last executing test programs:

2.693145646s ago: executing program 0 (id=6407):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x3d, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1}, 0x0)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
sendmmsg$inet6(r1, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000000700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/206, 0xce}, 0x9}], 0x1, 0x12141, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e00)={0x3c, r3, 0x1, 0xfffffffd, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000)

2.612651025s ago: executing program 0 (id=6408):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x3, 0x4, 0x3}]}]}, 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, 0x1000000}, [@migrate={0x50, 0x11, [{@in=@local, @in=@loopback, @in=@multicast2, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

2.612223839s ago: executing program 0 (id=6409):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = epoll_create1(0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB], 0x48)
ppoll(&(0x7f0000000000)=[{r1, 0x2003}, {r1, 0xf401}], 0x2, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000480)={0x68000005})
r3 = socket(0x10, 0x803, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3)
getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0)
close(r6)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r2}, 0x4)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@ipv6_newroute={0x24, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, [@RTA_EXPIRES={0x8, 0x17, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4805}, 0x4)
sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="d8a7810f", @ANYRES16=r4, @ANYBLOB="020029bd7000fddbdf252b00000007002400898204000800a10005000000050019010e0000000800a00000000080050019010b000000040044000a00340001010101010100008b002a007e157c0200ffffffffffff05000000750000000800000072060303030303036512f4e15b6c622dffffffffffff0802110000000602060082460306b7805e00000802110000000010000002000000ffff00000400ffffffffffff00000100050802110000010200000000ffffffffffffff0f00000008021100000104000000000602020202020200"], 0xd8}, 0x1, 0x0, 0x0, 0x80}, 0x48001)
sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=r5, @ANYBLOB="8304050000000000240012800b00010069703667726500ddfa8e5beec799cf000900000008000100", @ANYRES32=r5, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)

2.432572199s ago: executing program 0 (id=6410):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000400)={<r0=>0xffffffffffffffff})
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440)=[@window={0x3, 0x4, 0x8}, @sack_perm, @window={0x3, 0x3, 0x4}, @timestamp, @window={0x3, 0x678, 0x7ff}, @mss, @mss={0x2, 0x4}], 0x7)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = getpid()
syz_emit_ethernet(0x83, &(0x7f0000000500)=ANY=[@ANYRESDEC=r3], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000080000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8afdec7e980000bf0900000000000007020000f8ffffffb70300000800000088040000954c523d4adbb503820000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x401, 0x1020, &(0x7f0000001200)=""/4128, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000003c0)=r3)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48054}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1700000004009000040162000b00000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r7, &(0x7f0000000080)={{0x3, @default, 0x1}, [@null, @default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
bind$ax25(r7, &(0x7f0000000480)={{0x3, @null, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r6, 0x4}, 0x38)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(0xffffffffffffffff, &(0x7f0000002240)="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", 0x10b1, 0x40408d0, &(0x7f0000000540)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
readv(r8, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/190, 0xbe}], 0x1)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x843, 0x0, 0x0, 0x56, 0x2009})
socket$nl_generic(0x10, 0x3, 0x10)

1.513099937s ago: executing program 2 (id=6430):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="5000000010003b0c00"/20, @ANYRES32=0x0, @ANYBLOB="0000000006100000300012800bdfce06ae635d20f0ae3298700001006572737061012c002000028004001200060010004e0b126f438223000006000f00"], 0x50}}, 0x40080c0) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="5000000010003b0c00"/20, @ANYRES32=0x0, @ANYBLOB="0000000006100000300012800bdfce06ae635d20f0ae3298700001006572737061012c002000028004001200060010004e0b126f438223000006000f00"], 0x50}}, 0x40080c0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x60}}, 0x8000) (async)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x60}}, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0100000000000000a5ffffffffffffff0000000000000000ad370fa09cf8d62ce6ba"], 0x1c}}, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001f00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="280c018e81332b008000000000001000000a14cc86d284de5941ab0000000000000000bbc66c1ef4bc01965bf77d2c4cb9dca5fcfb158b16711e9ae44e055ffa65836ce7e7dadb6a564aa99d288de69f441961437582871d93fbadfa01802e1a08758bdbb2daa16299d3", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000400"/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001ac0)={{0x1, <r5=>0xffffffffffffffff}, &(0x7f0000001a40), &(0x7f0000001a80)}, 0x20)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001b00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, r1, 0x4, 0x2, 0x1}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001c00)={{0x1, <r7=>0xffffffffffffffff}, &(0x7f0000001b80), &(0x7f0000001bc0)='%+9llu \x00'}, 0x20)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000001c80)=@o_path={&(0x7f0000001c40)='./file0\x00', 0x0, 0x10, r1}, 0x18) (async)
r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001c80)=@o_path={&(0x7f0000001c40)='./file0\x00', 0x0, 0x10, r1}, 0x18)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001cc0)=ANY=[@ANYBLOB="030018115dfafb365c4100000a0000000000e700", @ANYRES32, @ANYBLOB='\v\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="05000000050000000400"/28], 0x50) (async)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001cc0)=ANY=[@ANYBLOB="030018115dfafb365c4100000a0000000000e700", @ANYRES32, @ANYBLOB='\v\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="05000000050000000400"/28], 0x50)
r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$sock(r10, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @local, 0x3}, 0x80, 0x0}}], 0x1, 0x48094)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) (async)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r11, &(0x7f0000000000), 0xffffff6a)
sendfile(r10, r11, 0x0, 0xffffffff000)
r12 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r12) (async)
close(r12)
bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x20, 0x29, &(0x7f0000001700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xff}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}}, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffc}, @ringbuf_query, @tail_call], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000640)='syzkaller\x00', 0xa, 0x44, &(0x7f0000001880)=""/68, 0x41000, 0x20, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0xc, 0x4, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0xa, &(0x7f0000001d40)=[r4, r5, r6, r7, r8, r9, r9, 0xffffffffffffffff, r11, r12], &(0x7f0000001d80)=[{0x2, 0x3, 0x2}, {0x1, 0x3, 0xa, 0x4e58b3f8c0426452}, {0x0, 0x4, 0x3, 0x1c}, {0x0, 0x2, 0x6, 0xa}, {0x2, 0x2, 0xc, 0x4}, {0x0, 0x2, 0x10}, {0x0, 0x5, 0x3, 0x5}, {0x0, 0x5, 0x0, 0xc}, {0x5, 0x3, 0xb, 0x2}, {0x3, 0x1, 0x7, 0xc}], 0x10, 0x9}, 0x94)
r13 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000340)='ns/time\x00')
ioctl$FAT_IOCTL_GET_VOLUME_ID(r13, 0x80047213, &(0x7f0000000380))
r14 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) (async)
r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={&(0x7f00000003c0)="603227e9839baff7326c7b40bac3482ff79e23abc515a40c192861afc63a737780c2a1ac352bc13e5e1de9a5ccb3bc2dca89ee825aa0798a3b44c2c0b9430408a4ad1a3282fd06ce3077c6784b39a65452c72fc7680bbc5a26510fe767d89c532b960d6ea37b09b9ad607df287c282e45ba350acebd982f47db4fd54a2183497eaf9225715a7cf71b8fcb34f9fca06d6cc12c2fc8c2758fd9dadd086ff61bb1138872003f3696cfe37bf6e33", &(0x7f0000000480)=""/16, &(0x7f00000004c0)="093fd225f7fe0c4a15694566e51ba93d", &(0x7f0000000700)="5a421adc1c89a52618053fe28fb42dc2c7e92647127009faf193f4b2be2ea6d49160d5b60f49fbe5fb9a26bac3c74b527a3ee3d81304edab589a8bb06cd77e0755cdfb44e945d4cc38cf0bc702ac6dc26857d440e34099ffad7aa0b89801760dd3bbc1f4767490a717e680e820c11b479ba47b3ce42b07ecf70eb2d9c9be1916770cca6fdaac8d8287cc21fbe6281d3fedb4e5d65b200051730500641ea6796281ed132b3bb2d49ea94e4980b98f4f58d077fa129f289f31575cb1341da23c3df8711e1f6e71c49ce7fb7c886c9610086d05291d716affd6ff7da0c11e08dca84630bb49b8bee70adc241ec44bbab9c71570f7503ae071e1ba63aff62b9a166dabec939124ff435f1362a467831e0ababc7ac0030dbb72ffc6fa49323837a5f2a9d945a4034f0248a7bb9c009b08af56a13fba3d21878e74149d15ebec9836c938785104df87eb60a5ce509eac2720fcef85da277b7049eb5faa4915c7ba12ec3602412b8b9b23d82036015401fe04c4f816e5193de0656421b5f0220a65a4517d2bd4920b896ad31f611bb1b18401486ce5a0f96825d48951342d5323d0abb9efe4e752519bdac499a3fc9e87c96c8f078d063c8dea790f1120ce0c2165c47a1a0ed618fb44f553ed85263a22a0fcdcb782ac63e12f2a08a1f0a02aa29f180d0f3c36a0e3e9b6397d53cf67f1e571e765a0560d589f26c0a63050b5d1b95d34d1cf1e57cd2c6734639ebe5346d785efef9f69478f78a15c93ab4d9d8adb34b28a2d33bcb65c5b3d069cc75bf435c4cc4aa676f2758a4e6303b8f423219efc19c2a0767aac55c5ae85e14026f42b6a5bc037849b1a48cd5146c0788d688b017b3e0a62f7b0209661f09f8cd8c9f47dd9d65d4a539b9496156c15e8c083a8d39625cdcdf56339c661fe486fb4e955b71e8f6003e797f935c36eaa128788308b561667298a3e3df10d585dfb2fff91931410c325ca93eb9b883e3a5c94a0fed73f4bc9817db01d9291f59209efcd3dac601f964bbb430330ec619f5feff93cb674e982f2870f6fb2b2d4c2eb8652c0de05c2f51292c0e43a2a3e7db8ee0e6b48f2d478cc91c02d3dcf0ef0b0094421122eaccce2bd7f6d5dbf9015d3dcf582157d610ebfd8b8531489571033ba339ae4a2b8b34ba426b6335abba75ee564d1dd0afd06ef2eb15d942b88227c3fdeda661289b9f0b15a1d367f1235d76bc00a99154754c9a89b5da7e0b4eb28fbac7245bdf6fe0d6fb223205c5c39d1c4106ee726b21b024da39ddd3dd1081684c833fe75d5e00bee7cf2aedafe14335b4d1f1ff096e065e36f825ada92be49beafa92c7bdcf18ea4fa872951b7a272c2ea127eca1652eeb165b7c3bcbe3f8e5e93a5c3cf5630e2bf5d1682b446e6b41354718e2a8bf3285745aed6504d7c511174fa842259897b5aace4f803e602160f57fe79ceeaa947642d9aa8d4cd3b1c40b87afa507fdbb5597c393c4ff0ddfdd26e099c2d3d82e4dd0274c14b45b650f67cf25fcdff0e72a107e35bb679f73ad5594ca8f3deee542f8edcf0b1ae8a0f4fcbd5b842ab531448ced71d3b5bd8d74ef93c0f38e1a811beddc2519a1ed0881e4346f988b5b19b58203cb93b8b0188b2d6e025cfeb2abac4cc0d6026f92395c6f9d43a32cd280e77d7f201e1f6c52b3723c44cc1154c5ab74341a034bc3e3b2887b87bdf271b7c7f2b3cd4a19b0a4cb149b0246b853ee83fc591e919f0437a3bb768eb542760a68a46fbcc2fd1a7001206663be89d232546f8247780fcb59a9e690b8f1e8a8fdac0517a7144fa5f04d94100519b8a8314b9989ef25161e23216a0eb128a910f73db4fc922e70e29cfbc3e90ba4519015866770ecb32e1f9ccca0f1b69bbc3893d27e1336022eba5a649323366484ff1958210b9963078647e8d9537516ae9f1811513c8062e2e67791dba14c78dbb77e5d5750ca62c2c0ce11c6f0c6bbc04c366912b3b81e2aff2ac7ea059c35a97758954ac35c5114bbebbbc4dba83dd8337cee17b00681bcd5709fa97d7de3839bc57bfd56c1d8a037305091289d6d67a06fdb4d579c1b26993aafb3220cec234f1c317ddd31d888cc406f8248f6e1b6a93ae9b62e5ee4653c1088baa9e8e9d7029ae492823399e37e72bc84504dc11c8a911a238a6fe75953011e8be88fc26ffef724942ac550302431eb4836e7b2d8c18270f41c1efa9f3d4a41d281eb529dc80c1d9921385e1279d87636102601076fcc0b67cf9c31118960d213c9e46f4aeece182d6b783ae9f3cb61a44b756bfd2ca4c416709bd7d338f74d68b0e063b143155afb0bc9dd4694aa73197b464476870d0610fb25b960929de50250c39a83ee9a16806ec87c798ffe829700026c3690a16913808eb3f0986941408f5ae61ccd8665cbe6bb117a6dca6d5cf4f19898b4d042696f3a87962dbc1fe4621c1b87e8cc4db772713e083f2b1ee422ca98373d049e454960ea98a1576ddd9495f5a4525587aa9c30ce769e987015fe5d15bc67ea1863b29042f63631f4e8d91c5f25d236155e4d9dabab4d05898a0396823417b6f9d86164df10d4ff46765a8da016c7457eda02bdbe0ed6e105c851373dc8a830a07d55f42568827b08dca9ceafd339b43b8daf37ac0c7b335762ccbbdd08489ac32fd47fb7d0ea416f81a9552e042e684e4df595b1f5f65a514c19e99974b880ca578d3a3acfd3906e6c152fa7e48c1d74870dae43d90d6f4ee6c8fc7fc327c11829b670f736c3f491a5cd74875b5fe8c274ace3964a48713294c5a6098524dee7925c59adf7e20fa60e997dcd40171227a323c1fd48544f8310ab1dec67be41df017f909c3d230705248058740f9fd24f61a1aa85a6746d1c4975c27e3911406d37a12dfda3f73e31fd83e1d0a181e3d77f259b408a2686d31d8646840f85bd836cfa58c444e5fcc8bb86efc9c1405934c71a39fd9b5144819f7d3c344951a10bad38f712fa2f5f9bafb14b1e30638cc322a0efd7a3eb3f0f592a6adb3a7453d7b5fd9690ff0d89bf3ff28f2bcc0f6d3eede524afec12c58996796c3def96af5c6a5cf034ef30483ce3376c776180c619eb8fdb4cb4a859c67e82162707a0877534134ecfdd49df7308db28475e813fee7391e15afaf22598dd1b3961b40023ff430084b6cf4185e9f38539574c9a8fc9e36c399032a265192154ede4545d2d3312d8ed329fe64951e3d43591caf1c4c23dd9fc0a2c3ba5ae1526ec9f04b0f8e5dfe0659b1e1fb5bdaba46bef3bbf771c43f2b2a86b7e548b36ef2c8a9581d44d46a9bd217e36467b353991ce6cdbc374f5de2861036ff4e0eb861f16f6c5ee9e7e27f4c2aee2bf12162562d096aed94b97ddf76db182af7599fcc707862a8be085c2f3e61dd5d027d8758980bd6089a22553a941ddf49713b2c674c33382f9459052c43584eb694bd4141982f53515896f180aff0bd036008e2a75351f9231437fdfa543cf2fa136604d31f960cbec15147bbf4b3b0091424fc4a8308ff9446fc2e359c2454c61b74232393d902c4e61f4d8c27abd29a2d203dd1ebe1fdd54d7571da70973d310c13e410cc26061c1a430c12cb63fff25302ad05408c99c09fe88aec122ce10cd5b6b89be47eeed736d92b376afd39f525a8341ade1141a971978ad90ba8a6b146314a4bc7ca1a7a9876118a6f585bdb957164316098cbeaad4f4866a65940a752961340a2eb6d915404028bdab470c0f0897e8a39bf1d70c10fcc5cbab64efc49cf98bdd78896a01fb1611137e0ca4a8edae2ef999167ae3e6ac7e17fe27dacd529a928046138cb7b05fda506f86c96cf8b9105862d49630b2b2562b052e5b7be5c1c938a5a8ac6563f46fb7592f0e2f0a50db287c6dc4a39202bb0cbe58c4bfc134dee0643fed283254e79345d50ac60820be6018d44f78a8cee50db1baf55686097044703ee5f74057226a5ba1cd998f4354781472e7e705b77f80f9f01f622e0b5317b289f98a7d806a09cc24f3b9aa66a4fb624802ecc67e177a45f1597945dfbc98fa8b93e48a85a23dd35cef8445c8028910d9cedacc505e4b36ebcf1f9d3b5be4e0fb5170e8aee090969149a89a405dc30edfafbee530a5b3cbbb0cc9aaad03d7df5b68e35013af6e3719b97afb8c261662fa6da748a4c33281b4531fee274fed6664d9ffe9c4c4ef2b5e2cbba8d8b9b9871bf22b35e854acff5245eb832e2bf0ef01bde1d890a9c3ec87cdd115e298c0bed0349ceb36e845c52f0f36078fda5bd5dcf776c8f5bbfceab2efd87297b99213f73932c895192d28213e56aa2c3a41655de9c8e7b0d9d41981f105d4b07ea56402602967100c66297b52f409dc855dd8e05efd0b7176cacbfa9151a1e2a38397abde594d50ea2c4f0886ab0bdc9fe29b8e8674d19f3092276f943b7d12ee6ab8d7e06b3b982cbba1a66db0b286c4d4e972ab631b9d7d048b36010f4a7d8f64ae7cf54ff99770035ea75e951413fe95b1fc531d41a8b745976b0d574cec5ae4ebf9e2825bfda469e8923e2c8f903892b80aa3f518515bc8c84f6dba36313d497a150faee4603f3a7325d3461cecd2d8606031426b5e95fff40b514e737bc1b7e2b61ddede9e6c5528cc4c5ada91b0015a28d22fa2fc4a665269d7fcd43679736250c0de13471daa24b57032730527ffb5a0aee98292e578b3f18e371fca749d160b8eac8b4debdf0264fdd6c7ade9245e0067d41dc6c7559537aa6d54d4f4f1cb9d83f10fb68e351380ba629680c317c384c400be34f42ff159de9ecbba4cb8b6eb073f33b6ace24d1cb62a34ed576ea99ecf20c26df2786d7f4ffcf4170ee957d169a12a9b1e7704aa982f0a9d8531eea7f772d063913c285250f8fbb91f50edb4e9198b6912fd46f0d45337098545707fde6d080e2b87b6d81673e49229596c86e5704566ac82a4975f0ae592261e44cb95f85dc4f0c5cbbcde6d967abfe1a8101f2683011261baf0c4fbfb7743a1035ba96de28dfc936ee24747e6f0b812fbc7c01ad4763ecc1aa589c6142423efd84c40baa2e83639084161291b2ccebf1bb7dbe4c1e74fd4caf9dd01553bbb63aed3ed674d2501d866c04603c9606ea804829d530b061c9c84a46db1ed3f30dadeb3145ce6cba368e7f3692d0a4022e70efcb78c95c7621c413fa088bb05fba206a0b3eee01d9ab6744e129adab392cb6109c82640ced42bf3b06359d98964e7c9a6de65229155da71a5fc4a11be212cedcd0144d3ba8fd044bf0d5cd59b9bbaef6439bab8cc0b3a5cdb2c516615643e2d50eb1a0524b9dd2e2498d90ab96712dc17e9f10dc27b27b8a596997874f6d49b4a0b9f8fcdc85f6d1a41f281851061edfb2d60cf3a56a9ccc85811e8466c2f9af5edf55b96f7e535ad1ed6d82f93702dafbce87c203f070b885fcff7417d9df4e7fb351ad212a95edb978e05edf53f2f4d0a374367e733e02c48507d16f3ae19bca2cbf5a98a3aa4b32b10a57961c8d0d6b2405f556c6f066ca141f866a2a33b9f912793f475c82e6835dc32324fd897bde64a2f8b40160dcf66c0433fa311ad955d3f3cdbec9d2b6214ea38c3e7f0cbd8edd5fd18247963ae1dc82ede7b20854da7de2bb0c6695b2c0892cae4d5e4b1a1cdbf79c7da813a134dc91712545295e6a36d7155be485712f5614ecd740ddcec81ad7807ad175c7e219ce00992bee435b9048c1c498fc250d4a136fdb6e57c82bcdbf310f9f0b1ce134dbb90e5fe26c714b8d9d2279d9aa11b8f1b6d9bdcaf7962e603871ebecd4c11036901790ff70310025f18b2e39e6a8345521d6fc2599", 0x5, 0x1}, 0x38)
r16 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r17=>0x0})
sendmsg$NL80211_CMD_SET_KEY(r14, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r15, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r17}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "e8300d2b368703169371790900"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40010)

1.372264116s ago: executing program 2 (id=6435):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x3, 0x4, 0x3}]}]}, 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, 0x3000000}, [@migrate={0x50, 0x11, [{@in=@local, @in=@loopback, @in=@multicast2, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1.289671029s ago: executing program 2 (id=6437):
ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)=0x8000)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10)
getsockopt$sock_buf(r3, 0x1, 0x1a, &(0x7f0000001340)=""/4096, &(0x7f0000000340)=0x1000)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newtaction={0x88c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc, 0x624b, 0x100, 0xffff, 0x7cf0, 0xfffffffe, 0x4, 0x9, 0x2, 0x8, 0x7fffffff, 0xfffffff9, 0xe, 0x6, 0x8, 0x7, 0x2, 0x2, 0x74, 0x59bd, 0x8, 0x0, 0x10, 0x62e, 0x8000, 0x5, 0xd3, 0x7, 0xec11, 0xe, 0x2, 0x1, 0x4, 0xe, 0x4, 0x9, 0x1, 0x7, 0x3000, 0x43b2, 0x0, 0x9, 0x4b8ed944, 0x9, 0xa, 0x3, 0x7f, 0xfffffffb, 0x6, 0x2, 0xb, 0x81, 0x0, 0x9, 0x5, 0x17b2083b, 0x7, 0x3, 0x8a, 0x3, 0x8, 0x2, 0x0, 0xe, 0x7, 0x9, 0x80000001, 0x1, 0x4, 0xd, 0x2, 0x101, 0x4, 0xe, 0x5, 0x0, 0x6, 0xffff, 0x4, 0xf, 0x1, 0x7, 0x10001, 0x7, 0x9, 0x9, 0x0, 0x3e3, 0x2, 0x6c, 0xffff8001, 0x6, 0xf16, 0x6f41, 0xfff, 0x5542ebd1, 0x3, 0x81, 0x0, 0x5, 0xfff, 0x7, 0x2, 0xfffffffd, 0x3, 0x1, 0x6b3, 0xffff, 0x0, 0x8, 0x7, 0x2, 0x80000000, 0x2, 0x5, 0x9, 0xdf, 0x0, 0x8, 0x9a8, 0x1, 0x6, 0x5000000, 0xf1e, 0x4, 0x5, 0x5, 0x1000, 0x1, 0xe5, 0x8000, 0xee33, 0x5, 0x8, 0x7fff, 0x9, 0x60, 0x7f, 0x10001, 0x5b3d, 0x8, 0xfffffff9, 0xb14, 0x9, 0x5, 0x0, 0x5, 0xa15c, 0x8, 0x91f, 0xc1, 0x5, 0x3ff, 0x4, 0x14d, 0x6, 0x7ff, 0x5, 0x3, 0x7, 0xfffffff9, 0x8, 0x6, 0x80000001, 0xd, 0x4, 0x10001, 0x0, 0x0, 0x8, 0x100003, 0xff, 0x9, 0x401, 0x2, 0x7f8e8029, 0x5, 0x6, 0x1ff, 0x1, 0x5, 0x0, 0x0, 0x1, 0x7, 0x401, 0xa, 0xf, 0xa, 0xfffffffc, 0x6c, 0x102, 0x2, 0x872, 0x78, 0x81, 0x20000, 0x1, 0x1, 0x9, 0x101, 0x81, 0x2, 0x8, 0x8001, 0xa, 0x7, 0x40, 0x5, 0x1, 0x5, 0x80, 0xfffffffb, 0x7, 0x4, 0x1ff, 0xce0, 0x99fa, 0x6, 0x4, 0xa, 0x9, 0x4, 0xfffffffc, 0x8, 0xd, 0xc5, 0x1000, 0x7, 0x4, 0x2, 0x101, 0x1, 0x6, 0x4, 0x2, 0xffff2001, 0x1, 0x7d96, 0xfe000000, 0x175, 0x5, 0x400, 0x40000000, 0x2300000, 0x4, 0x2, 0x5, 0x3, 0x1, 0x101, 0x4, 0x0, 0x2, 0x6]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8c1, 0x3, 0x4, 0x0, 0x2, 0x2, 0x5, 0x5, 0xfffffaf1, 0x9, 0x84, 0x4, 0x2b, 0x3, 0x10, 0x5, 0x10000, 0x1a, 0x6, 0x8, 0x7f0, 0x2, 0x40, 0x7, 0x1f, 0x8000, 0x80000000, 0x6, 0x2, 0x5, 0x4, 0x38d, 0x4e, 0x401, 0x7, 0x8, 0xfffffff9, 0x6, 0xf76, 0xfff, 0x2, 0x5, 0x5, 0x5, 0x7800000, 0x8, 0x0, 0x8, 0x3, 0x3, 0x68a0, 0x9, 0x8000, 0x1, 0xcb3, 0x5, 0xe7, 0x786, 0x3, 0x7, 0x3, 0x3, 0x6, 0x8120, 0xfffffff1, 0x6, 0x4, 0x0, 0x1, 0xcdc1, 0x7, 0x1ff, 0xb, 0x0, 0x8, 0x1, 0x1, 0x81, 0x1, 0x8000, 0x3ff, 0x9, 0x7, 0x6, 0x2, 0x56b8, 0x7, 0x7, 0x7, 0xfff, 0xc, 0x40, 0x6, 0x2, 0xe5, 0x7, 0xa, 0x72, 0x9, 0x1, 0x3, 0x2, 0xffffffff, 0xfffffffa, 0x1000, 0x5ead, 0x5, 0x100, 0x200, 0x6, 0x8b12, 0x7, 0x81, 0x5, 0x0, 0x7, 0x401, 0x3f, 0x7f, 0x7ffc, 0x7, 0x9, 0x80000000, 0x15ae, 0x1, 0x0, 0x31, 0x2, 0x3, 0x2, 0x5, 0x4, 0xcf11, 0x278e, 0x7fffffff, 0xd7c8, 0x1, 0x8, 0x1, 0xee, 0x3, 0xff, 0x8, 0x1, 0x7f, 0x2, 0x5f6d, 0x0, 0x2, 0x400, 0x6, 0x9, 0xfffffe01, 0x3, 0xbde, 0x9, 0x2, 0x0, 0xd, 0x1, 0x2, 0x2, 0x5, 0x6, 0x3, 0x0, 0x6, 0xafd, 0x2, 0x5, 0xe4, 0x7fd, 0x9, 0x200, 0xfffffc00, 0xc, 0x9, 0x0, 0x5, 0x6, 0x1, 0x4, 0x1, 0x2, 0x8, 0x4, 0x1c, 0x7, 0x7, 0x96, 0x7, 0x3, 0x80, 0x1, 0x8, 0x10000, 0x0, 0x2, 0x10000, 0x80, 0x1000, 0x1, 0x401, 0x3082, 0x7, 0x4d51, 0x200, 0x2, 0x2, 0x1, 0xfffffffa, 0xea97, 0x6, 0x90b, 0x7fffffff, 0x1, 0x10, 0x6, 0x7, 0x0, 0x2, 0x6, 0x2c48d9e9, 0x9, 0x3, 0x0, 0x1, 0x7, 0x6, 0x2, 0xffffffff, 0xc, 0xeb82, 0x8, 0xfff, 0x6, 0x1c00, 0x1, 0x1, 0x1, 0xfffffc01, 0x4a0, 0x80000001, 0x8, 0x4, 0x800000, 0x2, 0x3ff, 0xa735, 0x3, 0x80000001, 0x6, 0x4a, 0x58, 0x2, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x2, 0x9, 0x5, 0x6, {0x6, 0x1, 0x200, 0x7, 0x2, 0x2}, {0xe, 0x0, 0x1ff, 0x2, 0x7fff, 0x3}, 0x7, 0x400, 0x10d}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88c}}, 0x0)
socketpair(0xf, 0x1, 0x7, &(0x7f0000000080))
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000180)=[{0x6, 0x2, 0x20, 0x11c2}]}, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r6=>0x0})
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000040)=0x500, 0x4)
sendmmsg$inet(r7, &(0x7f0000000540)=[{{&(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10, 0x0}}], 0x1, 0x4000800)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r8, 0x0)
recvfrom(r7, &(0x7f0000000200)=""/131, 0xf92e58a67d38802c, 0x2101, 0x0, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r6, @ANYBLOB="30003080140004e73d7d9e838196f61c9b54c9c6b8bd5d48050002"], 0x4c}}, 0x0)
close(0x3)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000009fc0)={0x0, 0x0, &(0x7f0000009f80)={&(0x7f0000009f40)={0x14, 0x3, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008814}, 0x4040004)
recvmmsg(r0, &(0x7f000000b780)=[{{0x0, 0x0, 0x0}, 0x47}], 0x1, 0x142, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_DEL(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB='\x00\x00\x00T\x00'/14], 0x14}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="18000000feff000000feffffff611051000000000095000000000000004521f601ff6bd94c0e06ed033da211a1c0e7ec8a8ebc7a92a4d0c51f84418692cd2cd701f9b3b2df3071a03bd22717d43aa28dc45b3f77937af6127027d7d9aad2860451a6d14cc8decdc15d578e0d2e323c918c77f9df5e7ac3111f9c8d0c28c3934b4c23bef4fb593e34cc8d5d8c4d6af8dfc37ded9b6f2023b139ff0be1e088c4a27af6406e954f6a98067630b29fd60f026e9b076fb6d62c1a74a8f77e0f6449b5fa973f94303671c38dd5d6e8"], &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

993.345951ms ago: executing program 2 (id=6440):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f0000000180), 0x4)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000002100), &(0x7f0000000000)=0x30)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r5, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@generic={0x44, 0xc, "09240008ea6e19000000"}]}}}], 0x40}, 0x20002880)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r7=>0x0]}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000180)={r7, 0x1}, &(0x7f0000000340)=0x8)
r8 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$sock(r8, &(0x7f00000002c0)={&(0x7f00000001c0)=@vsock={0x28, 0x0, 0x2711}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000380)="65d3dd49c7a5ffe34e4c842a74481973371151a3a6eb84dfafec3ed631a626f57169e4cc34f0d4c5b3defdded7864f968c6e5eb8d7f15b14a4b7c0baf7c4e06445d2b34ded57151f0a4e8bb8f1b9d406998f6cdc0fee4d800a6dc5913581f37622bc80a1522c141f9f6a5e694956edea1fa18273893c71e6a04464da8c11c3702ea5fd480764f01af681a84fcaf549bfa796e7c8a03233eb8ed47a1903", 0x9d}, {&(0x7f00000000c0)}], 0x2, &(0x7f00000004c0)=[@mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0x78}, 0x4000)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000080)={0x1000, 0x2, 0x6, 0x3, r7}, 0x10)

563.249618ms ago: executing program 1 (id=6443):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x60ff, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x4c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x35, 0x11, 0x0, 0x1, [@generic="9e15c00619065e963eba3ef94d765eb501e2e4bea6b8d14b16632741a5bb965fe09b7844e4b103706a1038bc955454ed2f"]}]}, 0x4c}], 0x1, 0x0, 0xe4}, 0x380)

561.949707ms ago: executing program 1 (id=6444):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000040)={'veth0_to_batadv\x00', {0x2, 0x0, @broadcast}})
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x3f8, 0x1b0, 0x2b8, 0xffffffff, 0x1b0, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, &(0x7f0000000040), {[{{@ip={@loopback, @empty, 0xffffff00, 0xff, 'nr0\x00', 'ip6erspan0\x00', {}, {}, 0x21, 0x2, 0x3}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x1, 0x800, 0xb3b, 0x7, {0x8}}}, @common=@socket0={{0x20}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xf, 0x9}}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'ipvlan0\x00', 'veth0_to_bridge\x00', {}, {}, 0x5c, 0x1, 0x60}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0xb}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x40}}}, {{@ip={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xffffff00, 'ip6tnl0\x00', 'ip6gretap0\x00', {0xff}, {0xff}, 0x16, 0x3, 0x4}, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x2, 0x1, 0x2}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x29}, @ipv4=@dev={0xac, 0x14, 0x14, 0x3b}, @icmp_id=0x64, @gre_key=0x80}}}, {{@ip={@multicast1, @loopback, 0xff000000, 0xff000000, 'ip_vti0\x00', 'virt_wifi0\x00', {}, {}, 0x33, 0x0, 0x50}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x11, @local, @multicast1, @icmp_id=0x67, @port=0x4e20}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x400}]}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0)
ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0)
sendfile(r4, r4, 0x0, 0x6)

481.956908ms ago: executing program 1 (id=6445):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="819b08000000fbdbdf25030e000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c4)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000501c0007800c0001"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
syz_emit_ethernet(0x5a, &(0x7f00000005c0)=ANY=[@ANYBLOB="abaaaaaaaaaa00000000000086dd604dd308002406fffe80000000f58f251a85abf39b0000aafc8000000000000000000000000000aa000040017916b5f8299324f9b18bb6a0d5821189ead53e13f5d8e4432d6dd8e783d71f1e680c5aa8a18d91770800000000000000e7f24663146ce2a016ed0f4297da1c9cecf0c5de574ae957dcd77f398644f901e695688b0b1daeff952eb7dd302bfb162edfc22308637b7ab4436c699107177b55056664a6a55041444abd3bf1003478a0697775da603883dadfc0c9bb7195d69f7b74a06e9ca95381000437eda1be5f313c907871d2e6b45916addb09", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="9002100090780000080a0000004000000005030380000000"], 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000791010000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRESHEX=r2, @ANYRES8=r3], 0x48}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002801400038010"], 0x44}}, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00038018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000080)=0x1de1, 0x4)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', <r8=>0x0})
sendto$packet(r6, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14)
close(0x3)
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000300000000000000feffffff8500003076f300ff7f000095c9000000f2ed01f6880f51"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r10 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r10, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r10, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000100)={0x7, 0x3, 0x1, 0x8}, 0x10)
sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bond0\x00', <r11=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r4)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42880}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x44}, 0x1, 0xba01}, 0x810)

149.784005ms ago: executing program 0 (id=6446):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, 0x0, 0x0)
writev(r1, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000ff7f000000000000000000009500000000000000d1c4183247ea0bbb5d"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}, 0x100}], 0x1, 0x40001023, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_vlan={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x50}}, 0x0)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x33fe0}, 0x33fe0}}, 0x0)
sendmsg$AUDIT_TTY_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xfdf6}}, 0x0)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r6 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10)
r7 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x80000)
setsockopt$inet6_int(r7, 0x29, 0x17, &(0x7f00000002c0)=0x20000200, 0x4)
r8 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfffffffd}, 0x10)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r9)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="07ef28bd7000ffdbdf2508"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080)
syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r9)
sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0x12)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0)
syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[], 0x0)

149.133258ms ago: executing program 1 (id=6447):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$inet(r1, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000005280)=[{&(0x7f00000050c0)='k', 0x1}], 0x1}}], 0x1, 0xc000)
sendmmsg$inet(r1, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x840)
r2 = socket$inet(0x2, 0x3, 0x30)
getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xe, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0x94}}, 0x4008800)

148.532895ms ago: executing program 2 (id=6448):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000f40)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, &(0x7f0000001fc0)=[{&(0x7f0000000f80)="ea", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e24, 0x833f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffffffca}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000000c0)="24fe16c6a3e8c068ca30676809cbbf904b287477ed71acf814964bea9f18c4d865a618fd3eccbce47a2b50de49585dff0c2ed2cef53145", 0x37}, {&(0x7f0000000100)="83a55fa66b50b6dd4307e365feae85cbc9d2f2edfdb198d70cec9817f99b208fbe4d721ddb761e8221be2b8f5b", 0x2d}, {&(0x7f0000000340)="05192dd5e780a7f484e22923faeb83d5211787ef5979d60347ad8713566d1e9c09d533bf273c07ab5edbeecb550cbff13d040c219cabe949fd656c57189cb613d26994aa", 0x44}, {&(0x7f00000003c0)="c4368a115cb03ee43904adcf5d40d21ef34c4142f721b1eeaf94f3495fb7caa3ffbc9b367b72a4a2abf8df13c0433ea11ef270dd9c5c14113a62d48200501785a7f5205e1d5d2b2264ad491a01426ea6ba609cfe4a3a2165972d419fb5c9cad3e9db088a6a5f68550ee879dc1ac38a3fa7b75c4ea69c1421b9a40b2484870efbc27d53c1b510a96691078d2aa097d46b3d2bce61550d4f77af3196a13eec94597e8da9a578ed8bec4d62f20703c5e0305ecde44b4d3cf2d4a1ef6c05e7153d4616ed46c696bfb9dd235edac21e80bc5c1eca1207b1ba65ce39ed37e37e1a7a0a94", 0xe1}], 0x4, &(0x7f0000002d40)=[@rthdr={{0x68, 0x29, 0x39, {0x8, 0xa, 0x1, 0x6, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast2}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @mcast2]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x0, 0x8, 0x2, 0x7, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}, @mcast1, @loopback, @private1]}}}, @dstopts={{0x88, 0x29, 0x37, {0x2b, 0xd, '\x00', [@calipso={0x7, 0x48, {0x3, 0x10, 0x29, 0xffff, [0x2, 0x0, 0xb, 0xfb5, 0x7, 0x2, 0x4, 0x5]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @dstopts={{0x20, 0x29, 0x37, {0x3b, 0x0, '\x00', [@ra={0x5, 0x2, 0x541}, @enc_lim={0x4, 0x1, 0xd}]}}}, @rthdrdstopts={{0x2060, 0x29, 0x37, {0xff, 0x408, '\x00', [@pad1, @generic={0x89, 0x1000, "3722718d89550ba1fef9aee5dfa3b777d24fabd76d82b284a9540ea81b7511936f44309166e1b7bb53b66bbdc6931108a4d5ba56f84650881f8b8f84cabf7ae45f132c12827b3ae52d01a7321f1e8cea2fecc0434c55f79351de4cdd4eced0584e9c81a9d2f6dd12544490bfa5203a195166a3f187300d98b7d90ad9929e0dc0829b521c8effd393cab549e9fd00b94ac1c3e92f778e423238b43f4fbca2c35e28c897b51cfaff4acdda3518ec80a188e6442b0964347c5d97d79a5ea3c3e31e31c31916bcd011517e0fa143e87ba06bdf5b7bb870060e2a16abaaf8123a68b544f49d1e18bff86e7edccecab7abec4c2b872f69ffed7764ccbedcc56516ad719cfd51093984f09382919459d8fb1685fe57808febb4786f4e4713b0284e4a72d86f4ef5128fe84ab2eaf3c371e548fa6f77ce9af1ce36c6a4cd92858051d3b9c0012461f20c67092d2ab0140cd8bb3c62b3d4e2222be2ccedba2c48c9f389ca15fd4e15509ccda7c4e8808acae3274fe5f742fa975ee32b74464c9484855098e636b2f02d7904ae8723def1efd0e523adc861e9dc48dcf6f2a4776769b95dd814d4ca9aeadc5c7c1f7097bd6936ad58fc6c9ce00e638471e89e81a3b92ec41c92c0d1c0f56d2d08f5528fc24de023c045bdf6d3110b95ad6d922520553eb8812bebd81e76cd1dabe1760ed2e56d1b83c5e6ba2afec583fe70d6a1126594335489689758276a474af20ac5f4bf3a490a1e5ba18664783096a01b0235187fa4e8f0591849badcc6764aea197afae946fdcdfe665cffd279d0ce1debd40cbe5434f45d04176faaa21690a9ee6991d3fa602d2dde94404b2d231b86b294a5eae1f25fd4405e372dcde0c59ba00cec816b5c19c0d5bb98032076fbd2909c00db7697941588a8db4f1a36e1df031228958ef46ea18caa367d02233a17a8a9b169b54537dadbe464162d0af89ad69685f6a38cc4d41817f0e16fae5b6c4de68c3a8efbf57e156ed7eb76d9b6785d27c4f447158235b158f00305e4e2ff2b22615ba0a65b97da84d2e59f6062b77c22210f887a44151b50adb9ff565f20c5ca75a9cc434b5d9bd725fd0f50d8a6ef8d92071c1a99b471fb8ca3c8de218d6968b8a3587bcd38725d5676caaea6415feab0b9eb83436b118950c806dd22f4e22cb4629f8bf16b1c7e1bf840f8ac9de7a27ff80b80bc24c60304e60e6fd56d6e53803e45965d7e37181931dfafb5b0e08b90bc70e04ae0642b12af9d1b28d84cc85a37f343cc68b6e84b804dd261ee96028249d6e60e62af79761215be0373658364fb4e4ef693027eb69d872f4eea2bb4816ca617f80cbcfd0f46e21ac524e2a08a0fc0b98a13ea68b3bd893496dcf618c9b48973f23778accdba16ea1f020de1ad148d2d4b3426dfd2f5b18d08c1f11af2477f4e6fbd80b6ccaedb9105da1fe5dc7ee79d4e0faf052c09351ec6f7de2e002202c9b0e83ea93baa6ff7ef5a4aa9bb5623afdb6a756769b9acbd30b150b748dc639e38c30b8469ec233741cc62b529683a166e1c8988566e74e85330c7c89ad0e66471ac951b439ff6b1cf4daf4d36b34d94e9547cee6e4b3001799a612d8eca4863f2ff049b9049c87fcbb7e5f80a34a4603962291e07d926e806425346b2a134c04232c4b5bac4511cf04cc2a2c0d67dcb43137a1f241928a568f1ddf7575e5c7c7cd52843cae3c1a2b6017ed19f635e06eb386af42bdc27a8b66531cf21f66bda795fcf826cd43484072678f6f4404b1d887be054fbe7f1f7ca221535773b09fbcfd8de5c5cd418eba4b06aa284a88cb7294aa1e5cdfab8d42bdc71a4dc7f0bac7266279fe79cb8918a14dd6b698e1df747c6561595b18325704c810e9d026ca5e58dc3666a6e9e8ebd5cd3b212e982bf351347dd69084d86efbdef83c5b2e37f2b896c374255c4d40918fb3c71661432c20c84ba1853efce57bedb425453cde6495b4f0991362a528fe2021ad0e645169c645c5b115af86ec12ba295b1f6b7e8cc4beb7ae60db648dce86e08a9512c262b5fb0dfaefabdfdb9d8ef429bcb563aef0a167f053388fd13d6455e359cf5b9fab3ed4174a9937653968c0f8e1043a8e64f637da3c9f84f81022d8b06143937422f471a03b9a795739d28fa40cb26598038f5576611a6f46b30a67931c68aff8fd25695fae40467d6cf65ec0f2bbf85c3e548b12cb0157ef90e7cfcb39c3895c05ccfdb5d70d14f6d812ca71ff301102fc07224d0ab9ca2277d2e2e222a30b8da0b6c965b1cfba64fae77c5f99137f17cb6c9148b459952600ea3cb02ad4f318fdb8f994077748bcbe747fb5f742fc41a00b6c064874adf28a16796997702a951bec2b9c23ef45b03df994bf634847ed9a7e9c5483592393b23e1cbfeec0c260456d441e85bf60979a4b109d88fb69dd3c17af47ea5ab8c4b692526f5e860408e6cf885ca363401977404d3287e00e8b8fe4f7e8b3c295f2d388f974332707d0b106e6b56cab1fe91d449e02c3bd57c6906e501df54d697e23640e9d1bd966a6dfb5719708eb70ee64827fed88d4206d4b7152179bc86ba6955a1044f6e31abbe2eda738e5358cce32add9ef21f76b2f48fdf3baf91f5d876e57820e86a118a8c0f146e0bc2a367c53db3a66a2c260090b868c96b7408a057ba51fc6e8649603c1e9c960f4419c42fd2b37f4a0d59c298b67b7635f909ff9fa953b08a7c6b778a71164b71e8adbb2baaaf0499051ce83614252d2760ccb1b7d791ac3579f3ba91218553cd95bb82f62aa7a67ee16b38b0708d1697ad2fff2275e02270ecc178aa587c93476e74034a26ab7979c3cea99bde758abcf589c3e49a8fd5ba6e949c4d155a60d983abea8acfce418dfa1b3cc8f68a54790d128de700ddf231586201db1ae694fc9c528f6fd178dbb528f88674847a5d4cf88bcae52ca65d9acd473cbac2f98aca0c33d951f5642f15931717fb21ac7e3d87a3d9cf11b5e4b22c56b9e23ca9e2f5562669769ee0b8ec0ec492c281667a80b1b60f976cb6e46cf42cb6d2e74e62ad6fdbde70bca660272d0b0c4684cfc94625c312d3abce671b83a2191e6891d8e607487681cb5072a38c8d9b38fd95e7f70e8ad5395ad8d22fc9bef7f3a2ab804923071c602f9d8a3e6d6a70715b36119867e81c9099f5a953cd13fa143f0acd8e0c38fbe7697140979fb1dc786118e11b924d9da4b1bc44f07c6c1f685d9737c8b0508da37ee685093fec6e4436daa2956cbde60e6b9bcc2d9a211f939d3872b06f168c329809b682e8f636c2550f6539a7289ef894f86ec4156887f26c09459481fa233fe900cfdb9bb6003b094185c7f46c6112e18da76285102227698d0248ee8634ae18f1e22088a8c0bfc73d8937cbed099fb788b1768279318d199bd60938c09d58bf6a8f72aefb016de808c71f342a443311c1f5cf58d9c93b20f85e1d9ff1a63db14ac086923697a9fea4416adbdfbe5cf9ec38ddb51619aa4c6ca0a99b755012ec0042fe55ca4eb05b6c16f451c45ed7b12b0b1187cea68e0df14555b22c17ee441940b7ad8facb190b53fc7970bd7a43a1afbbc02173b4d8eac8ac9c84d794754b656490d64a2348d8bbf9895610864342a1cfefdf97e8fc989a83751eeb310b51219ae99d3d19020b3d020df6e390113bb7aa34460a08f3fe957d4adaa72c4a40d723192bf036567f6c53a1e45debecfbeba3d70370315956a1a0872def731e0221aa27dc2d919b1be06105b7c6e358c0b233b838984dba65b3a258a5b5dda18933eda6f08edb50776e8cf9403a5c9ff1c045db9ebb6c36772d3d4520d7c3a9741d789e670d5ebe79e35e5c078c0b8f395fdeddd4b18d352e099979144565d3db2d847a147d89b10c7ed525faa0dbcc9d16d372a0b9c35febe1986d030341b7d1253391c94142b5ed6386a18c5ffc3bcab35c45ac7ae1443699c46100e8ca3f5acbe884a9e4f39e275a498549d86d42026e51f07045845df0ed5e39fb2c13801bf6889696d6ad9c6da220f206d7f4d065e65e7c294e7119bee42dc58db55a37353521a5420d801a72004e9214a4f2481e8feee9eb22861fd9ebe768babe85ca454c8fa2ade7c39f0380087c559ec63ccad50b4c39d557651246f7526e8ae063f428d0b31b94cdaeb0c95e14e2854f1d387575442f6fa5abf4c0b69c9b7438fc9cef89f13b927bf05ec3ac740b3205dc73fa35c9908983f78eae7236cf527d8aad5b685969d0be011db1865859ae40de6ee295bc0d2d4f236e7d02513fc03cc2758431c332b79853ec5dd4db0156346dd73e1ac12e6cf3523bdf3d75cbf02b00d7d31c7faf170acb884d37826ce6a868f2e89739e63489ca5831f400ea4af73d463243aea56b4b4b1f50226a7fe8973630dd0ef5710fc78cb0c30d43c375cc366461612776e4578c7dab5d9e8308090bd6e105531906d67ae31e9cc379b92a3dad7320b5341e6b5ecbd3754d893101d87c053c6f3a96e45c399705176796aa275e65ce988952e762a22454ee360e9c1c2b9e5d16bd2488cc342e0428cc1ecf8ff45b8e914455c6250858729afa876124e840c68d716cfbc2a20f5aca637e4017fe2e1211f73214afe7ffb429fda2ab3e4ce11390f1a79b23c4b01a3c1e275fda024c99863ae88dc691eb66529b9c602e92cb5fc07e9efe1f81199305b2d50fb87b4fcc81ce8d2b7d458a2b3501c78f5460a6b0e1313c5c38d511c64bc7c2ca73968752bbb77fe596493d57eeb1b617944429a4f46868cb273cb7bd357db190686b746ed836b3b5b4e047749993bfa196e9b0a70d9268289e16321c5e775d3753d7cf65af381c94fdd53ca3d6abe6fb2c9bff7390fac86c5c4c1a0d7069acb12dcef49bd335e83341fe5a990bff5c77001dace1f7d70a7c9646cfe9d2a39035d1515d339f144d3f0acc72c028ddce56ee0fd34579b3ca75a010ffb12d598051a67177e3746534fc0f52aa7bb06939ab1afd097a5be75e9736e6df4222a4ee169f671d942f25cf564bed12d4fcb15d44884f7780b8f5e0847297488801d6c4890d0e1ccc8b62ea9f5ce32d9dae37b8a183a2b1196d0b4274ba2bb7b0fa978f522cbfc8f01ac1ff4d79fa6b7a1ffa18a129662c336fe8f69354035b9e87beee888d1875ece7bc00bca7851182ce9bb21f779676359d453a15e1842dbd3099cec0797a063056249d23a0db4db489452fb62a4c7f095be3c1d6fd2fc94d8e219314415eefae190c46138bbc6e847d58f0d2f1faddfa1cd30d64e4050bae5c71cb82eb717ed458dc3e86ea41945e6ceaacac1cb256b05ca5fac82229594649d1f7fc0451208889881f293173863d3a5e5b58cdbbadd72e0b4991359657c1d35713610980bb91f3bedec1396b4bcd8821410a323db4345143be8b8a69e14ba10b80ed38d3ce08c51ebc059ccb09d3828937e9714dd49a4de86ebd315c3df8011c87d0afa1c4c3109f2fe25ca9dfe1be9d32cd9f1dc369e1c25d13023a0497984749e2a375ffa26e4876bd253f79ae2a242f0d2b5868465b76ba103dc1181735a39b6a9ab762f8041a60b75b7bbf62cef8192321102ae7718280c608c2a1998c5c1fa34ca19f2ab0cbd958102a87b7ff443937686b03e41681c77d403379a3f23ef9693e6669a630d098c2552b7995321c23527cac187c76c0f4dc9d1c6df2d5ba120073ec2805f8693ae89d6ecd3fe220dd149803c4c18341f47b655b70f6a6d71f8917c257811d064e8b9f802f53c13fce137eb662a378fe2b6507f9452e612857125b9f715358ae82b9480d3a0a296f626efd1c1947cc9f845"}, @padn={0x1, 0x1, [0x0]}, @generic={0x7a, 0x1000, "f72e46e0febd7fe514ac792cda91c10ba7f2666d92bebf2869ca3d224bca1f29fa118a900250f0158f59bd2222b06b8985edce9546dc78b84eebd2c1b3814f3b9461606f36b6eb64efe451f1d4bd0c003568f1ae3132ca9fa4e5a45d2fa1035b960dffac0644cc19394fd491968d50f13b75f2d6b6bb91f76edccc64fde47eba0173e6ef261c6483fa45e610fb4abf6eb6ae68a4672e8aa2f00dc9ccc72dc7ea113e4a5a7eac0e74805704c4ce2e573e9ba40381866ac5b5185451e6387b1edcdc9658037d3dffe4f97ba0183f5bc64642a7b22909b2e8bd58cc2a984ed8acb8fb78505b69c57b2091dc473d4a24fcdf94376b4d2a15373ec116b66c01da492dfebb8c5dfacc9c695885ba89a08c05f54491419f457adbb4564abc113794b1fcf89306fc224e97423c7a6e60fd8f103464e3ca312e170b00cd9d2d4a5f033dbc7546469b45e414a04bcd82e79efd252dc17f3576331536fd2d6cef4b0d20ee15f3348ebb4b2f4eb473d0be953a65402080683d224c50bd508ed7790bf191b43578a74746ce519e33395fae81eb824a3626a377c301a78fbebdb1ee92862bcb0015c2241f605d5a7a248240dbcf76a5e0121e9fd7859844d3357b8ccfdec1da64fc3126062a02eab9f9abcbd79777bc86f9546b5c3a177d22d4900f877edabfd34fcecc05e0a306097f8ef3f55ad6a018c74841212149f3d6c1b1e485ffcb83837343c1413afd135a4b936036a84ef27e4d4671e11409370ada511736af189dd6592d4a3aa23bb6eeb13881a77862cc40deafe386917435a9c8ae9f275713c49b1c90774b04cfb9a2f7f48cfe0cf37f06b5ba08af630956e4cef9b2317bb38d1d5c07603333b2fa4aaaa799caddce2c960859a220790b57b87eb0f20a60598f3b320af840733c654caa4bfa9cbc5c1b3a22463c8e224609ec1e0c2062033abdde978613ad79ed0c7fa30ea2c350932b0169067055512bfdff5fc8e0707dd3d13bed12caa61b51b17e23090c235d2fb215d9ee07ddc2bbf95895c610c8bc1531befadf4391789f9b7867bba00ad23d497682b77333346b45f617495abb2222c0b15712a3c0ce30bd742ec676b2b4570a1f2777c447abffb32caf9c7a99b1c72bcf14a549ef1e13ee31857b695692765edf7d0c5653ec8bf80fbadbd1d080241ac7b82e0b4d4c0c94c6860febea4b54f358d288dea1603b0d7bb9ad608ed856217ec14118037cff72af69888353be81a9d2ae9da7a6ad0e67519566b9d05e8ecb24290f56c46f114d9432ec11f099708ef31efc3b27577f3d33ead796599ff919908168e2827237e755b9a1f3bf5f28687f5eccfd46c2afea39ec925aafe33fa81f35f7c1bc84a0df70cf1e5e1ad6bdf352a42b3416f7d9a23f569d15fdb412642bbc2135d52f60ef33b74448fb4b074b576172a34438085d5829554e27369e3e5e38a6d6d3918fe56a7958242a31c802d3cff6e928581304f3efba9554748ebc06504e7dee4995b8add77a7411106e4d2423800184069c36c3c19502e7305249aeae491237f6f394779daed02ba7203ce210fa502c9740e256776a95ebb5cfd7669c93c9189f7496580e19e408ddcbd56ec433222c0db3094d0081bf336b5b5703fff8d74ae164fd1889160e31332acfa9d40d95e738a4ba1543d11369045e0caa84954840f61121342777d5a24d1effcf4b8918458bc81bb54f6cd36e72ed46c487bfff31f9bdfa94e0855d377e0fd5b179d7183bc7dc585d20c228be7465f8255c9c6ba8535c254c8b5039d15acf4c8671f9af571c384c0e3fd8a64b3609e5e3de75201c3244870066cc189eba629fa764a8fb28ff8e8e453359c8a1fd0304efe5999d05790a9227fdfbddf38327a495f5582b3faa43ee4e73e7433126412c470467117923a2149d7e629fd5257ac8cb65217d46a23ceaacc0f869f34d68d293f4b3ba1f5d54b4101dee1d4943bfeeffde60da751753a045f588b296cf089ae9140d224140fbe48fc869d852a9ca3bd510554cc4d5d973b7f45ae78f554df287d8df5ae1f3cd6a40252ebc5fbdf7b7de336237a97c048cdbe28706aef96e9cc110638d9445fd78853ed3bf91ef1cbff4612e65ad3f600f8ffb9956bcc64934ffc0cf9b884c15718b4a32b3c22f0259162298c4c328918f102321aad8cb735fceef547b218e038d06af339706749e8844afdbbbe2cb1d7e7493c17bfcdd6381d49f266480c8deff5e6391749f5ff055a81b1ab094de1b49e8c512f99105e85261b62a2e5aa09976a693bbe38e3872998eb9a7ab498280fa3ef3cc89d57363d800723cf50ed688a66304e5229bbc503ba189dedc13326148a3cab34291d8ffc63f4d5b4f240bd00177bf6a9ac2041d2dbe69159229dd76bea624cb5108a4f378ea1e228d43b76a511065c4868eaf91300282290cf121d624e2aaba1a722f945e5371fc7ad71d125d9af4c690e379cedd60f5338f9a474f4a7806fe062bec471fbeed397947113d7998a60acb89e795f3080c56b7d42d072bb45d5d9bb7203badddac6ad9bad54ac5b787f8c4f8f7cb43ab57079a07e9aab9dd7382a20af3ba630f03af0db5a0c6b25ffaf1f9fa0cb314faacb8622c5d213c20218c50e9055716b24587c304f00467d539fee45361526fc45a65824a93eda7b67e3a0719971e557703d9c3de8e0a81610a0c6b4337120a3da96d64f49d64cedabccd871f9ec040203a26e3561dc489459fa8a6c6b87c95bb97799bf968f91f745f039bc104316531257b8fb5cbf2143d08c4a076836cbfde0c9c692f80a1161208cfb8d4f6812525b63d486946d6e741d0c7045d321e933cb44c72922bbd585223a75c60ec13b8f16e1874d0952cdf13e1de50aff6281c2f1439fd4e2184f46df38e9920d7d91dcbe76738aba1974850e219bd59afd71ae13fe41455bf6125a83e8ea6bd66948d530ee49ce0056130f8b032139226b2aec53e695d4d15af56adf951adbf4340b2d5ca4740af41ceac8652d44e80ec5e6e384a094beb9580148bf6e3d7b0c7c1205f18d687114e21f356ea15407bb81f620553bfbc8ffb0d7e1522860849a6b9e7aa640eee2dd39cc3326b316de60ff3685b3aebbbc27267ad4e58993aabae0bdd4be5c6d43c93de9fb2304391d4339dc01ed9d1c41136c6300709919a14d95b6d311a01aa3fb826041bf72b6a74253123af0393517bcb8e7ab2f41359dc5cf85de19803707d632c3518bdbe6a617d1ad222070141524754d204de32e7f5a26e133b52a17db5b973955a327a1c48b207dc9ff4f4595a82c57af20bfd8beced0e2b8bddbabc31681cfc1a6ece72208b44f582879e7fe32f4fda37f6b65e00da46719cfeb7b16e8a8e48fcb7c4db94543649bf2b821c6db66d8209e4ed8c6fbc9a3b1ba324c420355a389c83badbce7b0a6c7867b2dd71bb07fe66d98c1f34351b2f66b560745d55ad6c79061b8015fcbbb39362c63b4b4e0fbce4bebc1a723e26a5ade2fdefabc6da3ce64d3dec9bfe1ecf38b1681067293a951dec375c29f28815c4f89daf531bb7273a1374d5d226e498179e7ef648a48701c1e97e4a083465525ed6e7e96e4055d4195a9ada1258f2b4f55a34fdd87782a1951b587f6f93e24bf79d96b60d445b92dac87ea96a61624d1fd7bcd1fd57cf859e29ea4f13cad72c92dd3d5d9f3069074bba0f5abe0a814adfd7504de8efc06f20c1cb2e5f334335639afb6e15100f63bc1547665429f67585d6fc05d2f37efc3c8a50e5b26e71023126632dbe05febe6523a1473c47d67b7b00b77983815a03762b2a774262085e7a5d0392e2d3ebffae99ec1f45e7e4e06dd012ae8a0dac5a65cab3dac356af917edba2757d19fb960fb90d3d06d0ad5ef0b62de9842cdb6533ca24edb45d1e7de70e38795e881d917f332cb31549558e6983b52caa609acc4ac01cbe7c8b0d8efc268cabcae567b96df256655afb9dc18d4991aa5bd6eda42cb39446891d363d9abb2e7090b71734d2d8ac2cb20c530125c862a8edd375639c6c639282c6cf93672082fc8a245ceb7cc9935f7445ee8630252eb8292eaa1cfb5e14ecb7b66863e3e248cdb01425d82cde2c2dab7906653c65dc4eb66ae21341effd3c09c33c31c82753b2be4588d82eb7a79997ba4a11f7257fbdaf847ff1c962af8d344a72625936bce9e29f7e7471449d4a0286578be519dce6c232ad22f665f7edf98b5880df248180381956a8122aa5482ffa9f6ebd00f70f2cea9c047afd467df9a00cc802147a4e1edf6477e9eda5f269bfca97e49aeba9356687836b0c5261e83078bc43caf8138257cc13d3664131ba373fa0f0c361d8fad9a14c77290dc9a380a14aa38b393d703613d3f169a03045a7ec6eef02cc9699cb4c35200a35d51f3b2217fac278b5c4a5faaf76114135b9665fe731e617caa011251dd4fb139b94d9974c5c180f9df87e02c47696382645a96b5dbd18df214533b6baf3855e9bc08ec5fd02d31be99311fcbddcc098689e6b105b0984f950098eca26011906ba646fe7ddee34831fee198bcaacd9bd6d98b6955239a983a4d8a20f9e363d73fc7e46bcbb26e188f1f6d19569383dcb4c16ef01de56dc2a5474b7159233630f58b6a0fcd195212db5152ba802281b4482c4d01c87c9ba8efecf78e2dba21465e855721e45f4e72cce7c2165351d582b9848cd11e58c557883202eb232de864005876ac9bd7c9239def1f570b0058566139950df9101d174bd694b9b469d1656548e6324d47d287b2b1eb65ccc684dbd4a1f74c98b9bb0ef22155f72457092cfbdc0c7f55c0dbe92e1af08ca92102b606e97319b2595edc26b74e6222e770bddc1447be70519ec8870d85c678893a0b210a81390eac6647c09bc087498293f531a2e6dfe787c8b818375657a47ef95787bff52f518031dedac4e98358729c1c5752400197934827734b9fd7b3c7d626b1f7584abf920022f3e5bd9e5d7583679d50f5321ca05aa8ee99afc8f444adbfda61301b1f4f615dfdd39941d7264d7a979cd373275be86a3709e4eed5420405f676facfd035ed0ceef002a445b9b15452424a04df0090ed6b09d77d7c55c84cf70ff27d986bd73a266c88efaeaae4b0260b4a619e2a57b20939dcec385344308bf1458fb086e69d2b091a63ac7d8baaea57a97300d5694c3717ae27345abb2c489f5ff68e51f6e978cbb515442bc1df403ef387c3eb0ce2a33a187b91498173c226930ead607e682223b25918892c876d24cca2b8aad3f1a40aeb7b8eba96a740d818e55305e935522949a834f4203300c55979e523013bae62a505dac1d62e70a1e8f5dd79114a3bc6770b86fc2dbfd2bad3a82aecc3cecc3505796c197f09f184020af2a4ffefb97786523915d50956115fadfa0297a35cdf6c55fca4b2245412f63896b1e412a7c13adec2392933cdeae2b6724e5e6c2c5c196937c9967615c14267fa4cc34624a67b20a0b286bdc8510fcf86ea7ea29b79171902206f2cec730d12ee39c347aef0b7faa669a992c5e32329deff09b374fd1f7dc58200353f7728c7cbd63ce18e4a02c1451cbecb74bf3bebce478584d88812b025ac823318e54cfc97d10258c947f3dce572aef6cca858d0568ff8311a1d997f2f9d54f1395461656c73a9c612fa020fc287e782835d476ea62eff075052a5f2d947aa272c83ef0bc3440f37e2ecc4d7fd4b7fa242b86069477c419847c18cef84c0f74eca53f3e2549134845a8cbc5f0bf00eb0bcd863f982bb5d08270fdf2ac1326d5cb95b40b12e3bd162683662c4c898b1097694149dcbeed"}, @calipso={0x7, 0x38, {0x3, 0xc, 0xbd, 0xd1, [0x2, 0x8, 0xb, 0x3, 0x1, 0x4]}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback={0x100000}}}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}], 0x2220}}], 0x2, 0x0)
shutdown(r0, 0x1)

72.780518ms ago: executing program 1 (id=6449):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f00000005c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3d}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1)
ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f00000000c0))
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r3)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r5}, &(0x7f00000001c0), &(0x7f0000000200)='%-010d \x00'}, 0x20)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

59.594996ms ago: executing program 0 (id=6450):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x4c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x35, 0x11, 0x0, 0x1, [@generic="9e15c00619065e963eba3ef92f765eb501e2e4bea6b8d14b16632741a5bb965fe09b7844e4b103706a1038bc955454ed2f"]}]}, 0x4c}], 0x1}, 0x380)

592.642µs ago: executing program 2 (id=6451):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket(0x29, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'})
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x800, 0xfffffff8)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180000001d000000000000008100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000208000007b8af8ff00000000bfa20000000029dbf84cffd1c4b2644dd9c767ea2841000007020000f8ffffffb703000008000000b704000002000000"], &(0x7f0000000ac0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200ebfb}, 0x94)
bind$inet6(r5, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r5, 0x29, 0x2, &(0x7f0000000000)=0x40000005, 0x4)
recvmmsg(r5, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x8, &(0x7f00000001c0)=0x7f, 0x4)
sendto$inet6(r5, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
gettid()
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES64=r3, @ANYBLOB="c3555807b88c534642658ac4d3e8f2f58fa75c62b6079dc7c9dc6ac89ee162d8a752545df39d63e74c0f4d2c4d2c28e60df78e5f31a9d8079b005a8b0edc8f8ee1ecad23b6ce802a82329fe180b9a919c0abbda0896f60c5112c03651e699dc9c43b3c219770e7cab4ebe9b84ccf431bb6fe43184cdb6ac4b0a8a3b286e855b89f787adccc5b5cbf796d0fd8f46244731331a582af0374e27ca27be0affaae0d3312b30628289e36dae131a5e9730f3ef07673cfc39bcb38892dd4b2ba9131105e6511cae0e23f71b8482b7286300bb43381058fef01de", @ANYBLOB="51f003000750050008001300", @ANYRESHEX=r2], 0x28}, 0x1, 0x0, 0x0, 0x4082}, 0x4040010)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r7=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES8, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r7, @ANYBLOB="080026000800570080", @ANYRES16=r7, @ANYRESOCT=r1], 0x2c}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

0s ago: executing program 1 (id=6452):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000400)={<r0=>0xffffffffffffffff})
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440)=[@window={0x3, 0x4, 0x8}, @sack_perm, @window={0x3, 0x3, 0x4}, @timestamp, @window={0x3, 0x678, 0x7ff}, @mss, @mss={0x2, 0x4}], 0x7)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = getpid()
syz_emit_ethernet(0x83, &(0x7f0000000500)=ANY=[@ANYRESDEC=r3], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000080000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8afdec7e980000bf0900000000000007020000f8ffffffb70300000800000088040000954c523d4adbb503820000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x401, 0x1020, &(0x7f0000001200)=""/4128, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000003c0)=r3)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48054}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1700000004009000040162000b00000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r7, &(0x7f0000000080)={{0x3, @default, 0x1}, [@null, @default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
bind$ax25(r7, &(0x7f0000000480)={{0x3, @null, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r6, 0x4}, 0x38)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(0xffffffffffffffff, &(0x7f0000002240)="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", 0x10b1, 0x40408d0, &(0x7f0000000540)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x843, 0x0, 0x0, 0x56, 0x2009})
socket$nl_generic(0x10, 0x3, 0x10)

kernel console output (not intermixed with test programs):

0x250
[  476.482773][T24604]  ? __pfx_dump_stack_lvl+0x10/0x10
[  476.482791][T24604]  ? __pfx__printk+0x10/0x10
[  476.482812][T24604]  ? kernfs_path_from_node+0x2c/0x260
[  476.482836][T24604]  ? kernfs_path_from_node+0x2c/0x260
[  476.482856][T24604]  ? kernfs_path_from_node+0x2c/0x260
[  476.482879][T24604]  ? kernfs_path_from_node+0x22c/0x260
[  476.482899][T24604]  ? kernfs_path_from_node+0x2c/0x260
[  476.482924][T24604]  sysfs_warn_dup+0x8e/0xa0
[  476.482946][T24604]  sysfs_do_create_link_sd+0xc0/0x110
[  476.482970][T24604]  device_add_class_symlinks+0x1cf/0x240
[  476.482996][T24604]  device_add+0x475/0xb50
[  476.483022][T24604]  wiphy_register+0x1ba6/0x28d0
[  476.483052][T24604]  ? __pfx_wiphy_register+0x10/0x10
[  476.483066][T24604]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  476.483093][T24604]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  476.483149][T24604]  ieee80211_register_hw+0x3425/0x4080
[  476.483187][T24604]  ? ieee80211_register_hw+0x1421/0x4080
[  476.483214][T24604]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  476.483239][T24604]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  476.483268][T24604]  ? __hrtimer_setup+0x187/0x210
[  476.483284][T24604]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  476.483304][T24604]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  476.483347][T24604]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  476.483361][T24604]  ? trace_kmalloc+0x1f/0xd0
[  476.483379][T24604]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  476.483398][T24604]  ? kstrndup+0xbf/0x160
[  476.483421][T24604]  hwsim_new_radio_nl+0xea4/0x1b10
[  476.483439][T24604]  ? __pfx___nla_validate_parse+0x10/0x10
[  476.483470][T24604]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  476.483497][T24604]  ? __nla_parse+0x40/0x60
[  476.483517][T24604]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  476.483546][T24604]  genl_family_rcv_msg_doit+0x215/0x300
[  476.483578][T24604]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  476.483611][T24604]  ? bpf_lsm_capable+0x9/0x20
[  476.483630][T24604]  ? security_capable+0x7e/0x2e0
[  476.483650][T24604]  genl_rcv_msg+0x60e/0x790
[  476.483673][T24604]  ? __pfx_genl_rcv_msg+0x10/0x10
[  476.483691][T24604]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  476.483718][T24604]  netlink_rcv_skb+0x208/0x470
[  476.483732][T24604]  ? __lock_acquire+0xab9/0xd20
[  476.483746][T24604]  ? __pfx_genl_rcv_msg+0x10/0x10
[  476.483767][T24604]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  476.483800][T24604]  ? down_read+0x1ad/0x2e0
[  476.483820][T24604]  genl_rcv+0x28/0x40
[  476.483836][T24604]  netlink_unicast+0x82f/0x9e0
[  476.483867][T24604]  ? __pfx_netlink_unicast+0x10/0x10
[  476.483891][T24604]  ? netlink_sendmsg+0x642/0xb30
[  476.483904][T24604]  ? skb_put+0x11b/0x210
[  476.483924][T24604]  netlink_sendmsg+0x805/0xb30
[  476.483946][T24604]  ? __pfx_netlink_sendmsg+0x10/0x10
[  476.483964][T24604]  ? aa_sock_msg_perm+0x94/0x160
[  476.483982][T24604]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  476.483996][T24604]  ? __pfx_netlink_sendmsg+0x10/0x10
[  476.484012][T24604]  __sock_sendmsg+0x21c/0x270
[  476.484037][T24604]  ____sys_sendmsg+0x505/0x830
[  476.484059][T24604]  ? __pfx_____sys_sendmsg+0x10/0x10
[  476.484082][T24604]  ? import_iovec+0x74/0xa0
[  476.484105][T24604]  ___sys_sendmsg+0x21f/0x2a0
[  476.484162][T24604]  ? __pfx____sys_sendmsg+0x10/0x10
[  476.484209][T24604]  ? __fget_files+0x2a/0x420
[  476.484231][T24604]  ? __fget_files+0x3a0/0x420
[  476.484261][T24604]  __x64_sys_sendmsg+0x19b/0x260
[  476.484279][T24604]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  476.484305][T24604]  ? rcu_is_watching+0x15/0xb0
[  476.484325][T24604]  ? do_syscall_64+0xbe/0x3b0
[  476.484344][T24604]  do_syscall_64+0xfa/0x3b0
[  476.484358][T24604]  ? lockdep_hardirqs_on+0x9c/0x150
[  476.484372][T24604]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  476.484387][T24604]  ? exc_page_fault+0x9f/0xf0
[  476.484412][T24604]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  476.484428][T24604] RIP: 0033:0x7f671498e9a9
[  476.484442][T24604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  476.484456][T24604] RSP: 002b:00007f67157a8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  476.484473][T24604] RAX: ffffffffffffffda RBX: 00007f6714bb5fa0 RCX: 00007f671498e9a9
[  476.484484][T24604] RDX: 0000000000000380 RSI: 0000200000000040 RDI: 0000000000000004
[  476.484494][T24604] RBP: 00007f6714a10d69 R08: 0000000000000000 R09: 0000000000000000
[  476.484503][T24604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  476.484512][T24604] R13: 0000000000000000 R14: 00007f6714bb5fa0 R15: 00007fff0315c0c8
[  476.484536][T24604]  </TASK>
[  476.693068][T24609] netlink: 'syz.0.6084': attribute type 9 has an invalid length.
[  476.698748][T24609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6084'.
[  476.705461][T24609] macvlan1: entered promiscuous mode
[  476.707254][T24609] hsr0: entered promiscuous mode
[  476.708863][T24609] macvlan1: entered allmulticast mode
[  476.710607][T24609] hsr0: entered allmulticast mode
[  476.712168][T24609] hsr_slave_0: entered allmulticast mode
[  476.713993][T24609] hsr_slave_1: entered allmulticast mode
[  476.802588][T24616] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  476.811059][T24616] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  477.151415][T24638] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  477.155718][T24638] CPU: 0 UID: 0 PID: 24638 Comm: syz.0.6096 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4-dirty #0 PREEMPT(full) 
[  477.155737][T24638] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  477.155744][T24638] Call Trace:
[  477.155749][T24638]  <TASK>
[  477.155756][T24638]  dump_stack_lvl+0x189/0x250
[  477.155782][T24638]  ? __pfx_dump_stack_lvl+0x10/0x10
[  477.155801][T24638]  ? __pfx__printk+0x10/0x10
[  477.155815][T24638]  ? kernfs_path_from_node+0x2c/0x260
[  477.155830][T24638]  ? kernfs_path_from_node+0x2c/0x260
[  477.155841][T24638]  ? kernfs_path_from_node+0x2c/0x260
[  477.155854][T24638]  ? kernfs_path_from_node+0x22c/0x260
[  477.155866][T24638]  ? kernfs_path_from_node+0x2c/0x260
[  477.155880][T24638]  sysfs_warn_dup+0x8e/0xa0
[  477.155899][T24638]  sysfs_do_create_link_sd+0xc0/0x110
[  477.155922][T24638]  device_add_class_symlinks+0x1cf/0x240
[  477.155946][T24638]  device_add+0x475/0xb50
[  477.155960][T24638]  wiphy_register+0x1ba6/0x28d0
[  477.155978][T24638]  ? __pfx_wiphy_register+0x10/0x10
[  477.155986][T24638]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  477.156002][T24638]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  477.156016][T24638]  ieee80211_register_hw+0x3425/0x4080
[  477.156035][T24638]  ? ieee80211_register_hw+0x1421/0x4080
[  477.156050][T24638]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  477.156065][T24638]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  477.156129][T24638]  ? __hrtimer_setup+0x187/0x210
[  477.156145][T24638]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  477.156158][T24638]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  477.156183][T24638]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  477.156206][T24638]  ? trace_kmalloc+0x1f/0xd0
[  477.156217][T24638]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  477.156231][T24638]  ? kstrndup+0xbf/0x160
[  477.156245][T24638]  hwsim_new_radio_nl+0xea4/0x1b10
[  477.156256][T24638]  ? __pfx___nla_validate_parse+0x10/0x10
[  477.156273][T24638]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  477.156288][T24638]  ? __nla_parse+0x40/0x60
[  477.156299][T24638]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  477.156316][T24638]  genl_family_rcv_msg_doit+0x215/0x300
[  477.156331][T24638]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  477.156348][T24638]  ? bpf_lsm_capable+0x9/0x20
[  477.156358][T24638]  ? security_capable+0x7e/0x2e0
[  477.156370][T24638]  genl_rcv_msg+0x60e/0x790
[  477.156384][T24638]  ? __pfx_genl_rcv_msg+0x10/0x10
[  477.156394][T24638]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  477.156409][T24638]  netlink_rcv_skb+0x208/0x470
[  477.156417][T24638]  ? __lock_acquire+0xab9/0xd20
[  477.156426][T24638]  ? __pfx_genl_rcv_msg+0x10/0x10
[  477.156436][T24638]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  477.156454][T24638]  ? down_read+0x1ad/0x2e0
[  477.156464][T24638]  genl_rcv+0x28/0x40
[  477.156478][T24638]  netlink_unicast+0x82f/0x9e0
[  477.156495][T24638]  ? __pfx_netlink_unicast+0x10/0x10
[  477.156509][T24638]  ? netlink_sendmsg+0x642/0xb30
[  477.156517][T24638]  ? skb_put+0x11b/0x210
[  477.156529][T24638]  netlink_sendmsg+0x805/0xb30
[  477.156543][T24638]  ? __pfx_netlink_sendmsg+0x10/0x10
[  477.156553][T24638]  ? aa_sock_msg_perm+0x94/0x160
[  477.156564][T24638]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  477.156572][T24638]  ? __pfx_netlink_sendmsg+0x10/0x10
[  477.156581][T24638]  __sock_sendmsg+0x21c/0x270
[  477.156595][T24638]  ____sys_sendmsg+0x505/0x830
[  477.156608][T24638]  ? __pfx_____sys_sendmsg+0x10/0x10
[  477.156622][T24638]  ? import_iovec+0x74/0xa0
[  477.156635][T24638]  ___sys_sendmsg+0x21f/0x2a0
[  477.156646][T24638]  ? __pfx____sys_sendmsg+0x10/0x10
[  477.156674][T24638]  ? __fget_files+0x2a/0x420
[  477.156685][T24638]  ? __fget_files+0x3a0/0x420
[  477.156701][T24638]  __x64_sys_sendmsg+0x19b/0x260
[  477.156712][T24638]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  477.156727][T24638]  ? rcu_is_watching+0x15/0xb0
[  477.156739][T24638]  ? do_syscall_64+0xbe/0x3b0
[  477.156750][T24638]  do_syscall_64+0xfa/0x3b0
[  477.156758][T24638]  ? lockdep_hardirqs_on+0x9c/0x150
[  477.156765][T24638]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  477.156775][T24638]  ? exc_page_fault+0x9f/0xf0
[  477.156789][T24638]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  477.156798][T24638] RIP: 0033:0x7f584638e9a9
[  477.156807][T24638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  477.156816][T24638] RSP: 002b:00007f584718e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  477.156826][T24638] RAX: ffffffffffffffda RBX: 00007f58465b5fa0 RCX: 00007f584638e9a9
[  477.156833][T24638] RDX: 0000000000000380 RSI: 0000200000000040 RDI: 0000000000000004
[  477.156839][T24638] RBP: 00007f5846410d69 R08: 0000000000000000 R09: 0000000000000000
[  477.156844][T24638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  477.156850][T24638] R13: 0000000000000000 R14: 00007f58465b5fa0 R15: 00007ffffcaa5488
[  477.156865][T24638]  </TASK>
[  477.189277][T24640] netlink: 'syz.1.6097': attribute type 1 has an invalid length.
[  477.329889][T24644] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  477.333568][T24644] CPU: 0 UID: 0 PID: 24644 Comm: syz.0.6099 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4-dirty #0 PREEMPT(full) 
[  477.333583][T24644] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  477.333589][T24644] Call Trace:
[  477.333595][T24644]  <TASK>
[  477.333600][T24644]  dump_stack_lvl+0x189/0x250
[  477.333617][T24644]  ? __pfx_dump_stack_lvl+0x10/0x10
[  477.333628][T24644]  ? __pfx__printk+0x10/0x10
[  477.333639][T24644]  ? kernfs_path_from_node+0x2c/0x260
[  477.333653][T24644]  ? kernfs_path_from_node+0x2c/0x260
[  477.333665][T24644]  ? kernfs_path_from_node+0x2c/0x260
[  477.333677][T24644]  ? kernfs_path_from_node+0x22c/0x260
[  477.333689][T24644]  ? kernfs_path_from_node+0x2c/0x260
[  477.333702][T24644]  sysfs_warn_dup+0x8e/0xa0
[  477.333714][T24644]  sysfs_do_create_link_sd+0xc0/0x110
[  477.333727][T24644]  device_add_class_symlinks+0x1cf/0x240
[  477.333741][T24644]  device_add+0x475/0xb50
[  477.333755][T24644]  wiphy_register+0x1ba6/0x28d0
[  477.333773][T24644]  ? __pfx_wiphy_register+0x10/0x10
[  477.333781][T24644]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  477.333796][T24644]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  477.333808][T24644]  ieee80211_register_hw+0x3425/0x4080
[  477.333827][T24644]  ? ieee80211_register_hw+0x1421/0x4080
[  477.333842][T24644]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  477.333855][T24644]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  477.333871][T24644]  ? __hrtimer_setup+0x187/0x210
[  477.333880][T24644]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  477.333892][T24644]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  477.333916][T24644]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  477.333924][T24644]  ? trace_kmalloc+0x1f/0xd0
[  477.333935][T24644]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  477.333946][T24644]  ? kstrndup+0xbf/0x160
[  477.333959][T24644]  hwsim_new_radio_nl+0xea4/0x1b10
[  477.333970][T24644]  ? __pfx___nla_validate_parse+0x10/0x10
[  477.333987][T24644]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  477.334001][T24644]  ? __nla_parse+0x40/0x60
[  477.334012][T24644]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  477.334029][T24644]  genl_family_rcv_msg_doit+0x215/0x300
[  477.334044][T24644]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  477.334086][T24644]  ? bpf_lsm_capable+0x9/0x20
[  477.334098][T24644]  ? security_capable+0x7e/0x2e0
[  477.334111][T24644]  genl_rcv_msg+0x60e/0x790
[  477.334126][T24644]  ? __pfx_genl_rcv_msg+0x10/0x10
[  477.334137][T24644]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  477.334152][T24644]  netlink_rcv_skb+0x208/0x470
[  477.334161][T24644]  ? __lock_acquire+0xab9/0xd20
[  477.334170][T24644]  ? __pfx_genl_rcv_msg+0x10/0x10
[  477.334181][T24644]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  477.334199][T24644]  ? down_read+0x1ad/0x2e0
[  477.334210][T24644]  genl_rcv+0x28/0x40
[  477.334225][T24644]  netlink_unicast+0x82f/0x9e0
[  477.334243][T24644]  ? __pfx_netlink_unicast+0x10/0x10
[  477.334257][T24644]  ? netlink_sendmsg+0x642/0xb30
[  477.334264][T24644]  ? skb_put+0x11b/0x210
[  477.334277][T24644]  netlink_sendmsg+0x805/0xb30
[  477.334291][T24644]  ? __pfx_netlink_sendmsg+0x10/0x10
[  477.334302][T24644]  ? aa_sock_msg_perm+0x94/0x160
[  477.334312][T24644]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  477.334320][T24644]  ? __pfx_netlink_sendmsg+0x10/0x10
[  477.334329][T24644]  __sock_sendmsg+0x21c/0x270
[  477.334343][T24644]  ____sys_sendmsg+0x505/0x830
[  477.334356][T24644]  ? __pfx_____sys_sendmsg+0x10/0x10
[  477.334371][T24644]  ? import_iovec+0x74/0xa0
[  477.334383][T24644]  ___sys_sendmsg+0x21f/0x2a0
[  477.334394][T24644]  ? __pfx____sys_sendmsg+0x10/0x10
[  477.334422][T24644]  ? __fget_files+0x2a/0x420
[  477.334433][T24644]  ? __fget_files+0x3a0/0x420
[  477.334450][T24644]  __x64_sys_sendmsg+0x19b/0x260
[  477.334461][T24644]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  477.334476][T24644]  ? rcu_is_watching+0x15/0xb0
[  477.334488][T24644]  ? do_syscall_64+0xbe/0x3b0
[  477.334500][T24644]  do_syscall_64+0xfa/0x3b0
[  477.334508][T24644]  ? lockdep_hardirqs_on+0x9c/0x150
[  477.334516][T24644]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  477.334525][T24644]  ? exc_page_fault+0x9f/0xf0
[  477.334539][T24644]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  477.334547][T24644] RIP: 0033:0x7f584638e9a9
[  477.334558][T24644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  477.334567][T24644] RSP: 002b:00007f584718e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  477.334577][T24644] RAX: ffffffffffffffda RBX: 00007f58465b5fa0 RCX: 00007f584638e9a9
[  477.334584][T24644] RDX: 0000000000000380 RSI: 0000200000000040 RDI: 0000000000000004
[  477.334591][T24644] RBP: 00007f5846410d69 R08: 0000000000000000 R09: 0000000000000000
[  477.334597][T24644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  477.334602][T24644] R13: 0000000000000000 R14: 00007f58465b5fa0 R15: 00007ffffcaa5488
[  477.334617][T24644]  </TASK>
[  477.599117][T24655] IPVS: Error connecting to the multicast addr
[  477.660425][T24655] netlink: 'syz.1.6103': attribute type 16 has an invalid length.
[  477.663838][T24655] tipc: Resetting bearer <eth:syzkaller0>
[  478.004245][T24689] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  478.011044][T24689] CPU: 1 UID: 0 PID: 24689 Comm: syz.0.6112 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4-dirty #0 PREEMPT(full) 
[  478.011060][T24689] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  478.011066][T24689] Call Trace:
[  478.011071][T24689]  <TASK>
[  478.011076][T24689]  dump_stack_lvl+0x189/0x250
[  478.011094][T24689]  ? __pfx_dump_stack_lvl+0x10/0x10
[  478.011105][T24689]  ? __pfx__printk+0x10/0x10
[  478.011116][T24689]  ? kernfs_path_from_node+0x2c/0x260
[  478.011130][T24689]  ? kernfs_path_from_node+0x2c/0x260
[  478.011142][T24689]  ? kernfs_path_from_node+0x2c/0x260
[  478.011155][T24689]  ? kernfs_path_from_node+0x22c/0x260
[  478.011165][T24689]  ? kernfs_path_from_node+0x2c/0x260
[  478.011179][T24689]  sysfs_warn_dup+0x8e/0xa0
[  478.011190][T24689]  sysfs_do_create_link_sd+0xc0/0x110
[  478.011203][T24689]  device_add_class_symlinks+0x1cf/0x240
[  478.011218][T24689]  device_add+0x475/0xb50
[  478.011231][T24689]  wiphy_register+0x1ba6/0x28d0
[  478.011248][T24689]  ? __pfx_wiphy_register+0x10/0x10
[  478.011256][T24689]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  478.011271][T24689]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  478.011283][T24689]  ieee80211_register_hw+0x3425/0x4080
[  478.011304][T24689]  ? ieee80211_register_hw+0x1421/0x4080
[  478.011319][T24689]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  478.011331][T24689]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  478.011348][T24689]  ? __hrtimer_setup+0x187/0x210
[  478.011357][T24689]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  478.011368][T24689]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  478.011392][T24689]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  478.011400][T24689]  ? trace_kmalloc+0x1f/0xd0
[  478.011410][T24689]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  478.011421][T24689]  ? kstrndup+0xbf/0x160
[  478.011435][T24689]  hwsim_new_radio_nl+0xea4/0x1b10
[  478.011445][T24689]  ? __pfx___nla_validate_parse+0x10/0x10
[  478.011467][T24689]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  478.011483][T24689]  ? __nla_parse+0x40/0x60
[  478.011494][T24689]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  478.011510][T24689]  genl_family_rcv_msg_doit+0x215/0x300
[  478.011526][T24689]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  478.011543][T24689]  ? bpf_lsm_capable+0x9/0x20
[  478.011553][T24689]  ? security_capable+0x7e/0x2e0
[  478.011565][T24689]  genl_rcv_msg+0x60e/0x790
[  478.011579][T24689]  ? __pfx_genl_rcv_msg+0x10/0x10
[  478.011588][T24689]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  478.011608][T24689]  netlink_rcv_skb+0x208/0x470
[  478.011616][T24689]  ? __lock_acquire+0xab9/0xd20
[  478.011625][T24689]  ? __pfx_genl_rcv_msg+0x10/0x10
[  478.011637][T24689]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  478.011656][T24689]  ? down_read+0x1ad/0x2e0
[  478.011668][T24689]  genl_rcv+0x28/0x40
[  478.011677][T24689]  netlink_unicast+0x82f/0x9e0
[  478.011695][T24689]  ? __pfx_netlink_unicast+0x10/0x10
[  478.011707][T24689]  ? netlink_sendmsg+0x642/0xb30
[  478.011715][T24689]  ? skb_put+0x11b/0x210
[  478.011727][T24689]  netlink_sendmsg+0x805/0xb30
[  478.011739][T24689]  ? __pfx_netlink_sendmsg+0x10/0x10
[  478.011750][T24689]  ? aa_sock_msg_perm+0x94/0x160
[  478.011760][T24689]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  478.011767][T24689]  ? __pfx_netlink_sendmsg+0x10/0x10
[  478.011776][T24689]  __sock_sendmsg+0x21c/0x270
[  478.011791][T24689]  ____sys_sendmsg+0x505/0x830
[  478.011804][T24689]  ? __pfx_____sys_sendmsg+0x10/0x10
[  478.011818][T24689]  ? import_iovec+0x74/0xa0
[  478.011831][T24689]  ___sys_sendmsg+0x21f/0x2a0
[  478.011842][T24689]  ? __pfx____sys_sendmsg+0x10/0x10
[  478.011869][T24689]  ? __fget_files+0x2a/0x420
[  478.011881][T24689]  ? __fget_files+0x3a0/0x420
[  478.011897][T24689]  __x64_sys_sendmsg+0x19b/0x260
[  478.011908][T24689]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  478.011927][T24689]  ? do_syscall_64+0xbe/0x3b0
[  478.011939][T24689]  do_syscall_64+0xfa/0x3b0
[  478.011947][T24689]  ? lockdep_hardirqs_on+0x9c/0x150
[  478.011955][T24689]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  478.011964][T24689]  ? exc_page_fault+0x9f/0xf0
[  478.011978][T24689]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  478.011986][T24689] RIP: 0033:0x7f584638e9a9
[  478.011995][T24689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  478.012034][T24689] RSP: 002b:00007f584718e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  478.012046][T24689] RAX: ffffffffffffffda RBX: 00007f58465b5fa0 RCX: 00007f584638e9a9
[  478.012057][T24689] RDX: 0000000000000380 RSI: 0000200000000040 RDI: 0000000000000004
[  478.012064][T24689] RBP: 00007f5846410d69 R08: 0000000000000000 R09: 0000000000000000
[  478.012069][T24689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  478.012074][T24689] R13: 0000000000000000 R14: 00007f58465b5fa0 R15: 00007ffffcaa5488
[  478.012090][T24689]  </TASK>
[  478.641290][T24702] __nla_validate_parse: 2 callbacks suppressed
[  478.641309][T24702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6116'.
[  478.647531][T24702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6116'.
[  478.713986][T24710] IPVS: Error connecting to the multicast addr
[  478.754669][T24715] tipc: Resetting bearer <eth:team0>
[  478.775472][T24720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6118'.
[  478.846725][T24724] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  478.852660][T24724] CPU: 0 UID: 0 PID: 24724 Comm: syz.0.6122 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4-dirty #0 PREEMPT(full) 
[  478.852676][T24724] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  478.852682][T24724] Call Trace:
[  478.852686][T24724]  <TASK>
[  478.852692][T24724]  dump_stack_lvl+0x189/0x250
[  478.852710][T24724]  ? __pfx_dump_stack_lvl+0x10/0x10
[  478.852721][T24724]  ? __pfx__printk+0x10/0x10
[  478.852733][T24724]  ? kernfs_path_from_node+0x2c/0x260
[  478.852745][T24724]  ? kernfs_path_from_node+0x2c/0x260
[  478.852757][T24724]  ? kernfs_path_from_node+0x2c/0x260
[  478.852769][T24724]  ? kernfs_path_from_node+0x22c/0x260
[  478.852779][T24724]  ? kernfs_path_from_node+0x2c/0x260
[  478.852792][T24724]  sysfs_warn_dup+0x8e/0xa0
[  478.852805][T24724]  sysfs_do_create_link_sd+0xc0/0x110
[  478.852817][T24724]  device_add_class_symlinks+0x1cf/0x240
[  478.852832][T24724]  device_add+0x475/0xb50
[  478.852845][T24724]  wiphy_register+0x1ba6/0x28d0
[  478.852863][T24724]  ? __pfx_wiphy_register+0x10/0x10
[  478.852871][T24724]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  478.852885][T24724]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  478.852899][T24724]  ieee80211_register_hw+0x3425/0x4080
[  478.852918][T24724]  ? ieee80211_register_hw+0x1421/0x4080
[  478.852933][T24724]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  478.852973][T24724]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  478.852991][T24724]  ? __hrtimer_setup+0x187/0x210
[  478.853002][T24724]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  478.853014][T24724]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  478.853038][T24724]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  478.853046][T24724]  ? trace_kmalloc+0x1f/0xd0
[  478.853057][T24724]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  478.853069][T24724]  ? kstrndup+0xbf/0x160
[  478.853082][T24724]  hwsim_new_radio_nl+0xea4/0x1b10
[  478.853092][T24724]  ? __pfx___nla_validate_parse+0x10/0x10
[  478.853122][T24724]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  478.853148][T24724]  ? __nla_parse+0x40/0x60
[  478.853165][T24724]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  478.853191][T24724]  genl_family_rcv_msg_doit+0x215/0x300
[  478.853217][T24724]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  478.853248][T24724]  ? bpf_lsm_capable+0x9/0x20
[  478.853267][T24724]  ? security_capable+0x7e/0x2e0
[  478.853280][T24724]  genl_rcv_msg+0x60e/0x790
[  478.853294][T24724]  ? __pfx_genl_rcv_msg+0x10/0x10
[  478.853304][T24724]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  478.853319][T24724]  netlink_rcv_skb+0x208/0x470
[  478.853327][T24724]  ? __lock_acquire+0xab9/0xd20
[  478.853336][T24724]  ? __pfx_genl_rcv_msg+0x10/0x10
[  478.853347][T24724]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  478.853382][T24724]  ? down_read+0x1ad/0x2e0
[  478.853396][T24724]  genl_rcv+0x28/0x40
[  478.853406][T24724]  netlink_unicast+0x82f/0x9e0
[  478.853425][T24724]  ? __pfx_netlink_unicast+0x10/0x10
[  478.853438][T24724]  ? netlink_sendmsg+0x642/0xb30
[  478.853446][T24724]  ? skb_put+0x11b/0x210
[  478.853458][T24724]  netlink_sendmsg+0x805/0xb30
[  478.853471][T24724]  ? __pfx_netlink_sendmsg+0x10/0x10
[  478.853482][T24724]  ? aa_sock_msg_perm+0x94/0x160
[  478.853492][T24724]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  478.853500][T24724]  ? __pfx_netlink_sendmsg+0x10/0x10
[  478.853509][T24724]  __sock_sendmsg+0x21c/0x270
[  478.853523][T24724]  ____sys_sendmsg+0x505/0x830
[  478.853537][T24724]  ? __pfx_____sys_sendmsg+0x10/0x10
[  478.853551][T24724]  ? import_iovec+0x74/0xa0
[  478.853563][T24724]  ___sys_sendmsg+0x21f/0x2a0
[  478.853574][T24724]  ? __pfx____sys_sendmsg+0x10/0x10
[  478.853602][T24724]  ? __fget_files+0x2a/0x420
[  478.853614][T24724]  ? __fget_files+0x3a0/0x420
[  478.853630][T24724]  __x64_sys_sendmsg+0x19b/0x260
[  478.853641][T24724]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  478.853656][T24724]  ? rcu_is_watching+0x15/0xb0
[  478.853668][T24724]  ? do_syscall_64+0xbe/0x3b0
[  478.853680][T24724]  do_syscall_64+0xfa/0x3b0
[  478.853688][T24724]  ? lockdep_hardirqs_on+0x9c/0x150
[  478.853696][T24724]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  478.853704][T24724]  ? exc_page_fault+0x9f/0xf0
[  478.853719][T24724]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  478.853727][T24724] RIP: 0033:0x7f584638e9a9
[  478.853737][T24724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  478.853745][T24724] RSP: 002b:00007f584718e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  478.853756][T24724] RAX: ffffffffffffffda RBX: 00007f58465b5fa0 RCX: 00007f584638e9a9
[  478.853762][T24724] RDX: 0000000000000380 RSI: 0000200000000040 RDI: 0000000000000004
[  478.853769][T24724] RBP: 00007f5846410d69 R08: 0000000000000000 R09: 0000000000000000
[  478.853775][T24724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  478.853780][T24724] R13: 0000000000000000 R14: 00007f58465b5fa0 R15: 00007ffffcaa5488
[  478.853795][T24724]  </TASK>
[  479.124125][T24730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6125'.
[  479.422199][T24755] syzkaller1: entered promiscuous mode
[  479.424451][T24755] syzkaller1: entered allmulticast mode
[  479.763947][T24778] validate_nla: 6 callbacks suppressed
[  479.763965][T24778] netlink: 'syz.1.6142': attribute type 39 has an invalid length.
[  479.795906][T24780] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  479.800845][T24780] CPU: 1 UID: 0 PID: 24780 Comm: syz.2.6143 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4-dirty #0 PREEMPT(full) 
[  479.800899][T24780] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  479.800912][T24780] Call Trace:
[  479.800921][T24780]  <TASK>
[  479.800930][T24780]  dump_stack_lvl+0x189/0x250
[  479.800960][T24780]  ? __pfx_dump_stack_lvl+0x10/0x10
[  479.800979][T24780]  ? __pfx__printk+0x10/0x10
[  479.801000][T24780]  ? kernfs_path_from_node+0x2c/0x260
[  479.801026][T24780]  ? kernfs_path_from_node+0x2c/0x260
[  479.801048][T24780]  ? kernfs_path_from_node+0x2c/0x260
[  479.801072][T24780]  ? kernfs_path_from_node+0x22c/0x260
[  479.801092][T24780]  ? kernfs_path_from_node+0x2c/0x260
[  479.801118][T24780]  sysfs_warn_dup+0x8e/0xa0
[  479.801141][T24780]  sysfs_do_create_link_sd+0xc0/0x110
[  479.801165][T24780]  device_add_class_symlinks+0x1cf/0x240
[  479.801192][T24780]  device_add+0x475/0xb50
[  479.801218][T24780]  wiphy_register+0x1ba6/0x28d0
[  479.801249][T24780]  ? __pfx_wiphy_register+0x10/0x10
[  479.801263][T24780]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  479.801290][T24780]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  479.801316][T24780]  ieee80211_register_hw+0x3425/0x4080
[  479.801357][T24780]  ? ieee80211_register_hw+0x1421/0x4080
[  479.801386][T24780]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  479.801434][T24780]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  479.801469][T24780]  ? __hrtimer_setup+0x187/0x210
[  479.801487][T24780]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  479.801510][T24780]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  479.801555][T24780]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  479.801572][T24780]  ? trace_kmalloc+0x1f/0xd0
[  479.801590][T24780]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  479.801610][T24780]  ? kstrndup+0xbf/0x160
[  479.801635][T24780]  hwsim_new_radio_nl+0xea4/0x1b10
[  479.801653][T24780]  ? __pfx___nla_validate_parse+0x10/0x10
[  479.801685][T24780]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  479.801713][T24780]  ? __nla_parse+0x40/0x60
[  479.801734][T24780]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  479.801764][T24780]  genl_family_rcv_msg_doit+0x215/0x300
[  479.801791][T24780]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  479.801823][T24780]  ? bpf_lsm_capable+0x9/0x20
[  479.801843][T24780]  ? security_capable+0x7e/0x2e0
[  479.801864][T24780]  genl_rcv_msg+0x60e/0x790
[  479.801922][T24780]  ? __pfx_genl_rcv_msg+0x10/0x10
[  479.801943][T24780]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  479.801974][T24780]  netlink_rcv_skb+0x208/0x470
[  479.801989][T24780]  ? __lock_acquire+0xab9/0xd20
[  479.802005][T24780]  ? __pfx_genl_rcv_msg+0x10/0x10
[  479.802027][T24780]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  479.802060][T24780]  ? down_read+0x1ad/0x2e0
[  479.802079][T24780]  genl_rcv+0x28/0x40
[  479.802096][T24780]  netlink_unicast+0x82f/0x9e0
[  479.802128][T24780]  ? __pfx_netlink_unicast+0x10/0x10
[  479.802153][T24780]  ? netlink_sendmsg+0x642/0xb30
[  479.802166][T24780]  ? skb_put+0x11b/0x210
[  479.802187][T24780]  netlink_sendmsg+0x805/0xb30
[  479.802213][T24780]  ? __pfx_netlink_sendmsg+0x10/0x10
[  479.802231][T24780]  ? aa_sock_msg_perm+0x94/0x160
[  479.802246][T24780]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  479.802261][T24780]  ? __pfx_netlink_sendmsg+0x10/0x10
[  479.802278][T24780]  __sock_sendmsg+0x21c/0x270
[  479.802303][T24780]  ____sys_sendmsg+0x505/0x830
[  479.802323][T24780]  ? __pfx_____sys_sendmsg+0x10/0x10
[  479.802352][T24780]  ? import_iovec+0x74/0xa0
[  479.802378][T24780]  ___sys_sendmsg+0x21f/0x2a0
[  479.802398][T24780]  ? __pfx____sys_sendmsg+0x10/0x10
[  479.802438][T24780]  ? __fget_files+0x2a/0x420
[  479.802457][T24780]  ? __fget_files+0x3a0/0x420
[  479.802485][T24780]  __x64_sys_sendmsg+0x19b/0x260
[  479.802504][T24780]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  479.802525][T24780]  ? rcu_is_watching+0x15/0xb0
[  479.802543][T24780]  ? do_syscall_64+0xbe/0x3b0
[  479.802562][T24780]  do_syscall_64+0xfa/0x3b0
[  479.802576][T24780]  ? lockdep_hardirqs_on+0x9c/0x150
[  479.802591][T24780]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.802607][T24780]  ? exc_page_fault+0x9f/0xf0
[  479.802633][T24780]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.802650][T24780] RIP: 0033:0x7f262078e9a9
[  479.802663][T24780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  479.802679][T24780] RSP: 002b:00007f26216a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  479.802696][T24780] RAX: ffffffffffffffda RBX: 00007f26209b5fa0 RCX: 00007f262078e9a9
[  479.802709][T24780] RDX: 0000000000000380 RSI: 0000200000000040 RDI: 0000000000000004
[  479.802719][T24780] RBP: 00007f2620810d69 R08: 0000000000000000 R09: 0000000000000000
[  479.802729][T24780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  479.802738][T24780] R13: 0000000000000000 R14: 00007f26209b5fa0 R15: 00007ffd46901628
[  479.802764][T24780]  </TASK>
[  480.052834][T24783] IPv6: NLM_F_CREATE should be specified when creating new route
[  480.181077][T24794] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  480.185178][T24794] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  480.190921][T24794] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  480.224690][T24800] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6150'.
[  480.317994][T24811] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6155'.
[  480.339893][T24811] 8021q: adding VLAN 0 to HW filter on device bond21
[  480.431603][T24821] netlink: 'syz.2.6159': attribute type 1 has an invalid length.
[  480.434511][T24821] netlink: 'syz.2.6159': attribute type 2 has an invalid length.
[  480.443678][T24823] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6160'.
[  480.550515][T24821] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6159'.
[  480.608586][T24829] netlink: 'syz.0.6161': attribute type 83 has an invalid length.
[  480.612614][T24829] tc_dump_action: action bad kind
[  480.618212][T24829] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.6161'.
[  481.126182][T24833] netlink: 6 bytes leftover after parsing attributes in process `syz.1.6163'.
[  481.129327][T24833] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  481.137675][T24834] netlink: 'syz.1.6163': attribute type 1 has an invalid length.
[  481.294418][T24837] IPVS: Error connecting to the multicast addr
[  481.359036][T24837] netlink: 'syz.1.6164': attribute type 16 has an invalid length.
[  481.362172][T24837] netlink: 'syz.1.6164': attribute type 17 has an invalid length.
[  481.461554][T24851] netlink: 'syz.2.6170': attribute type 39 has an invalid length.
[  481.630176][T24861] 8021q: adding VLAN 0 to HW filter on device team0
[  481.633185][T24861] tipc: Resetting bearer <eth:team0>
[  481.644848][T24861] 8021q: adding VLAN 0 to HW filter on device batadv0
[  481.673462][T24861] veth0_to_bond: left allmulticast mode
[  481.690383][T24861] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  481.693788][T24861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  481.708545][T24861] 8021q: adding VLAN 0 to HW filter on device bond1
[  481.712377][T24861] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  481.715588][T24861] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  481.722419][T24861] A link change request failed with some changes committed already. Interface syztnl2 may have been left with an inconsistent configuration, please check.
[  481.760557][ T5891] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  481.812996][T24868] mac80211_hwsim hwsim14 wlan0: left promiscuous mode
[  481.816186][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  481.819014][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  481.958708][T24875] 8021q: adding VLAN 0 to HW filter on device 
[  481.963335][T24875] 8021q: adding VLAN 0 to HW filter on device batadv0
[  481.982904][T24875] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  481.989945][T24875] 8021q: adding VLAN 0 to HW filter on device hsr0
[  481.996775][T24875] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  482.000339][T24875] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  482.002810][T24875] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  482.006427][T24875] tipc: Resetting bearer <eth:syzkaller0>
[  482.008438][T24875] tipc: Resetting bearer <eth:syzkaller0>
[  482.017176][T24875] 8021q: adding VLAN 0 to HW filter on device bond1
[  482.034153][T24875] 8021q: adding VLAN 0 to HW filter on device bond2
[  482.039284][T24875] 8021q: adding VLAN 0 to HW filter on device bond3
[  482.051755][T24875] 8021q: adding VLAN 0 to HW filter on device bond4
[  482.056239][T24875] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  482.059553][T24875] 8021q: adding VLAN 0 to HW filter on device bond5
[  482.062322][T24875] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  482.069627][T24875] 8021q: adding VLAN 0 to HW filter on device bond6
[  482.072153][T24875] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network
[  482.078844][T24875] 8021q: adding VLAN 0 to HW filter on device bond7
[  482.082644][T24875] 8021q: adding VLAN 0 to HW filter on device bond8
[  482.089601][T24875] 8021q: adding VLAN 0 to HW filter on device bond9
[  482.093223][T24875] 8021q: adding VLAN 0 to HW filter on device bond10
[  482.097806][T24875] vlan0: left promiscuous mode
[  482.099675][T24875] bond10: left promiscuous mode
[  482.107226][T24875] 8021q: adding VLAN 0 to HW filter on device bond0
[  482.111607][T24875] 8021q: adding VLAN 0 to HW filter on device bond11
[  482.142022][T24875] 8021q: adding VLAN 0 to HW filter on device bond12
[  482.147772][T24875] A link change request failed with some changes committed already. Interface vxlan2 may have been left with an inconsistent configuration, please check.
[  482.197063][ T5855] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  482.200325][ T5855] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  482.203536][ T5855] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  482.207467][ T5855] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  482.215804][ T5855] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  482.219193][ T1271] hsr0 speed is unknown, defaulting to 1000
[  482.221765][ T5855] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  482.225051][ T5855] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  482.231893][ T1271] syz2: Port: 1 Link ACTIVE
[  482.235116][ T5855] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  482.424783][T24886] netlink: 'syz.2.6180': attribute type 16 has an invalid length.
[  482.428574][T24886] netlink: 'syz.2.6180': attribute type 17 has an invalid length.
[  482.442593][T24886] IPv6: NLM_F_REPLACE set, but no existing node found!
[  482.487012][T24888] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  482.491370][T24888] CPU: 1 UID: 0 PID: 24888 Comm: syz.2.6181 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4-dirty #0 PREEMPT(full) 
[  482.491385][T24888] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  482.491392][T24888] Call Trace:
[  482.491398][T24888]  <TASK>
[  482.491403][T24888]  dump_stack_lvl+0x189/0x250
[  482.491421][T24888]  ? __pfx_dump_stack_lvl+0x10/0x10
[  482.491432][T24888]  ? __pfx__printk+0x10/0x10
[  482.491445][T24888]  ? kernfs_path_from_node+0x2c/0x260
[  482.491460][T24888]  ? kernfs_path_from_node+0x2c/0x260
[  482.491472][T24888]  ? kernfs_path_from_node+0x2c/0x260
[  482.491486][T24888]  ? kernfs_path_from_node+0x22c/0x260
[  482.491499][T24888]  ? kernfs_path_from_node+0x2c/0x260
[  482.491513][T24888]  sysfs_warn_dup+0x8e/0xa0
[  482.491525][T24888]  sysfs_do_create_link_sd+0xc0/0x110
[  482.491539][T24888]  device_add_class_symlinks+0x1cf/0x240
[  482.491554][T24888]  device_add+0x475/0xb50
[  482.491567][T24888]  wiphy_register+0x1ba6/0x28d0
[  482.491586][T24888]  ? __pfx_wiphy_register+0x10/0x10
[  482.491594][T24888]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  482.491609][T24888]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  482.491622][T24888]  ieee80211_register_hw+0x3425/0x4080
[  482.491642][T24888]  ? ieee80211_register_hw+0x1421/0x4080
[  482.491657][T24888]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  482.491671][T24888]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  482.491715][T24888]  ? __hrtimer_setup+0x187/0x210
[  482.491725][T24888]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  482.491737][T24888]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  482.491761][T24888]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  482.491769][T24888]  ? trace_kmalloc+0x1f/0xd0
[  482.491780][T24888]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  482.491792][T24888]  ? kstrndup+0xbf/0x160
[  482.491808][T24888]  hwsim_new_radio_nl+0xea4/0x1b10
[  482.491818][T24888]  ? __pfx___nla_validate_parse+0x10/0x10
[  482.491835][T24888]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  482.491850][T24888]  ? __nla_parse+0x40/0x60
[  482.491867][T24888]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  482.491884][T24888]  genl_family_rcv_msg_doit+0x215/0x300
[  482.491900][T24888]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  482.491918][T24888]  ? bpf_lsm_capable+0x9/0x20
[  482.491932][T24888]  ? security_capable+0x7e/0x2e0
[  482.491952][T24888]  genl_rcv_msg+0x60e/0x790
[  482.491977][T24888]  ? __pfx_genl_rcv_msg+0x10/0x10
[  482.491993][T24888]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  482.492013][T24888]  netlink_rcv_skb+0x208/0x470
[  482.492029][T24888]  ? __lock_acquire+0xab9/0xd20
[  482.492045][T24888]  ? __pfx_genl_rcv_msg+0x10/0x10
[  482.492060][T24888]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  482.492094][T24888]  ? down_read+0x1ad/0x2e0
[  482.492109][T24888]  genl_rcv+0x28/0x40
[  482.492119][T24888]  netlink_unicast+0x82f/0x9e0
[  482.492136][T24888]  ? __pfx_netlink_unicast+0x10/0x10
[  482.492149][T24888]  ? netlink_sendmsg+0x642/0xb30
[  482.492156][T24888]  ? skb_put+0x11b/0x210
[  482.492172][T24888]  netlink_sendmsg+0x805/0xb30
[  482.492196][T24888]  ? __pfx_netlink_sendmsg+0x10/0x10
[  482.492214][T24888]  ? aa_sock_msg_perm+0x94/0x160
[  482.492231][T24888]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  482.492246][T24888]  ? __pfx_netlink_sendmsg+0x10/0x10
[  482.492262][T24888]  __sock_sendmsg+0x21c/0x270
[  482.492288][T24888]  ____sys_sendmsg+0x505/0x830
[  482.492309][T24888]  ? __pfx_____sys_sendmsg+0x10/0x10
[  482.492335][T24888]  ? import_iovec+0x74/0xa0
[  482.492359][T24888]  ___sys_sendmsg+0x21f/0x2a0
[  482.492379][T24888]  ? __pfx____sys_sendmsg+0x10/0x10
[  482.492430][T24888]  ? __fget_files+0x2a/0x420
[  482.492452][T24888]  ? __fget_files+0x3a0/0x420
[  482.492482][T24888]  __x64_sys_sendmsg+0x19b/0x260
[  482.492502][T24888]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  482.492536][T24888]  ? do_syscall_64+0xbe/0x3b0
[  482.492557][T24888]  do_syscall_64+0xfa/0x3b0
[  482.492571][T24888]  ? lockdep_hardirqs_on+0x9c/0x150
[  482.492586][T24888]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  482.492600][T24888]  ? exc_page_fault+0x9f/0xf0
[  482.492630][T24888]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  482.492645][T24888] RIP: 0033:0x7f262078e9a9
[  482.492660][T24888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  482.492703][T24888] RSP: 002b:00007f26216a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  482.492724][T24888] RAX: ffffffffffffffda RBX: 00007f26209b5fa0 RCX: 00007f262078e9a9
[  482.492737][T24888] RDX: 0000000000000380 RSI: 0000200000000040 RDI: 0000000000000004
[  482.492748][T24888] RBP: 00007f2620810d69 R08: 0000000000000000 R09: 0000000000000000
[  482.492759][T24888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  482.492769][T24888] R13: 0000000000000000 R14: 00007f26209b5fa0 R15: 00007ffd46901628
[  482.492797][T24888]  </TASK>
[  483.252435][T21472] nci: nci_rsp_packet: unknown rsp opcode 0x73a
[  483.353431][T24915] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  483.358465][T24915] CPU: 1 UID: 0 PID: 24915 Comm: syz.2.6192 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4-dirty #0 PREEMPT(full) 
[  483.358492][T24915] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  483.358503][T24915] Call Trace:
[  483.358512][T24915]  <TASK>
[  483.358522][T24915]  dump_stack_lvl+0x189/0x250
[  483.358546][T24915]  ? __pfx_dump_stack_lvl+0x10/0x10
[  483.358557][T24915]  ? __pfx__printk+0x10/0x10
[  483.358569][T24915]  ? kernfs_path_from_node+0x2c/0x260
[  483.358584][T24915]  ? kernfs_path_from_node+0x2c/0x260
[  483.358596][T24915]  ? kernfs_path_from_node+0x2c/0x260
[  483.358643][T24915]  ? kernfs_path_from_node+0x22c/0x260
[  483.358665][T24915]  ? kernfs_path_from_node+0x2c/0x260
[  483.358686][T24915]  sysfs_warn_dup+0x8e/0xa0
[  483.358705][T24915]  sysfs_do_create_link_sd+0xc0/0x110
[  483.358729][T24915]  device_add_class_symlinks+0x1cf/0x240
[  483.358744][T24915]  device_add+0x475/0xb50
[  483.358765][T24915]  wiphy_register+0x1ba6/0x28d0
[  483.358786][T24915]  ? __pfx_wiphy_register+0x10/0x10
[  483.358795][T24915]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  483.358812][T24915]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  483.358827][T24915]  ieee80211_register_hw+0x3425/0x4080
[  483.358847][T24915]  ? ieee80211_register_hw+0x1421/0x4080
[  483.358862][T24915]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  483.358874][T24915]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  483.358892][T24915]  ? __hrtimer_setup+0x187/0x210
[  483.358901][T24915]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  483.358913][T24915]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  483.358936][T24915]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  483.358945][T24915]  ? trace_kmalloc+0x1f/0xd0
[  483.358956][T24915]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  483.358968][T24915]  ? kstrndup+0xbf/0x160
[  483.358983][T24915]  hwsim_new_radio_nl+0xea4/0x1b10
[  483.358994][T24915]  ? __pfx___nla_validate_parse+0x10/0x10
[  483.359013][T24915]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  483.359028][T24915]  ? __nla_parse+0x40/0x60
[  483.359040][T24915]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  483.359057][T24915]  genl_family_rcv_msg_doit+0x215/0x300
[  483.359072][T24915]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  483.359109][T24915]  ? bpf_lsm_capable+0x9/0x20
[  483.359120][T24915]  ? security_capable+0x7e/0x2e0
[  483.359133][T24915]  genl_rcv_msg+0x60e/0x790
[  483.359147][T24915]  ? __pfx_genl_rcv_msg+0x10/0x10
[  483.359159][T24915]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  483.359176][T24915]  netlink_rcv_skb+0x208/0x470
[  483.359185][T24915]  ? __lock_acquire+0xab9/0xd20
[  483.359194][T24915]  ? __pfx_genl_rcv_msg+0x10/0x10
[  483.359205][T24915]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  483.359232][T24915]  ? down_read+0x1ad/0x2e0
[  483.359249][T24915]  genl_rcv+0x28/0x40
[  483.359263][T24915]  netlink_unicast+0x82f/0x9e0
[  483.359293][T24915]  ? __pfx_netlink_unicast+0x10/0x10
[  483.359313][T24915]  ? netlink_sendmsg+0x642/0xb30
[  483.359325][T24915]  ? skb_put+0x11b/0x210
[  483.359344][T24915]  netlink_sendmsg+0x805/0xb30
[  483.359369][T24915]  ? __pfx_netlink_sendmsg+0x10/0x10
[  483.359387][T24915]  ? aa_sock_msg_perm+0x94/0x160
[  483.359405][T24915]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  483.359421][T24915]  ? __pfx_netlink_sendmsg+0x10/0x10
[  483.359440][T24915]  __sock_sendmsg+0x21c/0x270
[  483.359467][T24915]  ____sys_sendmsg+0x505/0x830
[  483.359490][T24915]  ? __pfx_____sys_sendmsg+0x10/0x10
[  483.359518][T24915]  ? import_iovec+0x74/0xa0
[  483.359543][T24915]  ___sys_sendmsg+0x21f/0x2a0
[  483.359568][T24915]  ? __pfx____sys_sendmsg+0x10/0x10
[  483.359644][T24915]  ? __fget_files+0x2a/0x420
[  483.359668][T24915]  ? __fget_files+0x3a0/0x420
[  483.359699][T24915]  __x64_sys_sendmsg+0x19b/0x260
[  483.359723][T24915]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  483.359768][T24915]  ? do_syscall_64+0xbe/0x3b0
[  483.359791][T24915]  do_syscall_64+0xfa/0x3b0
[  483.359807][T24915]  ? lockdep_hardirqs_on+0x9c/0x150
[  483.359823][T24915]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  483.359839][T24915]  ? exc_page_fault+0x9f/0xf0
[  483.359864][T24915]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  483.359879][T24915] RIP: 0033:0x7f262078e9a9
[  483.359894][T24915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  483.359909][T24915] RSP: 002b:00007f26216a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  483.359926][T24915] RAX: ffffffffffffffda RBX: 00007f26209b5fa0 RCX: 00007f262078e9a9
[  483.359939][T24915] RDX: 0000000000000380 RSI: 0000200000000040 RDI: 0000000000000004
[  483.359950][T24915] RBP: 00007f2620810d69 R08: 0000000000000000 R09: 0000000000000000
[  483.359961][T24915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  483.359970][T24915] R13: 0000000000000000 R14: 00007f26209b5fa0 R15: 00007ffd46901628
[  483.359998][T24915]  </TASK>
[  483.550059][T24856] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  483.680557][T24923] __nla_validate_parse: 15 callbacks suppressed
[  483.680574][T24923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6196'.
[  483.697053][T24923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6196'.
[  483.702198][T24924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6196'.
[  483.767665][T24928] IPVS: Unknown mcast interface: veth1_to_bridge
[  483.773303][T24928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6197'.
[  483.785359][T24928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6197'.
[  483.802679][ T5855] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  483.819605][T10603] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  483.828110][T10603] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  483.831426][T10603] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  484.057806][T24951] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  484.062421][T24951] CPU: 0 UID: 0 PID: 24951 Comm: syz.1.6204 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4-dirty #0 PREEMPT(full) 
[  484.062445][T24951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  484.062457][T24951] Call Trace:
[  484.062465][T24951]  <TASK>
[  484.062474][T24951]  dump_stack_lvl+0x189/0x250
[  484.062502][T24951]  ? __pfx_dump_stack_lvl+0x10/0x10
[  484.062522][T24951]  ? __pfx__printk+0x10/0x10
[  484.062543][T24951]  ? kernfs_path_from_node+0x2c/0x260
[  484.062596][T24951]  ? kernfs_path_from_node+0x2c/0x260
[  484.062618][T24951]  ? kernfs_path_from_node+0x2c/0x260
[  484.062643][T24951]  ? kernfs_path_from_node+0x22c/0x260
[  484.062664][T24951]  ? kernfs_path_from_node+0x2c/0x260
[  484.062690][T24951]  sysfs_warn_dup+0x8e/0xa0
[  484.062712][T24951]  sysfs_do_create_link_sd+0xc0/0x110
[  484.062736][T24951]  device_add_class_symlinks+0x1cf/0x240
[  484.062763][T24951]  device_add+0x475/0xb50
[  484.062789][T24951]  wiphy_register+0x1ba6/0x28d0
[  484.062820][T24951]  ? __pfx_wiphy_register+0x10/0x10
[  484.062834][T24951]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  484.062862][T24951]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  484.062886][T24951]  ieee80211_register_hw+0x3425/0x4080
[  484.062919][T24951]  ? ieee80211_register_hw+0x1421/0x4080
[  484.062951][T24951]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  484.062975][T24951]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  484.063006][T24951]  ? __hrtimer_setup+0x187/0x210
[  484.063024][T24951]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  484.063046][T24951]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  484.063088][T24951]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  484.063103][T24951]  ? trace_kmalloc+0x1f/0xd0
[  484.063121][T24951]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  484.063141][T24951]  ? kstrndup+0xbf/0x160
[  484.063165][T24951]  hwsim_new_radio_nl+0xea4/0x1b10
[  484.063184][T24951]  ? __pfx___nla_validate_parse+0x10/0x10
[  484.063215][T24951]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  484.063242][T24951]  ? __nla_parse+0x40/0x60
[  484.063263][T24951]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  484.063292][T24951]  genl_family_rcv_msg_doit+0x215/0x300
[  484.063319][T24951]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  484.063349][T24951]  ? bpf_lsm_capable+0x9/0x20
[  484.063369][T24951]  ? security_capable+0x7e/0x2e0
[  484.063390][T24951]  genl_rcv_msg+0x60e/0x790
[  484.063415][T24951]  ? __pfx_genl_rcv_msg+0x10/0x10
[  484.063434][T24951]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  484.063463][T24951]  netlink_rcv_skb+0x208/0x470
[  484.063477][T24951]  ? __lock_acquire+0xab9/0xd20
[  484.063492][T24951]  ? __pfx_genl_rcv_msg+0x10/0x10
[  484.063513][T24951]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  484.063545][T24951]  ? down_read+0x1ad/0x2e0
[  484.063593][T24951]  genl_rcv+0x28/0x40
[  484.063611][T24951]  netlink_unicast+0x82f/0x9e0
[  484.063643][T24951]  ? __pfx_netlink_unicast+0x10/0x10
[  484.063668][T24951]  ? netlink_sendmsg+0x642/0xb30
[  484.063682][T24951]  ? skb_put+0x11b/0x210
[  484.063703][T24951]  netlink_sendmsg+0x805/0xb30
[  484.063729][T24951]  ? __pfx_netlink_sendmsg+0x10/0x10
[  484.063749][T24951]  ? aa_sock_msg_perm+0x94/0x160
[  484.063768][T24951]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  484.063784][T24951]  ? __pfx_netlink_sendmsg+0x10/0x10
[  484.063800][T24951]  __sock_sendmsg+0x21c/0x270
[  484.063826][T24951]  ____sys_sendmsg+0x505/0x830
[  484.063849][T24951]  ? __pfx_____sys_sendmsg+0x10/0x10
[  484.063876][T24951]  ? import_iovec+0x74/0xa0
[  484.063899][T24951]  ___sys_sendmsg+0x21f/0x2a0
[  484.063920][T24951]  ? __pfx____sys_sendmsg+0x10/0x10
[  484.063978][T24951]  ? __fget_files+0x2a/0x420
[  484.064001][T24951]  ? __fget_files+0x3a0/0x420
[  484.064032][T24951]  __x64_sys_sendmsg+0x19b/0x260
[  484.064054][T24951]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  484.064083][T24951]  ? rcu_is_watching+0x15/0xb0
[  484.064106][T24951]  ? do_syscall_64+0xbe/0x3b0
[  484.064127][T24951]  do_syscall_64+0xfa/0x3b0
[  484.064141][T24951]  ? lockdep_hardirqs_on+0x9c/0x150
[  484.064155][T24951]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.064170][T24951]  ? exc_page_fault+0x9f/0xf0
[  484.064195][T24951]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.064209][T24951] RIP: 0033:0x7f671498e9a9
[  484.064225][T24951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  484.064240][T24951] RSP: 002b:00007f67157a8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  484.064257][T24951] RAX: ffffffffffffffda RBX: 00007f6714bb5fa0 RCX: 00007f671498e9a9
[  484.064269][T24951] RDX: 0000000000000380 RSI: 0000200000000040 RDI: 0000000000000004
[  484.064281][T24951] RBP: 00007f6714a10d69 R08: 0000000000000000 R09: 0000000000000000
[  484.064291][T24951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  484.064301][T24951] R13: 0000000000000000 R14: 00007f6714bb5fa0 R15: 00007fff0315c0c8
[  484.064326][T24951]  </TASK>
[  484.269183][T24957] IPVS: Error connecting to the multicast addr
[  484.293718][T24955] 8021q: adding VLAN 0 to HW filter on device bond22
[  484.308081][T24955] bond22: (slave gretap4): making interface the new active one
[  484.312510][T24955] bond22: (slave gretap4): Enslaving as an active interface with an up link
[  484.335163][T24961] 8021q: adding VLAN 0 to HW filter on device batadv0
[  484.355833][T24961] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  484.359422][T24961] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  484.366016][T24961] veth1_vlan: left promiscuous mode
[  484.368490][T24961] veth0_vlan: left promiscuous mode
[  484.370945][T24961] veth0_vlan: entered promiscuous mode
[  484.374430][T24961] veth1_vlan: entered promiscuous mode
[  484.378640][T24961] veth1_macvtap: left promiscuous mode
[  484.381201][T24961] veth0_macvtap: left promiscuous mode
[  484.383886][T24961] veth0_macvtap: entered promiscuous mode
[  484.386660][T24961] veth1_macvtap: entered promiscuous mode
[  484.398274][T24961] 8021q: adding VLAN 0 to HW filter on device bond1
[  484.402189][T24961] 8021q: adding VLAN 0 to HW filter on device bond2
[  484.407560][T24961] 8021q: adding VLAN 0 to HW filter on device bond3
[  484.412350][T24961] 8021q: adding VLAN 0 to HW filter on device bond4
[  484.412445][T24955] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6205'.
[  484.418778][T24955] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6205'.
[  484.419084][T24961] 8021q: adding VLAN 0 to HW filter on device bond5
[  484.425343][T24955] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6205'.
[  484.426220][T24961] 8021q: adding VLAN 0 to HW filter on device bond6
[  484.432372][T24961] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode
[  484.437980][T24961] 8021q: adding VLAN 0 to HW filter on device bond7
[  484.442035][T24961] 8021q: adding VLAN 0 to HW filter on device bond8
[  484.446656][T24961] 8021q: adding VLAN 0 to HW filter on device bond9
[  484.452933][T24961] 8021q: adding VLAN 0 to HW filter on device bond10
[  484.465461][T24961] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check.
[  484.649847][T24957] tipc: Resetting bearer <eth:syzkaller0>
[  484.908596][T10603] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  484.915180][T10603] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  484.929413][T10603] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  484.933954][T24962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6207'.
[  484.954042][ T5855] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  484.959390][ T5855] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  484.962579][ T1271] hsr0 speed is unknown, defaulting to 1000
[  484.963192][T10603] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  484.964658][ T1271] syz2: Port: 1 Link DOWN
[  484.976169][ T1271] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  484.976709][T10603] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  484.984305][T10603] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  484.988706][T10603] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  484.991696][T10603] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  484.995144][T10603] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  484.999074][T10603] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  485.002667][T10603] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  485.022806][T10603] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  485.027857][T10603] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  485.030969][T10603] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  485.320747][T24991] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6214'.
[  485.376837][   T10] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  485.516147][   T10] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  486.188925][T24954] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  486.192372][T24954] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.195321][T24954] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  486.230380][T24954] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  486.233795][T24954] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.236971][T24954] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  486.362319][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  486.365174][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  486.375758][   T13] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  486.386922][T10603] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  486.389576][T10603] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  486.392442][T10603] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  486.419691][ T5855] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  486.422906][ T5855] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  486.433095][ T5855] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  486.437031][ T5855] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  486.439623][ T5855] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  486.442012][ T5855] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  486.991868][T25012] validate_nla: 5 callbacks suppressed
[  486.991879][T25012] netlink: 'syz.0.6221': attribute type 4 has an invalid length.
[  487.001981][T21341] lo speed is unknown, defaulting to 1000
[  487.004271][T21341] syz0: Port: 1 Link DOWN
[  487.009336][T25012] netlink: 'syz.0.6221': attribute type 4 has an invalid length.
[  487.011992][T21341] lo speed is unknown, defaulting to 1000
[  487.017119][T21341] lo speed is unknown, defaulting to 1000
[  487.019118][T21341] syz0: Port: 1 Link ACTIVE
[  487.021024][T21341] lo speed is unknown, defaulting to 1000
[  487.309815][T25023] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  487.353382][T25023] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  487.366742][T25024] tipc: Resetting bearer <eth:team0>
[  487.378063][T25024] A link change request failed with some changes committed already. Interface syztnl2 may have been left with an inconsistent configuration, please check.
[  487.404222][T25023] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  487.472275][T25023] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  487.547198][ T5855] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  487.564226][ T5855] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  487.578911][ T5855] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  487.593162][ T5855] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  488.160944][T25037] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  488.166116][T25037] CPU: 0 UID: 0 PID: 25037 Comm: syz.0.6229 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4-dirty #0 PREEMPT(full) 
[  488.166141][T25037] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  488.166153][T25037] Call Trace:
[  488.166161][T25037]  <TASK>
[  488.166170][T25037]  dump_stack_lvl+0x189/0x250
[  488.166199][T25037]  ? __pfx_dump_stack_lvl+0x10/0x10
[  488.166217][T25037]  ? __pfx__printk+0x10/0x10
[  488.166238][T25037]  ? kernfs_path_from_node+0x2c/0x260
[  488.166295][T25037]  ? kernfs_path_from_node+0x2c/0x260
[  488.166317][T25037]  ? kernfs_path_from_node+0x2c/0x260
[  488.166340][T25037]  ? kernfs_path_from_node+0x22c/0x260
[  488.166361][T25037]  ? kernfs_path_from_node+0x2c/0x260
[  488.166385][T25037]  sysfs_warn_dup+0x8e/0xa0
[  488.166407][T25037]  sysfs_do_create_link_sd+0xc0/0x110
[  488.166432][T25037]  device_add_class_symlinks+0x1cf/0x240
[  488.166459][T25037]  device_add+0x475/0xb50
[  488.166484][T25037]  wiphy_register+0x1ba6/0x28d0
[  488.166515][T25037]  ? __pfx_wiphy_register+0x10/0x10
[  488.166531][T25037]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  488.166559][T25037]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  488.166582][T25037]  ieee80211_register_hw+0x3425/0x4080
[  488.166616][T25037]  ? ieee80211_register_hw+0x1421/0x4080
[  488.166651][T25037]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  488.166675][T25037]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  488.166708][T25037]  ? __hrtimer_setup+0x187/0x210
[  488.166724][T25037]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  488.166747][T25037]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  488.166788][T25037]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  488.166804][T25037]  ? trace_kmalloc+0x1f/0xd0
[  488.166822][T25037]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  488.166843][T25037]  ? kstrndup+0xbf/0x160
[  488.166866][T25037]  hwsim_new_radio_nl+0xea4/0x1b10
[  488.166885][T25037]  ? __pfx___nla_validate_parse+0x10/0x10
[  488.166916][T25037]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  488.166935][T25037]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  488.166963][T25037]  ? __nla_parse+0x40/0x60
[  488.166984][T25037]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  488.167013][T25037]  genl_family_rcv_msg_doit+0x215/0x300
[  488.167041][T25037]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  488.167073][T25037]  ? bpf_lsm_capable+0x9/0x20
[  488.167092][T25037]  ? security_capable+0x7e/0x2e0
[  488.167113][T25037]  genl_rcv_msg+0x60e/0x790
[  488.167138][T25037]  ? __pfx_genl_rcv_msg+0x10/0x10
[  488.167157][T25037]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  488.167205][T25037]  netlink_rcv_skb+0x208/0x470
[  488.167222][T25037]  ? __lock_acquire+0xab9/0xd20
[  488.167238][T25037]  ? __pfx_genl_rcv_msg+0x10/0x10
[  488.167284][T25037]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  488.167317][T25037]  ? down_read+0x1ad/0x2e0
[  488.167339][T25037]  genl_rcv+0x28/0x40
[  488.167357][T25037]  netlink_unicast+0x82f/0x9e0
[  488.167390][T25037]  ? __pfx_netlink_unicast+0x10/0x10
[  488.167414][T25037]  ? netlink_sendmsg+0x642/0xb30
[  488.167429][T25037]  ? skb_put+0x11b/0x210
[  488.167450][T25037]  netlink_sendmsg+0x805/0xb30
[  488.167474][T25037]  ? __pfx_netlink_sendmsg+0x10/0x10
[  488.167493][T25037]  ? aa_sock_msg_perm+0x94/0x160
[  488.167512][T25037]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  488.167527][T25037]  ? __pfx_netlink_sendmsg+0x10/0x10
[  488.167544][T25037]  __sock_sendmsg+0x21c/0x270
[  488.167569][T25037]  ____sys_sendmsg+0x505/0x830
[  488.167592][T25037]  ? __pfx_____sys_sendmsg+0x10/0x10
[  488.167619][T25037]  ? import_iovec+0x74/0xa0
[  488.167649][T25037]  ___sys_sendmsg+0x21f/0x2a0
[  488.167670][T25037]  ? __pfx____sys_sendmsg+0x10/0x10
[  488.167721][T25037]  ? __fget_files+0x2a/0x420
[  488.167743][T25037]  ? __fget_files+0x3a0/0x420
[  488.167773][T25037]  __x64_sys_sendmsg+0x19b/0x260
[  488.167794][T25037]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  488.167822][T25037]  ? rcu_is_watching+0x15/0xb0
[  488.167844][T25037]  ? do_syscall_64+0xbe/0x3b0
[  488.167864][T25037]  do_syscall_64+0xfa/0x3b0
[  488.167879][T25037]  ? lockdep_hardirqs_on+0x9c/0x150
[  488.167894][T25037]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  488.167910][T25037]  ? exc_page_fault+0x9f/0xf0
[  488.167936][T25037]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  488.167952][T25037] RIP: 0033:0x7f584638e9a9
[  488.167968][T25037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  488.167983][T25037] RSP: 002b:00007f584718e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  488.168001][T25037] RAX: ffffffffffffffda RBX: 00007f58465b5fa0 RCX: 00007f584638e9a9
[  488.168013][T25037] RDX: 0000000000000380 RSI: 0000200000000040 RDI: 0000000000000004
[  488.168024][T25037] RBP: 00007f5846410d69 R08: 0000000000000000 R09: 0000000000000000
[  488.168034][T25037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  488.168043][T25037] R13: 0000000000000000 R14: 00007f58465b5fa0 R15: 00007ffffcaa5488
[  488.168067][T25037]  </TASK>
[  488.514839][T25048] @: renamed from bond_slave_0 (while UP)
[  488.565046][T25052] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  488.619769][T25055] tipc: Resetting bearer <eth:team0>
[  488.627787][T25055] A link change request failed with some changes committed already. Interface syztnl2 may have been left with an inconsistent configuration, please check.
[  488.634343][T25052] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  488.681307][T25052] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  488.706810][T25058] __nla_validate_parse: 1 callbacks suppressed
[  488.706827][T25058] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6237'.
[  488.732372][T25052] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  488.821361][T25065] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.6239'.
[  488.825379][T25066] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.6239'.
[  488.830559][T25065] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  488.833725][T25065] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  488.839449][T25066] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  488.842881][T25066] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  488.993189][T25074] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  488.998504][T25074] CPU: 1 UID: 0 PID: 25074 Comm: syz.2.6244 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4-dirty #0 PREEMPT(full) 
[  488.998531][T25074] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  488.998545][T25074] Call Trace:
[  488.998553][T25074]  <TASK>
[  488.998563][T25074]  dump_stack_lvl+0x189/0x250
[  488.998596][T25074]  ? __pfx_dump_stack_lvl+0x10/0x10
[  488.998617][T25074]  ? __pfx__printk+0x10/0x10
[  488.998641][T25074]  ? kernfs_path_from_node+0x2c/0x260
[  488.998666][T25074]  ? kernfs_path_from_node+0x2c/0x260
[  488.998687][T25074]  ? kernfs_path_from_node+0x2c/0x260
[  488.998707][T25074]  ? kernfs_path_from_node+0x22c/0x260
[  488.998726][T25074]  ? kernfs_path_from_node+0x2c/0x260
[  488.998750][T25074]  sysfs_warn_dup+0x8e/0xa0
[  488.998770][T25074]  sysfs_do_create_link_sd+0xc0/0x110
[  488.998792][T25074]  device_add_class_symlinks+0x1cf/0x240
[  488.998819][T25074]  device_add+0x475/0xb50
[  488.998844][T25074]  wiphy_register+0x1ba6/0x28d0
[  488.998876][T25074]  ? __pfx_wiphy_register+0x10/0x10
[  488.998892][T25074]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  488.998922][T25074]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  488.998945][T25074]  ieee80211_register_hw+0x3425/0x4080
[  488.998977][T25074]  ? ieee80211_register_hw+0x1421/0x4080
[  488.999005][T25074]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  488.999027][T25074]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  488.999058][T25074]  ? __hrtimer_setup+0x187/0x210
[  488.999074][T25074]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  488.999095][T25074]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  488.999138][T25074]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  488.999152][T25074]  ? trace_kmalloc+0x1f/0xd0
[  488.999170][T25074]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  488.999190][T25074]  ? kstrndup+0xbf/0x160
[  488.999251][T25074]  hwsim_new_radio_nl+0xea4/0x1b10
[  488.999271][T25074]  ? __pfx___nla_validate_parse+0x10/0x10
[  488.999304][T25074]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  488.999322][T25074]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  488.999353][T25074]  ? __nla_parse+0x40/0x60
[  488.999373][T25074]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  488.999400][T25074]  genl_family_rcv_msg_doit+0x215/0x300
[  488.999426][T25074]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  488.999466][T25074]  ? bpf_lsm_capable+0x9/0x20
[  488.999505][T25074]  ? security_capable+0x7e/0x2e0
[  488.999529][T25074]  genl_rcv_msg+0x60e/0x790
[  488.999555][T25074]  ? __pfx_genl_rcv_msg+0x10/0x10
[  488.999575][T25074]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  488.999604][T25074]  netlink_rcv_skb+0x208/0x470
[  488.999618][T25074]  ? __lock_acquire+0xab9/0xd20
[  488.999632][T25074]  ? __pfx_genl_rcv_msg+0x10/0x10
[  488.999653][T25074]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  488.999685][T25074]  ? down_read+0x1ad/0x2e0
[  488.999708][T25074]  genl_rcv+0x28/0x40
[  488.999727][T25074]  netlink_unicast+0x82f/0x9e0
[  488.999757][T25074]  ? __pfx_netlink_unicast+0x10/0x10
[  488.999782][T25074]  ? netlink_sendmsg+0x642/0xb30
[  488.999796][T25074]  ? skb_put+0x11b/0x210
[  488.999816][T25074]  netlink_sendmsg+0x805/0xb30
[  488.999839][T25074]  ? __pfx_netlink_sendmsg+0x10/0x10
[  488.999857][T25074]  ? aa_sock_msg_perm+0x94/0x160
[  488.999875][T25074]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  488.999892][T25074]  ? __pfx_netlink_sendmsg+0x10/0x10
[  488.999911][T25074]  __sock_sendmsg+0x21c/0x270
[  488.999940][T25074]  ____sys_sendmsg+0x505/0x830
[  488.999963][T25074]  ? __pfx_____sys_sendmsg+0x10/0x10
[  488.999991][T25074]  ? import_iovec+0x74/0xa0
[  489.000015][T25074]  ___sys_sendmsg+0x21f/0x2a0
[  489.000035][T25074]  ? __pfx____sys_sendmsg+0x10/0x10
[  489.000086][T25074]  ? __fget_files+0x2a/0x420
[  489.000108][T25074]  ? __fget_files+0x3a0/0x420
[  489.000139][T25074]  __x64_sys_sendmsg+0x19b/0x260
[  489.000160][T25074]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  489.000188][T25074]  ? rcu_is_watching+0x15/0xb0
[  489.000247][T25074]  ? do_syscall_64+0xbe/0x3b0
[  489.000270][T25074]  do_syscall_64+0xfa/0x3b0
[  489.000285][T25074]  ? lockdep_hardirqs_on+0x9c/0x150
[  489.000300][T25074]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  489.000316][T25074]  ? exc_page_fault+0x9f/0xf0
[  489.000347][T25074]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  489.000363][T25074] RIP: 0033:0x7f262078e9a9
[  489.000380][T25074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  489.000397][T25074] RSP: 002b:00007f26216a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  489.000418][T25074] RAX: ffffffffffffffda RBX: 00007f26209b5fa0 RCX: 00007f262078e9a9
[  489.000430][T25074] RDX: 0000000000000380 RSI: 0000200000000040 RDI: 0000000000000004
[  489.000441][T25074] RBP: 00007f2620810d69 R08: 0000000000000000 R09: 0000000000000000
[  489.000452][T25074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  489.000470][T25074] R13: 0000000000000000 R14: 00007f26209b5fa0 R15: 00007ffd46901628
[  489.000499][T25074]  </TASK>
[  489.185022][T25076] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6245'.
[  489.265781][    C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  489.410770][T25079] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6246'.
[  489.496617][T25088] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  489.505839][T25089] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6248'.
[  489.509217][T25086] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6248'.
[  489.794231][T25104] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  489.798721][T25104] CPU: 0 UID: 0 PID: 25104 Comm: syz.2.6260 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4-dirty #0 PREEMPT(full) 
[  489.798737][T25104] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  489.798743][T25104] Call Trace:
[  489.798748][T25104]  <TASK>
[  489.798753][T25104]  dump_stack_lvl+0x189/0x250
[  489.798771][T25104]  ? __pfx_dump_stack_lvl+0x10/0x10
[  489.798783][T25104]  ? __pfx__printk+0x10/0x10
[  489.798802][T25104]  ? kernfs_path_from_node+0x2c/0x260
[  489.798827][T25104]  ? kernfs_path_from_node+0x2c/0x260
[  489.798848][T25104]  ? kernfs_path_from_node+0x2c/0x260
[  489.798868][T25104]  ? kernfs_path_from_node+0x22c/0x260
[  489.798880][T25104]  ? kernfs_path_from_node+0x2c/0x260
[  489.798894][T25104]  sysfs_warn_dup+0x8e/0xa0
[  489.798906][T25104]  sysfs_do_create_link_sd+0xc0/0x110
[  489.798919][T25104]  device_add_class_symlinks+0x1cf/0x240
[  489.798934][T25104]  device_add+0x475/0xb50
[  489.798949][T25104]  wiphy_register+0x1ba6/0x28d0
[  489.798967][T25104]  ? __pfx_wiphy_register+0x10/0x10
[  489.798976][T25104]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  489.798993][T25104]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  489.799008][T25104]  ieee80211_register_hw+0x3425/0x4080
[  489.799030][T25104]  ? ieee80211_register_hw+0x1421/0x4080
[  489.799049][T25104]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  489.799070][T25104]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  489.799097][T25104]  ? __hrtimer_setup+0x187/0x210
[  489.799107][T25104]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  489.799129][T25104]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  489.799192][T25104]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  489.799201][T25104]  ? trace_kmalloc+0x1f/0xd0
[  489.799214][T25104]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  489.799226][T25104]  ? kstrndup+0xbf/0x160
[  489.799239][T25104]  hwsim_new_radio_nl+0xea4/0x1b10
[  489.799249][T25104]  ? __pfx___nla_validate_parse+0x10/0x10
[  489.799268][T25104]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  489.799278][T25104]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  489.799301][T25104]  ? __nla_parse+0x40/0x60
[  489.799312][T25104]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  489.799330][T25104]  genl_family_rcv_msg_doit+0x215/0x300
[  489.799348][T25104]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  489.799366][T25104]  ? bpf_lsm_capable+0x9/0x20
[  489.799376][T25104]  ? security_capable+0x7e/0x2e0
[  489.799388][T25104]  genl_rcv_msg+0x60e/0x790
[  489.799403][T25104]  ? __pfx_genl_rcv_msg+0x10/0x10
[  489.799412][T25104]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  489.799428][T25104]  netlink_rcv_skb+0x208/0x470
[  489.799436][T25104]  ? __lock_acquire+0xab9/0xd20
[  489.799444][T25104]  ? __pfx_genl_rcv_msg+0x10/0x10
[  489.799455][T25104]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  489.799473][T25104]  ? down_read+0x1ad/0x2e0
[  489.799484][T25104]  genl_rcv+0x28/0x40
[  489.799493][T25104]  netlink_unicast+0x82f/0x9e0
[  489.799510][T25104]  ? __pfx_netlink_unicast+0x10/0x10
[  489.799523][T25104]  ? netlink_sendmsg+0x642/0xb30
[  489.799530][T25104]  ? skb_put+0x11b/0x210
[  489.799542][T25104]  netlink_sendmsg+0x805/0xb30
[  489.799555][T25104]  ? __pfx_netlink_sendmsg+0x10/0x10
[  489.799566][T25104]  ? aa_sock_msg_perm+0x94/0x160
[  489.799576][T25104]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  489.799584][T25104]  ? __pfx_netlink_sendmsg+0x10/0x10
[  489.799593][T25104]  __sock_sendmsg+0x21c/0x270
[  489.799607][T25104]  ____sys_sendmsg+0x505/0x830
[  489.799620][T25104]  ? __pfx_____sys_sendmsg+0x10/0x10
[  489.799635][T25104]  ? import_iovec+0x74/0xa0
[  489.799649][T25104]  ___sys_sendmsg+0x21f/0x2a0
[  489.799660][T25104]  ? __pfx____sys_sendmsg+0x10/0x10
[  489.799687][T25104]  ? __fget_files+0x2a/0x420
[  489.799699][T25104]  ? __fget_files+0x3a0/0x420
[  489.799715][T25104]  __x64_sys_sendmsg+0x19b/0x260
[  489.799727][T25104]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  489.799742][T25104]  ? rcu_is_watching+0x15/0xb0
[  489.799755][T25104]  ? do_syscall_64+0xbe/0x3b0
[  489.799766][T25104]  do_syscall_64+0xfa/0x3b0
[  489.799774][T25104]  ? lockdep_hardirqs_on+0x9c/0x150
[  489.799782][T25104]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  489.799791][T25104]  ? exc_page_fault+0x9f/0xf0
[  489.799804][T25104]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  489.799813][T25104] RIP: 0033:0x7f262078e9a9
[  489.799822][T25104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  489.799831][T25104] RSP: 002b:00007f26216a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  489.799842][T25104] RAX: ffffffffffffffda RBX: 00007f26209b5fa0 RCX: 00007f262078e9a9
[  489.799849][T25104] RDX: 0000000000000380 RSI: 0000200000000040 RDI: 0000000000000004
[  489.799856][T25104] RBP: 00007f2620810d69 R08: 0000000000000000 R09: 0000000000000000
[  489.799862][T25104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  489.799867][T25104] R13: 0000000000000000 R14: 00007f26209b5fa0 R15: 00007ffd46901628
[  489.799883][T25104]  </TASK>
[  489.980646][T10603] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  489.983341][T10603] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  489.993253][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  490.001079][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  490.060160][T25110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6257'.
[  490.116732][T25113] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6255'.
[  490.195944][T25120] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6261'.
[  490.413704][T25129] 8021q: adding VLAN 0 to HW filter on device 
[  490.449367][T25129] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  490.454068][T25129] 8021q: adding VLAN 0 to HW filter on device hsr0
[  490.464577][T25129] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  490.470358][T25129] tipc: Resetting bearer <eth:syzkaller0>
[  490.481385][T25129] 8021q: adding VLAN 0 to HW filter on device bond1
[  490.507787][T25129] 8021q: adding VLAN 0 to HW filter on device bond2
[  490.514114][T25129] 8021q: adding VLAN 0 to HW filter on device bond3
[  490.539040][T25129] 8021q: adding VLAN 0 to HW filter on device bond4
[  490.544138][T25129] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  490.549825][T25129] 8021q: adding VLAN 0 to HW filter on device bond5
[  490.553388][T25129] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  490.564866][T25129] 8021q: adding VLAN 0 to HW filter on device bond6
[  490.568633][T25129] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network
[  490.577074][T25129] 8021q: adding VLAN 0 to HW filter on device bond7
[  490.581071][T25129] 8021q: adding VLAN 0 to HW filter on device bond8
[  490.588443][T25129] 8021q: adding VLAN 0 to HW filter on device bond9
[  490.591948][T25129] 8021q: adding VLAN 0 to HW filter on device bond10
[  490.599035][T25129] 8021q: adding VLAN 0 to HW filter on device bond0
[  490.602451][T25129] 8021q: adding VLAN 0 to HW filter on device bond11
[  490.633227][T25129] 8021q: adding VLAN 0 to HW filter on device bond12
[  490.638861][T25129] A link change request failed with some changes committed already. Interface vxlan2 may have been left with an inconsistent configuration, please check.
[  490.679199][T10603] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  490.681959][T10603] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  490.684769][T10603] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  490.688549][T10603] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  490.691594][   T10] hsr0 speed is unknown, defaulting to 1000
[  490.693939][   T10] syz2: Port: 1 Link ACTIVE
[  491.505930][T21369] Bluetooth: hci0: command tx timeout
[  492.132864][T25134] netlink: 'syz.0.6266': attribute type 1 has an invalid length.
[  492.155828][T25134] 8021q: adding VLAN 0 to HW filter on device bond23
[  492.172077][T25134] 8021q: adding VLAN 0 to HW filter on device bond23
[  492.174573][T25134] bond23: (slave vxcan1): The slave device specified does not support setting the MAC address
[  492.179366][T25134] bond23: (slave vxcan1): Error -95 calling set_mac_address
[  492.229675][T25136] veth19: entered promiscuous mode
[  492.233851][T25136] bond23: (slave veth19): Enslaving as an active interface with a down link
[  492.259643][T25126] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  492.263471][T25126] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.310891][T25126] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  492.314099][T25126] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.436830][T10603] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  492.443172][T10603] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  492.455000][T10603] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  492.463488][T10603] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  492.473674][T10603] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  492.483615][T10603] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  492.497592][T10603] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  492.500871][T10603] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  492.534789][T25151] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  492.541668][T25151] CPU: 0 UID: 0 PID: 25151 Comm: syz.1.6271 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4-dirty #0 PREEMPT(full) 
[  492.541695][T25151] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  492.541706][T25151] Call Trace:
[  492.541714][T25151]  <TASK>
[  492.541723][T25151]  dump_stack_lvl+0x189/0x250
[  492.541755][T25151]  ? __pfx_dump_stack_lvl+0x10/0x10
[  492.541775][T25151]  ? __pfx__printk+0x10/0x10
[  492.541797][T25151]  ? kernfs_path_from_node+0x2c/0x260
[  492.541820][T25151]  ? kernfs_path_from_node+0x2c/0x260
[  492.541841][T25151]  ? kernfs_path_from_node+0x2c/0x260
[  492.541864][T25151]  ? kernfs_path_from_node+0x22c/0x260
[  492.541884][T25151]  ? kernfs_path_from_node+0x2c/0x260
[  492.541908][T25151]  sysfs_warn_dup+0x8e/0xa0
[  492.541929][T25151]  sysfs_do_create_link_sd+0xc0/0x110
[  492.541997][T25151]  device_add_class_symlinks+0x1cf/0x240
[  492.542025][T25151]  device_add+0x475/0xb50
[  492.542051][T25151]  wiphy_register+0x1ba6/0x28d0
[  492.542082][T25151]  ? __pfx_wiphy_register+0x10/0x10
[  492.542098][T25151]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  492.542127][T25151]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  492.542152][T25151]  ieee80211_register_hw+0x3425/0x4080
[  492.542184][T25151]  ? ieee80211_register_hw+0x1421/0x4080
[  492.542210][T25151]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  492.542243][T25151]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  492.542276][T25151]  ? __hrtimer_setup+0x187/0x210
[  492.542291][T25151]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  492.542315][T25151]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  492.542358][T25151]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  492.542374][T25151]  ? trace_kmalloc+0x1f/0xd0
[  492.542411][T25151]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  492.542434][T25151]  ? kstrndup+0xbf/0x160
[  492.542457][T25151]  hwsim_new_radio_nl+0xea4/0x1b10
[  492.542473][T25151]  ? __pfx___nla_validate_parse+0x10/0x10
[  492.542506][T25151]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  492.542533][T25151]  ? __nla_parse+0x40/0x60
[  492.542553][T25151]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  492.542581][T25151]  genl_family_rcv_msg_doit+0x215/0x300
[  492.542627][T25151]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  492.542659][T25151]  ? bpf_lsm_capable+0x9/0x20
[  492.542678][T25151]  ? security_capable+0x7e/0x2e0
[  492.542700][T25151]  genl_rcv_msg+0x60e/0x790
[  492.542724][T25151]  ? __pfx_genl_rcv_msg+0x10/0x10
[  492.542742][T25151]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  492.542765][T25151]  netlink_rcv_skb+0x208/0x470
[  492.542777][T25151]  ? __lock_acquire+0xab9/0xd20
[  492.542793][T25151]  ? __pfx_genl_rcv_msg+0x10/0x10
[  492.542815][T25151]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  492.542846][T25151]  ? down_read+0x1ad/0x2e0
[  492.542864][T25151]  genl_rcv+0x28/0x40
[  492.542880][T25151]  netlink_unicast+0x82f/0x9e0
[  492.542909][T25151]  ? __pfx_netlink_unicast+0x10/0x10
[  492.542962][T25151]  ? netlink_sendmsg+0x642/0xb30
[  492.542979][T25151]  ? skb_put+0x11b/0x210
[  492.543001][T25151]  netlink_sendmsg+0x805/0xb30
[  492.543023][T25151]  ? __pfx_netlink_sendmsg+0x10/0x10
[  492.543039][T25151]  ? aa_sock_msg_perm+0x94/0x160
[  492.543056][T25151]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  492.543074][T25151]  ? __pfx_netlink_sendmsg+0x10/0x10
[  492.543092][T25151]  __sock_sendmsg+0x21c/0x270
[  492.543117][T25151]  ____sys_sendmsg+0x505/0x830
[  492.543140][T25151]  ? __pfx_____sys_sendmsg+0x10/0x10
[  492.543165][T25151]  ? import_iovec+0x74/0xa0
[  492.543190][T25151]  ___sys_sendmsg+0x21f/0x2a0
[  492.543221][T25151]  ? __pfx____sys_sendmsg+0x10/0x10
[  492.543271][T25151]  ? __fget_files+0x2a/0x420
[  492.543294][T25151]  ? __fget_files+0x3a0/0x420
[  492.543326][T25151]  __x64_sys_sendmsg+0x19b/0x260
[  492.543348][T25151]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  492.543374][T25151]  ? rcu_is_watching+0x15/0xb0
[  492.543396][T25151]  ? do_syscall_64+0xbe/0x3b0
[  492.543417][T25151]  do_syscall_64+0xfa/0x3b0
[  492.543431][T25151]  ? lockdep_hardirqs_on+0x9c/0x150
[  492.543447][T25151]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.543463][T25151]  ? exc_page_fault+0x9f/0xf0
[  492.543487][T25151]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.543502][T25151] RIP: 0033:0x7f671498e9a9
[  492.543517][T25151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  492.543532][T25151] RSP: 002b:00007f67157a8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  492.543551][T25151] RAX: ffffffffffffffda RBX: 00007f6714bb5fa0 RCX: 00007f671498e9a9
[  492.543563][T25151] RDX: 0000000000000380 RSI: 0000200000000040 RDI: 0000000000000004
[  492.543574][T25151] RBP: 00007f6714a10d69 R08: 0000000000000000 R09: 0000000000000000
[  492.543583][T25151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  492.543592][T25151] R13: 0000000000000000 R14: 00007f6714bb5fa0 R15: 00007fff0315c0c8
[  492.543617][T25151]  </TASK>
[  492.828485][T25163] netlink: 'syz.1.6275': attribute type 1 has an invalid length.
[  492.885824][T25168] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  492.941963][T25177] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  492.945438][T25177] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  493.021511][T25182] A link change request failed with some changes committed already. Interface vxlan2 may have been left with an inconsistent configuration, please check.
[  493.031963][T25177] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  493.034914][T25177] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  493.081225][T25177] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  493.084206][T25177] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  493.129208][T25177] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  493.132452][T25177] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  493.155288][T25192] netlink: 'syz.0.6285': attribute type 1 has an invalid length.
[  493.157854][T25192] netlink: 'syz.0.6285': attribute type 2 has an invalid length.
[  493.160329][T25192] netlink: 'syz.0.6285': attribute type 8 has an invalid length.
[  493.220537][T25193] netlink: 'syz.0.6285': attribute type 2 has an invalid length.
[  493.222988][T25193] netlink: 'syz.0.6285': attribute type 1 has an invalid length.
[  493.386800][T25195] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  493.391634][T25195] CPU: 1 UID: 0 PID: 25195 Comm: syz.2.6286 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4-dirty #0 PREEMPT(full) 
[  493.391657][T25195] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  493.391668][T25195] Call Trace:
[  493.391675][T25195]  <TASK>
[  493.391683][T25195]  dump_stack_lvl+0x189/0x250
[  493.391708][T25195]  ? __pfx_dump_stack_lvl+0x10/0x10
[  493.391725][T25195]  ? __pfx__printk+0x10/0x10
[  493.391743][T25195]  ? kernfs_path_from_node+0x2c/0x260
[  493.391764][T25195]  ? kernfs_path_from_node+0x2c/0x260
[  493.391785][T25195]  ? kernfs_path_from_node+0x2c/0x260
[  493.391802][T25195]  ? kernfs_path_from_node+0x22c/0x260
[  493.391817][T25195]  ? kernfs_path_from_node+0x2c/0x260
[  493.391837][T25195]  sysfs_warn_dup+0x8e/0xa0
[  493.391854][T25195]  sysfs_do_create_link_sd+0xc0/0x110
[  493.391903][T25195]  device_add_class_symlinks+0x1cf/0x240
[  493.391930][T25195]  device_add+0x475/0xb50
[  493.391951][T25195]  wiphy_register+0x1ba6/0x28d0
[  493.391978][T25195]  ? __pfx_wiphy_register+0x10/0x10
[  493.391992][T25195]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  493.392016][T25195]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  493.392036][T25195]  ieee80211_register_hw+0x3425/0x4080
[  493.392063][T25195]  ? ieee80211_register_hw+0x1421/0x4080
[  493.392083][T25195]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  493.392100][T25195]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  493.392126][T25195]  ? __hrtimer_setup+0x187/0x210
[  493.392140][T25195]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  493.392159][T25195]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  493.392199][T25195]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  493.392212][T25195]  ? trace_kmalloc+0x1f/0xd0
[  493.392229][T25195]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  493.392245][T25195]  ? kstrndup+0xbf/0x160
[  493.392272][T25195]  hwsim_new_radio_nl+0xea4/0x1b10
[  493.392288][T25195]  ? __pfx___nla_validate_parse+0x10/0x10
[  493.392315][T25195]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  493.392336][T25195]  ? __nla_parse+0x40/0x60
[  493.392353][T25195]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  493.392376][T25195]  genl_family_rcv_msg_doit+0x215/0x300
[  493.392398][T25195]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  493.392421][T25195]  ? bpf_lsm_capable+0x9/0x20
[  493.392439][T25195]  ? security_capable+0x7e/0x2e0
[  493.392456][T25195]  genl_rcv_msg+0x60e/0x790
[  493.392476][T25195]  ? __pfx_genl_rcv_msg+0x10/0x10
[  493.392490][T25195]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  493.392511][T25195]  netlink_rcv_skb+0x208/0x470
[  493.392523][T25195]  ? __lock_acquire+0xab9/0xd20
[  493.392534][T25195]  ? __pfx_genl_rcv_msg+0x10/0x10
[  493.392549][T25195]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  493.392574][T25195]  ? down_read+0x1ad/0x2e0
[  493.392588][T25195]  genl_rcv+0x28/0x40
[  493.392601][T25195]  netlink_unicast+0x82f/0x9e0
[  493.392626][T25195]  ? __pfx_netlink_unicast+0x10/0x10
[  493.392644][T25195]  ? netlink_sendmsg+0x642/0xb30
[  493.392654][T25195]  ? skb_put+0x11b/0x210
[  493.392670][T25195]  netlink_sendmsg+0x805/0xb30
[  493.392689][T25195]  ? __pfx_netlink_sendmsg+0x10/0x10
[  493.392704][T25195]  ? aa_sock_msg_perm+0x94/0x160
[  493.392720][T25195]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  493.392734][T25195]  ? __pfx_netlink_sendmsg+0x10/0x10
[  493.392747][T25195]  __sock_sendmsg+0x21c/0x270
[  493.392767][T25195]  ____sys_sendmsg+0x505/0x830
[  493.392786][T25195]  ? __pfx_____sys_sendmsg+0x10/0x10
[  493.392807][T25195]  ? import_iovec+0x74/0xa0
[  493.392827][T25195]  ___sys_sendmsg+0x21f/0x2a0
[  493.392842][T25195]  ? __pfx____sys_sendmsg+0x10/0x10
[  493.392918][T25195]  ? __fget_files+0x2a/0x420
[  493.392941][T25195]  ? __fget_files+0x3a0/0x420
[  493.392964][T25195]  __x64_sys_sendmsg+0x19b/0x260
[  493.392980][T25195]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  493.393000][T25195]  ? rcu_is_watching+0x15/0xb0
[  493.393020][T25195]  ? do_syscall_64+0xbe/0x3b0
[  493.393038][T25195]  do_syscall_64+0xfa/0x3b0
[  493.393051][T25195]  ? lockdep_hardirqs_on+0x9c/0x150
[  493.393064][T25195]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.393080][T25195]  ? exc_page_fault+0x9f/0xf0
[  493.393101][T25195]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.393113][T25195] RIP: 0033:0x7f262078e9a9
[  493.393127][T25195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  493.393141][T25195] RSP: 002b:00007f26216a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  493.393156][T25195] RAX: ffffffffffffffda RBX: 00007f26209b5fa0 RCX: 00007f262078e9a9
[  493.393166][T25195] RDX: 0000000000000380 RSI: 0000200000000040 RDI: 0000000000000004
[  493.393177][T25195] RBP: 00007f2620810d69 R08: 0000000000000000 R09: 0000000000000000
[  493.393186][T25195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  493.393194][T25195] R13: 0000000000000000 R14: 00007f26209b5fa0 R15: 00007ffd46901628
[  493.393215][T25195]  </TASK>
[  493.782047][T25209] netlink: 'syz.2.6292': attribute type 1 has an invalid length.
[  493.785038][T25209] __nla_validate_parse: 4 callbacks suppressed
[  493.785051][T25209] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.6292'.
[  493.792464][T25209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6292'.
[  494.003115][T25218] netlink: 'syz.2.6294': attribute type 4 has an invalid length.
[  494.076234][T25223] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  494.237587][T25234] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  494.241459][T25234] CPU: 0 UID: 0 PID: 25234 Comm: syz.0.6300 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4-dirty #0 PREEMPT(full) 
[  494.241472][T25234] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  494.241478][T25234] Call Trace:
[  494.241484][T25234]  <TASK>
[  494.241490][T25234]  dump_stack_lvl+0x189/0x250
[  494.241508][T25234]  ? __pfx_dump_stack_lvl+0x10/0x10
[  494.241518][T25234]  ? __pfx__printk+0x10/0x10
[  494.241530][T25234]  ? kernfs_path_from_node+0x2c/0x260
[  494.241544][T25234]  ? kernfs_path_from_node+0x2c/0x260
[  494.241554][T25234]  ? kernfs_path_from_node+0x2c/0x260
[  494.241567][T25234]  ? kernfs_path_from_node+0x22c/0x260
[  494.241577][T25234]  ? kernfs_path_from_node+0x2c/0x260
[  494.241591][T25234]  sysfs_warn_dup+0x8e/0xa0
[  494.241603][T25234]  sysfs_do_create_link_sd+0xc0/0x110
[  494.241616][T25234]  device_add_class_symlinks+0x1cf/0x240
[  494.241630][T25234]  device_add+0x475/0xb50
[  494.241644][T25234]  wiphy_register+0x1ba6/0x28d0
[  494.241661][T25234]  ? __pfx_wiphy_register+0x10/0x10
[  494.241670][T25234]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  494.241685][T25234]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  494.241697][T25234]  ieee80211_register_hw+0x3425/0x4080
[  494.241716][T25234]  ? ieee80211_register_hw+0x1421/0x4080
[  494.241730][T25234]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  494.241743][T25234]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  494.241760][T25234]  ? __hrtimer_setup+0x187/0x210
[  494.241768][T25234]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  494.241781][T25234]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  494.241804][T25234]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  494.241839][T25234]  ? trace_kmalloc+0x1f/0xd0
[  494.241850][T25234]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  494.241862][T25234]  ? kstrndup+0xbf/0x160
[  494.241875][T25234]  hwsim_new_radio_nl+0xea4/0x1b10
[  494.241886][T25234]  ? __pfx___nla_validate_parse+0x10/0x10
[  494.241904][T25234]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  494.241919][T25234]  ? __nla_parse+0x40/0x60
[  494.241930][T25234]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  494.241946][T25234]  genl_family_rcv_msg_doit+0x215/0x300
[  494.241962][T25234]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  494.241988][T25234]  ? bpf_lsm_capable+0x9/0x20
[  494.242007][T25234]  ? security_capable+0x7e/0x2e0
[  494.242029][T25234]  genl_rcv_msg+0x60e/0x790
[  494.242053][T25234]  ? __pfx_genl_rcv_msg+0x10/0x10
[  494.242072][T25234]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  494.242099][T25234]  netlink_rcv_skb+0x208/0x470
[  494.242113][T25234]  ? __lock_acquire+0xab9/0xd20
[  494.242125][T25234]  ? __pfx_genl_rcv_msg+0x10/0x10
[  494.242137][T25234]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  494.242156][T25234]  ? down_read+0x1ad/0x2e0
[  494.242169][T25234]  genl_rcv+0x28/0x40
[  494.242178][T25234]  netlink_unicast+0x82f/0x9e0
[  494.242195][T25234]  ? __pfx_netlink_unicast+0x10/0x10
[  494.242209][T25234]  ? netlink_sendmsg+0x642/0xb30
[  494.242222][T25234]  ? skb_put+0x11b/0x210
[  494.242236][T25234]  netlink_sendmsg+0x805/0xb30
[  494.242251][T25234]  ? __pfx_netlink_sendmsg+0x10/0x10
[  494.242264][T25234]  ? aa_sock_msg_perm+0x94/0x160
[  494.242275][T25234]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  494.242284][T25234]  ? __pfx_netlink_sendmsg+0x10/0x10
[  494.242295][T25234]  __sock_sendmsg+0x21c/0x270
[  494.242310][T25234]  ____sys_sendmsg+0x505/0x830
[  494.242323][T25234]  ? __pfx_____sys_sendmsg+0x10/0x10
[  494.242337][T25234]  ? import_iovec+0x74/0xa0
[  494.242351][T25234]  ___sys_sendmsg+0x21f/0x2a0
[  494.242362][T25234]  ? __pfx____sys_sendmsg+0x10/0x10
[  494.242390][T25234]  ? __fget_files+0x2a/0x420
[  494.242401][T25234]  ? __fget_files+0x3a0/0x420
[  494.242418][T25234]  __x64_sys_sendmsg+0x19b/0x260
[  494.242429][T25234]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  494.242445][T25234]  ? rcu_is_watching+0x15/0xb0
[  494.242457][T25234]  ? do_syscall_64+0xbe/0x3b0
[  494.242468][T25234]  do_syscall_64+0xfa/0x3b0
[  494.242476][T25234]  ? lockdep_hardirqs_on+0x9c/0x150
[  494.242483][T25234]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  494.242492][T25234]  ? exc_page_fault+0x9f/0xf0
[  494.242505][T25234]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  494.242513][T25234] RIP: 0033:0x7f584638e9a9
[  494.242523][T25234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  494.242531][T25234] RSP: 002b:00007f584718e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  494.242542][T25234] RAX: ffffffffffffffda RBX: 00007f58465b5fa0 RCX: 00007f584638e9a9
[  494.242550][T25234] RDX: 0000000000000380 RSI: 0000200000000040 RDI: 0000000000000004
[  494.242557][T25234] RBP: 00007f5846410d69 R08: 0000000000000000 R09: 0000000000000000
[  494.242564][T25234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  494.242570][T25234] R13: 0000000000000000 R14: 00007f58465b5fa0 R15: 00007ffffcaa5488
[  494.242585][T25234]  </TASK>
[  494.941969][T25268] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  494.949573][T25268] CPU: 1 UID: 0 PID: 25268 Comm: syz.0.6313 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4-dirty #0 PREEMPT(full) 
[  494.949591][T25268] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  494.949598][T25268] Call Trace:
[  494.949603][T25268]  <TASK>
[  494.949608][T25268]  dump_stack_lvl+0x189/0x250
[  494.949626][T25268]  ? __pfx_dump_stack_lvl+0x10/0x10
[  494.949636][T25268]  ? __pfx__printk+0x10/0x10
[  494.949648][T25268]  ? kernfs_path_from_node+0x2c/0x260
[  494.949662][T25268]  ? kernfs_path_from_node+0x2c/0x260
[  494.949673][T25268]  ? kernfs_path_from_node+0x2c/0x260
[  494.949686][T25268]  ? kernfs_path_from_node+0x22c/0x260
[  494.949697][T25268]  ? kernfs_path_from_node+0x2c/0x260
[  494.949710][T25268]  sysfs_warn_dup+0x8e/0xa0
[  494.949721][T25268]  sysfs_do_create_link_sd+0xc0/0x110
[  494.949736][T25268]  device_add_class_symlinks+0x1cf/0x240
[  494.949751][T25268]  device_add+0x475/0xb50
[  494.949790][T25268]  wiphy_register+0x1ba6/0x28d0
[  494.949809][T25268]  ? __pfx_wiphy_register+0x10/0x10
[  494.949818][T25268]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  494.949839][T25268]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  494.949852][T25268]  ieee80211_register_hw+0x3425/0x4080
[  494.949873][T25268]  ? ieee80211_register_hw+0x1421/0x4080
[  494.949888][T25268]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  494.949902][T25268]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  494.949926][T25268]  ? __hrtimer_setup+0x187/0x210
[  494.949936][T25268]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  494.949948][T25268]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  494.949973][T25268]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  494.949982][T25268]  ? trace_kmalloc+0x1f/0xd0
[  494.949992][T25268]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  494.950005][T25268]  ? kstrndup+0xbf/0x160
[  494.950019][T25268]  hwsim_new_radio_nl+0xea4/0x1b10
[  494.950030][T25268]  ? __pfx___nla_validate_parse+0x10/0x10
[  494.950048][T25268]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  494.950058][T25268]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  494.950075][T25268]  ? __nla_parse+0x40/0x60
[  494.950087][T25268]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  494.950102][T25268]  genl_family_rcv_msg_doit+0x215/0x300
[  494.950118][T25268]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  494.950136][T25268]  ? bpf_lsm_capable+0x9/0x20
[  494.950146][T25268]  ? security_capable+0x7e/0x2e0
[  494.950158][T25268]  genl_rcv_msg+0x60e/0x790
[  494.950172][T25268]  ? __pfx_genl_rcv_msg+0x10/0x10
[  494.950182][T25268]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  494.950197][T25268]  netlink_rcv_skb+0x208/0x470
[  494.950205][T25268]  ? __lock_acquire+0xab9/0xd20
[  494.950213][T25268]  ? __pfx_genl_rcv_msg+0x10/0x10
[  494.950224][T25268]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  494.950241][T25268]  ? down_read+0x1ad/0x2e0
[  494.950252][T25268]  genl_rcv+0x28/0x40
[  494.950261][T25268]  netlink_unicast+0x82f/0x9e0
[  494.950278][T25268]  ? __pfx_netlink_unicast+0x10/0x10
[  494.950291][T25268]  ? netlink_sendmsg+0x642/0xb30
[  494.950298][T25268]  ? skb_put+0x11b/0x210
[  494.950310][T25268]  netlink_sendmsg+0x805/0xb30
[  494.950324][T25268]  ? __pfx_netlink_sendmsg+0x10/0x10
[  494.950334][T25268]  ? aa_sock_msg_perm+0x94/0x160
[  494.950344][T25268]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  494.950352][T25268]  ? __pfx_netlink_sendmsg+0x10/0x10
[  494.950361][T25268]  __sock_sendmsg+0x21c/0x270
[  494.950375][T25268]  ____sys_sendmsg+0x505/0x830
[  494.950388][T25268]  ? __pfx_____sys_sendmsg+0x10/0x10
[  494.950403][T25268]  ? import_iovec+0x74/0xa0
[  494.950416][T25268]  ___sys_sendmsg+0x21f/0x2a0
[  494.950427][T25268]  ? __pfx____sys_sendmsg+0x10/0x10
[  494.950455][T25268]  ? __fget_files+0x2a/0x420
[  494.950466][T25268]  ? __fget_files+0x3a0/0x420
[  494.950483][T25268]  __x64_sys_sendmsg+0x19b/0x260
[  494.950494][T25268]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  494.950510][T25268]  ? rcu_is_watching+0x15/0xb0
[  494.950522][T25268]  ? do_syscall_64+0xbe/0x3b0
[  494.950533][T25268]  do_syscall_64+0xfa/0x3b0
[  494.950541][T25268]  ? lockdep_hardirqs_on+0x9c/0x150
[  494.950548][T25268]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  494.950557][T25268]  ? exc_page_fault+0x9f/0xf0
[  494.950571][T25268]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  494.950579][T25268] RIP: 0033:0x7f584638e9a9
[  494.950590][T25268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  494.950598][T25268] RSP: 002b:00007f584718e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  494.950609][T25268] RAX: ffffffffffffffda RBX: 00007f58465b5fa0 RCX: 00007f584638e9a9
[  494.950615][T25268] RDX: 0000000000000380 RSI: 0000200000000040 RDI: 0000000000000004
[  494.950621][T25268] RBP: 00007f5846410d69 R08: 0000000000000000 R09: 0000000000000000
[  494.950627][T25268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  494.950632][T25268] R13: 0000000000000000 R14: 00007f58465b5fa0 R15: 00007ffffcaa5488
[  494.950647][T25268]  </TASK>
[  495.192831][T25288] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6319'.
[  495.220646][T25290] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6320'.
[  495.235280][T25292] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6321'.
[  495.283296][T25298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6324'.
[  495.339907][T25305] netlink: 'syz.0.6326': attribute type 10 has an invalid length.
[  495.347806][T25305] team0: Port device dummy0 added
[  495.411296][T25315] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  495.416271][T25315] CPU: 0 UID: 0 PID: 25315 Comm: syz.2.6329 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4-dirty #0 PREEMPT(full) 
[  495.416293][T25315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  495.416304][T25315] Call Trace:
[  495.416312][T25315]  <TASK>
[  495.416320][T25315]  dump_stack_lvl+0x189/0x250
[  495.416350][T25315]  ? __pfx_dump_stack_lvl+0x10/0x10
[  495.416369][T25315]  ? __pfx__printk+0x10/0x10
[  495.416390][T25315]  ? kernfs_path_from_node+0x2c/0x260
[  495.416414][T25315]  ? kernfs_path_from_node+0x2c/0x260
[  495.416435][T25315]  ? kernfs_path_from_node+0x2c/0x260
[  495.416459][T25315]  ? kernfs_path_from_node+0x22c/0x260
[  495.416480][T25315]  ? kernfs_path_from_node+0x2c/0x260
[  495.416505][T25315]  sysfs_warn_dup+0x8e/0xa0
[  495.416526][T25315]  sysfs_do_create_link_sd+0xc0/0x110
[  495.416551][T25315]  device_add_class_symlinks+0x1cf/0x240
[  495.416577][T25315]  device_add+0x475/0xb50
[  495.416603][T25315]  wiphy_register+0x1ba6/0x28d0
[  495.416636][T25315]  ? __pfx_wiphy_register+0x10/0x10
[  495.416650][T25315]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  495.416679][T25315]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  495.416704][T25315]  ieee80211_register_hw+0x3425/0x4080
[  495.416767][T25315]  ? ieee80211_register_hw+0x1421/0x4080
[  495.416797][T25315]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  495.416822][T25315]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  495.416852][T25315]  ? __hrtimer_setup+0x187/0x210
[  495.416868][T25315]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  495.416891][T25315]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  495.416936][T25315]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  495.416953][T25315]  ? trace_kmalloc+0x1f/0xd0
[  495.416973][T25315]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  495.416996][T25315]  ? kstrndup+0xbf/0x160
[  495.417021][T25315]  hwsim_new_radio_nl+0xea4/0x1b10
[  495.417040][T25315]  ? __pfx___nla_validate_parse+0x10/0x10
[  495.417073][T25315]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  495.417101][T25315]  ? __nla_parse+0x40/0x60
[  495.417123][T25315]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  495.417154][T25315]  genl_family_rcv_msg_doit+0x215/0x300
[  495.417189][T25315]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  495.417223][T25315]  ? bpf_lsm_capable+0x9/0x20
[  495.417243][T25315]  ? security_capable+0x7e/0x2e0
[  495.417266][T25315]  genl_rcv_msg+0x60e/0x790
[  495.417315][T25315]  ? __pfx_genl_rcv_msg+0x10/0x10
[  495.417336][T25315]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  495.417369][T25315]  netlink_rcv_skb+0x208/0x470
[  495.417384][T25315]  ? __lock_acquire+0xab9/0xd20
[  495.417402][T25315]  ? __pfx_genl_rcv_msg+0x10/0x10
[  495.417425][T25315]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  495.417459][T25315]  ? down_read+0x1ad/0x2e0
[  495.417480][T25315]  genl_rcv+0x28/0x40
[  495.417498][T25315]  netlink_unicast+0x82f/0x9e0
[  495.417530][T25315]  ? __pfx_netlink_unicast+0x10/0x10
[  495.417555][T25315]  ? netlink_sendmsg+0x642/0xb30
[  495.417570][T25315]  ? skb_put+0x11b/0x210
[  495.417592][T25315]  netlink_sendmsg+0x805/0xb30
[  495.417617][T25315]  ? __pfx_netlink_sendmsg+0x10/0x10
[  495.417638][T25315]  ? aa_sock_msg_perm+0x94/0x160
[  495.417656][T25315]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  495.417671][T25315]  ? __pfx_netlink_sendmsg+0x10/0x10
[  495.417689][T25315]  __sock_sendmsg+0x21c/0x270
[  495.417715][T25315]  ____sys_sendmsg+0x505/0x830
[  495.417769][T25315]  ? __pfx_____sys_sendmsg+0x10/0x10
[  495.417797][T25315]  ? import_iovec+0x74/0xa0
[  495.417824][T25315]  ___sys_sendmsg+0x21f/0x2a0
[  495.417847][T25315]  ? __pfx____sys_sendmsg+0x10/0x10
[  495.417902][T25315]  ? __fget_files+0x2a/0x420
[  495.417924][T25315]  ? __fget_files+0x3a0/0x420
[  495.417955][T25315]  __x64_sys_sendmsg+0x19b/0x260
[  495.417978][T25315]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  495.418014][T25315]  ? do_syscall_64+0xbe/0x3b0
[  495.418036][T25315]  do_syscall_64+0xfa/0x3b0
[  495.418051][T25315]  ? lockdep_hardirqs_on+0x9c/0x150
[  495.418065][T25315]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  495.418082][T25315]  ? exc_page_fault+0x9f/0xf0
[  495.418108][T25315]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  495.418124][T25315] RIP: 0033:0x7f262078e9a9
[  495.418140][T25315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  495.418155][T25315] RSP: 002b:00007f26216a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  495.418180][T25315] RAX: ffffffffffffffda RBX: 00007f26209b5fa0 RCX: 00007f262078e9a9
[  495.418193][T25315] RDX: 0000000000000380 RSI: 0000200000000040 RDI: 0000000000000004
[  495.418205][T25315] RBP: 00007f2620810d69 R08: 0000000000000000 R09: 0000000000000000
[  495.418215][T25315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  495.418226][T25315] R13: 0000000000000000 R14: 00007f26209b5fa0 R15: 00007ffd46901628
[  495.418255][T25315]  </TASK>
[  496.160902][ T5855] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  496.164343][ T5855] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  496.175817][ T5855] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  496.179179][ T5855] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  496.188625][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  496.191938][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  496.206530][ T5855] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  496.209857][ T5855] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  496.834863][T25329] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6335'.
[  496.882946][T25333] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  496.886878][T25333] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6337'.
[  496.889872][T25333] netlink: 25 bytes leftover after parsing attributes in process `syz.0.6337'.
[  496.970812][T25340] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  497.017139][T25340] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  497.058071][T25349] tipc: Resetting bearer <eth:team0>
[  497.060045][T25349] tipc: Resetting bearer <eth:team0>
[  497.080944][T25349] A link change request failed with some changes committed already. Interface syztnl2 may have been left with an inconsistent configuration, please check.
[  497.088801][T25340] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  497.111098][T25340] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  497.196213][T25357] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6344'.
[  497.227568][ T5855] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  497.235303][ T5855] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  497.257983][ T5836] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  497.276072][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  497.460046][T25377] validate_nla: 1 callbacks suppressed
[  497.460057][T25377] netlink: 'syz.1.6349': attribute type 1 has an invalid length.
[  497.464666][T25377] netlink: 'syz.1.6349': attribute type 11 has an invalid length.
[  497.906036][    C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  497.969011][T25408] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  498.055967][T25428] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  498.059918][T25428] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.099203][T25428] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  498.102786][T25428] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.141823][T25429] A link change request failed with some changes committed already. Interface vxlan2 may have been left with an inconsistent configuration, please check.
[  498.153904][T25428] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  498.158119][T25428] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.199398][T25428] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  498.202531][T25428] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.895969][T25441] __nla_validate_parse: 10 callbacks suppressed
[  498.895988][T25441] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6371'.
[  498.952564][T25443] netlink: 'syz.2.6372': attribute type 13 has an invalid length.
[  498.956108][T25443] netlink: 'syz.2.6372': attribute type 17 has an invalid length.
[  499.048773][T25443] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check.
[  499.076011][ T5893] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  499.237006][T25456] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  499.306362][   T47] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  499.430235][T25464] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6380'.
[  499.435070][T25464] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6380'.
[  499.440273][T25464] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6380'.
[  499.445656][T25464] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6380'.
[  499.448674][T25464] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6380'.
[  499.455811][T25464] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6380'.
[  499.458777][T25464] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6380'.
[  499.467081][T25464] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6380'.
[  499.471004][T25464] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6380'.
[  499.529574][T10603] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  499.532135][T10603] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  499.540755][ T5836] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  499.543613][ T5836] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  499.552543][ T5836] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  499.556521][ T5836] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  499.566773][ T5891] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  499.571218][ T5891] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  499.596452][ T5891] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  499.598986][ T5891] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  499.929086][T25493] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  499.933130][T25493] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  499.938741][T25493] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  500.079007][T25494] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check.
[  500.100943][T25493] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  500.107935][T25493] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  500.111424][T25493] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  500.117004][ T1271] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  500.150099][T25493] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  500.153243][T25493] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  500.156945][T25493] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  500.210352][T25493] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  500.214076][T25493] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  500.217674][T25493] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  500.546032][ T1271] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  500.616771][ T5836] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  500.621162][ T5836] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  500.657203][T21341] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  500.670180][T25503] tipc: Resetting bearer <eth:team0>
[  500.743597][T25503] tipc: Resetting bearer <eth:syzkaller0>
[  500.759053][T25503] hsr0: left allmulticast mode
[  500.760755][T25503] hsr_slave_0: left allmulticast mode
[  500.762638][T25503] hsr_slave_1: left allmulticast mode
[  500.777067][ T1271] lo speed is unknown, defaulting to 1000
[  500.779799][T10603] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  500.782572][T10603] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  500.783756][ T1271] syz0: Port: 1 Link DOWN
[  500.788670][T10603] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  500.791355][T10603] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  500.794753][ T1271] lo speed is unknown, defaulting to 1000
[  501.595258][T25528] lo speed is unknown, defaulting to 1000
[  501.744406][T10603] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  501.751668][T10603] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  501.757920][T10603] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  501.766977][T10603] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  501.769749][T10603] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  501.772642][T10603] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  501.782175][T10603] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  501.785293][T10603] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  501.788648][T10603] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  501.795767][T10603] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  501.798566][T10603] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  501.805791][T10603] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  501.922514][T25528] hsr0 speed is unknown, defaulting to 1000
[  502.183313][T25546] IPv6: NLM_F_REPLACE set, but no existing node found!
[  502.334701][T25550] 8021q: adding VLAN 0 to HW filter on device team0
[  502.348334][T25550] tipc: Resetting bearer <eth:team0>
[  502.350133][T25550] tipc: Resetting bearer <eth:team0>
[  502.374590][T25550] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  502.378076][T25550] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  502.381154][T25550] hsr0: left promiscuous mode
[  502.389355][T25550] 8021q: adding VLAN 0 to HW filter on device bond1
[  502.394653][T25550] A link change request failed with some changes committed already. Interface syztnl2 may have been left with an inconsistent configuration, please check.
[  502.401661][T21341] lo speed is unknown, defaulting to 1000
[  502.403463][T21341] syz0: Port: 1 Link ACTIVE
[  502.423036][ T5836] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  502.427323][ T5836] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  502.431933][T21341] lo speed is unknown, defaulting to 1000
[  503.031643][T25586] netlink: 'syz.1.6424': attribute type 1 has an invalid length.
[  503.445451][T25622] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7
[  503.547847][T25625] IPVS: Error connecting to the multicast addr
[  503.582836][T25625] netlink: 'syz.1.6439': attribute type 16 has an invalid length.
[  503.585203][T25625] netlink: 'syz.1.6439': attribute type 17 has an invalid length.
[  503.718945][T25625] tipc: Resetting bearer <eth:syzkaller0>
[  503.960161][T25629] __nla_validate_parse: 31 callbacks suppressed
[  503.960181][T25629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6439'.
[  503.967326][T10603] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  503.970284][T10603] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  503.972997][ T5893] hsr0 speed is unknown, defaulting to 1000
[  503.974904][ T5893] syz2: Port: 1 Link DOWN
[  503.976407][T10603] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  503.978924][T10603] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  503.981441][T10603] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  503.983888][T10603] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  503.990069][T10603] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  503.992618][T10603] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  504.138832][T25641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6444'.
[  504.148151][T25641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6444'.
[  504.148151][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  504.155983][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  504.159662][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  504.164282][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  504.221557][T25643] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  504.318095][T25549] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  504.380779][T25549] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  504.452326][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  504.469433][T10603] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  504.483118][T10603] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  504.495335][T10603] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  504.608629][T25650] netlink: 'syz.0.6446': attribute type 1 has an invalid length.
[  504.611801][T25650] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6446'.
[  504.739845][T25661] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  504.773908][T25666] ==================================================================
[  504.776507][T25666] BUG: KASAN: use-after-free in xfrm_alloc_spi+0x570/0xf30
[  504.778754][T25666] Read of size 4 at addr ffff88801b780544 by task syz.0.6453/25666
[  504.781853][T25666] 
[  504.782942][T25666] CPU: 0 UID: 0 PID: 25666 Comm: syz.0.6453 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4-dirty #0 PREEMPT(full) 
[  504.782955][T25666] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  504.782961][T25666] Call Trace:
[  504.782967][T25666]  <TASK>
[  504.782972][T25666]  dump_stack_lvl+0x189/0x250
[  504.782985][T25666]  ? __kasan_check_byte+0x12/0x40
[  504.782998][T25666]  ? __pfx_dump_stack_lvl+0x10/0x10
[  504.783006][T25666]  ? lock_release+0x4b/0x3e0
[  504.783016][T25666]  ? __virt_addr_valid+0x4a5/0x5c0
[  504.783045][T25666]  print_report+0xca/0x230
[  504.783059][T25666]  ? xfrm_alloc_spi+0x570/0xf30
[  504.783070][T25666]  kasan_report+0x118/0x150
[  504.783081][T25666]  ? xfrm_alloc_spi+0x570/0xf30
[  504.783091][T25666]  xfrm_alloc_spi+0x570/0xf30
[  504.783102][T25666]  ? xfrm_alloc_spi+0x2a0/0xf30
[  504.783114][T25666]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  504.783123][T25666]  ? xfrm_find_acq+0x87/0xa0
[  504.783134][T25666]  xfrm_alloc_userspi+0x70b/0xc90
[  504.783145][T25666]  ? __pfx_aa_get_newest_label+0x10/0x10
[  504.783156][T25666]  ? apparmor_capable+0x137/0x1b0
[  504.783166][T25666]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  504.783177][T25666]  ? __nla_parse+0x40/0x60
[  504.783187][T25666]  xfrm_user_rcv_msg+0x7a3/0xab0
[  504.783203][T25666]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  504.783219][T25666]  ? __mutex_trylock_common+0x153/0x260
[  504.783231][T25666]  ? __pfx___mutex_trylock_common+0x10/0x10
[  504.783241][T25666]  ? rcu_is_watching+0x15/0xb0
[  504.783251][T25666]  ? trace_contention_end+0x39/0x120
[  504.783261][T25666]  netlink_rcv_skb+0x208/0x470
[  504.783271][T25666]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  504.783281][T25666]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  504.783291][T25666]  ? netlink_deliver_tap+0x2e/0x1b0
[  504.783299][T25666]  ? netlink_deliver_tap+0x2e/0x1b0
[  504.783306][T25666]  xfrm_netlink_rcv+0x79/0x90
[  504.783316][T25666]  netlink_unicast+0x82f/0x9e0
[  504.783330][T25666]  ? __pfx_netlink_unicast+0x10/0x10
[  504.783340][T25666]  ? netlink_sendmsg+0x642/0xb30
[  504.783348][T25666]  ? skb_put+0x11b/0x210
[  504.783358][T25666]  netlink_sendmsg+0x805/0xb30
[  504.783367][T25666]  ? __pfx_netlink_sendmsg+0x10/0x10
[  504.783376][T25666]  ? aa_sock_msg_perm+0x94/0x160
[  504.783383][T25666]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  504.783392][T25666]  ? __pfx_netlink_sendmsg+0x10/0x10
[  504.783400][T25666]  __sock_sendmsg+0x21c/0x270
[  504.783414][T25666]  ____sys_sendmsg+0x505/0x830
[  504.783424][T25666]  ? __pfx_____sys_sendmsg+0x10/0x10
[  504.783435][T25666]  ? import_iovec+0x74/0xa0
[  504.783446][T25666]  ___sys_sendmsg+0x21f/0x2a0
[  504.783456][T25666]  ? __pfx____sys_sendmsg+0x10/0x10
[  504.783472][T25666]  ? __fget_files+0x2a/0x420
[  504.783483][T25666]  ? __fget_files+0x3a0/0x420
[  504.783495][T25666]  __x64_sys_sendmsg+0x19b/0x260
[  504.783505][T25666]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  504.783516][T25666]  ? rcu_is_watching+0x15/0xb0
[  504.783525][T25666]  ? do_syscall_64+0xbe/0x3b0
[  504.783535][T25666]  do_syscall_64+0xfa/0x3b0
[  504.783543][T25666]  ? lockdep_hardirqs_on+0x9c/0x150
[  504.783550][T25666]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  504.783559][T25666]  ? exc_page_fault+0x9f/0xf0
[  504.783571][T25666]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  504.783580][T25666] RIP: 0033:0x7f584638e9a9
[  504.783589][T25666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  504.783597][T25666] RSP: 002b:00007f584716d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  504.783607][T25666] RAX: ffffffffffffffda RBX: 00007f58465b6080 RCX: 00007f584638e9a9
[  504.783613][T25666] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000004
[  504.783619][T25666] RBP: 00007f5846410d69 R08: 0000000000000000 R09: 0000000000000000
[  504.783625][T25666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  504.783630][T25666] R13: 0000000000000000 R14: 00007f58465b6080 R15: 00007ffffcaa5488
[  504.783639][T25666]  </TASK>
[  504.783642][T25666] 
[  504.921564][T25666] The buggy address belongs to the physical page:
[  504.923470][T25666] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88801b783c00 pfn:0x1b780
[  504.926462][T25666] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  504.928740][T25666] page_type: f0(buddy)
[  504.929979][T25666] raw: 00fff00000000000 ffffea0000ac5e08 ffffea00008d2308 0000000000000000
[  504.932631][T25666] raw: ffff88801b783c00 0000000000000002 00000000f0000000 0000000000000000
[  504.935185][T25666] page dumped because: kasan: bad access detected
[  504.937079][T25666] page_owner tracks the page as freed
[  504.938723][T25666] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 23563, tgid 23562 (syz.2.5751), ts 449572149210, free_ts 455188210306
[  504.945306][T25666]  post_alloc_hook+0x240/0x2a0
[  504.946880][T25666]  get_page_from_freelist+0x21e4/0x22c0
[  504.948773][T25666]  __alloc_frozen_pages_noprof+0x181/0x370
[  504.950704][T25666]  alloc_pages_mpol+0x232/0x4a0
[  504.952274][T25666]  allocate_slab+0x8a/0x3b0
[  504.953699][T25666]  ___slab_alloc+0xbfc/0x1480
[  504.955233][T25666]  __kmalloc_cache_noprof+0x296/0x3d0
[  504.956966][T25666]  __genradix_ptr_alloc+0x352/0x4a0
[  504.958622][T25666]  __genradix_prealloc+0x44/0x90
[  504.960208][T25666]  sctp_stream_init+0x14b/0x440
[  504.961983][T25666]  sctp_association_new+0x10dd/0x25f0
[  504.964092][T25666]  sctp_connect_new_asoc+0x2c5/0x690
[  504.966161][T25666]  sctp_sendmsg+0x155c/0x2810
[  504.967709][T25666]  __sock_sendmsg+0x19c/0x270
[  504.969188][T25666]  __sys_sendto+0x3bd/0x520
[  504.970623][T25666]  __x64_sys_sendto+0xde/0x100
[  504.972136][T25666] page last free pid 792 tgid 792 stack trace:
[  504.973924][T25666]  __free_frozen_pages+0xc71/0xe70
[  504.975529][T25666]  __put_partials+0x161/0x1c0
[  504.977035][T25666]  put_cpu_partial+0x17c/0x250
[  504.978485][T25666]  __slab_free+0x2f7/0x400
[  504.979838][T25666]  qlist_free_all+0x97/0x140
[  504.981609][T25666]  kasan_quarantine_reduce+0x148/0x160
[  504.983320][T25666]  __kasan_slab_alloc+0x22/0x80
[  504.984790][T25666]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  504.986657][T25666]  __alloc_skb+0x112/0x2d0
[  504.988051][T25666]  mld_newpack+0x13c/0xc40
[  504.989419][T25666]  add_grhead+0x5a/0x2a0
[  504.990691][T25666]  add_grec+0x1452/0x1740
[  504.992232][T25666]  mld_ifc_work+0x6ed/0xd60
[  504.994011][T25666]  process_scheduled_works+0xae1/0x17b0
[  504.996050][T25666]  worker_thread+0x8a0/0xda0
[  504.997573][T25666]  kthread+0x711/0x8a0
[  504.998882][T25666] 
[  504.999651][T25666] Memory state around the buggy address:
[  505.001741][T25666]  ffff88801b780400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  505.004667][T25666]  ffff88801b780480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  505.007275][T25666] >ffff88801b780500: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  505.009764][T25666]                                            ^
[  505.011756][T25666]  ffff88801b780580: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  505.014271][T25666]  ffff88801b780600: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  505.016699][T25666] ==================================================================
[  505.019375][T25666] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  505.021861][T25666] CPU: 0 UID: 0 PID: 25666 Comm: syz.0.6453 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4-dirty #0 PREEMPT(full) 
[  505.025934][T25666] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  505.028991][T25666] Call Trace:
[  505.029997][T25666]  <TASK>
[  505.030985][T25666]  dump_stack_lvl+0x99/0x250
[  505.032412][T25666]  ? __asan_memcpy+0x40/0x70
[  505.033798][T25666]  ? __pfx_dump_stack_lvl+0x10/0x10
[  505.035414][T25666]  ? __pfx__printk+0x10/0x10
[  505.036769][T25666]  panic+0x2db/0x790
[  505.038042][T25666]  ? __pfx_panic+0x10/0x10
[  505.039424][T25666]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  505.041447][T25666]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  505.043379][T25666]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  505.045320][T25666]  ? print_memory_metadata+0x314/0x400
[  505.046991][T25666]  ? xfrm_alloc_spi+0x570/0xf30
[  505.048557][T25666]  check_panic_on_warn+0x89/0xb0
[  505.050089][T25666]  ? xfrm_alloc_spi+0x570/0xf30
[  505.051602][T25666]  end_report+0x78/0x160
[  505.052884][T25666]  kasan_report+0x129/0x150
[  505.054317][T25666]  ? xfrm_alloc_spi+0x570/0xf30
[  505.055806][T25666]  xfrm_alloc_spi+0x570/0xf30
[  505.057205][T25666]  ? xfrm_alloc_spi+0x2a0/0xf30
[  505.058701][T25666]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  505.060277][T25666]  ? xfrm_find_acq+0x87/0xa0
[  505.062046][T25666]  xfrm_alloc_userspi+0x70b/0xc90
[  505.063627][T25666]  ? __pfx_aa_get_newest_label+0x10/0x10
[  505.065389][T25666]  ? apparmor_capable+0x137/0x1b0
[  505.066906][T25666]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  505.068654][T25666]  ? __nla_parse+0x40/0x60
[  505.070089][T25666]  xfrm_user_rcv_msg+0x7a3/0xab0
[  505.071700][T25666]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  505.073331][T25666]  ? __mutex_trylock_common+0x153/0x260
[  505.074996][T25666]  ? __pfx___mutex_trylock_common+0x10/0x10
[  505.076782][T25666]  ? rcu_is_watching+0x15/0xb0
[  505.078242][T25666]  ? trace_contention_end+0x39/0x120
[  505.079880][T25666]  netlink_rcv_skb+0x208/0x470
[  505.081429][T25666]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  505.083053][T25666]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  505.084629][T25666]  ? netlink_deliver_tap+0x2e/0x1b0
[  505.086200][T25666]  ? netlink_deliver_tap+0x2e/0x1b0
[  505.087751][T25666]  xfrm_netlink_rcv+0x79/0x90
[  505.089248][T25666]  netlink_unicast+0x82f/0x9e0
[  505.090733][T25666]  ? __pfx_netlink_unicast+0x10/0x10
[  505.092297][T25666]  ? netlink_sendmsg+0x642/0xb30
[  505.093767][T25666]  ? skb_put+0x11b/0x210
[  505.095062][T25666]  netlink_sendmsg+0x805/0xb30
[  505.096491][T25666]  ? __pfx_netlink_sendmsg+0x10/0x10
[  505.098069][T25666]  ? aa_sock_msg_perm+0x94/0x160
[  505.099597][T25666]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  505.101308][T25666]  ? __pfx_netlink_sendmsg+0x10/0x10
[  505.102872][T25666]  __sock_sendmsg+0x21c/0x270
[  505.104308][T25666]  ____sys_sendmsg+0x505/0x830
[  505.105778][T25666]  ? __pfx_____sys_sendmsg+0x10/0x10
[  505.107372][T25666]  ? import_iovec+0x74/0xa0
[  505.108724][T25666]  ___sys_sendmsg+0x21f/0x2a0
[  505.110171][T25666]  ? __pfx____sys_sendmsg+0x10/0x10
[  505.111893][T25666]  ? __fget_files+0x2a/0x420
[  505.113321][T25666]  ? __fget_files+0x3a0/0x420
[  505.114804][T25666]  __x64_sys_sendmsg+0x19b/0x260
[  505.116315][T25666]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  505.117920][T25666]  ? rcu_is_watching+0x15/0xb0
[  505.119548][T25666]  ? do_syscall_64+0xbe/0x3b0
[  505.121365][T25666]  do_syscall_64+0xfa/0x3b0
[  505.123128][T25666]  ? lockdep_hardirqs_on+0x9c/0x150
[  505.125110][T25666]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  505.127473][T25666]  ? exc_page_fault+0x9f/0xf0
[  505.129419][T25666]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  505.131817][T25666] RIP: 0033:0x7f584638e9a9
[  505.133613][T25666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  505.141143][T25666] RSP: 002b:00007f584716d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  505.144330][T25666] RAX: ffffffffffffffda RBX: 00007f58465b6080 RCX: 00007f584638e9a9
[  505.147328][T25666] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000004
[  505.150321][T25666] RBP: 00007f5846410d69 R08: 0000000000000000 R09: 0000000000000000
[  505.153345][T25666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  505.156460][T25666] R13: 0000000000000000 R14: 00007f58465b6080 R15: 00007ffffcaa5488
[  505.159748][T25666]  </TASK>
[  505.161699][T25666] Kernel Offset: disabled
[  505.163430][T25666] Rebooting in 86400 seconds..

VM DIAGNOSIS:
07:11:33  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000002e RBX=000000000000002e RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003b9e9f0
R8 =ffff8881070e0237 R9 =1ffff11020e1c046 R10=dffffc0000000000 R11=ffffffff85464660
R12=dffffc0000000000 R13=ffffffff99af18cd R14=ffffffff99df64c0 R15=0000000000000000
RIP=ffffffff854646dc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f584716d6c0 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000000004c0 CR3=000000011fbdc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f5846586478 00007f5846586450 XMM03=00007f5846586488 00007f5846586480
XMM04=00007f58470ed100 00007f5846586440 XMM05=00007f5846586458 00007f58465864a0
XMM06=00007f5846586498 00007f5846586490 XMM07=00007f5846586488 00007f5846586480
XMM08=0000000000000000 00007f5846411de3 XMM09=0000000000000000 00007f5846411ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1a63668f63490800 RBX=ffffffff81976a18 RCX=1a63668f63490800 RDX=0000000000000001
RSI=ffffffff8d9998cd RDI=ffffffff8be28d00 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1f6f0 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001e000
RIP=ffffffff8b6d24f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f26209b7bac CR3=000000003a98e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f2620986478 00007f2620986450 XMM03=00007f2620986488 00007f2620986480
XMM04=00007f26214ed100 00007f2620986440 XMM05=00007f2620986458 00007f26209864a0
XMM06=00007f2620986498 00007f2620986490 XMM07=00007f2620986488 00007f2620986480
XMM08=0000000000000000 00007f2620811de3 XMM09=0000000000000000 00007f2620811ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
