecated]: syz.2.3386 (pid 16881) Use of struct sctp_assoc_value in delayed_ack socket option.
[  237.264206][T16881] Use struct sctp_sack_info instead
[  237.308235][T16883] netlink: 'syz.0.3387': attribute type 1 has an invalid length.
[  237.310810][T16883] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3387'.
[  237.370966][T16888] syzkaller1: entered promiscuous mode
[  237.373117][T16888] syzkaller1: entered allmulticast mode
[  237.465858][T16894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3390'.
[  237.603580][T16902] netlink: 312 bytes leftover after parsing attributes in process `syz.2.3393'.
[  237.643872][T16904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3394'.
[  237.646665][T16904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3394'.
[  237.649486][T16904] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744071844200453)
[  237.652909][T16904] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[  237.660189][T16904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3394'.
[  237.680805][T16904] 8021q: adding VLAN 0 to HW filter on device bond7
[  237.691941][T16904] set match dimension is over the limit!
[  237.746328][T16910] netlink: 'syz.2.3396': attribute type 10 has an invalid length.
[  237.936340][T16926] lo speed is unknown, defaulting to 1000
[  237.964381][T16938] xt_ecn: cannot match TCP bits for non-tcp packets
[  238.072997][T16926] lo speed is unknown, defaulting to 1000
[  238.835224][T16964] veth0: entered allmulticast mode
[  239.249372][T16994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  239.305444][T16999] netlink: 'syz.2.3424': attribute type 83 has an invalid length.
[  239.572166][T17021] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  239.576661][T17021] tipc: Resetting bearer <eth:syzkaller0>
[  239.593343][T17020] tipc: Disabling bearer <eth:syzkaller0>
[  239.652864][T17024] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  239.656482][T17024] CPU: 1 UID: 0 PID: 17024 Comm: syz.2.3433 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  239.656498][T17024] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  239.656505][T17024] Call Trace:
[  239.656511][T17024]  <TASK>
[  239.656516][T17024]  dump_stack_lvl+0x189/0x250
[  239.656536][T17024]  ? __pfx_dump_stack_lvl+0x10/0x10
[  239.656550][T17024]  ? __pfx__printk+0x10/0x10
[  239.656564][T17024]  ? kernfs_path_from_node+0x2c/0x260
[  239.656575][T17024]  ? kernfs_path_from_node+0x2c/0x260
[  239.656582][T17024]  ? kernfs_path_from_node+0x2c/0x260
[  239.656591][T17024]  ? kernfs_path_from_node+0x22c/0x260
[  239.656599][T17024]  ? kernfs_path_from_node+0x2c/0x260
[  239.656609][T17024]  sysfs_warn_dup+0x8e/0xa0
[  239.656622][T17024]  sysfs_do_create_link_sd+0xc0/0x110
[  239.656632][T17024]  device_add_class_symlinks+0x1cf/0x240
[  239.656648][T17024]  device_add+0x475/0xb50
[  239.656663][T17024]  wiphy_register+0x199a/0x26b0
[  239.656684][T17024]  ? __pfx_wiphy_register+0x10/0x10
[  239.656695][T17024]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  239.656713][T17024]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  239.656731][T17024]  ieee80211_register_hw+0x33e1/0x4120
[  239.656755][T17024]  ? ieee80211_register_hw+0x14a1/0x4120
[  239.656772][T17024]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  239.656786][T17024]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  239.656804][T17024]  ? __hrtimer_setup+0x187/0x210
[  239.656815][T17024]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  239.656833][T17024]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  239.656862][T17024]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  239.656875][T17024]  ? trace_kmalloc+0x1f/0xd0
[  239.656889][T17024]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  239.656903][T17024]  ? kstrndup+0xbf/0x160
[  239.656920][T17024]  hwsim_new_radio_nl+0xea4/0x1b10
[  239.656933][T17024]  ? __pfx___nla_validate_parse+0x10/0x10
[  239.656952][T17024]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  239.656971][T17024]  ? __nla_parse+0x40/0x60
[  239.656982][T17024]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  239.656997][T17024]  genl_family_rcv_msg_doit+0x215/0x300
[  239.657010][T17024]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  239.657026][T17024]  ? bpf_lsm_capable+0x9/0x20
[  239.657037][T17024]  ? security_capable+0x7e/0x2e0
[  239.657051][T17024]  genl_rcv_msg+0x60e/0x790
[  239.657064][T17024]  ? __pfx_genl_rcv_msg+0x10/0x10
[  239.657074][T17024]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  239.657095][T17024]  netlink_rcv_skb+0x208/0x470
[  239.657108][T17024]  ? __pfx_genl_rcv_msg+0x10/0x10
[  239.657117][T17024]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  239.657138][T17024]  ? down_read+0x1ad/0x2e0
[  239.657149][T17024]  genl_rcv+0x28/0x40
[  239.657157][T17024]  netlink_unicast+0x75c/0x8e0
[  239.657173][T17024]  netlink_sendmsg+0x805/0xb30
[  239.657190][T17024]  ? __pfx_netlink_sendmsg+0x10/0x10
[  239.657204][T17024]  ? aa_sock_msg_perm+0x94/0x160
[  239.657214][T17024]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  239.657223][T17024]  ? __pfx_netlink_sendmsg+0x10/0x10
[  239.657235][T17024]  __sock_sendmsg+0x21c/0x270
[  239.657248][T17024]  ____sys_sendmsg+0x505/0x830
[  239.657263][T17024]  ? __pfx_____sys_sendmsg+0x10/0x10
[  239.657281][T17024]  ? import_iovec+0x74/0xa0
[  239.657295][T17024]  ___sys_sendmsg+0x21f/0x2a0
[  239.657308][T17024]  ? __pfx____sys_sendmsg+0x10/0x10
[  239.657339][T17024]  ? __fget_files+0x2a/0x420
[  239.657347][T17024]  ? __fget_files+0x3a0/0x420
[  239.657360][T17024]  __x64_sys_sendmsg+0x19b/0x260
[  239.657374][T17024]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  239.657425][T17024]  ? rcu_is_watching+0x15/0xb0
[  239.657440][T17024]  ? do_syscall_64+0xbe/0x3b0
[  239.657452][T17024]  do_syscall_64+0xfa/0x3b0
[  239.657461][T17024]  ? lockdep_hardirqs_on+0x9c/0x150
[  239.657470][T17024]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.657480][T17024]  ? exc_page_fault+0x9f/0xf0
[  239.657489][T17024]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.657498][T17024] RIP: 0033:0x7f775018e9a9
[  239.657507][T17024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  239.657515][T17024] RSP: 002b:00007f7750f3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  239.657526][T17024] RAX: ffffffffffffffda RBX: 00007f77503b5fa0 RCX: 00007f775018e9a9
[  239.657533][T17024] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  239.657539][T17024] RBP: 00007f7750210ca1 R08: 0000000000000000 R09: 0000000000000000
[  239.657545][T17024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  239.657551][T17024] R13: 0000000000000000 R14: 00007f77503b5fa0 R15: 00007ffc1f017508
[  239.657567][T17024]  </TASK>
[  240.055271][T17044] netlink: 'syz.2.3439': attribute type 4 has an invalid length.
[  240.059213][T17044] netlink: 'syz.2.3439': attribute type 1 has an invalid length.
[  240.464706][T17072] syzkaller1: entered promiscuous mode
[  240.466609][T17072] syzkaller1: entered allmulticast mode
[  240.572243][T17081] bond0: (slave bond16): Releasing backup interface
[  240.955452][T17132] sock: sock_set_timeout: `syz.0.3466' (pid 17132) tries to set negative timeout
[  240.959592][T17134] sock: sock_set_timeout: `syz.0.3466' (pid 17134) tries to set negative timeout
[  241.015154][T17137] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7
[  241.060431][T17129] xt_HMARK: spi-set and port-set can't be combined
[  241.293978][T17139] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  241.297326][T17139] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  241.299837][T17139] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  241.302769][T17139] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  241.345276][T17139] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  241.347944][T17139] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  241.350544][T17139] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  241.353572][T17139] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  241.389626][T17139] batman_adv: batadv0: Interface deactivated: macvtap0
[  241.393829][T17139] mac80211_hwsim hwsim3 wlan0: left allmulticast mode
[  241.437042][T17151] Cannot find set identified by id 1 to match
[  241.624474][T17165] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  241.628158][T17165] IPVS: set_ctl: invalid protocol: 1026 7.0.8.0:768
[  241.755979][T17177] lo speed is unknown, defaulting to 1000
[  241.830837][T17183] __nla_validate_parse: 16 callbacks suppressed
[  241.830850][T17183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3479'.
[  241.920471][T17177] lo speed is unknown, defaulting to 1000
[  241.958733][T17187] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  241.962408][T17187] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  241.965295][T17187] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  242.052682][T17187] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  242.055816][T17187] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  242.058978][T17187] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  242.114935][T17187] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  242.118987][T17187] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  242.123796][T17187] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  242.228697][T17187] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  242.231935][T17187] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  242.241461][T17187] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  242.358486][T17187] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  242.365452][T17187] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  242.368015][T17187] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  242.385605][T17187] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  242.388178][T17187] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  242.390681][T17187] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  242.408427][T17187] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  242.410989][T17187] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  242.414850][T17187] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  242.428086][T17187] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  242.430987][T17187] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  242.434668][T17187] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  242.575168][T17205] netlink: 'syz.0.3485': attribute type 12 has an invalid length.
[  242.855494][T17222] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3489'.
[  242.910769][T17226] xt_l2tp: missing protocol rule (udp|l2tpip)
[  242.944911][T17229] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3492'.
[  243.225378][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.230729][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.233577][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.236046][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.239261][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.242530][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.244945][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.248607][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.251144][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.253666][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.256062][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.258471][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.261320][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.263985][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.266419][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.268846][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.272310][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.276627][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.281018][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.289426][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.297776][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.304836][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.307191][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.309649][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.312823][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.315293][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.317629][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.320497][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.323415][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.325920][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.328425][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.330870][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.333779][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.336140][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.338523][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.341228][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.343940][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.346456][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.348853][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.351249][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.354891][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.357355][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.359766][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.364593][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.366954][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.369286][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.371586][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.373883][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.376305][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.378697][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.381846][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.384260][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.386638][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.389006][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.391394][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.393857][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.396332][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.398756][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.401689][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.404317][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.406864][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.409213][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.411846][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.414150][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.416488][T17247] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  243.427365][T17258] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3499'.
[  243.468305][T17260] netlink: 'syz.1.3500': attribute type 4 has an invalid length.
[  243.482734][T17263] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3501'.
[  243.518333][T17263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3501'.
[  243.572713][T17267] tipc: New replicast peer: 255.255.255.255
[  243.574626][T17268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3503'.
[  243.574981][T17267] tipc: Enabled bearer <udp:syz2>, priority 10
[  243.674367][T17279] vlan0: entered promiscuous mode
[  243.676125][T17279] vlan0: entered allmulticast mode
[  243.677807][T17279] hsr_slave_1: entered allmulticast mode
[  243.706811][T17279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3508'.
[  243.736722][T17282] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3510'.
[  243.909639][T17294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3514'.
[  243.913387][T17294] netlink: 'syz.0.3514': attribute type 1 has an invalid length.
[  244.160441][T17321] netlink: 'syz.2.3523': attribute type 1 has an invalid length.
[  244.162515][T17316] netlink: 'syz.0.3522': attribute type 9 has an invalid length.
[  244.173094][T17316] netlink: 'syz.0.3522': attribute type 9 has an invalid length.
[  244.203408][T17323] nbd: must specify at least one socket
[  244.227168][T17323] lo speed is unknown, defaulting to 1000
[  244.349331][T17323] lo speed is unknown, defaulting to 1000
[  244.571799][ T5887] tipc: Node number set to 2183931802
[  244.876565][T17349] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  244.880408][T17349] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  244.923869][T17353] netlink: 'syz.1.3532': attribute type 5 has an invalid length.
[  244.930318][T17354] 8021q: VLANs not supported on ipvlan1
[  245.010286][T17361] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  245.015900][T17361] syzkaller0: entered promiscuous mode
[  245.017739][T17361] syzkaller0: entered allmulticast mode
[  245.036643][T17361] tipc: Resetting bearer <eth:syzkaller0>
[  245.044514][T17360] tipc: Resetting bearer <eth:syzkaller0>
[  245.072482][T17360] tipc: Disabling bearer <eth:syzkaller0>
[  245.314894][T17377] netlink: 'syz.0.3539': attribute type 1 has an invalid length.
[  245.324985][T17386] netlink: 'syz.1.3542': attribute type 1 has an invalid length.
[  245.334784][T17386] netlink: 'syz.1.3542': attribute type 1 has an invalid length.
[  246.033155][T17409] 0: left allmulticast mode
[  246.034788][T17409] hsr_slave_0: left allmulticast mode
[  246.036603][T17409] hsr_slave_1: left allmulticast mode
[  246.055909][T17409] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  246.058694][T17409] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  246.061370][T17409] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  246.064707][T17409] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  246.079301][T17409] syzkaller0: entered promiscuous mode
[  246.080969][T17409] syzkaller0: entered allmulticast mode
[  246.085244][T17409] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  246.118553][T17415] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  246.125196][T17415] CPU: 0 UID: 0 PID: 17415 Comm: syz.2.3552 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  246.125213][T17415] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  246.125220][T17415] Call Trace:
[  246.125226][T17415]  <TASK>
[  246.125232][T17415]  dump_stack_lvl+0x189/0x250
[  246.125252][T17415]  ? __pfx_dump_stack_lvl+0x10/0x10
[  246.125266][T17415]  ? __pfx__printk+0x10/0x10
[  246.125280][T17415]  ? kernfs_path_from_node+0x2c/0x260
[  246.125290][T17415]  ? kernfs_path_from_node+0x2c/0x260
[  246.125298][T17415]  ? kernfs_path_from_node+0x2c/0x260
[  246.125307][T17415]  ? kernfs_path_from_node+0x22c/0x260
[  246.125315][T17415]  ? kernfs_path_from_node+0x2c/0x260
[  246.125325][T17415]  sysfs_warn_dup+0x8e/0xa0
[  246.125338][T17415]  sysfs_do_create_link_sd+0xc0/0x110
[  246.125349][T17415]  device_add_class_symlinks+0x1cf/0x240
[  246.125364][T17415]  device_add+0x475/0xb50
[  246.125379][T17415]  wiphy_register+0x199a/0x26b0
[  246.125399][T17415]  ? __pfx_wiphy_register+0x10/0x10
[  246.125411][T17415]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  246.125428][T17415]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  246.125445][T17415]  ieee80211_register_hw+0x33e1/0x4120
[  246.125469][T17415]  ? ieee80211_register_hw+0x14a1/0x4120
[  246.125486][T17415]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  246.125500][T17415]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  246.125518][T17415]  ? __hrtimer_setup+0x187/0x210
[  246.125529][T17415]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  246.125545][T17415]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  246.125571][T17415]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  246.125583][T17415]  ? trace_kmalloc+0x1f/0xd0
[  246.125598][T17415]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  246.125612][T17415]  ? kstrndup+0xbf/0x160
[  246.125627][T17415]  hwsim_new_radio_nl+0xea4/0x1b10
[  246.125641][T17415]  ? __pfx___nla_validate_parse+0x10/0x10
[  246.125659][T17415]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  246.125677][T17415]  ? __nla_parse+0x40/0x60
[  246.125689][T17415]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  246.125704][T17415]  genl_family_rcv_msg_doit+0x215/0x300
[  246.125717][T17415]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  246.125732][T17415]  ? bpf_lsm_capable+0x9/0x20
[  246.125744][T17415]  ? security_capable+0x7e/0x2e0
[  246.125758][T17415]  genl_rcv_msg+0x60e/0x790
[  246.125772][T17415]  ? __pfx_genl_rcv_msg+0x10/0x10
[  246.125781][T17415]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  246.125800][T17415]  netlink_rcv_skb+0x208/0x470
[  246.125813][T17415]  ? __pfx_genl_rcv_msg+0x10/0x10
[  246.125822][T17415]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  246.125842][T17415]  ? down_read+0x1ad/0x2e0
[  246.125885][T17415]  genl_rcv+0x28/0x40
[  246.125894][T17415]  netlink_unicast+0x75c/0x8e0
[  246.125911][T17415]  netlink_sendmsg+0x805/0xb30
[  246.125930][T17415]  ? __pfx_netlink_sendmsg+0x10/0x10
[  246.125946][T17415]  ? aa_sock_msg_perm+0x94/0x160
[  246.125958][T17415]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  246.125969][T17415]  ? __pfx_netlink_sendmsg+0x10/0x10
[  246.125982][T17415]  __sock_sendmsg+0x21c/0x270
[  246.125994][T17415]  ____sys_sendmsg+0x505/0x830
[  246.126010][T17415]  ? __pfx_____sys_sendmsg+0x10/0x10
[  246.126027][T17415]  ? import_iovec+0x74/0xa0
[  246.126041][T17415]  ___sys_sendmsg+0x21f/0x2a0
[  246.126055][T17415]  ? __pfx____sys_sendmsg+0x10/0x10
[  246.126086][T17415]  ? __fget_files+0x2a/0x420
[  246.126094][T17415]  ? __fget_files+0x3a0/0x420
[  246.126107][T17415]  __x64_sys_sendmsg+0x19b/0x260
[  246.126121][T17415]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  246.126143][T17415]  ? do_syscall_64+0xbe/0x3b0
[  246.126155][T17415]  do_syscall_64+0xfa/0x3b0
[  246.126164][T17415]  ? lockdep_hardirqs_on+0x9c/0x150
[  246.126172][T17415]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  246.126181][T17415]  ? exc_page_fault+0x9f/0xf0
[  246.126190][T17415]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  246.126199][T17415] RIP: 0033:0x7f775018e9a9
[  246.126208][T17415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  246.126217][T17415] RSP: 002b:00007f7750f3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  246.126228][T17415] RAX: ffffffffffffffda RBX: 00007f77503b5fa0 RCX: 00007f775018e9a9
[  246.126236][T17415] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  246.126242][T17415] RBP: 00007f7750210ca1 R08: 0000000000000000 R09: 0000000000000000
[  246.126249][T17415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  246.126255][T17415] R13: 0000000000000000 R14: 00007f77503b5fa0 R15: 00007ffc1f017508
[  246.126270][T17415]  </TASK>
[  246.433733][T17433] 8021q: adding VLAN 0 to HW filter on device team0
[  246.436944][T17433] bond0: (slave team0): Enslaving as an active interface with an up link
[  246.786368][T17475] tipc: Enabling of bearer <5dp:s> rejected, media not registered
[  247.276398][T17508] __nla_validate_parse: 18 callbacks suppressed
[  247.276415][T17508] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3585'.
[  247.283063][T17508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3585'.
[  247.466526][T17515] syz_tun (unregistering): left promiscuous mode
[  248.169536][T17547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3596'.
[  248.328152][T17559] validate_nla: 5 callbacks suppressed
[  248.328166][T17559] netlink: 'syz.0.3601': attribute type 8 has an invalid length.
[  248.334561][T17559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3601'.
[  248.420393][T17564] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3602'.
[  248.435320][T17564] lo: entered allmulticast mode
[  248.439382][T17564] tunl0: entered allmulticast mode
[  248.441162][T17564] gre0: entered allmulticast mode
[  248.442964][T17564] gretap0: entered allmulticast mode
[  248.444721][T17564] erspan0: entered allmulticast mode
[  248.446533][T17564] ip_vti0: entered allmulticast mode
[  248.448238][T17564] ip6_vti0: entered allmulticast mode
[  248.450030][T17564] sit0: entered allmulticast mode
[  248.451681][T17564] ip6tnl0: entered allmulticast mode
[  248.453410][T17564] ip6gre0: entered allmulticast mode
[  248.455138][T17564] ip6gretap0: entered allmulticast mode
[  248.457014][T17564] bridge0: entered allmulticast mode
[  248.458772][T17564] bond0: entered allmulticast mode
[  248.460426][T17564] team0: entered allmulticast mode
[  248.465213][T17564] dummy0: entered allmulticast mode
[  248.466984][T17564] nlmon0: entered allmulticast mode
[  248.468758][T17564] caif0: entered allmulticast mode
[  248.470758][T17564] batadv0: entered allmulticast mode
[  248.474389][T17564] wg1: entered allmulticast mode
[  248.476010][T17564] wg2: entered allmulticast mode
[  248.477580][T17564] veth0_to_bridge: entered allmulticast mode
[  248.479512][T17564] bridge_slave_0: entered allmulticast mode
[  248.481470][T17564] veth1_to_bridge: entered allmulticast mode
[  248.486729][T17564] bridge_slave_1: entered allmulticast mode
[  248.488788][T17564] veth0_to_bond: entered allmulticast mode
[  248.490747][T17564] bond_slave_0: entered allmulticast mode
[  248.492842][T17564] veth1_to_bond: entered allmulticast mode
[  248.494847][T17564] bond_slave_1: entered allmulticast mode
[  248.497091][T17564] veth0_to_team: entered allmulticast mode
[  248.499784][T17564] team_slave_0: entered allmulticast mode
[  248.502423][T17564] veth1_to_team: entered allmulticast mode
[  248.504405][T17564] team_slave_1: entered allmulticast mode
[  248.506313][T17564] veth0_to_batadv: entered allmulticast mode
[  248.508355][T17564] batadv_slave_0: entered allmulticast mode
[  248.510375][T17564] veth1_to_batadv: entered allmulticast mode
[  248.512721][T17564] batadv_slave_1: entered allmulticast mode
[  248.514733][T17564] xfrm0: entered allmulticast mode
[  248.516435][T17564] veth0_to_hsr: entered allmulticast mode
[  248.518351][T17564] hsr_slave_0: entered allmulticast mode
[  248.520883][T17564] veth1_to_hsr: entered allmulticast mode
[  248.522967][T17564] hsr_slave_1: entered allmulticast mode
[  248.524839][T17564] 0: entered allmulticast mode
[  248.526506][T17564] veth1_virt_wifi: entered allmulticast mode
[  248.528501][T17564] veth0_virt_wifi: entered allmulticast mode
[  248.530490][T17564] geneve1: entered allmulticast mode
[  248.533211][T17564] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  248.535964][T17564] netdevsim netdevsim0 netdevsim1: entered allmulticast mode
[  248.538542][T17564] netdevsim netdevsim0 netdevsim2: entered allmulticast mode
[  248.541060][T17564] netdevsim netdevsim0 netdevsim3: entered allmulticast mode
[  248.543862][T17564] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[  248.546190][T17564] bridge1: entered allmulticast mode
[  248.547906][T17564] gre1: entered allmulticast mode
[  248.549637][T17564] vti60: entered allmulticast mode
[  248.551355][T17564] bridge2: entered allmulticast mode
[  248.553321][T17564] _Z`Ԁ@: entered allmulticast mode
[  248.555253][T17564] : entered allmulticast mode
[  248.556866][T17564] ip6gre1: entered allmulticast mode
[  248.558638][T17564] xfrm1: entered allmulticast mode
[  248.560395][T17564] bond1: entered allmulticast mode
[  248.562165][T17564] hsr1: entered allmulticast mode
[  248.563864][T17564] ip6gretap1: entered allmulticast mode
[  248.565677][T17564] bond2: entered allmulticast mode
[  248.567381][T17564] bridge3: entered allmulticast mode
[  248.569113][T17564] bond3: entered allmulticast mode
[  248.570779][T17564] ip6gretap2: entered allmulticast mode
[  248.572932][T17564] batadv1: entered allmulticast mode
[  248.574764][T17564] bond4: entered allmulticast mode
[  248.576437][T17564] ip6tnl1: entered allmulticast mode
[  248.578181][T17564] mac80211_hwsim hwsim19 wlan2: entered allmulticast mode
[  248.580432][T17564] bridge4: entered allmulticast mode
[  248.582468][T17564] ip6tnl2: entered allmulticast mode
[  248.584141][T17564] bridge5: entered allmulticast mode
[  248.585815][T17564] bridge6: entered allmulticast mode
[  248.587483][T17564] xfrm2: entered allmulticast mode
[  248.589135][T17564] ipip0: entered allmulticast mode
[  248.590774][T17564] macvlan1: entered allmulticast mode
[  248.592700][T17564] bridge7: entered allmulticast mode
[  248.594379][T17564] bridge8: entered allmulticast mode
[  248.596060][T17564] bond5: entered allmulticast mode
[  248.597644][T17564] gretap1: entered allmulticast mode
[  248.599347][T17564] mac80211_hwsim hwsim58 wlan3: entered allmulticast mode
[  248.601610][T17564] sit1: entered allmulticast mode
[  248.603221][T17564] bond6: entered allmulticast mode
[  248.604815][T17564] bond7: entered allmulticast mode
[  248.606423][T17564] bond8: entered allmulticast mode
[  248.608000][T17564] bond9: entered allmulticast mode
[  248.609693][T17564] bond10: entered allmulticast mode
[  248.611339][T17564] vlan0: entered allmulticast mode
[  248.613305][T17564] gretap2: entered allmulticast mode
[  248.614986][T17564] bond11: entered allmulticast mode
[  248.616638][T17564] ip6erspan0: entered allmulticast mode
[  248.618355][T17564] macvlan2: entered allmulticast mode
[  248.620050][T17564] batadv2: entered allmulticast mode
[  248.621775][T17564] bond12: entered allmulticast mode
[  248.623445][T17564] tap0: entered allmulticast mode
[  248.625050][T17564] bridge9: entered allmulticast mode
[  248.626735][T17564] gtp0: entered allmulticast mode
[  248.628315][T17564] bond13: entered allmulticast mode
[  248.629996][T17564] bond14: entered allmulticast mode
[  248.631901][T17564] ip6_vti1: entered allmulticast mode
[  248.633587][T17564] bond15: entered allmulticast mode
[  248.635217][T17564] bond16: entered allmulticast mode
[  248.636863][T17564] gretap3: entered allmulticast mode
[  248.638487][T17564] mac80211_hwsim hwsim91 wlan1: entered allmulticast mode
[  248.641977][T17564] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  248.644641][T17564] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  248.647283][T17564] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  248.649887][T17564] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  248.656106][T17564] vxlan0: entered allmulticast mode
[  248.660152][T17564] syztnl0: entered allmulticast mode
[  248.662752][T17564] bridge10: entered allmulticast mode
[  248.664441][T17564] syzkaller0: entered allmulticast mode
[  248.705184][T17577] netlink: 'syz.1.3605': attribute type 1 has an invalid length.
[  248.707501][T17577] netlink: 'syz.1.3605': attribute type 11 has an invalid length.
[  248.709901][T17577] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3605'.
[  248.812685][T17583] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3608'.
[  248.864269][T17585] netlink: 'syz.0.3609': attribute type 1 has an invalid length.
[  248.866988][T17585] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3609'.
[  249.010267][T17602] netlink: 'syz.0.3616': attribute type 1 has an invalid length.
[  249.029339][T17602] netlink: 'syz.0.3616': attribute type 1 has an invalid length.
[  249.098575][T17605] lo speed is unknown, defaulting to 1000
[  249.103318][T17609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3619'.
[  249.105951][T17609] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3619'.
[  249.154275][T17611] IPVS: set_ctl: invalid protocol: 1 172.30.1.2:20022
[  249.201112][T17614] syzkaller1: entered promiscuous mode
[  249.203128][T17614] syzkaller1: entered allmulticast mode
[  249.255015][T17605] lo speed is unknown, defaulting to 1000
[  249.390662][T17621] xt_l2tp: missing protocol rule (udp|l2tpip)
[  249.486487][T17631] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  249.494499][T17632] syzkaller0: entered promiscuous mode
[  249.496274][T17632] syzkaller0: entered allmulticast mode
[  249.537963][T17633] tipc: Resetting bearer <eth:syzkaller0>
[  249.565359][T17633] tipc: Disabling bearer <eth:syzkaller0>
[  249.578057][T17639] netlink: 'syz.1.3626': attribute type 3 has an invalid length.
[  249.585373][T17641] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  249.588256][T17641] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  249.599925][T17641] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  249.610083][T17641] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  249.620305][T17641] geneve0: entered promiscuous mode
[  250.286227][T17655] netlink: 'syz.1.3636': attribute type 18 has an invalid length.
[  250.429776][T17669] syzkaller1: entered promiscuous mode
[  250.431519][T17669] syzkaller1: entered allmulticast mode
[  250.440204][T17669] macsec1: entered promiscuous mode
[  251.237509][T17695] Cannot find add_set index 4 as target
[  251.406695][T17704] mac80211_hwsim hwsim3 wlan0: left promiscuous mode
[  251.409756][  T189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  251.412272][  T189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  251.587379][T17712] netlink: 'syz.0.3654': attribute type 49 has an invalid length.
[  251.807178][T17722] netlink: 'syz.2.3659': attribute type 1 has an invalid length.
[  251.854807][T17737] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  251.857481][T17737] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  251.860564][T17737] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  251.867661][T17737] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  251.871165][T17737] geneve2: entered promiscuous mode
[  251.874972][T17737] geneve2: entered allmulticast mode
[  252.486122][T17776] syzkaller0: entered promiscuous mode
[  252.488036][T17776] syzkaller0: entered allmulticast mode
[  252.829452][T17785] __nla_validate_parse: 51 callbacks suppressed
[  252.829466][T17785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3683'.
[  253.887511][T17788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3685'.
[  254.024278][T17803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3690'.
[  254.068571][T17814] validate_nla: 1 callbacks suppressed
[  254.068586][T17814] netlink: 'syz.1.3692': attribute type 178 has an invalid length.
[  254.075976][T17815] netlink: 'syz.1.3692': attribute type 178 has an invalid length.
[  254.143629][T17828] netlink: 'syz.0.3691': attribute type 303 has an invalid length.
[  254.152843][T17811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3691'.
[  254.156024][T17811] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  254.158833][T17811] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  255.104679][T17904] syzkaller0: entered promiscuous mode
[  255.107640][T17904] syzkaller0: entered allmulticast mode
[  256.356437][T17909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3722'.
[  256.427397][    C0] ------------[ cut here ]------------
[  256.429218][    C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  256.432648][    C0] WARNING: CPU: 0 PID: 17924 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820
[  256.435632][    C0] Modules linked in:
[  256.437553][    C0] CPU: 0 UID: 0 PID: 17924 Comm: modprobe Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  256.441962][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  256.445052][    C0] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  256.446974][    C0] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 00 2c af 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 02 98 9f f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  256.452898][    C0] RSP: 0018:ffffc90000007538 EFLAGS: 00010246
[  256.454803][    C0] RAX: 9baedd48cde2d700 RBX: 000000000000000c RCX: ffff88802a8cb980
[  256.457233][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  256.459638][    C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  256.462118][    C0] R10: dffffc0000000000 R11: fffffbfff1bfaa64 R12: ffff88803651f228
[  256.464457][    C0] R13: 0000000000000000 R14: ffff88810e830e40 R15: ffff88810e8330d8
[  256.466818][    C0] FS:  0000000000000000(0000) GS:ffff8880b8626000(0000) knlGS:0000000000000000
[  256.469464][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  256.471410][    C0] CR2: 00007f8eda64c270 CR3: 000000010a878000 CR4: 00000000000006f0
[  256.473904][    C0] Call Trace:
[  256.474981][    C0]  <IRQ>
[  256.475898][    C0]  rate_control_send_low+0x194/0x7a0
[  256.477570][    C0]  rate_control_get_rate+0x20b/0x5d0
[  256.479222][    C0]  ieee80211_beacon_get_finish+0x38c/0x6b0
[  256.481038][    C0]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  256.483079][    C0]  ? __local_bh_enable_ip+0x12d/0x1c0
[  256.484708][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  256.486446][    C0]  ieee80211_beacon_get_ap+0x1478/0x19e0
[  256.488212][    C0]  ? __pfx_ieee80211_beacon_get_ap+0x10/0x10
[  256.490029][    C0]  ? __ieee80211_beacon_get+0x36/0x17b0
[  256.491813][    C0]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  256.493617][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  256.495470][    C0]  ? __ieee80211_beacon_get+0x36/0x17b0
[  256.497157][    C0]  __ieee80211_beacon_get+0x1179/0x17b0
[  256.497164][T17919] xt_hashlimit: size too large, truncated to 1048576
[  256.500890][    C0]  ? __ieee80211_beacon_get+0x36/0x17b0
[  256.502658][    C0]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  256.504337][    C0]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  256.506205][    C0]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  256.507904][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  256.510159][    C0]  __iterate_interfaces+0x2ab/0x590
[  256.511847][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  256.513724][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  256.515928][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  256.517819][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  256.519941][    C0]  mac80211_hwsim_beacon+0xbb/0x1c0
[  256.521606][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  256.523408][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  256.525033][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  256.526761][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  256.528578][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  256.530160][    C0]  handle_softirqs+0x286/0x870
[  256.531673][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  256.533134][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  256.534686][    C0]  __irq_exit_rcu+0xca/0x1f0
[  256.536066][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  256.537603][    C0]  irq_exit_rcu+0x9/0x30
[  256.538899][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  256.540587][    C0]  </IRQ>
[  256.541513][    C0]  <TASK>
[  256.542483][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  256.544281][    C0] RIP: 0010:is_bpf_text_address+0x12a/0x2b0
[  256.545976][    C0] Code: 0f 84 c1 00 00 00 4c 89 24 24 c1 e3 03 8d 2c 5b 48 f7 dd 4d 8d 24 2f 49 81 c4 e0 fd ff ff 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 <74> 08 4c 89 e7 e8 2c 2a 53 00 4d 8b 24 24 4c 89 e7 4c 89 f6 e8 6d
[  256.551574][    C0] RSP: 0018:ffffc90001bdf830 EFLAGS: 00000246
[  256.553333][    C0] RAX: 1ffff110080e3640 RBX: 0000000000000000 RCX: ffff88802a8cb980
[  256.555737][    C0] RDX: 0000000000000000 RSI: ffffffff8be28c20 RDI: ffffffff8be28be0
[  256.558131][    C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff81cf1516
[  256.560519][    C0] R10: ffffc90001bdf918 R11: ffffffff81ad03a0 R12: ffff88804071b200
[  256.562967][    C0] R13: dffffc0000000000 R14: 00007f8eda8f58a9 R15: ffff88804071b420
[  256.565410][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  256.567293][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  256.568883][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  256.570476][    C0]  kernel_text_address+0xa5/0xe0
[  256.572062][    C0]  __kernel_text_address+0xd/0x40
[  256.573591][    C0]  unwind_get_return_address+0x4d/0x90
[  256.575253][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  256.577132][    C0]  arch_stack_walk+0xfc/0x150
[  256.578579][    C0]  stack_trace_save+0x9c/0xe0
[  256.579985][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  256.581705][    C0]  ? unwind_get_return_address+0x4d/0x90
[  256.583410][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  256.585222][    C0]  ? arch_stack_walk+0xfc/0x150
[  256.586735][    C0]  kasan_save_track+0x3e/0x80
[  256.588232][    C0]  ? kasan_save_track+0x3e/0x80
[  256.589722][    C0]  ? __kasan_slab_alloc+0x6c/0x80
[  256.591272][    C0]  ? kmem_cache_alloc_noprof+0x1c1/0x3c0
[  256.593011][    C0]  ? getname_flags+0xb8/0x540
[  256.594451][    C0]  ? vfs_fstatat+0x43/0x170
[  256.595835][    C0]  ? __x64_sys_newfstatat+0x116/0x190
[  256.597481][    C0]  ? do_syscall_64+0xfa/0x3b0
[  256.598924][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.600803][    C0]  __kasan_slab_alloc+0x6c/0x80
[  256.602367][    C0]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  256.603988][    C0]  ? getname_flags+0xb8/0x540
[  256.605454][    C0]  getname_flags+0xb8/0x540
[  256.606849][    C0]  vfs_fstatat+0x43/0x170
[  256.608147][    C0]  __x64_sys_newfstatat+0x116/0x190
[  256.609670][    C0]  ? __pfx___x64_sys_newfstatat+0x10/0x10
[  256.611401][    C0]  ? do_syscall_64+0xbe/0x3b0
[  256.612893][    C0]  do_syscall_64+0xfa/0x3b0
[  256.614304][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  256.615855][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.617718][    C0]  ? exc_page_fault+0x9f/0xf0
[  256.619184][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.621018][    C0] RIP: 0033:0x7f8eda8f58a9
[  256.622466][    C0] Code: 49 01 00 09 00 00 00 83 c8 ff c3 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 00 00 00 00 41 89 ca b8 06 01 00 00 0f 05 <45> 31 c0 3d 00 f0 ff ff 76 0c f7 d8 41 83 c8 ff 89 05 a1 49 01 00
[  256.628392][    C0] RSP: 002b:00007ffc7234f1c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000106
[  256.630963][    C0] RAX: ffffffffffffffda RBX: 00007f8eda90af10 RCX: 00007f8eda8f58a9
[  256.633465][    C0] RDX: 00007ffc7234f270 RSI: 00007ffc7234f1d0 RDI: 00000000ffffff9c
[  256.635835][    C0] RBP: 00007ffc7234f330 R08: 0000000000080000 R09: 00007ffc7234f1d0
[  256.638278][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc7234f1d0
[  256.640670][    C0] R13: 0000000000000002 R14: 00007f8eda907a40 R15: 00000000ffffffff
[  256.643175][    C0]  </TASK>
[  256.644148][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  256.646380][    C0] CPU: 0 UID: 0 PID: 17924 Comm: modprobe Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  256.650119][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  256.653187][    C0] Call Trace:
[  256.654216][    C0]  <IRQ>
[  256.655120][    C0]  dump_stack_lvl+0x99/0x250
[  256.656552][    C0]  ? __asan_memcpy+0x40/0x70
[  256.657977][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  256.659601][    C0]  ? __pfx__printk+0x10/0x10
[  256.661057][    C0]  panic+0x2db/0x790
[  256.662278][    C0]  ? __pfx_panic+0x10/0x10
[  256.663662][    C0]  __warn+0x31b/0x4b0
[  256.664894][    C0]  ? __rate_control_send_low+0x5df/0x820
[  256.666644][    C0]  ? __rate_control_send_low+0x5df/0x820
[  256.668364][    C0]  report_bug+0x2be/0x4f0
[  256.669702][    C0]  ? __rate_control_send_low+0x5df/0x820
[  256.671415][    C0]  ? __rate_control_send_low+0x5df/0x820
[  256.673159][    C0]  ? __rate_control_send_low+0x5e1/0x820
[  256.674908][    C0]  handle_bug+0x84/0x160
[  256.676235][    C0]  exc_invalid_op+0x1a/0x50
[  256.677642][    C0]  asm_exc_invalid_op+0x1a/0x20
[  256.679161][    C0] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  256.681077][    C0] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 00 2c af 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 02 98 9f f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  256.686900][    C0] RSP: 0018:ffffc90000007538 EFLAGS: 00010246
[  256.688763][    C0] RAX: 9baedd48cde2d700 RBX: 000000000000000c RCX: ffff88802a8cb980
[  256.691195][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  256.693604][    C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  256.696015][    C0] R10: dffffc0000000000 R11: fffffbfff1bfaa64 R12: ffff88803651f228
[  256.698421][    C0] R13: 0000000000000000 R14: ffff88810e830e40 R15: ffff88810e8330d8
[  256.700861][    C0]  ? __rate_control_send_low+0x5de/0x820
[  256.702535][    C0]  rate_control_send_low+0x194/0x7a0
[  256.704056][    C0]  rate_control_get_rate+0x20b/0x5d0
[  256.705662][    C0]  ieee80211_beacon_get_finish+0x38c/0x6b0
[  256.707425][    C0]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  256.709359][    C0]  ? __local_bh_enable_ip+0x12d/0x1c0
[  256.711084][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  256.713161][    C0]  ieee80211_beacon_get_ap+0x1478/0x19e0
[  256.715295][    C0]  ? __pfx_ieee80211_beacon_get_ap+0x10/0x10
[  256.717177][    C0]  ? __ieee80211_beacon_get+0x36/0x17b0
[  256.718957][    C0]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  256.720839][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  256.722845][    C0]  ? __ieee80211_beacon_get+0x36/0x17b0
[  256.724600][    C0]  __ieee80211_beacon_get+0x1179/0x17b0
[  256.726411][    C0]  ? __ieee80211_beacon_get+0x36/0x17b0
[  256.728180][    C0]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  256.729936][    C0]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  256.731937][    C0]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  256.734154][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  256.736519][    C0]  __iterate_interfaces+0x2ab/0x590
[  256.738260][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  256.740203][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  256.742584][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  256.744526][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  256.746764][    C0]  mac80211_hwsim_beacon+0xbb/0x1c0
[  256.748381][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  256.750249][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  256.752047][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  256.754331][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  256.756234][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  256.757851][    C0]  handle_softirqs+0x286/0x870
[  256.759455][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  256.760959][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  256.762699][    C0]  __irq_exit_rcu+0xca/0x1f0
[  256.764174][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  256.765812][    C0]  irq_exit_rcu+0x9/0x30
[  256.767187][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  256.769009][    C0]  </IRQ>
[  256.769960][    C0]  <TASK>
[  256.770920][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  256.773003][    C0] RIP: 0010:is_bpf_text_address+0x12a/0x2b0
[  256.775290][    C0] Code: 0f 84 c1 00 00 00 4c 89 24 24 c1 e3 03 8d 2c 5b 48 f7 dd 4d 8d 24 2f 49 81 c4 e0 fd ff ff 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 <74> 08 4c 89 e7 e8 2c 2a 53 00 4d 8b 24 24 4c 89 e7 4c 89 f6 e8 6d
[  256.781374][    C0] RSP: 0018:ffffc90001bdf830 EFLAGS: 00000246
[  256.783400][    C0] RAX: 1ffff110080e3640 RBX: 0000000000000000 RCX: ffff88802a8cb980
[  256.785847][    C0] RDX: 0000000000000000 RSI: ffffffff8be28c20 RDI: ffffffff8be28be0
[  256.788342][    C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff81cf1516
[  256.790886][    C0] R10: ffffc90001bdf918 R11: ffffffff81ad03a0 R12: ffff88804071b200
[  256.793808][    C0] R13: dffffc0000000000 R14: 00007f8eda8f58a9 R15: ffff88804071b420
[  256.796405][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  256.798309][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  256.799899][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  256.801486][    C0]  kernel_text_address+0xa5/0xe0
[  256.803086][    C0]  __kernel_text_address+0xd/0x40
[  256.804638][    C0]  unwind_get_return_address+0x4d/0x90
[  256.806284][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  256.808146][    C0]  arch_stack_walk+0xfc/0x150
[  256.809594][    C0]  stack_trace_save+0x9c/0xe0
[  256.811065][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  256.813010][    C0]  ? unwind_get_return_address+0x4d/0x90
[  256.814941][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  256.816831][    C0]  ? arch_stack_walk+0xfc/0x150
[  256.818322][    C0]  kasan_save_track+0x3e/0x80
[  256.819792][    C0]  ? kasan_save_track+0x3e/0x80
[  256.821332][    C0]  ? __kasan_slab_alloc+0x6c/0x80
[  256.822998][    C0]  ? kmem_cache_alloc_noprof+0x1c1/0x3c0
[  256.824759][    C0]  ? getname_flags+0xb8/0x540
[  256.826305][    C0]  ? vfs_fstatat+0x43/0x170
[  256.827742][    C0]  ? __x64_sys_newfstatat+0x116/0x190
[  256.829379][    C0]  ? do_syscall_64+0xfa/0x3b0
[  256.830922][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.833134][    C0]  __kasan_slab_alloc+0x6c/0x80
[  256.835070][    C0]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  256.836827][    C0]  ? getname_flags+0xb8/0x540
[  256.838398][    C0]  getname_flags+0xb8/0x540
[  256.839866][    C0]  vfs_fstatat+0x43/0x170
[  256.841267][    C0]  __x64_sys_newfstatat+0x116/0x190
[  256.842995][    C0]  ? __pfx___x64_sys_newfstatat+0x10/0x10
[  256.844742][    C0]  ? do_syscall_64+0xbe/0x3b0
[  256.846382][    C0]  do_syscall_64+0xfa/0x3b0
[  256.847850][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  256.849509][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.851414][    C0]  ? exc_page_fault+0x9f/0xf0
[  256.853261][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.855321][    C0] RIP: 0033:0x7f8eda8f58a9
[  256.856795][    C0] Code: 49 01 00 09 00 00 00 83 c8 ff c3 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 00 00 00 00 41 89 ca b8 06 01 00 00 0f 05 <45> 31 c0 3d 00 f0 ff ff 76 0c f7 d8 41 83 c8 ff 89 05 a1 49 01 00
[  256.862948][    C0] RSP: 002b:00007ffc7234f1c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000106
[  256.865612][    C0] RAX: ffffffffffffffda RBX: 00007f8eda90af10 RCX: 00007f8eda8f58a9
[  256.868172][    C0] RDX: 00007ffc7234f270 RSI: 00007ffc7234f1d0 RDI: 00000000ffffff9c
[  256.870674][    C0] RBP: 00007ffc7234f330 R08: 0000000000080000 R09: 00007ffc7234f1d0
[  256.873540][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc7234f1d0
[  256.876153][    C0] R13: 0000000000000002 R14: 00007f8eda907a40 R15: 00000000ffffffff
[  256.878625][    C0]  </TASK>
[  256.880286][    C0] Kernel Offset: disabled
[  256.881628][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
12:59:45  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000006cd0
R8 =ffff888107b48237 R9 =1ffff11020f69046 R10=dffffc0000000000 R11=ffffffff85460db0
R12=dffffc0000000000 R13=ffffffff99aee8bf R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460e2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8eda64c270 CR3=000000010a878000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ff00000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff8fbddda8 RBX=ffffffff8fbdddac RCX=ffffffff8fbdddb0 RDX=ffffffff8fbdddac
RSI=ffffffff903dbf64 RDI=ffffffff8be28be0 RBP=ffffffff8fbdddb0 RSP=ffffc900070c72f8
R8 =0000000000000009 R9 =ffffffff8172aae5 R10=ffffc900070c7418 R11=ffffffff81ad03a0
R12=ffffffff821772af R13=ffffffff8fbdddac R14=ffffc900070c73c8 R15=ffffffff8fbdddac
RIP=ffffffff8172bd74 RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffdc65f8f0c CR3=00000000292d0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000ff0000000000 0000000000000000
XMM02=0000000000000000 ff00000000000000 XMM03=ffff000000000000 00000000ff000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
