last executing test programs:

1.458537572s ago: executing program 0 (id=5240):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000000e00)=ANY=[@ANYRES8=0x0, @ANYRES32=0x0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xffffffff}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000002000200000090000fcdbdf250a805f00000000031a000300080017004e234e2714000200fc0200000000000000000000007653fe4511d5f1a5010000000000000000000000000001"], 0x4c}}, 0x40000) (async, rerun: 64)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000205fc0200"/68], 0x5c}}, 0x0) (async, rerun: 64)
recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd2a, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) (async)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r7, 0xffffffffffffffff, 0x24}, 0xc)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async)
unshare(0x62040200) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r9, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x3c}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @broadcast, @from_mac, {0x0, 0x7f}}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @void}, 0x26) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x1e)

1.337952742s ago: executing program 0 (id=5242):
socket$inet6(0xa, 0x1, 0x84)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000380)={'wlan1\x00', 0x8000})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x34, r1, 0x10, 0x3, 0x0, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3, 0x48}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x34}}, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r9 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r9, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e)
sendmmsg(r9, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r10}, 0x18)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

1.094077696s ago: executing program 0 (id=5245):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'bond_slave_0\x00', @multicast})

1.091957569s ago: executing program 0 (id=5246):
r0 = socket(0x2b, 0x80801, 0x1)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ppoll(&(0x7f0000000580)=[{r1, 0x2000}], 0x1, &(0x7f00000005c0)={0x77359400}, &(0x7f0000000600)={[0x3]}, 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4, 0x3fc, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)
r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf)
getpeername$ax25(r2, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r4, 0x0, 0x0)
setsockopt$inet6_mreq(r3, 0x29, 0x1b, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000000140)=[{&(0x7f0000000340)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000300080c10000000000000000000", 0x58}], 0x1)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14)
socket$netlink(0x10, 0x3, 0x9)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000180)={0x84, @rand_addr=0x64010102, 0x4e23, 0x2, 'dh\x00', 0x17, 0x5, 0x4a}, 0x2c)
ioctl$VFAT_IOCTL_READDIR_BOTH(r7, 0x82187201, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r8, 0x400448ca, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@random="9ffbf4c8e5bfa99ac3b577c9dda93f037a6aed8189d9775647e82c64ac89f4a2", 0x20, 0x1)
syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080211000001080211000000080211000000000000e3ffffffffffff63822f07c13b1974f100010000060202020202020108"], 0x36)
bind$bt_hci(r8, &(0x7f0000000280), 0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0))
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="8eff80ec0031", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x6}]}}}}}}}, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1cd041, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)

846.43462ms ago: executing program 2 (id=5249):
setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) (async)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000040)=""/109, &(0x7f00000000c0)=0x6d)
connect$bt_sco(r0, &(0x7f0000000100), 0x8) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x84, r3, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffff0}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20004040}, 0x800) (async, rerun: 64)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) (rerun: 64)
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r4, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x69}, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x10, 0xc5, "1fd808a006ba9213cdfc955f"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x1) (async)
sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x144, r3, 0x300, 0x70bd27, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0x144}, 0x1, 0x0, 0x0, 0x44001}, 0x4040) (async, rerun: 64)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), r2) (rerun: 64)
sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r5, 0x400, 0x70bd29, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) (async)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), r2) (async, rerun: 32)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000900)={'gre0\x00', &(0x7f0000000840)={'tunl0\x00', <r7=>0x0, 0x1, 0x8000, 0x6, 0x7fffffff, {{0x1d, 0x4, 0x0, 0x8, 0x74, 0x64, 0x0, 0x5, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x13}, {[@generic={0x89, 0xd, "f407c551310a75f7cb4b72"}, @ra={0x94, 0x4, 0x1}, @generic={0x86, 0x12, "18b67905da62c733873ccad315cdaefd"}, @cipso={0x86, 0x3c, 0x3, [{0x6, 0x2}, {0x6, 0x4, "9e07"}, {0x6, 0x3, "90"}, {0x7, 0x3, "da"}, {0x0, 0xd, "20632587fa5258cbe33e12"}, {0x1, 0x5, "42ec1e"}, {0x5, 0x11, "640528f2275d0dba851b0e6e4e86e3"}, {0x6, 0x7, "94b9ad8b67"}]}]}}}}}) (async, rerun: 32)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000009c0)={'syztnl0\x00', &(0x7f0000000940)={'syztnl2\x00', <r8=>0x0, 0x20, 0x80, 0xd, 0x9, {{0x17, 0x4, 0x1, 0x0, 0x5c, 0x65, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010102, @multicast2, {[@timestamp_prespec={0x44, 0x1c, 0x74, 0x3, 0xf, [{@loopback, 0x8}, {@multicast1, 0x2}, {@broadcast, 0x1a16e37c}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x27, 0x8b, [@dev={0xac, 0x14, 0x14, 0x1b}, @broadcast, @dev={0xac, 0x14, 0x14, 0x34}, @empty, @multicast1, @empty, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x14}, @dev={0xac, 0x14, 0x14, 0x32}]}]}}}}}) (async, rerun: 64)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000ac0)={'syztnl1\x00', &(0x7f0000000a00)={'erspan0\x00', <r9=>0x0, 0x80, 0x7800, 0x1ff, 0x18989c76, {{0x20, 0x4, 0x0, 0xe, 0x80, 0x64, 0x0, 0x81, 0x4, 0x0, @multicast1, @remote, {[@ssrr={0x89, 0x27, 0x9c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @loopback, @broadcast, @rand_addr=0x64010100, @private=0xa010102, @empty, @multicast1, @remote]}, @cipso={0x86, 0x42, 0x3, [{0x6, 0x2}, {0x5, 0x11, "36760759c99f819dd00bbffe171bd9"}, {0x0, 0x5, "31ae31"}, {0x3, 0x3, "b2"}, {0x0, 0x3, "b9"}, {0x5, 0x11, "44cfa308a2f9e37e67da4ba03e2bed"}, {0x2, 0x2}, {0x5, 0xb, "34a468267d02a6bf68"}]}]}}}}}) (async, rerun: 64)
getpeername$packet(r1, &(0x7f0000000b00)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000b40)=0x14)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000001000)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000b80)={0x41c, r6, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x36c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xa4, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8b4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'devlink\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x4}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}, @ETHTOOL_A_BITSET_MASK={0xbc, 0x5, "2879bd7528fe6499900187118daec16357fe706f0340f343e629056bf0d4bd4035efd9d72aa8255955c950ad479a86273339b96c6be909ed8bb6411c2ec53b434302f522156225377f2e83fb6e0297d4455a78259aa9c56874b54691c3194c5ba85b2a12eeb79e4a02096b942efeb46bd37c9e656dba601057700d73368973e7444dd7d5916f88960c290ed6c9da512ea7eb141dc1fb27fed69524234917aa1edae75ab895d2ba44cfee3eeef3c898da7a1e2332cdb49924"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_VALUE={0xb2, 0x4, "a72e0b95003dda46e18a669e6f1df53b9f926ebebff5da3199d0d2b85fdce36dfc8f609d9a875a5e780addf208d72a5b78a42dcf7e57463cd6914aaff2a927b40dd5cba6085a63c80fe9bbbeab6ba655b8cf2c1ad4451cbc11085cba68e5721c3df15cfddbf94c93e6a70699a82218f6662f00cb0d2050503c800bb1a194b70b2734dad816e9a41729b1867b586836d3e259dbe85501fe14c100e47ef3ba6e26e33c8b368ba3c5d565624f36e5e6"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x50, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x86}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x400}, @ETHTOOL_A_BITSET_MASK={0xe8, 0x5, "e1868757086d6efbc94011b014f2ec8b20604f7ae38a911dcbe3436e1003803d852faa3c3fd9fffe835b65752ec09076ea2a875b4e5350c9bd63f29163514c7f408eb81f2cf6c1dcd68e862d19b305266dbed99ed2200bf7131c4f8eeef10dded86d58afdcd4f088d14cf117084ae28ebfb363602d264037cf522a43f181679a6c735b63f9e2afc07819ff54edf6fb616aca6590a27b7782159b51290e108f37065901b9c12619e77a8c0e62f0ed9af5931f407de1cd48a687d67f7a961f4272555815ece49f66a3abbc87d1f0e4701e8d16aa040dd747866fdf00a927628a1590e10777"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x41c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004000) (async)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x7c, 0x2, 0x6, 0xc85, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x11}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xa}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x8040) (async, rerun: 64)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000001180), 0xc2, 0x0) (rerun: 64)
ioctl$TUNSETTXFILTER(r11, 0x400454d1, &(0x7f00000011c0)={0x0, 0x2, [@random="194d36a7d2ad", @multicast]}) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000012c0)={0xffffffffffffffff, 0x58, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r12=>0x0}}, 0x10)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)=@newqdisc={0x44, 0x24, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0xc, 0x9}, {0xffff, 0xfff1}, {0x7, 0xb}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xa38}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x24000004)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BEACON(r13, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x14, r4, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}}, 0x4010) (async)
r14 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001500)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) (async)
r15 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001580), r13)
sendmsg$SEG6_CMD_GET_TUNSRC(r14, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x48, r15, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008004}, 0x20004014) (async, rerun: 32)
splice(r14, &(0x7f00000016c0)=0x7f3f, r11, &(0x7f0000001700)=0x7fff, 0xfffffffffffffe01, 0x8) (rerun: 32)

740.609347ms ago: executing program 2 (id=5250):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea43961a6007c1674e79a267dc5be7897c84a89a72097bc2cf211a7ea330c86604e"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0))
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
write$nci(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="414601", @ANYRESHEX=r0], 0x4)
ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000000940)={0x2, 0x5, ['\x00', '\x00']})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)

639.549366ms ago: executing program 2 (id=5251):
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8}]}, &(0x7f0000000180)=0x10)
close(0x3)
socket(0x2, 0x80805, 0x0)
shutdown(0xffffffffffffffff, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
syz_emit_ethernet(0x86, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000030800450000780008000000119078000000000000000000004e20006490010200000000000000030000003de606dc81be00ddce159663ac7693623fbc114ae101b652aafb848127fc9a1c196f60f6e731ad05f5026c25fdde56d7a02556a310619862b833862616979ed468bc7f0b8675bdfbc754b57f94a6ff85a1dc7be0fd40bce43b465bc52ca4c5b8b3c77156303c959e3b7b05fdd60bc5a9687a4f3ab5374a2cf8958490519c468f2afd"], 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x20})
recvmmsg(0xffffffffffffffff, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)

639.088322ms ago: executing program 1 (id=5252):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0)
r1 = socket(0x2, 0x805, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=ANY=[@ANYBLOB="02030002100000000000000000000000010007"], 0x80}, 0x1, 0x7}, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, 0x0, &(0x7f0000000140))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r4)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0)
r6 = socket$unix(0x1, 0x2, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100020000000000df250700000008000300", @ANYRES32=r8, @ANYBLOB="0c009900fbffffff780000001400040073797a6b616c6c6572300000000000000800050007000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0)

525.86046ms ago: executing program 2 (id=5253):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043000900000000000000000003000000080002"], 0x1c}}, 0x24000044) (async)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async)
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async)
r5 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000380)={'wlan1\x00', 0x8000}) (async, rerun: 64)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000000300)) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0}) (rerun: 64)
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="04000000", @ANYRES16=r8, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r9, @ANYBLOB="0800050007000000"], 0x24}}, 0x10) (async, rerun: 64)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) (rerun: 64)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050003000000000000000600000086000300f7c3eb8acf74291b931ca711b6a9bab563b03d5d1004cee8e4d490f8af5bbea8a6c26eabc95abf8f73622b7682e60000000000000000003ff43388e162ed019e09ad2b1cfd6cc1ccf335419bf16fd02392e53583551c241ebe3c46c649c6df303940de98c626164dd05ff0ab3f8136bbe0caeb03", @ANYRES32=r10, @ANYBLOB="0a0018000303030303030000"], 0x28}}, 0x0) (async)
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r12 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r12, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) (async)
sendmmsg(r12, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xa0, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x5c, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8b}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xe8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)

523.247455ms ago: executing program 1 (id=5254):
r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', <r2=>0x0})
connect$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x2}, 0x14) (async)
getsockname$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20044040}, 0x20004891) (async)
ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000300)={'vlan1\x00', {0x2, 0x4e23, @multicast2}})
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0xf503, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001480)={0x11, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8d8, 0x0, 0x0, 0x0, 0x9}, [@alu={0x4, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffe, 0x10}]}, &(0x7f00000003c0)='syzkaller\x00', 0xfef630, 0x1000, &(0x7f0000000400)=""/4096, 0x41100, 0x40, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001400)={0x1, 0xa, 0x6, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x539f}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001540)={&(0x7f0000000340)='ext4_unlink_enter\x00', r4, 0x0, 0x7ff}, 0x18)
splice(r0, &(0x7f0000001580)=0x6, r5, &(0x7f00000015c0)=0x5, 0xf, 0x9) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001640)={'wpan4\x00', <r6=>0x0}) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001680)={'wpan0\x00', <r7=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000016c0)={'wpan4\x00', <r8=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001700)={'wpan1\x00', <r9=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001740)={'wpan0\x00', <r10=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001880)={&(0x7f0000001780)={0xc4, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVICE={0x28, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_DEVICE={0x4c, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0x555c}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x4}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffe}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffe}]}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0xc4}, 0x1, 0x0, 0x0, 0x48010}, 0x20000000) (async, rerun: 32)
r11 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32)
ioctl$sock_inet6_udp_SIOCINQ(r11, 0x541b, &(0x7f0000001900))
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000001940)) (async)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001980), r12) (async)
r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001a00), r12)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r12, &(0x7f0000001b00)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x4c, r13, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x18, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffff801}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) (async)
socket(0x0, 0x1, 0x1b1)
r14 = bpf$MAP_CREATE(0x0, &(0x7f0000001b40)=@base={0x20, 0xb1cf, 0x3, 0x0, 0x2800, 0xffffffffffffffff, 0x3, '\x00', r1, 0xffffffffffffffff, 0x2, 0x5, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0xb, 0x4, &(0x7f0000001bc0)=@raw=[@map_fd={0x18, 0xb, 0x1, 0x0, r14}, @ldst={0x2, 0x1, 0x4, 0xa, 0x2, 0x10, 0x4}, @jmp={0x5, 0x1, 0x9, 0x4, 0x3, 0x0, 0xfffffffffffffffc}], &(0x7f0000001c00)='syzkaller\x00', 0xa, 0x93, &(0x7f0000001c40)=""/147, 0x41000, 0x40, '\x00', r1, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000001d00)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000001d40)={0x3, 0x4, 0x8, 0xc}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x0, &(0x7f0000001d80)=[{0x2, 0x2, 0x2, 0x4}, {0x1, 0x2, 0x0, 0x7}, {0x0, 0x1, 0x2, 0x3}, {0x4, 0x3, 0x6, 0x4}, {0x0, 0x5, 0x4, 0xa}, {0x4, 0x3, 0x1, 0x6}, {0x4, 0x4, 0xd, 0xa}, {0x3, 0x2, 0xa, 0xb}, {0x2, 0x1, 0x2, 0x9}], 0x10, 0x9}, 0x94) (async)
sendmsg$NL802154_CMD_SET_LBT_MODE(r12, &(0x7f0000001fc0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x34, r13, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x8000) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002140)={0xffffffff, <r15=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000002200)={0x15, 0x5, &(0x7f0000002000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0x1, 0x2, 0x0, r14, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000002040)='GPL\x00', 0x8, 0x3b, &(0x7f0000002080)=""/59, 0x41000, 0x4, '\x00', r1, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, &(0x7f00000020c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000002100)={0x2, 0x1, 0xfffffffd, 0x4}, 0x10, r15, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000002180)=[{0x4, 0x2, 0x1, 0x7}, {0x2, 0x3, 0xf, 0xa}, {0x1, 0x3, 0x8, 0x6}, {0x3, 0x1, 0x8, 0x7}, {0x0, 0x2, 0x8, 0x16}], 0x10, 0x5}, 0x94)

469.964198ms ago: executing program 1 (id=5255):
r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@un=@abs, &(0x7f0000000080)=0x80, 0x800)
sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, 0x0, 0xb, 0x5, 0x0, 0x0, {0x7}, [@NFTA_COMPAT_NAME={0x6, 0x1, '%\x00'}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x6, 0x1, '+\x00'}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040000}, 0x200040d0)
socketpair(0x1, 0x80000, 0x8, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NBD_CMD_STATUS(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000140}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x8c, r4, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fffffff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x200}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x51dc0f81}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x400000000}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x8000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)
sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, r5, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1f}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000540)=0xcb9, 0x4)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r3)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000600)={'wpan0\x00', <r7=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000640)={'wpan3\x00', <r8=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x74, r6, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}, @NL802154_ATTR_SEC_DEVICE={0x30, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffd}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x68205684}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x48, r6, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x28, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "7c7462868e567a68abe0596e8407e8f6ae0c4a5d7bd9347bb7f13228f4e6e61d"}]}]}, 0x48}}, 0x20000000)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000900), r3)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000940)=<r10=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000980)=<r11=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000009c0)=<r12=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000a00)=<r13=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=<r14=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000a80)=<r15=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)=<r16=>0x0)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000bc0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x5c, r9, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8804}, 0x20008801)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c40)={<r17=>0x0}, &(0x7f0000000c80)=0xc)
r18 = openat$cgroup(0xffffffffffffffff, &(0x7f0000002200)='syz1\x00', 0x200002, 0x0)
r19 = gettid()
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000002480)={{{@in=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r20=>0x0}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f0000002580)=0xe8)
r21 = getgid()
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000025c0)=<r22=>0x0)
sendmsg$netlink(r2, &(0x7f0000002640)={&(0x7f0000000c00)=@proc={0x10, 0x0, 0x25dfdbfc, 0x40000000}, 0xc, &(0x7f0000002440)=[{&(0x7f0000000cc0)={0x10c8, 0x39, 0x100, 0x70bd2b, 0x25dfdbfe, "", [@nested={0x10b5, 0x13, 0x0, 0x1, [@typed={0x8, 0x8a, 0x0, 0x0, @fd=r0}, @typed={0x7, 0x37, 0x0, 0x0, @str='{\x1e\x00'}, @nested={0x4, 0x113}, @generic="b3311251df0e051a42b09d16119234b16d78a008dd98167c8999c6e3585c5f8a4de0c9e9f6337c27ecfac66e0ccb10d63ad59540c31def61adcb0519cffbc047e7aebc781d9ec89ac5e4a64c0822fd9d6e8d76bd31f13d5b609ebd2f10e9", @typed={0x8, 0xf0, 0x0, 0x0, @pid=r17}, @typed={0x8, 0x9e, 0x0, 0x0, @uid}, @generic="c80ec4f724d45f6a99651768c017d88eb25ee4c93fffdd210777e74da09c51cd3615d5bcde93d9d7f13b6d815a7a67", @generic="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"]}]}, 0x10c8}, {&(0x7f0000001dc0)={0x414, 0x24, 0x4, 0x70bd26, 0x25dfdbfd, "", [@nested={0x2e5, 0x46, 0x0, 0x1, [@generic="428fcce6470ce9ac3a84619b0223260ba1bb8530b35a01bb1dc47b785e91b2e10de631afb5382a31e078d3abec62ea7753a5893f8be9d7b2e7098873edef263abb8de49cefe398898cbb38d18572bf1627646e971d6ce9ad65ed3ffa25ff13722802d4cda607b6c5aa65c3bbc1a8a7f35a9ee526b934d0e501bae733a79e8e3d58ec2ecd2305647a639e63ff5811ef543895f5c80017b92510b7497ae054154689bafa1001f33a860ac4cd", @typed={0x8, 0xaf, 0x0, 0x0, @ipv4=@empty}, @generic="f7269f55dddc5a0a756981dfc26aa2f148f229abfb4ec35f0b2cd40528dc38087e92a14c8c431daa42f4b02b2b914c728231f646f41538791a7e756060fbf1a3b8199218965fa81cda5f3bb2e08065d9bc711871c539f985baffaff30b044e", @typed={0xc5, 0xdc, 0x0, 0x0, @binary="96eba48dbc1719567964b708b375ff140b612daa4a382ef76ac8caab018f4f33909360b03b05937bc2fefeb40443b40f9727a99bfba1db2598c37b6a70330340be2b56c5ee288460ec0d9ddbd5f7bcc991e39fa2a415a55769e460be98493110de4c64b64fecae7eba03a474f86f2973f4fcb2298fda82dcb3a3cfbd09794ab80a8cee478f3abb9044c404e203853f94a10720d73c59a502fa095785f3f08f1b833b51e5fca01a0c8bc492d03b484845d51a6b8bc5f85b71297e87828b93ca5314"}, @generic="1480b82952367834481563a62107d00aa2b91d9a5c73b11b8f0452c46b56dd4ac4d31e857ed8c5f101408f219a1de1d1e3b4db64f5a30dd9169af21beca956b4fd6d738f02ef0380343062865e2a7b19556eeebaef576252feb8f543d875fd48a4e024a82268436be0d72e95151845891edd6d408e81eb8ac0f943622efc97a3fe4ca36536f0a1e65d427a481a4167861612ce1a840d85acf4f4c3c418754f020841e1370548d7d51be890336e3ec3d99da5f5be3159945e0d0b7d886e62605ff59ccaca342ca097b6a1b8f1db878960bba3b6ed06b7d12b464b67b1869bf81a4eaaed64f56a19aac4eb69", @nested={0x4, 0x8b}, @typed={0xc, 0x132, 0x0, 0x0, @u64=0x7}, @nested={0x4, 0x12b}, @typed={0x8, 0xd, 0x0, 0x0, @pid}]}, @generic="7d9fa1af7990f44147d0c4ab3212e30f0b7dde029ec300d0e1df3f762b246a3cf70189b0913a44e3b4ab60c2aef8e15c7160498327330ad5d8b25eb4e7e6908e90613a3fccc5fcc77f1dc158946fd2895dfbe31666c648809a7eccfe92bc63599208759ae304c622627c49e60804325bbd007acad7cef90d99b855216d", @typed={0xf, 0x16, 0x0, 0x0, @binary="65af49416f73d13e9c9ca4"}, @typed={0x8a, 0x33, 0x0, 0x0, @binary="f8b817343b682fe155e1f87ee0030be94cc84192c3fd739abd2aeb09569c405084320bacfc3f9b2a881050208cf87bae02bc3f3e15ef297c5f495c7a0ee471a10410303bc096c20c9e6ffb8178d3179d41042ea945698bda1b2fa373abc49462db0396cc0e13a410880ac098c4c47d8909643480b4d83c871deb2f36f70a3f8034fb66852a57"}]}, 0x414}, {&(0x7f0000002240)={0x1cc, 0x39, 0x100, 0x70bd26, 0x25dfdbfc, "", [@typed={0x8, 0x9f, 0x0, 0x0, @fd=r1}, @typed={0x14, 0x9, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @nested={0xdb, 0xc1, 0x0, 0x1, [@generic="4532804bb02bef35ba2e304b0b52ae99f9e20d99482790782ef57c0178e294445e59b4fdf01c0add322bae00cf9d3a97e4151bb33cd29c1d4e24dc4e8d23d02a13bf478a22fc1be3c59f49aa688e81ef037fa69e4992666a11f4d414b7121943bf5e4fd21853f77b7198a94d3688ddd2cbdc6e44673dcfdb6567602d79ae5760d7080234d241f8f235601695d22683e12a0ea4dfe20cc9678c3727be68fcf247cc65f40d3624d280b37fbe448a316e6a3925bc5cace0b2b284fe7eebae312fa2bbe4ca3d957a3efb98500d2da1ae64", @typed={0x8, 0x103, 0x0, 0x0, @fd=r18}]}, @generic="5d204c14760b0bdab501d7ab9c0c55770a19e1b00d3fe0b6bcf3b7568dc8268ef1abf9af1769c40409fe6906957f8a719dfb83675c3e2abcfb1f393a28b430e312f9d43271a37bab487f9b9ccc54476fadbbb26d802214473ecbd609d82e451a058b9cc7f2b1beace263beb0eeff5424ed0a199ef3a3a68bdf79665b5ab332308e6fb5f7a13fe6a64e446c3df556da1af53d20540316cd9642835ba6d540da14eb809b828ab533d4b053fc118d37c74ef46415177564cbd25147784d12d3c5e1a2"]}, 0x1cc}], 0x3, &(0x7f0000002600)=[@cred={{0x1c, 0x1, 0x2, {r19, r20, r21}}}, @cred={{0x1c, 0x1, 0x2, {r22, 0x0, 0xee00}}}], 0x40, 0x24000880}, 0x4008080)

469.080659ms ago: executing program 2 (id=5256):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10)
listen(r0, 0x7ff)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000780), 0x0, &(0x7f0000000480)=ANY=[], 0x170}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000240)="d29f762dc23417000d19410216dcf3bd2e0aef07b02b6205b7d81930fb6be34607c12ae8e17a38c8f9f957948227bc6e513ac5be60235a31bd08fc0f6ecaf83345", 0x41}], 0x1}}], 0x2, 0x0)
recvfrom$inet(r2, &(0x7f00000008c0)=""/214, 0xd6, 0x40010082, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x4a, &(0x7f00000002c0)={0x0, 0x0}, 0x10)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
r4 = socket$xdp(0x2c, 0x3, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x12, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000002000000000035b3f85edbc1e6db6300000000000018110000958157b9df6a08a548649162dbf73fd2b89f15b2f4410a90b14f3877257eba130b07db1a458bebb470aba25b2adf802a8f88a5b69c85695add4acec9b40360b2cf", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000186300000f00000000000000080000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44800)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="0ab0dd7862d6d7db2f200001082bbd7000000000", @ANYRES32=0x0, @ANYRESDEC=r4, @ANYRESDEC=r6], 0x20}}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000080)={0x80000001, 0x4, 0x6}, 0x10)
sendmsg$nl_generic(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001200050b00000000000000ff07"], 0x14}}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x42000, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$TUNSETLINK(r8, 0x400454cd, 0x336)

406.209579ms ago: executing program 2 (id=5257):
r0 = socket(0x2b, 0x80801, 0x1)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ppoll(&(0x7f0000000580)=[{r1, 0x2000}], 0x1, &(0x7f00000005c0)={0x77359400}, &(0x7f0000000600)={[0x3]}, 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4, 0x3fc, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)
r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf)
getpeername$ax25(r2, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r4, 0x0, 0x0)
setsockopt$inet6_mreq(r3, 0x29, 0x1b, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000000140)=[{&(0x7f0000000340)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000300080c10000000000000000000", 0x58}], 0x1)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14)
socket$netlink(0x10, 0x3, 0x9)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000180)={0x84, @rand_addr=0x64010102, 0x4e23, 0x2, 'dh\x00', 0x17, 0x5, 0x4a}, 0x2c)
ioctl$VFAT_IOCTL_READDIR_BOTH(r7, 0x82187201, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r8, 0x400448ca, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@random="9ffbf4c8e5bfa99ac3b577c9dda93f037a6aed8189d9775647e82c64ac89f4a2", 0x20, 0x1)
syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080211000001080211000000080211000000000000e3ffffffffffff63822f07c13b1974f100010000060202020202020108"], 0x36)
bind$bt_hci(r8, &(0x7f0000000280), 0x6)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
readv(r9, &(0x7f0000000280)=[{&(0x7f0000000040)=""/17, 0x11}, {&(0x7f0000000240)=""/37, 0x25}], 0x2)
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})

405.051714ms ago: executing program 0 (id=5258):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r0], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
r1 = socket(0x1e, 0x4, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fe88"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0)
socket$packet(0x11, 0x2, 0x300) (async)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async)
r3 = socket(0x2, 0x80805, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r4, 0x8982, &(0x7f0000000080))
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r5, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000100), 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000001300)=@gcm_256={{0x304}, "67c3f71b0f188109", "2c9e910757c2725dd5795f705ac44b9d43498e33fe93a0c9001c5c65f7107d0d", "ddfb00", "5a3e2c1b40238e79"}, 0x38) (async)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x303}, "41bf9cf7359b7d41", "99d522c887e3b27d24832331869a38fc", "37c89ef6", "e3afde81c4c43b32"}, 0x28)
r6 = gettid()
r7 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r7, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="16000000000000002900000043"], 0x18}}], 0x1, 0x4000880) (async)
syz_open_procfs$namespace(r6, &(0x7f0000000340)) (async)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@loopback, @in=@loopback}}, {{@in=@broadcast}}}, &(0x7f0000000480)=0xe8) (async)
r8 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000), 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
accept$netrom(r3, &(0x7f0000000200)={{0x3, @rose}, [@default, @bcast, @default, @netrom, @default, @netrom, @rose, @default]}, &(0x7f0000000400)=0x48) (async)
syz_init_net_socket$rose(0xb, 0x5, 0x0)

323.604238ms ago: executing program 0 (id=5259):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r1, 0x1) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async)
r3 = socket$packet(0x11, 0x3, 0x300) (async)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x4908d13283d17e5f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3001a}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e27}}, @FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) (async)
recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) (async)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r7, 0xffffffffffffffff, 0x24}, 0xc) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async)
unshare(0x62040200) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="05000000000000000000060000000800030065400efe14cd32a7e6ad1262", @ANYRES32=r10, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x2e) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x1e)

322.394063ms ago: executing program 1 (id=5260):
socket$inet6(0xa, 0x1, 0x84) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0xfffffffffffffeee) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
socket$qrtr(0x2a, 0x2, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r4, 0x5, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) (async)
r7 = socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (async)
r8 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r8, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e)
sendmmsg(r8, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r9}, 0x18)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

130.199586ms ago: executing program 1 (id=5261):
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
socket$alg(0x26, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, 0x0, 0x8000) (async)
sendmsg$nl_generic(r0, 0x0, 0x8000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r2=>0x0})
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) (async)
bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r8, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x60, &(0x7f0000012c40)={0x0, 0x989680})
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x38, 0x701, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x4000000)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)

0s ago: executing program 1 (id=5262):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x1}, 0xe) (async)
bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x1}, 0xe)
connect$bt_l2cap(r3, &(0x7f0000000680)={0x1f, 0x20, @none}, 0xe)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x22, &(0x7f0000000100)={0x0, 0x989680})
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$sock_ifreq(r4, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000380)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
setsockopt$TIPC_MCAST_BROADCAST(r5, 0x10f, 0x85)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2) (async)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x0) (async)
socket(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r8=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES32=r8, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r8, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea43961a6007c1674e79a267dc5be7897c84a89a72097bc2cf211a7ea330c86604e"], 0x1c}, 0x1, 0x0, 0x0, 0x24000004}, 0x40000) (async)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES32=r8, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r8, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea43961a6007c1674e79a267dc5be7897c84a89a72097bc2cf211a7ea330c86604e"], 0x1c}, 0x1, 0x0, 0x0, 0x24000004}, 0x40000)
r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=<r10=>0x0)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
write$nci(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="414601", @ANYRES32=r10], 0x4)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r11)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="070627bd7000fcdbdf252d000000c3c90500000000000000000008002f00000000000a0001007770616e3100000005002b000200000005002e00050000200800210004000000"], 0x4c}}, 0x4008000) (async)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="070627bd7000fcdbdf252d000000c3c90500000000000000000008002f00000000000a0001007770616e3100000005002b000200000005002e00050000200800210004000000"], 0x4c}}, 0x4008000)

kernel console output (not intermixed with test programs):

] netlink: 'syz.1.3799': attribute type 10 has an invalid length.
[  488.358960][T27214] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  488.363451][T27214] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  488.559983][T27228] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  489.453756][T27270] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  489.458193][T27270] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  489.493636][ T4971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  489.496928][ T4971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  489.970325][T27294] netlink: 'syz.2.3813': attribute type 10 has an invalid length.
[  490.602989][T27350] netlink: 'syz.1.3822': attribute type 10 has an invalid length.
[  490.789238][T27374] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  491.500845][T27431] delete_channel: no stack
[  491.560256][T24707] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  491.563082][T24707] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  491.663102][T27454] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  491.668788][T27454] syzkaller0: entered promiscuous mode
[  491.670947][T27454] syzkaller0: entered allmulticast mode
[  491.823230][T27469] netlink: 'syz.0.3841': attribute type 1 has an invalid length.
[  491.849673][T27477] __nla_validate_parse: 12 callbacks suppressed
[  491.849691][T27477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3840'.
[  491.861028][T27469] 8021q: adding VLAN 0 to HW filter on device bond27
[  491.912571][T27480] 8021q: adding VLAN 0 to HW filter on device bond27
[  491.917332][T27480] bond27: (slave vxcan1): The slave device specified does not support setting the MAC address
[  491.941218][T27480] bond27: (slave vxcan1): Error -95 calling set_mac_address
[  491.981146][T27472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3842'.
[  492.003518][T27469] veth41: entered promiscuous mode
[  492.013330][T27469] bond27: (slave veth41): Enslaving as an active interface with a down link
[  492.023034][T27472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3842'.
[  492.348438][T27519] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3847'.
[  492.443468][T27530] netlink: 'syz.1.3846': attribute type 10 has an invalid length.
[  492.447604][T27530] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3846'.
[  492.600374][T27534] 8021q: VLANs not supported on ip_vti0
[  492.610482][T27534] netlink: 20824 bytes leftover after parsing attributes in process `syz.2.3848'.
[  492.656092][  T974] tipc: Node number set to 4153172356
[  492.662308][T27534] netlink: 'syz.2.3848': attribute type 10 has an invalid length.
[  492.758742][T27549] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3851'.
[  492.965630][T27564] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3854'.
[  492.969548][T27564] tipc: Invalid UDP bearer configuration
[  492.969589][T27564] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  493.234976][T27595] macsec0: left allmulticast mode
[  493.238995][T27595] bridge0: port 1(macsec0) entered disabled state
[  493.257340][T27595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3859'.
[  493.262369][T27595] bridge: RTM_NEWNEIGH with invalid ether address
[  493.699757][T27632] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3864'.
[  493.703477][T27632] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  493.706621][T27632] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  494.140933][T27662] netlink: 'syz.1.3866': attribute type 10 has an invalid length.
[  494.189503][T27679] tipc: Resetting bearer <eth:syzkaller0>
[  494.192088][T27679] syzkaller0: left promiscuous mode
[  494.246752][T27690] sctp: [Deprecated]: syz.2.3871 (pid 27690) Use of int in max_burst socket option deprecated.
[  494.246752][T27690] Use struct sctp_assoc_value instead
[  494.254008][T27662] 8021q: VLANs not supported on ip6tnl0
[  494.256416][T27689] sctp: [Deprecated]: syz.2.3871 (pid 27689) Use of int in max_burst socket option deprecated.
[  494.256416][T27689] Use struct sctp_assoc_value instead
[  494.580453][T27726] IPVS: set_ctl: invalid protocol: 115 172.30.1.1:20004
[  495.215177][T27785] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  495.233592][T27785] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  495.499584][T27809] netlink: 'syz.0.3892': attribute type 13 has an invalid length.
[  495.502123][T27809] netlink: 'syz.0.3892': attribute type 17 has an invalid length.
[  495.529730][T27809] 8021q: adding VLAN 0 to HW filter on device bond0
[  495.533015][T27809] 8021q: adding VLAN 0 to HW filter on device team0
[  495.541958][T27809] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  495.557816][ T9598] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  495.567227][T27812] netlink: 'syz.1.3891': attribute type 10 has an invalid length.
[  495.908041][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  495.990675][T27831] netlink: 'syz.1.3895': attribute type 10 has an invalid length.
[  496.180438][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  496.337895][T27865] netlink: 'syz.0.3899': attribute type 1 has an invalid length.
[  496.402995][T27865] 8021q: adding VLAN 0 to HW filter on device bond28
[  496.479223][T27870] 8021q: adding VLAN 0 to HW filter on device bond28
[  496.482191][T27870] bond28: (slave vxcan1): The slave device specified does not support setting the MAC address
[  496.515082][T27870] bond28: (slave vxcan1): Error -95 calling set_mac_address
[  496.530619][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  496.593336][T27865] veth43: entered promiscuous mode
[  496.601543][T27865] bond28: (slave veth43): Enslaving as an active interface with a down link
[  496.630772][T27888] netlink: 'syz.2.3901': attribute type 10 has an invalid length.
[  496.841204][T27902] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  496.844013][T27902] CPU: 1 UID: 0 PID: 27902 Comm: syz.1.3902 Not tainted syzkaller #0 PREEMPT(full) 
[  496.844026][T27902] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  496.844032][T27902] Call Trace:
[  496.844038][T27902]  <TASK>
[  496.844042][T27902]  dump_stack_lvl+0x189/0x250
[  496.844061][T27902]  ? __pfx_dump_stack_lvl+0x10/0x10
[  496.844071][T27902]  ? __pfx__printk+0x10/0x10
[  496.844088][T27902]  ? kernfs_path_from_node+0x2f/0x290
[  496.844099][T27902]  ? kernfs_path_from_node+0x250/0x290
[  496.844107][T27902]  ? kernfs_path_from_node+0x2f/0x290
[  496.844119][T27902]  sysfs_warn_dup+0x8e/0xa0
[  496.844129][T27902]  sysfs_do_create_link_sd+0xc0/0x110
[  496.844139][T27902]  device_add_class_symlinks+0x1cf/0x240
[  496.844156][T27902]  device_add+0x475/0xb50
[  496.844168][T27902]  wiphy_register+0x1ba6/0x28d0
[  496.844188][T27902]  ? __pfx_wiphy_register+0x10/0x10
[  496.844196][T27902]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  496.844213][T27902]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  496.844227][T27902]  ieee80211_register_hw+0x3484/0x4100
[  496.844248][T27902]  ? ieee80211_register_hw+0x1461/0x4100
[  496.844263][T27902]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  496.844276][T27902]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  496.844294][T27902]  ? __hrtimer_setup+0x187/0x210
[  496.844302][T27902]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  496.844313][T27902]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  496.844340][T27902]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  496.844352][T27902]  ? trace_kmalloc+0x1f/0xd0
[  496.844364][T27902]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  496.844377][T27902]  ? kstrndup+0xbf/0x160
[  496.844392][T27902]  hwsim_new_radio_nl+0xea4/0x1b10
[  496.844405][T27902]  ? __pfx___nla_validate_parse+0x10/0x10
[  496.844421][T27902]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  496.844438][T27902]  ? __nla_parse+0x40/0x60
[  496.844448][T27902]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  496.844466][T27902]  genl_family_rcv_msg_doit+0x215/0x300
[  496.844480][T27902]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  496.844497][T27902]  ? bpf_lsm_capable+0x9/0x20
[  496.844508][T27902]  ? security_capable+0x7e/0x2e0
[  496.844524][T27902]  genl_rcv_msg+0x60e/0x790
[  496.844538][T27902]  ? __pfx_genl_rcv_msg+0x10/0x10
[  496.844548][T27902]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  496.844567][T27902]  netlink_rcv_skb+0x208/0x470
[  496.844574][T27902]  ? __lock_acquire+0xab9/0xd20
[  496.844586][T27902]  ? __pfx_genl_rcv_msg+0x10/0x10
[  496.844598][T27902]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  496.844615][T27902]  ? down_read+0x1ad/0x2e0
[  496.844625][T27902]  genl_rcv+0x28/0x40
[  496.844635][T27902]  netlink_unicast+0x82f/0x9e0
[  496.844652][T27902]  ? __pfx_netlink_unicast+0x10/0x10
[  496.844698][T27902]  ? netlink_sendmsg+0x642/0xb30
[  496.844707][T27902]  ? skb_put+0x11b/0x210
[  496.844722][T27902]  netlink_sendmsg+0x805/0xb30
[  496.844738][T27902]  ? __pfx_netlink_sendmsg+0x10/0x10
[  496.844750][T27902]  ? aa_sock_msg_perm+0xf1/0x1d0
[  496.844762][T27902]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  496.844771][T27902]  ? __pfx_netlink_sendmsg+0x10/0x10
[  496.844780][T27902]  __sock_sendmsg+0x21c/0x270
[  496.844794][T27902]  ____sys_sendmsg+0x505/0x830
[  496.844808][T27902]  ? __pfx_____sys_sendmsg+0x10/0x10
[  496.844823][T27902]  ? import_iovec+0x74/0xa0
[  496.844838][T27902]  ___sys_sendmsg+0x21f/0x2a0
[  496.844850][T27902]  ? __pfx____sys_sendmsg+0x10/0x10
[  496.844878][T27902]  ? __fget_files+0x2a/0x420
[  496.844885][T27902]  ? __fget_files+0x3a0/0x420
[  496.844897][T27902]  __x64_sys_sendmsg+0x19b/0x260
[  496.844910][T27902]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  496.844926][T27902]  ? rcu_is_watching+0x15/0xb0
[  496.844937][T27902]  ? do_syscall_64+0xbe/0x3b0
[  496.844949][T27902]  do_syscall_64+0xfa/0x3b0
[  496.844957][T27902]  ? lockdep_hardirqs_on+0x9c/0x150
[  496.844965][T27902]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  496.844975][T27902]  ? exc_page_fault+0x9f/0xf0
[  496.844984][T27902]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  496.844993][T27902] RIP: 0033:0x7fa348f8ec29
[  496.845004][T27902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  496.845013][T27902] RSP: 002b:00007fa349e13038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  496.845023][T27902] RAX: ffffffffffffffda RBX: 00007fa3491d6090 RCX: 00007fa348f8ec29
[  496.845030][T27902] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a
[  496.845037][T27902] RBP: 00007fa349011e41 R08: 0000000000000000 R09: 0000000000000000
[  496.845043][T27902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  496.845049][T27902] R13: 00007fa3491d6128 R14: 00007fa3491d6090 R15: 00007fff2ab13328
[  496.845064][T27902]  </TASK>
[  497.005797][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  497.156339][T27903] __nla_validate_parse: 16 callbacks suppressed
[  497.156357][T27903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3904'.
[  497.982550][T27972] netlink: 'syz.0.3912': attribute type 10 has an invalid length.
[  498.048532][T27978] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3912'.
[  498.160389][T27997] netlink: 'syz.2.3914': attribute type 10 has an invalid length.
[  498.168018][T28004] ieee802154 phy1 wpan1: encryption failed: -90
[  498.250652][T28009] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3917'.
[  498.254212][T28009] netlink: 'syz.1.3917': attribute type 3 has an invalid length.
[  498.489834][T28025] netlink: 'syz.0.3919': attribute type 10 has an invalid length.
[  498.681974][T28032] openvswitch: netlink: IPv4 tun info is not correct
[  498.997450][T28037] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3921'.
[  499.215100][ T3556] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  499.404346][T28056] netlink: 'syz.1.3923': attribute type 10 has an invalid length.
[  499.494646][T28066] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3926'.
[  499.498747][T28066] netlink: 'syz.0.3926': attribute type 10 has an invalid length.
[  499.559819][T28078] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  499.563710][T28078] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  499.745960][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  499.991108][T28105] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3931'.
[  499.994907][T28105] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  500.001340][T28105] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  500.122767][T28101] netlink: 'syz.2.3930': attribute type 10 has an invalid length.
[  500.132264][T28100] netlink: 'syz.2.3930': attribute type 10 has an invalid length.
[  500.154311][T28107] syzkaller1: entered promiscuous mode
[  500.157365][T28107] syzkaller1: entered allmulticast mode
[  500.365262][T28125] syzkaller0: entered promiscuous mode
[  500.372189][T28125] syzkaller0: entered allmulticast mode
[  500.381271][T28131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3934'.
[  500.411828][T28119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3932'.
[  500.998700][T28163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3940'.
[  501.276267][T28189] netlink: 'syz.0.3945': attribute type 1 has an invalid length.
[  501.312349][T28189] 8021q: adding VLAN 0 to HW filter on device bond29
[  501.358692][T28189] 8021q: adding VLAN 0 to HW filter on device bond29
[  501.362901][T28189] bond29: (slave vxcan1): The slave device specified does not support setting the MAC address
[  501.376637][T28189] bond29: (slave vxcan1): Error -95 calling set_mac_address
[  501.384414][T28199] IPVS: set_ctl: invalid protocol: 137 100.1.1.1:20000
[  501.414681][T28198] veth45: entered promiscuous mode
[  501.419517][T28198] bond29: (slave veth45): Enslaving as an active interface with a down link
[  501.440559][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  501.464160][T28201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3948'.
[  501.809914][T28235] netlink: 'syz.0.3953': attribute type 21 has an invalid length.
[  502.181219][T28274] __nla_validate_parse: 3 callbacks suppressed
[  502.181232][T28274] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3960'.
[  502.283671][T28280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3962'.
[  502.975080][T28307] mac80211_hwsim hwsim191 wlan1: entered allmulticast mode
[  503.072397][ T4971] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  503.387590][T28337] validate_nla: 3 callbacks suppressed
[  503.387607][T28337] netlink: 'syz.0.3972': attribute type 7 has an invalid length.
[  503.392671][T28337] netlink: 'syz.0.3972': attribute type 8 has an invalid length.
[  503.396281][T28337] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3972'.
[  503.406703][T28337] netlink: 'syz.0.3972': attribute type 10 has an invalid length.
[  503.431167][T28348] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  503.530761][T28345] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3976'.
[  503.541555][T28345] tipc: Invalid UDP bearer configuration
[  503.541599][T28345] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  503.586375][T28354] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3977'.
[  503.602004][T28354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3977'.
[  503.651194][T28359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3978'.
[  503.656884][T28359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3978'.
[  503.812591][T28373] mac80211_hwsim hwsim191 wlan1: left allmulticast mode
[  503.828419][T28373] netlink: 'syz.1.3981': attribute type 10 has an invalid length.
[  503.839861][T28373] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3981'.
[  503.915884][T28390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3983'.
[  503.962112][T28396] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  503.971452][T28396] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  503.979287][T28399] netlink: 'syz.1.3985': attribute type 10 has an invalid length.
[  504.103119][T28408] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  504.106232][T28408] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  504.837938][T28468] netlink: 'syz.1.4001': attribute type 1 has an invalid length.
[  504.853864][T28468] 8021q: adding VLAN 0 to HW filter on device bond24
[  504.872625][T28468] 8021q: adding VLAN 0 to HW filter on device bond24
[  504.875523][T28468] bond24: (slave vxcan17): The slave device specified does not support setting the MAC address
[  504.882360][T28468] bond24: (slave vxcan17): Error -95 calling set_mac_address
[  504.933312][T28475] veth47: entered promiscuous mode
[  504.939125][T28475] bond24: (slave veth47): Enslaving as an active interface with a down link
[  504.958140][T24711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  504.961456][T24711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  505.632031][T28516] bond26: (slave veth39): Releasing active interface
[  505.656597][T28516] veth41: left promiscuous mode
[  505.661860][T28516] bond27: (slave veth41): Releasing active interface
[  505.668607][T28516] veth43: left promiscuous mode
[  505.674556][T28516] bond28: (slave veth43): Releasing active interface
[  505.682735][T28516] veth45: left promiscuous mode
[  505.688310][T28516] bond29: (slave veth45): Releasing active interface
[  505.722009][T28523] syzkaller1: entered promiscuous mode
[  505.724773][T28523] syzkaller1: entered allmulticast mode
[  506.338648][T24708] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  507.209198][T28580] __nla_validate_parse: 15 callbacks suppressed
[  507.209215][T28580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4022'.
[  508.114179][T28596] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4026'.
[  508.123927][T28596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4026'.
[  508.225355][T28597] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  508.586445][T28621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4030'.
[  508.807550][T28625] netlink: 'syz.1.4029': attribute type 10 has an invalid length.
[  508.983888][T28642] netlink: 'syz.1.4032': attribute type 1 has an invalid length.
[  509.009073][T28642] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4032'.
[  509.244854][T28668] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4036'.
[  509.250455][T28669] netlink: 'syz.2.4033': attribute type 10 has an invalid length.
[  509.427621][T28680] netlink: 'syz.1.4037': attribute type 1 has an invalid length.
[  509.481000][T28668] nbd: socks must be embedded in a SOCK_ITEM attr
[  509.489498][T20861] block nbd64: NBD_DISCONNECT
[  509.525550][T28680] bond25: (slave gretap1): making interface the new active one
[  509.553538][T28680] bond25: (slave gretap1): Enslaving as an active interface with an up link
[  509.663175][T28685] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  509.692951][T28690] netlink: 'syz.2.4038': attribute type 13 has an invalid length.
[  509.696280][T28690] netlink: 'syz.2.4038': attribute type 17 has an invalid length.
[  509.699476][T28685] CPU: 0 UID: 0 PID: 28685 Comm: syz.1.4037 Not tainted syzkaller #0 PREEMPT(full) 
[  509.699498][T28685] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  509.699510][T28685] Call Trace:
[  509.699517][T28685]  <TASK>
[  509.699527][T28685]  dump_stack_lvl+0x189/0x250
[  509.699555][T28685]  ? __pfx_dump_stack_lvl+0x10/0x10
[  509.699574][T28685]  ? __pfx__printk+0x10/0x10
[  509.699601][T28685]  ? kernfs_path_from_node+0x2f/0x290
[  509.699618][T28685]  ? kernfs_path_from_node+0x250/0x290
[  509.699632][T28685]  ? kernfs_path_from_node+0x2f/0x290
[  509.699651][T28685]  sysfs_warn_dup+0x8e/0xa0
[  509.699667][T28685]  sysfs_do_create_link_sd+0xc0/0x110
[  509.699685][T28685]  device_add_class_symlinks+0x1cf/0x240
[  509.699707][T28685]  device_add+0x475/0xb50
[  509.699729][T28685]  wiphy_register+0x1ba6/0x28d0
[  509.699760][T28685]  ? __pfx_wiphy_register+0x10/0x10
[  509.699774][T28685]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  509.699801][T28685]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  509.699826][T28685]  ieee80211_register_hw+0x3484/0x4100
[  509.699858][T28685]  ? ieee80211_register_hw+0x1461/0x4100
[  509.699923][T28685]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  509.699949][T28685]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  509.699978][T28685]  ? __hrtimer_setup+0x187/0x210
[  509.699993][T28685]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  509.700011][T28685]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  509.700058][T28685]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  509.700079][T28685]  ? trace_kmalloc+0x1f/0xd0
[  509.700096][T28685]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  509.700115][T28685]  ? kstrndup+0xbf/0x160
[  509.700139][T28685]  hwsim_new_radio_nl+0xea4/0x1b10
[  509.700163][T28685]  ? __pfx___nla_validate_parse+0x10/0x10
[  509.700190][T28685]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  509.700222][T28685]  ? __nla_parse+0x40/0x60
[  509.700241][T28685]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  509.700269][T28685]  genl_family_rcv_msg_doit+0x215/0x300
[  509.700295][T28685]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  509.700324][T28685]  ? bpf_lsm_capable+0x9/0x20
[  509.700350][T28685]  ? security_capable+0x7e/0x2e0
[  509.700381][T28685]  genl_rcv_msg+0x60e/0x790
[  509.700408][T28685]  ? __pfx_genl_rcv_msg+0x10/0x10
[  509.700429][T28685]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  509.700464][T28685]  netlink_rcv_skb+0x208/0x470
[  509.700478][T28685]  ? __lock_acquire+0xab9/0xd20
[  509.700500][T28685]  ? __pfx_genl_rcv_msg+0x10/0x10
[  509.700520][T28685]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  509.700552][T28685]  ? down_read+0x1ad/0x2e0
[  509.700574][T28685]  genl_rcv+0x28/0x40
[  509.700593][T28685]  netlink_unicast+0x82f/0x9e0
[  509.700623][T28685]  ? __pfx_netlink_unicast+0x10/0x10
[  509.700646][T28685]  ? netlink_sendmsg+0x642/0xb30
[  509.700660][T28685]  ? skb_put+0x11b/0x210
[  509.700680][T28685]  netlink_sendmsg+0x805/0xb30
[  509.700705][T28685]  ? __pfx_netlink_sendmsg+0x10/0x10
[  509.700724][T28685]  ? aa_sock_msg_perm+0xf1/0x1d0
[  509.700741][T28685]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  509.700755][T28685]  ? __pfx_netlink_sendmsg+0x10/0x10
[  509.700773][T28685]  __sock_sendmsg+0x21c/0x270
[  509.700797][T28685]  ____sys_sendmsg+0x505/0x830
[  509.700821][T28685]  ? __pfx_____sys_sendmsg+0x10/0x10
[  509.700848][T28685]  ? import_iovec+0x74/0xa0
[  509.700902][T28685]  ___sys_sendmsg+0x21f/0x2a0
[  509.700924][T28685]  ? __pfx____sys_sendmsg+0x10/0x10
[  509.700975][T28685]  ? __fget_files+0x2a/0x420
[  509.700989][T28685]  ? __fget_files+0x3a0/0x420
[  509.701011][T28685]  __x64_sys_sendmsg+0x19b/0x260
[  509.701032][T28685]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  509.701059][T28685]  ? rcu_is_watching+0x15/0xb0
[  509.701079][T28685]  ? do_syscall_64+0xbe/0x3b0
[  509.701099][T28685]  do_syscall_64+0xfa/0x3b0
[  509.701115][T28685]  ? lockdep_hardirqs_on+0x9c/0x150
[  509.701130][T28685]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.701144][T28685]  ? exc_page_fault+0x9f/0xf0
[  509.701161][T28685]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.701175][T28685] RIP: 0033:0x7fa348f8ec29
[  509.701188][T28685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  509.701202][T28685] RSP: 002b:00007fa349e13038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  509.701218][T28685] RAX: ffffffffffffffda RBX: 00007fa3491d6090 RCX: 00007fa348f8ec29
[  509.701230][T28685] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000b
[  509.701240][T28685] RBP: 00007fa349011e41 R08: 0000000000000000 R09: 0000000000000000
[  509.701250][T28685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  509.701260][T28685] R13: 00007fa3491d6128 R14: 00007fa3491d6090 R15: 00007fff2ab13328
[  509.701287][T28685]  </TASK>
[  509.943373][T28690] 8021q: adding VLAN 0 to HW filter on device bond0
[  509.958776][T28690] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  509.980240][  T974] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  510.106184][  T974] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  510.250528][T28700] netlink: 16384 bytes leftover after parsing attributes in process `syz.0.4039'.
[  510.418280][T28716] wlan0: mtu greater than device maximum
[  510.420796][T28717] wlan0: mtu greater than device maximum
[  510.722569][ T5882] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  510.733958][ T5882] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  510.788784][T28755] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4048'.
[  510.792586][T28755] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  510.796642][T28755] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  510.933726][T28755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4048'.
[  511.056568][T28767] pim6reg1: entered promiscuous mode
[  511.058729][T28767] pim6reg1: entered allmulticast mode
[  511.166532][T28767] block nbd1: server does not support multiple connections per device.
[  511.171911][T28767] block nbd1: shutting down sockets
[  511.187270][T28772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4049'.
[  511.193524][T28767] netlink: 'syz.1.4049': attribute type 27 has an invalid length.
[  511.248364][  T974] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  511.311677][T28767] veth47: left promiscuous mode
[  511.324734][T28767] pim6reg1: left promiscuous mode
[  511.328667][T28767] pim6reg1: left allmulticast mode
[  511.578040][T28797] IPVS: set_ctl: invalid protocol: 46 255.255.255.255:20004
[  511.952551][T28799] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  511.958221][T28799] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  512.189414][T28813] netlink: 'syz.1.4059': attribute type 2 has an invalid length.
[  512.229657][T28818] __nla_validate_parse: 3 callbacks suppressed
[  512.229674][T28818] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4062'.
[  512.257379][T28815] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4060'.
[  512.259110][T28818] netlink: 20824 bytes leftover after parsing attributes in process `syz.1.4062'.
[  512.260960][T28815] tipc: Invalid UDP bearer configuration
[  512.264397][T28815] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  512.295354][T28821] netlink: 'syz.0.4061': attribute type 1 has an invalid length.
[  512.330746][T28825] netlink: 200 bytes leftover after parsing attributes in process `syz.1.4063'.
[  512.339607][T28825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4063'.
[  512.456169][T28831] 8021q: VLANs not supported on ip_vti0
[  512.460992][T28831] netlink: 20824 bytes leftover after parsing attributes in process `syz.2.4064'.
[  512.479346][T28831] netlink: 'syz.2.4064': attribute type 10 has an invalid length.
[  512.570746][T28834] 8021q: adding VLAN 0 to HW filter on device bond0
[  512.582021][T28834] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  512.754247][T28834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4065'.
[  512.791607][T28849] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  512.798812][T28849] syzkaller0: entered promiscuous mode
[  512.824211][T28849] tipc: Resetting bearer <eth:syzkaller0>
[  513.403903][T28883] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4077'.
[  513.408752][T28883] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  513.412543][T28883] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  513.589743][ T3556] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  513.599454][T28894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4077'.
[  513.798071][T28925] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.4084'.
[  513.833160][T28919] validate_nla: 6 callbacks suppressed
[  513.833171][T28919] netlink: 'syz.2.4082': attribute type 10 has an invalid length.
[  513.924456][T28932] netlink: 'syz.1.4085': attribute type 13 has an invalid length.
[  514.389338][T28954] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  514.392609][T28954] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  514.613450][T28973] netlink: 'syz.1.4090': attribute type 3 has an invalid length.
[  515.106607][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  515.658760][T29018] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  516.248442][   T26] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  516.669643][T29104] netlink: 'syz.0.4118': attribute type 10 has an invalid length.
[  516.685652][T29104] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  516.696074][T29104] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  517.129482][T29120] netlink: 'syz.1.4122': attribute type 1 has an invalid length.
[  517.147438][T29120] 8021q: adding VLAN 0 to HW filter on device bond26
[  517.166955][T29120] 8021q: adding VLAN 0 to HW filter on device bond26
[  517.169894][T29120] bond26: (slave vxcan19): The slave device specified does not support setting the MAC address
[  517.174606][T29120] bond26: (slave vxcan19): Error -95 calling set_mac_address
[  517.295385][T29125] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  517.299041][T29125] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  517.303316][T29125] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  517.497628][T29134] netem: change failed
[  517.517627][ T4971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  517.520326][ T4971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  517.580640][T29140] __nla_validate_parse: 12 callbacks suppressed
[  517.580654][T29140] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4127'.
[  517.586090][T29140] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  517.588967][T29140] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  518.146482][ T9598] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  518.296710][T29190] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  518.300531][T29190] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  518.676278][ T9598] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  518.753515][T29224] netlink: 'syz.0.4139': attribute type 13 has an invalid length.
[  518.759107][T29224] netlink: 'syz.0.4139': attribute type 17 has an invalid length.
[  518.791573][T29224] 8021q: adding VLAN 0 to HW filter on device bond0
[  518.801334][T29224] 8021q: adding VLAN 0 to HW filter on device team0
[  518.818733][T22977] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  518.822498][T29224] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  518.871530][T29221] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4139'.
[  518.886761][T29221] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4139'.
[  519.027352][T24708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  519.031234][T24708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  519.090075][T29237] netlink: 200 bytes leftover after parsing attributes in process `syz.2.4142'.
[  519.098951][T29238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4142'.
[  519.168967][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  519.441360][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  519.455610][T29257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4146'.
[  519.500367][T29259] netlink: 'syz.2.4145': attribute type 5 has an invalid length.
[  519.504327][T29259] netlink: 'syz.2.4145': attribute type 5 has an invalid length.
[  519.657662][T29265] netlink: 'syz.0.4147': attribute type 10 has an invalid length.
[  519.718755][T29267] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4150'.
[  519.791520][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  519.857566][T22977] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  519.969732][T29292] netlink: 'syz.1.4153': attribute type 2 has an invalid length.
[  519.977003][T29292] netlink: 'syz.1.4153': attribute type 8 has an invalid length.
[  519.980087][T29292] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4153'.
[  520.057435][ T4971] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  520.124032][T29292] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4153'.
[  520.141721][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  520.198237][T29306] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4156'.
[  520.202273][T29306] sch_fq: defrate 0 ignored.
[  520.208928][T29306] netlink: 'syz.2.4156': attribute type 9 has an invalid length.
[  520.309684][T29310] trusted_key: syz.2.4157 sent an empty control message without MSG_MORE.
[  520.331463][   T26] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  520.398093][T29315] netlink: 'syz.2.4158': attribute type 10 has an invalid length.
[  520.660920][T29332] mac80211_hwsim hwsim195 wlan0: entered promiscuous mode
[  520.670477][T29332] macsec2: entered promiscuous mode
[  520.672560][T29332] macsec2: entered allmulticast mode
[  520.674296][T29332] mac80211_hwsim hwsim195 wlan0: entered allmulticast mode
[  520.786300][T22977] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  521.613833][T29380] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  521.645068][T29380] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  521.838648][T29390] IPVS: set_ctl: invalid protocol: 12 0.0.0.3:20002
[  522.028638][T29399] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  522.046271][T29399] CPU: 1 UID: 0 PID: 29399 Comm: syz.1.4170 Not tainted syzkaller #0 PREEMPT(full) 
[  522.046286][T29399] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  522.046293][T29399] Call Trace:
[  522.046297][T29399]  <TASK>
[  522.046304][T29399]  dump_stack_lvl+0x189/0x250
[  522.046323][T29399]  ? __pfx_dump_stack_lvl+0x10/0x10
[  522.046334][T29399]  ? __pfx__printk+0x10/0x10
[  522.046350][T29399]  ? kernfs_path_from_node+0x2f/0x290
[  522.046360][T29399]  ? kernfs_path_from_node+0x250/0x290
[  522.046369][T29399]  ? kernfs_path_from_node+0x2f/0x290
[  522.046388][T29399]  sysfs_warn_dup+0x8e/0xa0
[  522.046398][T29399]  sysfs_do_create_link_sd+0xc0/0x110
[  522.046410][T29399]  device_add_class_symlinks+0x1cf/0x240
[  522.046424][T29399]  device_add+0x475/0xb50
[  522.046444][T29399]  wiphy_register+0x1ba6/0x28d0
[  522.046480][T29399]  ? __pfx_wiphy_register+0x10/0x10
[  522.046495][T29399]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  522.046520][T29399]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  522.046541][T29399]  ieee80211_register_hw+0x3484/0x4100
[  522.046578][T29399]  ? ieee80211_register_hw+0x1461/0x4100
[  522.046604][T29399]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  522.046624][T29399]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  522.046653][T29399]  ? __hrtimer_setup+0x187/0x210
[  522.046670][T29399]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  522.046690][T29399]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  522.046740][T29399]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  522.046760][T29399]  ? trace_kmalloc+0x1f/0xd0
[  522.046777][T29399]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  522.046794][T29399]  ? kstrndup+0xbf/0x160
[  522.046817][T29399]  hwsim_new_radio_nl+0xea4/0x1b10
[  522.046837][T29399]  ? __pfx___nla_validate_parse+0x10/0x10
[  522.046863][T29399]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  522.046915][T29399]  ? __nla_parse+0x40/0x60
[  522.046935][T29399]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  522.046962][T29399]  genl_family_rcv_msg_doit+0x215/0x300
[  522.046988][T29399]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  522.047020][T29399]  ? bpf_lsm_capable+0x9/0x20
[  522.047042][T29399]  ? security_capable+0x7e/0x2e0
[  522.047070][T29399]  genl_rcv_msg+0x60e/0x790
[  522.047123][T29399]  ? __pfx_genl_rcv_msg+0x10/0x10
[  522.047143][T29399]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  522.047173][T29399]  netlink_rcv_skb+0x208/0x470
[  522.047187][T29399]  ? __lock_acquire+0xab9/0xd20
[  522.047209][T29399]  ? __pfx_genl_rcv_msg+0x10/0x10
[  522.047230][T29399]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  522.047263][T29399]  ? down_read+0x1ad/0x2e0
[  522.047282][T29399]  genl_rcv+0x28/0x40
[  522.047299][T29399]  netlink_unicast+0x82f/0x9e0
[  522.047331][T29399]  ? __pfx_netlink_unicast+0x10/0x10
[  522.047353][T29399]  ? netlink_sendmsg+0x642/0xb30
[  522.047366][T29399]  ? skb_put+0x11b/0x210
[  522.047394][T29399]  netlink_sendmsg+0x805/0xb30
[  522.047417][T29399]  ? __pfx_netlink_sendmsg+0x10/0x10
[  522.047438][T29399]  ? aa_sock_msg_perm+0xf1/0x1d0
[  522.047458][T29399]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  522.047476][T29399]  ? __pfx_netlink_sendmsg+0x10/0x10
[  522.047493][T29399]  __sock_sendmsg+0x21c/0x270
[  522.047516][T29399]  ____sys_sendmsg+0x505/0x830
[  522.047540][T29399]  ? __pfx_____sys_sendmsg+0x10/0x10
[  522.047568][T29399]  ? import_iovec+0x74/0xa0
[  522.047590][T29399]  ___sys_sendmsg+0x21f/0x2a0
[  522.047612][T29399]  ? __pfx____sys_sendmsg+0x10/0x10
[  522.047654][T29399]  ? __fget_files+0x2a/0x420
[  522.047672][T29399]  ? __fget_files+0x3a0/0x420
[  522.047693][T29399]  __x64_sys_sendmsg+0x19b/0x260
[  522.047718][T29399]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  522.047740][T29399]  ? rcu_is_watching+0x15/0xb0
[  522.047753][T29399]  ? do_syscall_64+0xbe/0x3b0
[  522.047767][T29399]  do_syscall_64+0xfa/0x3b0
[  522.047782][T29399]  ? lockdep_hardirqs_on+0x9c/0x150
[  522.047794][T29399]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  522.047808][T29399]  ? exc_page_fault+0x9f/0xf0
[  522.047826][T29399]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  522.047840][T29399] RIP: 0033:0x7fa348f8ec29
[  522.047856][T29399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  522.047870][T29399] RSP: 002b:00007fa349e13038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  522.047888][T29399] RAX: ffffffffffffffda RBX: 00007fa3491d6090 RCX: 00007fa348f8ec29
[  522.047899][T29399] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000c
[  522.047909][T29399] RBP: 00007fa349011e41 R08: 0000000000000000 R09: 0000000000000000
[  522.047918][T29399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  522.047926][T29399] R13: 00007fa3491d6128 R14: 00007fa3491d6090 R15: 00007fff2ab13328
[  522.047953][T29399]  </TASK>
[  522.520740][T29433] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  522.527848][T29433] netlink: 'syz.1.4178': attribute type 4 has an invalid length.
[  522.577997][T29439] netlink: 'syz.0.4179': attribute type 10 has an invalid length.
[  522.578028][T29440] netlink: 'syz.0.4179': attribute type 10 has an invalid length.
[  522.664363][T29443] IPVS: set_ctl: invalid protocol: 43 100.1.1.2:20003
[  522.705989][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  523.194055][T29473] __nla_validate_parse: 7 callbacks suppressed
[  523.194075][T29473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4184'.
[  523.616763][T29500] openvswitch: netlink: Message has 4 unknown bytes.
[  523.825894][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  523.851304][T29511] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4192'.
[  523.872253][T29513] IPVS: set_ctl: invalid protocol: 133 100.1.1.0:20004
[  524.254732][ T4971] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  524.294268][T29544] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4201'.
[  524.334339][T29547] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4202'.
[  524.342836][T29547] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  524.357428][T29547] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  524.445131][T29562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4202'.
[  524.552976][T29565] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4203'.
[  524.672200][T29572] validate_nla: 2 callbacks suppressed
[  524.672263][T29572] netlink: 'syz.0.4205': attribute type 10 has an invalid length.
[  524.721224][T29567] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4204'.
[  525.066015][T29593] netlink: 'syz.2.4208': attribute type 10 has an invalid length.
[  525.087649][T29594] netlink: 'syz.1.4206': attribute type 10 has an invalid length.
[  525.652298][T29634] netlink: 'syz.2.4216': attribute type 10 has an invalid length.
[  525.856149][T29650] netlink: 200 bytes leftover after parsing attributes in process `syz.0.4220'.
[  526.356745][ T8140] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  526.357450][T29682] netlink: 'syz.0.4223': attribute type 10 has an invalid length.
[  526.360021][ T8140] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  526.368053][ T8140] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  526.371215][ T8140] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  526.812656][T29693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4227'.
[  526.844701][T29698] netlink: 200 bytes leftover after parsing attributes in process `syz.2.4228'.
[  527.169150][T29714] netlink: 'syz.2.4233': attribute type 1 has an invalid length.
[  527.216350][T29714] 8021q: adding VLAN 0 to HW filter on device bond34
[  527.274039][T29714] 8021q: adding VLAN 0 to HW filter on device bond34
[  527.282010][T29714] bond34: (slave vxcan7): The slave device specified does not support setting the MAC address
[  527.289408][T29714] bond34: (slave vxcan7): Error -95 calling set_mac_address
[  527.329975][T29725] veth45: entered promiscuous mode
[  527.342167][T29725] bond34: (slave veth45): Enslaving as an active interface with a down link
[  527.349720][T29728] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  527.363794][T24707] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  527.369154][T24707] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  528.089085][T29784] netlink: 'syz.1.4244': attribute type 2 has an invalid length.
[  528.338523][T29811] __nla_validate_parse: 5 callbacks suppressed
[  528.338539][T29811] netlink: 200 bytes leftover after parsing attributes in process `syz.2.4246'.
[  528.620529][T29840] netlink: 'syz.0.4253': attribute type 10 has an invalid length.
[  528.700305][T29841] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4251'.
[  528.936164][T26846] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  528.966861][T29855] netlink: 'syz.0.4256': attribute type 10 has an invalid length.
[  528.973328][T29855] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  528.979846][T29855] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  529.286533][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  529.751677][T29880] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4259'.
[  529.981394][T29890] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4261'.
[  529.991841][T29891] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4261'.
[  530.075252][T29895] netlink: 200 bytes leftover after parsing attributes in process `syz.1.4262'.
[  530.139329][T29902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4262'.
[  530.225911][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  531.695627][T29980] netlink: 'syz.0.4272': attribute type 1 has an invalid length.
[  531.720221][T29980] 8021q: adding VLAN 0 to HW filter on device bond30
[  531.745522][T29979] veth49: entered promiscuous mode
[  531.751054][T29979] bond30: (slave veth49): Enslaving as an active interface with a down link
[  532.034891][T30001] netlink: 'syz.0.4274': attribute type 13 has an invalid length.
[  532.049102][T30001] netlink: 'syz.0.4274': attribute type 17 has an invalid length.
[  532.095317][T30006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4277'.
[  532.128169][T30012] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4274'.
[  532.139934][T30012] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4274'.
[  532.348010][T30026] bond34: (slave veth45): Releasing active interface
[  532.354683][T30026] warn_alloc: 1 callbacks suppressed
[  532.354692][T30026] syz.2.4280: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  532.371645][T30026] CPU: 1 UID: 0 PID: 30026 Comm: syz.2.4280 Not tainted syzkaller #0 PREEMPT(full) 
[  532.371659][T30026] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  532.371667][T30026] Call Trace:
[  532.371692][T30026]  <TASK>
[  532.371707][T30026]  dump_stack_lvl+0x189/0x250
[  532.371727][T30026]  ? __pfx_dump_stack_lvl+0x10/0x10
[  532.371738][T30026]  ? __pfx__printk+0x10/0x10
[  532.371752][T30026]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  532.371765][T30026]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  532.371776][T30026]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  532.371787][T30026]  warn_alloc+0x214/0x310
[  532.371810][T30026]  ? stack_depot_save_flags+0x40/0x860
[  532.371835][T30026]  ? __pfx_warn_alloc+0x10/0x10
[  532.371852][T30026]  ? kasan_save_track+0x4f/0x80
[  532.371867][T30026]  ? xskq_create+0x56/0x170
[  532.371875][T30026]  ? xsk_init_queue+0xb0/0x110
[  532.371881][T30026]  ? xsk_setsockopt+0x4dc/0x8d0
[  532.371893][T30026]  ? do_sock_setsockopt+0x17c/0x1b0
[  532.371901][T30026]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  532.371916][T30026]  ? do_syscall_64+0xfa/0x3b0
[  532.371925][T30026]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  532.371936][T30026]  __vmalloc_node_range_noprof+0x125/0x12f0
[  532.371966][T30026]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  532.371978][T30026]  ? xskq_create+0x56/0x170
[  532.371987][T30026]  ? __kasan_kmalloc+0x93/0xb0
[  532.371999][T30026]  vmalloc_user_noprof+0xad/0xf0
[  532.372011][T30026]  ? xskq_create+0xbf/0x170
[  532.372019][T30026]  xskq_create+0xbf/0x170
[  532.372028][T30026]  xsk_init_queue+0xb0/0x110
[  532.372037][T30026]  xsk_setsockopt+0x4dc/0x8d0
[  532.372050][T30026]  ? __pfx_xsk_setsockopt+0x10/0x10
[  532.372062][T30026]  ? __pfx_aa_sk_perm+0x10/0x10
[  532.372076][T30026]  ? aa_sock_opt_perm+0xff/0x1b0
[  532.372085][T30026]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  532.372094][T30026]  ? __pfx_xsk_setsockopt+0x10/0x10
[  532.372106][T30026]  do_sock_setsockopt+0x17c/0x1b0
[  532.372118][T30026]  __x64_sys_setsockopt+0x13f/0x1b0
[  532.372130][T30026]  do_syscall_64+0xfa/0x3b0
[  532.372138][T30026]  ? lockdep_hardirqs_on+0x9c/0x150
[  532.372146][T30026]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  532.372153][T30026]  ? exc_page_fault+0x9f/0xf0
[  532.372162][T30026]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  532.372170][T30026] RIP: 0033:0x7fb6db38ec29
[  532.372179][T30026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  532.372187][T30026] RSP: 002b:00007fb6dc180038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  532.372198][T30026] RAX: ffffffffffffffda RBX: 00007fb6db5d5fa0 RCX: 00007fb6db38ec29
[  532.372204][T30026] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[  532.372210][T30026] RBP: 00007fb6db411e41 R08: 0000000000000004 R09: 0000000000000000
[  532.372216][T30026] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  532.372222][T30026] R13: 00007fb6db5d6038 R14: 00007fb6db5d5fa0 R15: 00007ffcb81c5dd8
[  532.372236][T30026]  </TASK>
[  532.372434][T30026] Mem-Info:
[  532.407143][T30027] netlink: 'syz.2.4280': attribute type 4 has an invalid length.
[  532.408930][ T9598] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  532.460127][T30030] netlink: 'syz.2.4280': attribute type 4 has an invalid length.
[  532.466704][T30026] active_anon:7431 inactive_anon:0 isolated_anon:0
[  532.466704][T30026]  active_file:1318 inactive_file:37214 isolated_file:0
[  532.466704][T30026]  unevictable:1768 dirty:68 writeback:0
[  532.466704][T30026]  slab_reclaimable:13942 slab_unreclaimable:202108
[  532.466704][T30026]  mapped:18443 shmem:2559 pagetables:1101
[  532.466704][T30026]  sec_pagetables:0 bounce:0
[  532.466704][T30026]  kernel_misc_reclaimable:0
[  532.466704][T30026]  free:139199 free_pcp:17329 free_cma:0
[  532.496222][T30026] Node 0 active_anon:15216kB inactive_anon:0kB active_file:3108kB inactive_file:145332kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30704kB dirty:208kB writeback:0kB shmem:5020kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8540kB pagetables:2652kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  532.510625][T30026] Node 1 active_anon:14508kB inactive_anon:0kB active_file:2164kB inactive_file:3524kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:43068kB dirty:64kB writeback:0kB shmem:5216kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6912kB pagetables:1684kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  532.522465][T30026] Node 0 DMA free:6328kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:328kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:552kB local_pcp:344kB free_cma:0kB
[  532.533394][T30026] lowmem_reserve[]: 0 811 811 811 811
[  532.535573][T30026] Node 0 DMA32 free:53868kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14888kB inactive_anon:0kB active_file:3108kB inactive_file:145324kB unevictable:3536kB writepending:208kB present:1556484kB managed:830892kB mlocked:0kB bounce:0kB free_pcp:22628kB local_pcp:17400kB free_cma:0kB
[  532.546659][T30026] lowmem_reserve[]: 0 0 0 0 0
[  532.548597][T30026] Node 1 DMA32 free:442960kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:16kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:14464kB local_pcp:8624kB free_cma:0kB
[  532.560610][T30026] lowmem_reserve[]: 0 0 854 854 854
[  532.562694][T30026] Node 1 Normal free:53640kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14496kB inactive_anon:0kB active_file:2164kB inactive_file:3508kB unevictable:3536kB writepending:64kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:31820kB local_pcp:12052kB free_cma:0kB
[  532.573994][ T9598] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  532.578652][T30026] lowmem_reserve[]: 0 0 0 0 0
[  532.580272][T30026] Node 0 DMA: 78*4kB (UM) 60*8kB (UM) 22*16kB (UM) 28*32kB (UM) 15*64kB (UM) 4*128kB (UM) 1*256kB (M) 3*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 6328kB
[  532.585834][T30026] Node 0 DMA32: 1607*4kB (UM) 675*8kB (UME) 264*16kB (UM) 94*32kB (UME) 85*64kB (UME) 19*128kB (UM) 8*256kB (UME) 10*512kB (M) 3*1024kB (UM) 8*2048kB (UM) 0*4096kB = 53556kB
[  532.591167][T30026] Node 1 DMA32: 66*4kB (UM) 105*8kB (UM) 66*16kB (UME) 81*32kB (UME) 39*64kB (UME) 8*128kB (UM) 10*256kB (UME) 10*512kB (UME) 11*1024kB (UE) 7*2048kB (UME) 98*4096kB (UM) = 442960kB
[  532.596786][T30026] Node 1 Normal: 1476*4kB (UME) 1031*8kB (UM) 310*16kB (UM) 47*32kB (UM) 144*64kB (UME) 56*128kB (UME) 9*256kB (UME) 4*512kB (UME) 4*1024kB (UM) 4*2048kB (UME) 0*4096kB = 53640kB
[  532.602515][T30026] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  532.605548][T30026] Node 1 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB
[  532.609365][T30026] 41091 total pagecache pages
[  532.611029][T30026] 0 pages in swap cache
[  532.612537][T30026] Free swap  = 124996kB
[  532.613962][T30026] Total swap = 124996kB
[  532.615422][T30026] 786301 pages RAM
[  532.617283][T30026] 0 pages HighMem/MovableOnly
[  532.618945][T30026] 241346 pages reserved
[  532.620953][T30026] 0 pages cma reserved
[  532.670026][T30035] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  532.673630][T30035] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  532.939015][T30043] netlink: 'syz.2.4283': attribute type 11 has an invalid length.
[  532.982005][T30043] netlink: 'syz.2.4283': attribute type 10 has an invalid length.
[  533.247565][T30057] netlink: 'syz.2.4284': attribute type 10 has an invalid length.
[  533.611772][T30080] __nla_validate_parse: 4 callbacks suppressed
[  533.611784][T30080] netlink: 200 bytes leftover after parsing attributes in process `syz.2.4287'.
[  533.830685][T30100] IPVS: set_ctl: invalid protocol: 29 10.1.1.1:4096
[  533.992601][T30118] netlink: 'syz.1.4293': attribute type 10 has an invalid length.
[  534.054752][T30120] syzkaller0: left promiscuous mode
[  534.056670][T30120] syzkaller0: left allmulticast mode
[  534.373380][T30145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4299'.
[  534.754551][T30169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4303'.
[  534.845009][T30189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4306'.
[  534.898470][T30196] netlink: 'syz.0.4307': attribute type 10 has an invalid length.
[  535.036635][T30216] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4311'.
[  535.039532][T30216] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  535.042736][T30216] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  535.222374][T30216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4311'.
[  535.590849][T30271] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4320'.
[  536.383194][T30325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4331'.
[  536.387753][T30326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4331'.
[  537.114224][T30364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4336'.
[  537.209733][ T7959] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  537.332448][T30395] validate_nla: 5 callbacks suppressed
[  537.332459][T30395] netlink: 'syz.2.4342': attribute type 1 has an invalid length.
[  537.345683][T30393] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  537.355278][T30393] mac80211_hwsim hwsim201 syzkaller0: entered promiscuous mode
[  537.358551][T30393] mac80211_hwsim hwsim201 syzkaller0: entered allmulticast mode
[  537.385368][T30393] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  537.437451][ T7959] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  537.497945][T30405] netlink: 'syz.1.4341': attribute type 10 has an invalid length.
[  537.734389][T30410] netlink: 'syz.0.4343': attribute type 10 has an invalid length.
[  537.749667][T30410] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  538.524056][T30490] tipc: Resetting bearer <eth:syzkaller0>
[  538.534648][T30490] mac80211_hwsim hwsim195 wlan0: left allmulticast mode
[  538.539019][T30490] macsec2: left promiscuous mode
[  538.542166][T30490] macsec2: left allmulticast mode
[  538.548012][T30490] veth45: left promiscuous mode
[  538.811925][T30510] __nla_validate_parse: 6 callbacks suppressed
[  538.811944][T30510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4358'.
[  538.824202][T30506] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4358'.
[  539.024213][T30512] netlink: 'syz.0.4359': attribute type 1 has an invalid length.
[  539.053762][T30512] 8021q: adding VLAN 0 to HW filter on device bond31
[  539.070643][T30512] vlan2: entered allmulticast mode
[  539.074139][T30512] bond31: (slave vlan2): Opening slave failed
[  539.154314][T30520] netlink: 'syz.1.4360': attribute type 10 has an invalid length.
[  539.270256][T30538] netlink: 'syz.0.4363': attribute type 10 has an invalid length.
[  539.374929][T30544] netlink: 'syz.0.4364': attribute type 10 has an invalid length.
[  539.493251][T30553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4366'.
[  539.549916][T30558] bond0: (slave dummy0): Releasing backup interface
[  539.560397][T22977] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  539.570111][T30558] bond30: (slave veth49): Releasing active interface
[  539.722802][T30575] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4369'.
[  539.728825][T30575] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  539.732056][T30575] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  539.910608][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  540.002819][T30596] mac80211_hwsim hwsim195 wlan0: left promiscuous mode
[  540.042885][T30603] netlink: 200 bytes leftover after parsing attributes in process `syz.1.4372'.
[  540.061749][T30603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4372'.
[  540.093120][T24711] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  540.162429][T30591] netlink: 'syz.0.4371': attribute type 10 has an invalid length.
[  540.278880][T30624] 8021q: VLANs not supported on ip_vti0
[  540.290848][T30624] netlink: 'syz.2.4377': attribute type 10 has an invalid length.
[  540.401929][T30640] netlink: 'syz.1.4376': attribute type 10 has an invalid length.
[  540.408294][T30641] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4379'.
[  540.411339][T30641] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4379'.
[  540.414103][T30641] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4379'.
[  540.421123][T30642] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4379'.
[  540.544271][T30654] 8021q: adding VLAN 0 to HW filter on device bond32
[  540.910742][   T53] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  541.388094][T30741] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  541.391668][T30741] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  541.483539][T30738] 8021q: adding VLAN 0 to HW filter on device bond0
[  541.499359][T30738] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  541.774725][T30771] 8021q: adding VLAN 0 to HW filter on device bond35
[  541.802721][T30771] veth49: entered promiscuous mode
[  542.148300][T30793] sctp: [Deprecated]: syz.2.4405 (pid 30793) Use of struct sctp_assoc_value in delayed_ack socket option.
[  542.148300][T30793] Use struct sctp_sack_info instead
[  542.187302][T26846] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  542.232441][T30794] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  542.235435][T30794] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  542.537544][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  542.798171][T30804] validate_nla: 17 callbacks suppressed
[  542.798186][T30804] netlink: 'syz.1.4406': attribute type 10 has an invalid length.
[  543.010993][T24711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  543.014227][T24711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  543.434324][T30837] netlink: 'syz.1.4412': attribute type 10 has an invalid length.
[  543.671089][T30879] netlink: 'syz.0.4419': attribute type 6 has an invalid length.
[  543.693879][T30879] netlink: 'syz.0.4419': attribute type 12 has an invalid length.
[  543.816063][T30874] __nla_validate_parse: 17 callbacks suppressed
[  543.816077][T30874] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4416'.
[  543.888432][T30883] netlink: 'syz.2.4420': attribute type 10 has an invalid length.
[  543.924633][T30899] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4422'.
[  544.137230][T30915] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4426'.
[  544.140563][T30915] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  544.143340][T30915] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  544.266462][T30915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4426'.
[  544.323895][T30927] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4427'.
[  544.392057][T30931] openvswitch: netlink: Key type 29 is not supported
[  544.436555][T30936] netlink: 'syz.2.4429': attribute type 1 has an invalid length.
[  544.443605][T24707] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  544.477658][T24707] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  544.480805][T24707] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  544.945885][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  545.297965][T31002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4437'.
[  545.322917][T31007] netlink: 'syz.1.4438': attribute type 27 has an invalid length.
[  545.396991][T31009] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4439'.
[  545.399978][T31009] tipc: Invalid UDP bearer configuration
[  545.400024][T31009] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  545.443251][T31011] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4440'.
[  545.452299][T31015] netlink: 200 bytes leftover after parsing attributes in process `syz.1.4441'.
[  545.982684][T31034] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4444'.
[  546.285243][T31034] tipc: Resetting bearer <eth:syzkaller0>
[  546.680740][T31068] !: renamed from dummy0
[  546.892407][T31087] tipc: Invalid UDP bearer configuration
[  546.892457][T31087] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  546.965340][T31094] netlink: 'syz.0.4453': attribute type 13 has an invalid length.
[  546.975186][T31094] netlink: 'syz.0.4453': attribute type 17 has an invalid length.
[  547.002404][T31094] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  547.016178][T22977] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  547.157960][T31111] netlink: 'syz.1.4455': attribute type 13 has an invalid length.
[  547.226948][T31111] 8021q: adding VLAN 0 to HW filter on device bond0
[  547.250039][T31111] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  547.650794][T31164] veth51: entered promiscuous mode
[  547.826721][T22977] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  548.140252][T31184] vlan4: entered promiscuous mode
[  548.142387][T31184] bond0: entered promiscuous mode
[  548.495631][T31202] bond24: (slave veth47): Releasing active interface
[  548.508963][T31202] bond25: (slave gretap1): Releasing active interface
[  548.577127][T31202] validate_nla: 2 callbacks suppressed
[  548.577213][T31202] netlink: 'syz.1.4468': attribute type 10 has an invalid length.
[  548.619344][T31173] delete_channel: no stack
[  549.066857][T31247] __nla_validate_parse: 7 callbacks suppressed
[  549.066873][T31247] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4473'.
[  549.080527][T31247] netlink: 200 bytes leftover after parsing attributes in process `syz.2.4473'.
[  549.090781][T31241] netlink: 'syz.0.4472': attribute type 10 has an invalid length.
[  549.116984][T31247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4473'.
[  550.420391][T31344] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4482'.
[  550.510977][T31345] netlink: 'syz.2.4481': attribute type 10 has an invalid length.
[  550.584810][T31356] IPVS: set_ctl: invalid protocol: 58 100.1.1.1:20001
[  550.780928][T31372] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4485'.
[  550.831478][T31377] netlink: 'syz.0.4486': attribute type 1 has an invalid length.
[  550.860147][T31377] 8021q: adding VLAN 0 to HW filter on device bond33
[  550.903696][T31377] 8021q: adding VLAN 0 to HW filter on device bond33
[  550.911370][T31377] bond33: (slave vxcan9): The slave device specified does not support setting the MAC address
[  550.916598][T31377] bond33: (slave vxcan9): Error -95 calling set_mac_address
[  550.960162][T31383] bond33: (slave veth51): Enslaving as an active interface with a down link
[  551.204025][T31399] netlink: 200 bytes leftover after parsing attributes in process `syz.0.4489'.
[  551.232669][T31399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4489'.
[  551.373804][T31406] netlink: 'syz.0.4491': attribute type 10 has an invalid length.
[  551.413297][T31406] bond0: (slave 0!): Enslaving as an active interface with an up link
[  551.627070][T31429] netlink: 'syz.0.4492': attribute type 13 has an invalid length.
[  551.636902][T31429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4492'.
[  552.883239][T31504] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4502'.
[  552.930616][T31509] netlink: 'syz.0.4501': attribute type 10 has an invalid length.
[  553.015666][T31514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4503'.
[  553.952690][T31570] netlink: 'syz.0.4509': attribute type 10 has an invalid length.
[  554.581917][T31635] __nla_validate_parse: 2 callbacks suppressed
[  554.581937][T31635] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4520'.
[  554.592156][T31635] tipc: Invalid UDP bearer configuration
[  554.592214][T31635] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  554.602456][T31637] raw_sendmsg: syz.2.4521 forgot to set AF_INET. Fix it!
[  554.673296][T31641] netlink: 200 bytes leftover after parsing attributes in process `syz.0.4522'.
[  554.695209][T31641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4522'.
[  554.870804][T31657] netlink: 'syz.2.4525': attribute type 9 has an invalid length.
[  554.873902][T31657] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4525'.
[  555.013790][T31666] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4526'.
[  555.028896][T31669] netlink: 'syz.0.4524': attribute type 10 has an invalid length.
[  555.032218][T31666] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  555.035595][T31666] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  555.558131][T31705] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4531'.
[  555.561496][T31705] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  555.564315][T31701] 8021q: VLANs not supported on ip_vti0
[  555.578214][T31705] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  555.770393][T31705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4531'.
[  555.809312][T31724] netlink: 'syz.2.4534': attribute type 9 has an invalid length.
[  555.812023][T31724] netlink: 184 bytes leftover after parsing attributes in process `syz.2.4534'.
[  555.850811][T31727] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4535'.
[  555.853780][T31727] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  555.856734][T31727] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  556.468152][T31762] mac80211_hwsim hwsim24 syzkaller0: entered promiscuous mode
[  556.472490][T31762] mac80211_hwsim hwsim24 syzkaller0: entered allmulticast mode
[  557.483914][T31859] pim6reg1: entered promiscuous mode
[  557.486373][T31859] pim6reg1: entered allmulticast mode
[  557.698423][T31859] netlink: 'syz.2.4558': attribute type 27 has an invalid length.
[  557.733023][T31869] netlink: 200 bytes leftover after parsing attributes in process `syz.0.4561'.
[  558.102394][T31894] IPVS: persistence engine module ip_vs_pe_ not found
[  558.544701][T31906] netlink: 'syz.2.4567': attribute type 13 has an invalid length.
[  558.548325][T31906] netlink: 'syz.2.4567': attribute type 17 has an invalid length.
[  558.711591][T31906] 8021q: adding VLAN 0 to HW filter on device bond0
[  558.730004][T31906] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  558.737571][T22977] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  558.848642][T22977] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  558.946370][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  559.054309][T31915] netlink: 'syz.0.4568': attribute type 10 has an invalid length.
[  559.117579][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  559.123632][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  559.679113][T31924] __nla_validate_parse: 6 callbacks suppressed
[  559.679191][T31924] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4571'.
[  559.685535][T31924] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4571'.
[  559.689304][T31924] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4571'.
[  559.693833][T31924] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4571'.
[  559.697956][T31924] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4571'.
[  559.701430][T31924] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4571'.
[  559.707530][T31924] netlink: 'syz.1.4571': attribute type 9 has an invalid length.
[  559.711251][T31924] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4571'.
[  559.917904][T22977] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  559.989150][T31930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4573'.
[  560.241188][T31959] IPVS: set_ctl: invalid protocol: 112 10.1.1.0:20002
[  560.344622][T31966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4578'.
[  560.346309][T31964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4577'.
[  560.602263][T31990] bridge: RTM_NEWNEIGH with invalid ether address
[  560.659508][T22977] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  560.665191][T31993] netlink: 'syz.0.4582': attribute type 11 has an invalid length.
[  560.690575][T31997] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  560.693768][T31997] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  560.754919][T32003] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  560.764365][T32003] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  560.767729][T32003] team0: Device ipvlan2 is already an upper device of the team interface
[  561.306487][T32027] IPVS: set_ctl: invalid protocol: 59 100.1.1.7:20003
[  561.517296][T22977] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  562.688127][T32080] netlink: 'syz.2.4597': attribute type 1 has an invalid length.
[  563.031118][T32108] netlink: 'syz.1.4599': attribute type 10 has an invalid length.
[  563.125125][T32110] netlink: 'syz.2.4601': attribute type 1 has an invalid length.
[  563.145020][T32110] 8021q: adding VLAN 0 to HW filter on device bond36
[  563.172134][T32110] veth51: entered promiscuous mode
[  563.176666][T32110] bond36: (slave veth51): Enslaving as an active interface with a down link
[  563.201894][T32118] netlink: 'syz.1.4603': attribute type 1 has an invalid length.
[  563.227402][T32118] 8021q: adding VLAN 0 to HW filter on device bond27
[  563.247418][T32116] 8021q: adding VLAN 0 to HW filter on device bond27
[  563.251667][T32116] bond27: (slave vxcan19): The slave device specified does not support setting the MAC address
[  563.267502][T32116] bond27: (slave vxcan19): Error -95 calling set_mac_address
[  563.299937][T32117] veth51: entered promiscuous mode
[  563.306944][T32117] bond27: (slave veth51): Enslaving as an active interface with a down link
[  563.425983][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  563.451065][T32132] netlink: 'syz.1.4607': attribute type 1 has an invalid length.
[  563.454048][T32132] netlink: 'syz.1.4607': attribute type 1 has an invalid length.
[  563.544602][T32143] netlink: 'syz.2.4606': attribute type 3 has an invalid length.
[  563.608068][T32130] openvswitch: netlink: IP tunnel dst address not specified
[  563.716271][T32153] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  563.719133][T32153] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  563.889159][T32168] netlink: 'syz.2.4612': attribute type 11 has an invalid length.
[  564.450326][T32219] validate_nla: 1 callbacks suppressed
[  564.450339][T32219] netlink: 'syz.1.4621': attribute type 1 has an invalid length.
[  564.484372][T32219] 8021q: adding VLAN 0 to HW filter on device bond28
[  564.521941][T32226] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  564.526503][T32226] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  564.530217][T32226] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  564.533519][T32226] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  564.536689][T32219] 8021q: adding VLAN 0 to HW filter on device bond28
[  564.557005][T32219] bond28: (slave vxcan19): The slave device specified does not support setting the MAC address
[  564.568930][T32219] bond28: (slave vxcan19): Error -95 calling set_mac_address
[  564.602492][T32233] veth53: entered promiscuous mode
[  564.608989][T32233] bond28: (slave veth53): Enslaving as an active interface with a down link
[  564.615246][T32237] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  564.618752][T32237] syzkaller0: entered promiscuous mode
[  564.620471][T32237] syzkaller0: entered allmulticast mode
[  564.763964][T32248] netlink: 'syz.2.4627': attribute type 1 has an invalid length.
[  564.830359][T32256] __nla_validate_parse: 221 callbacks suppressed
[  564.830371][T32256] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4628'.
[  564.838257][T32249] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4628'.
[  564.905282][T32265] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4632'.
[  565.029696][T32282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4635'.
[  565.090891][T32286] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4636'.
[  565.094490][T32286] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  565.121217][T32279] netlink: 'syz.2.4634': attribute type 1 has an invalid length.
[  565.124044][T32279] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4634'.
[  565.190143][T32294] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4637'.
[  565.283662][T32304] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4638'.
[  565.423566][T32310] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4638'.
[  565.430991][T32298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4636'.
[  565.531048][T32316] netlink: 'syz.2.4639': attribute type 13 has an invalid length.
[  565.534295][T32316] netlink: 'syz.2.4639': attribute type 17 has an invalid length.
[  565.626511][  T793] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  565.721361][T32325] netlink: 'syz.0.4641': attribute type 13 has an invalid length.
[  565.724647][T32325] netlink: 'syz.0.4641': attribute type 17 has an invalid length.
[  565.756827][T32326] netlink: 'syz.1.4640': attribute type 10 has an invalid length.
[  565.766775][  T974] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  565.771025][T32325] net_ratelimit: 2 callbacks suppressed
[  565.771034][T32325] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  566.054436][T32350] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  566.058755][T32350] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  566.227849][  T793] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  566.445492][T32377] netlink: 'syz.1.4647': attribute type 12 has an invalid length.
[  566.463768][T32380] netlink: 'syz.2.4648': attribute type 1 has an invalid length.
[  566.507753][T32380] 8021q: adding VLAN 0 to HW filter on device bond37
[  566.538695][T32385] 8021q: adding VLAN 0 to HW filter on device bond37
[  566.541701][T32385] bond37: (slave vxcan11): The slave device specified does not support setting the MAC address
[  566.549540][T32385] bond37: (slave vxcan11): Error -95 calling set_mac_address
[  566.626679][  T974] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  567.127540][T32423] 8021q: adding VLAN 0 to HW filter on device bond34
[  567.145403][T32423] bond34: (slave wlan0): Opening slave failed
[  567.178798][T32423] vlan2: entered allmulticast mode
[  567.187763][T32423] bond34: (slave vlan2): Opening slave failed
[  567.501721][T32454] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  567.504617][T32454] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  568.180343][T32506] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  569.072342][T32557] 8021q: adding VLAN 0 to HW filter on device bond35
[  569.102817][T32558] 8021q: adding VLAN 0 to HW filter on device bond35
[  569.105610][T32558] bond35: (slave vxcan9): The slave device specified does not support setting the MAC address
[  569.112422][T32558] bond35: (slave vxcan9): Error -95 calling set_mac_address
[  569.649511][T32600] validate_nla: 8 callbacks suppressed
[  569.649539][T32600] netlink: 'syz.1.4679': attribute type 1 has an invalid length.
[  569.730777][T32594] netlink: 'syz.2.4678': attribute type 10 has an invalid length.
[  570.014072][T32625] __nla_validate_parse: 25 callbacks suppressed
[  570.014092][T32625] netlink: 200 bytes leftover after parsing attributes in process `syz.1.4684'.
[  570.076587][T32625] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4684'.
[  570.135425][T32631] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4685'.
[  570.140082][T32631] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  570.143476][T32631] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  570.319396][T32636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4685'.
[  570.390652][T32653] netlink: 'syz.1.4690': attribute type 10 has an invalid length.
[  570.466652][T32650] netlink: 'syz.0.4689': attribute type 10 has an invalid length.
[  570.478496][T32650] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4689'.
[  570.610310][T32672] netlink: 'syz.0.4694': attribute type 1 has an invalid length.
[  570.645431][T32672] 8021q: adding VLAN 0 to HW filter on device bond36
[  570.676405][T32672] 8021q: adding VLAN 0 to HW filter on device bond36
[  570.684152][T32672] bond36: (slave vxcan9): The slave device specified does not support setting the MAC address
[  570.696250][T32672] bond36: (slave vxcan9): Error -95 calling set_mac_address
[  570.703974][T32677] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4694'.
[  570.713308][T32663] netlink: 'syz.1.4692': attribute type 10 has an invalid length.
[  570.745090][T32678] bond36: (slave veth51): Releasing active interface
[  570.754744][T32678] syz.2.4695: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  570.761108][T32678] CPU: 1 UID: 0 PID: 32678 Comm: syz.2.4695 Not tainted syzkaller #0 PREEMPT(full) 
[  570.761131][T32678] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  570.761142][T32678] Call Trace:
[  570.761150][T32678]  <TASK>
[  570.761157][T32678]  dump_stack_lvl+0x189/0x250
[  570.761185][T32678]  ? __pfx_dump_stack_lvl+0x10/0x10
[  570.761206][T32678]  ? __pfx__printk+0x10/0x10
[  570.761227][T32678]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  570.761245][T32678]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  570.761263][T32678]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  570.761283][T32678]  warn_alloc+0x214/0x310
[  570.761303][T32678]  ? stack_depot_save_flags+0x40/0x860
[  570.761329][T32678]  ? __pfx_warn_alloc+0x10/0x10
[  570.761353][T32678]  ? kasan_save_track+0x4f/0x80
[  570.761371][T32678]  ? xskq_create+0x56/0x170
[  570.761384][T32678]  ? xsk_init_queue+0xb0/0x110
[  570.761394][T32678]  ? xsk_setsockopt+0x4dc/0x8d0
[  570.761413][T32678]  ? do_sock_setsockopt+0x17c/0x1b0
[  570.761429][T32678]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  570.761444][T32678]  ? do_syscall_64+0xfa/0x3b0
[  570.761458][T32678]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  570.761479][T32678]  __vmalloc_node_range_noprof+0x125/0x12f0
[  570.761522][T32678]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  570.761566][T32678]  ? __kasan_kmalloc+0x93/0xb0
[  570.761590][T32678]  vmalloc_user_noprof+0xad/0xf0
[  570.761612][T32678]  ? xskq_create+0xbf/0x170
[  570.761626][T32678]  xskq_create+0xbf/0x170
[  570.761643][T32678]  xsk_init_queue+0xb0/0x110
[  570.761658][T32678]  xsk_setsockopt+0x4dc/0x8d0
[  570.761680][T32678]  ? __pfx_xsk_setsockopt+0x10/0x10
[  570.761702][T32678]  ? __pfx_aa_sk_perm+0x10/0x10
[  570.761727][T32678]  ? aa_sock_opt_perm+0xff/0x1b0
[  570.761743][T32678]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  570.761759][T32678]  ? __pfx_xsk_setsockopt+0x10/0x10
[  570.761781][T32678]  do_sock_setsockopt+0x17c/0x1b0
[  570.761801][T32678]  __x64_sys_setsockopt+0x13f/0x1b0
[  570.761823][T32678]  do_syscall_64+0xfa/0x3b0
[  570.761837][T32678]  ? lockdep_hardirqs_on+0x9c/0x150
[  570.761852][T32678]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  570.761866][T32678]  ? exc_page_fault+0x9f/0xf0
[  570.761882][T32678]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  570.761895][T32678] RIP: 0033:0x7fb6db38ec29
[  570.761909][T32678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  570.761924][T32678] RSP: 002b:00007fb6dc180038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  570.761942][T32678] RAX: ffffffffffffffda RBX: 00007fb6db5d5fa0 RCX: 00007fb6db38ec29
[  570.761954][T32678] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[  570.761965][T32678] RBP: 00007fb6db411e41 R08: 0000000000000004 R09: 0000000000000000
[  570.761974][T32678] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  570.761984][T32678] R13: 00007fb6db5d6038 R14: 00007fb6db5d5fa0 R15: 00007ffcb81c5dd8
[  570.762009][T32678]  </TASK>
[  570.762015][T32678] Mem-Info:
[  570.808662][T32681] netlink: 'syz.2.4695': attribute type 4 has an invalid length.
[  570.810361][  T793] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  570.820577][T32678] active_anon:7775 inactive_anon:0 isolated_anon:0
[  570.820577][T32678]  active_file:1318 inactive_file:36652 isolated_file:0
[  570.820577][T32678]  unevictable:1768 dirty:84 writeback:0
[  570.820577][T32678]  slab_reclaimable:13900 slab_unreclaimable:206055
[  570.820577][T32678]  mapped:18451 shmem:2533 pagetables:1134
[  570.820577][T32678]  sec_pagetables:0 bounce:0
[  570.820577][T32678]  kernel_misc_reclaimable:0
[  570.820577][T32678]  free:137324 free_pcp:16450 free_cma:0
[  570.897138][T32682] netlink: 'syz.2.4695': attribute type 4 has an invalid length.
[  570.953628][T32678] Node 0 active_anon:16100kB inactive_anon:0kB active_file:3112kB inactive_file:143028kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30404kB dirty:256kB writeback:0kB shmem:4996kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8560kB pagetables:2760kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  570.966302][T32678] Node 1 active_anon:14712kB inactive_anon:0kB active_file:2160kB inactive_file:3588kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:43064kB dirty:80kB writeback:0kB shmem:5144kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7244kB pagetables:1712kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  570.979640][T32678] Node 0 DMA free:6348kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:224kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:708kB local_pcp:376kB free_cma:0kB
[  570.997136][T31735] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  570.999850][T32678] lowmem_reserve[]: 0 811 811 811 811
[  571.004376][T32678] Node 0 DMA32 free:48868kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:2048KB free_highatomic:324KB active_anon:15876kB inactive_anon:0kB active_file:3112kB inactive_file:143020kB unevictable:3536kB writepending:256kB present:1556484kB managed:830892kB mlocked:0kB bounce:0kB free_pcp:21476kB local_pcp:10720kB free_cma:0kB
[  571.022884][T32678] lowmem_reserve[]: 0 0 0 0 0
[  571.040422][T32678] Node 1 DMA32 free:437784kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:16kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:13252kB local_pcp:4476kB free_cma:0kB
[  571.056505][T32678] lowmem_reserve[]: 0 0 854 854 854
[  571.058644][T32678] Node 1 Normal free:56012kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14976kB inactive_anon:0kB active_file:2160kB inactive_file:3572kB unevictable:3536kB writepending:80kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:30316kB local_pcp:22600kB free_cma:0kB
[  571.073515][T32678] lowmem_reserve[]: 0 0 0 0 0
[  571.075500][T32678] Node 0 DMA: 69*4kB (UME) 91*8kB (UME) 30*16kB (UME) 22*32kB (UME) 13*64kB (UME) 6*128kB (UME) 0*256kB 3*512kB (UME) 1*1024kB (E) 0*2048kB 0*4096kB = 6348kB
[  571.082199][T32678] Node 0 DMA32: 171*4kB (UMH) 719*8kB (UMEH) 386*16kB (UMEH) 213*32kB (UMEH) 156*64kB (UMEH) 34*128kB (UM) 7*256kB (UME) 8*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 48868kB
[  571.091215][T32678] Node 1 DMA32: 8*4kB (UM) 3*8kB (U) 46*16kB (UME) 80*32kB (UME) 44*64kB (UME) 8*128kB (UM) 10*256kB (UME) 10*512kB (UME) 11*1024kB (UE) 7*2048kB (UME) 97*4096kB (UM) = 437784kB
[  571.100183][T32678] Node 1 Normal: 1037*4kB (UME) 947*8kB (UME) 558*16kB (UME) 80*32kB (UME) 147*64kB (UM) 47*128kB (UM) 11*256kB (UME) 2*512kB (M) 3*1024kB (M) 3*2048kB (ME) 1*4096kB (M) = 55788kB
[  571.108667][T32685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4696'.
[  571.136356][T32678] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  571.140026][T32678] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  571.144180][T32678] 40507 total pagecache pages
[  571.148827][T32678] 0 pages in swap cache
[  571.152975][T32678] Free swap  = 124996kB
[  571.156656][T32678] Total swap = 124996kB
[  571.159570][T32678] 786301 pages RAM
[  571.162386][T32678] 0 pages HighMem/MovableOnly
[  571.166137][T32678] 241346 pages reserved
[  571.170274][T32678] 0 pages cma reserved
[  571.482159][T32718] netlink: 'syz.1.4698': attribute type 10 has an invalid length.
[  571.548951][T32709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4698'.
[  571.836184][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  572.072173][T32754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4708'.
[  572.397593][  T304] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  572.406671][  T304] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4712'.
[  572.416012][ T5744] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  572.700747][  T323] netlink: 'syz.1.4715': attribute type 27 has an invalid length.
[  572.766975][  T323] mac80211_hwsim hwsim24 syzkaller0: left promiscuous mode
[  572.769845][  T323] mac80211_hwsim hwsim24 syzkaller0: left allmulticast mode
[  572.773096][  T323] vlan4: left promiscuous mode
[  572.775097][  T323] bond0: left promiscuous mode
[  572.779973][  T323] veth51: left promiscuous mode
[  572.784494][  T323] veth53: left promiscuous mode
[  572.833545][  T329] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  572.837527][  T329] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  573.106036][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  573.426221][  T974] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  573.599199][  T377] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  573.603518][  T377] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  573.773158][  T401] bond27: (slave veth51): Releasing active interface
[  573.781409][  T401] bond28: (slave veth53): Releasing active interface
[  574.270264][  T423] 8021q: adding VLAN 0 to HW filter on device bond0
[  574.277942][  T423] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  574.379024][  T425] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  574.767519][  T448] netlink: 'syz.2.4733': attribute type 11 has an invalid length.
[  575.503988][  T460] __nla_validate_parse: 9 callbacks suppressed
[  575.504007][  T460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4736'.
[  575.943810][  T498] validate_nla: 5 callbacks suppressed
[  575.943832][  T498] netlink: 'syz.0.4741': attribute type 13 has an invalid length.
[  575.950934][  T498] netlink: 'syz.0.4741': attribute type 17 has an invalid length.
[  575.954110][  T498] netlink: 'syz.0.4741': attribute type 27 has an invalid length.
[  576.063254][  T507] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4743'.
[  576.075352][  T507] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  576.080789][  T507] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  576.093677][  T511] netlink: 200 bytes leftover after parsing attributes in process `syz.0.4744'.
[  576.213997][  T517] netlink: 'syz.0.4745': attribute type 11 has an invalid length.
[  576.386773][  T524] IPVS: persistence engine module ip_vs_pe_ not found
[  576.656898][  T527] netlink: 'syz.1.4748': attribute type 10 has an invalid length.
[  576.826257][  T551] netlink: 'syz.1.4751': attribute type 21 has an invalid length.
[  576.829557][  T551] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4751'.
[  576.835001][  T542] netlink: 'syz.2.4750': attribute type 10 has an invalid length.
[  576.983645][  T556] veth55: entered promiscuous mode
[  577.159225][  T565] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4754'.
[  577.162903][  T565] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  577.189271][  T565] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  577.736287][  T597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4759'.
[  577.740375][  T597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4759'.
[  577.747708][  T597] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  577.998167][  T612] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4761'.
[  578.138898][  T619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4762'.
[  578.141940][  T619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4762'.
[  578.953684][  T680] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  578.957804][  T680] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  579.021061][  T686] netlink: 'syz.0.4768': attribute type 23 has an invalid length.
[  579.251080][  T701] IPv6: sit1: Disabled Multicast RS
[  579.359052][  T702] netlink: 'syz.1.4770': attribute type 10 has an invalid length.
[  580.196065][  T781] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  580.206026][  T781] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  580.640013][  T808] __nla_validate_parse: 37 callbacks suppressed
[  580.640038][  T808] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4788'.
[  580.654137][  T803] netlink: 'syz.0.4788': attribute type 10 has an invalid length.
[  580.861210][  T828] netlink: 200 bytes leftover after parsing attributes in process `syz.0.4790'.
[  581.039339][  T846] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4794'.
[  581.052277][  T850] netlink: 'syz.0.4793': attribute type 13 has an invalid length.
[  581.056162][  T850] netlink: 'syz.0.4793': attribute type 17 has an invalid length.
[  581.074083][  T850] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  581.096204][ T5744] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  581.183549][  T850] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4793'.
[  581.338538][  T862] netlink: 'syz.1.4797': attribute type 10 has an invalid length.
[  581.462438][  T876] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  581.925903][ T5744] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  582.292157][  T978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4813'.
[  582.481948][ T1007] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4817'.
[  582.665669][ T1038] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4820'.
[  582.669346][ T1038] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  582.672227][ T1038] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  582.836518][ T1047] nbd1: detected capacity change from 0 to 127
[  582.885283][ T1038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4820'.
[  582.936225][ T1064] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4823'.
[  582.940374][ T1064] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  582.944046][ T1064] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  582.994932][   T57] block nbd1: Receive control failed (result -104)
[  583.040670][ T1078] netlink: 'syz.1.4824': attribute type 1 has an invalid length.
[  583.043491][ T1078] netlink: 'syz.1.4824': attribute type 11 has an invalid length.
[  583.052183][ T1078] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4824'.
[  583.115231][ T1078] netlink: 'syz.1.4824': attribute type 83 has an invalid length.
[  583.642705][ T1137] netlink: 'syz.0.4832': attribute type 12 has an invalid length.
[  583.760546][ T1158] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  584.062873][ T1188] 8021q: VLANs not supported on ip_vti0
[  584.243108][ T1208] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  584.755123][ T1259] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  584.792976][ T1249] netlink: 'syz.1.4852': attribute type 10 has an invalid length.
[  585.145620][ T1293] netlink: 'syz.1.4860': attribute type 3 has an invalid length.
[  585.352368][ T1308] netlink: 'syz.0.4861': attribute type 3 has an invalid length.
[  585.451628][ T1335] 8021q: adding VLAN 0 to HW filter on device bond37
[  585.454786][ T1338] IPVS: set_ctl: invalid protocol: 44 10.1.1.2:20000
[  585.490296][ T1335] 8021q: adding VLAN 0 to HW filter on device bond37
[  585.493387][ T1335] bond37: (slave vxcan9): The slave device specified does not support setting the MAC address
[  585.499359][ T1335] bond37: (slave vxcan9): Error -95 calling set_mac_address
[  585.513404][ T1338] ip6gre0: left allmulticast mode
[  586.003065][ T1399] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  586.058831][ T1408] IPVS: length: 138 != 8
[  586.070747][ T1410] sctp: [Deprecated]: syz.1.4874 (pid 1410) Use of int in max_burst socket option.
[  586.070747][ T1410] Use struct sctp_assoc_value instead
[  586.211573][ T1416] validate_nla: 1 callbacks suppressed
[  586.211589][ T1416] netlink: 'syz.0.4877': attribute type 10 has an invalid length.
[  586.260663][ T1431] __nla_validate_parse: 13 callbacks suppressed
[  586.260676][ T1431] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4879'.
[  586.267692][ T1421] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4878'.
[  586.602595][ T1445] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4882'.
[  586.606397][ T1445] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4882'.
[  586.609925][ T1445] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4882'.
[  586.613474][ T1445] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4882'.
[  586.888525][ T1447] sctp: [Deprecated]: syz.2.4883 (pid 1447) Use of struct sctp_assoc_value in delayed_ack socket option.
[  586.888525][ T1447] Use struct sctp_sack_info instead
[  586.902926][ T1449] netlink: 'syz.1.4884': attribute type 27 has an invalid length.
[  586.976844][ T1453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4883'.
[  587.067532][ T1458] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4886'.
[  587.382951][ T1477] netlink: 'syz.2.4889': attribute type 1 has an invalid length.
[  587.389917][ T1477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4889'.
[  587.398783][ T1481] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4890'.
[  587.492394][ T1487] batadv_slave_0: entered promiscuous mode
[  587.499048][ T1487] netlink: 'syz.0.4891': attribute type 6 has an invalid length.
[  587.508148][ T1486] batadv_slave_0: left promiscuous mode
[  588.970512][ T1557] netlink: 'syz.1.4901': attribute type 10 has an invalid length.
[  589.106173][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  589.867743][ T1609] IPv6: Can't replace route, no match found
[  589.871052][ T1609] netlink: 'syz.0.4909': attribute type 9 has an invalid length.
[  589.872410][ T1611] net_ratelimit: 1 callbacks suppressed
[  589.872425][ T1611] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  589.884897][ T1611] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  590.224409][ T1636] netlink: 'syz.0.4915': attribute type 10 has an invalid length.
[  590.330278][ T1661] netlink: 'syz.2.4920': attribute type 1 has an invalid length.
[  590.332868][ T1661] netlink: 'syz.2.4920': attribute type 1 has an invalid length.
[  590.335410][ T1661] netlink: 'syz.2.4920': attribute type 1 has an invalid length.
[  590.675987][ T1702] 8021q: adding VLAN 0 to HW filter on device bond0
[  590.690616][ T1702] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  590.964857][ T1722] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  590.985829][ T1722] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  591.234845][ T1733] validate_nla: 2 callbacks suppressed
[  591.234857][ T1733] netlink: 'syz.2.4932': attribute type 10 has an invalid length.
[  591.328907][ T1743] __nla_validate_parse: 15 callbacks suppressed
[  591.328919][ T1743] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4934'.
[  591.333962][ T1743] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  591.336935][ T1743] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  591.443303][ T1753] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4936'.
[  591.465942][ T1753] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  591.468757][ T1753] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  591.617974][ T1754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4935'.
[  591.622136][ T1754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4935'.
[  591.680730][ T1754] netlink: 'syz.0.4935': attribute type 1 has an invalid length.
[  591.753268][ T1784] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4939'.
[  591.759092][ T1784] tipc: Invalid UDP bearer configuration
[  591.759140][ T1784] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  591.828325][ T1791] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  591.859440][ T1791] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  591.960911][ T5744] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  592.008390][ T5744] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  592.016915][ T1797] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  592.076247][ T5744] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  592.215391][ T1811] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4945'.
[  592.350794][ T1811] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  592.402883][ T1811] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  592.423844][ T1837] netlink: 'syz.1.4946': attribute type 10 has an invalid length.
[  592.470455][ T1811] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  592.521989][ T1811] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  592.551051][ T1840] netlink: 'syz.2.4948': attribute type 1 has an invalid length.
[  592.575194][ T1840] 8021q: adding VLAN 0 to HW filter on device bond38
[  592.608282][ T1840] veth55: entered promiscuous mode
[  592.631773][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  592.645568][T11908] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  592.680068][T11908] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  592.711138][T11908] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  592.728724][ T1812] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  592.791039][  T974] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  592.809916][ T1812] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  592.876746][ T1812] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  592.905471][ T1862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4952'.
[  592.939122][ T1812] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  593.117955][ T1877] netlink: 'syz.2.4954': attribute type 1 has an invalid length.
[  593.138916][ T1877] 8021q: adding VLAN 0 to HW filter on device bond39
[  593.168129][ T1877] veth57: entered promiscuous mode
[  594.109820][ T1908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4958'.
[  594.175631][ T1937] netlink: 'syz.2.4962': attribute type 1 has an invalid length.
[  594.190579][ T1937] vxcan13: entered promiscuous mode
[  594.334304][T11908] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  594.357903][ T1942] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4963'.
[  594.361049][ T1942] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  594.369212][T11908] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  594.372171][T11908] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  594.374667][T11908] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  594.417706][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  594.420213][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  594.473335][ T1952] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4965'.
[  594.677758][ T1966] netlink: 'syz.2.4966': attribute type 13 has an invalid length.
[  594.681137][ T1966] netlink: 'syz.2.4966': attribute type 17 has an invalid length.
[  594.716356][  T793] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  595.240895][ T1995] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  595.507783][  T793] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  596.463521][ T2043] syzkaller1: entered promiscuous mode
[  596.467105][ T2043] syzkaller1: entered allmulticast mode
[  596.494499][ T2048] __nla_validate_parse: 4 callbacks suppressed
[  596.494520][ T2048] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4982'.
[  596.500623][ T2043] netlink: 'syz.0.4981': attribute type 9 has an invalid length.
[  596.514354][ T2048] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4982'.
[  596.519968][ T2043] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4981'.
[  596.636931][ T2056] netlink: 'syz.2.4983': attribute type 1 has an invalid length.
[  596.652919][ T2046] netlink: 'syz.1.4980': attribute type 10 has an invalid length.
[  596.688372][ T2062] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4983'.
[  596.748774][ T2056] 8021q: adding VLAN 0 to HW filter on device bond40
[  596.848030][ T2071] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4984'.
[  597.162537][ T2097] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4989'.
[  597.175603][ T2104] netlink: 'syz.2.4990': attribute type 3 has an invalid length.
[  597.661584][ T2136] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4995'.
[  597.688899][ T2140] netlink: 'syz.2.4994': attribute type 13 has an invalid length.
[  597.691970][ T2140] netlink: 'syz.2.4994': attribute type 17 has an invalid length.
[  597.717946][ T2140] net_ratelimit: 4 callbacks suppressed
[  597.717958][ T2140] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  597.746926][  T793] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  597.852573][ T2140] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4994'.
[  597.911043][ T2146] netlink: 'syz.1.4996': attribute type 10 has an invalid length.
[  598.119223][ T2178] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4999'.
[  598.226193][  T793] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  598.988698][ T2240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5006'.
[  599.194831][T24711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  599.201581][T24711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  599.207717][ T2255] netlink: 'syz.1.5008': attribute type 10 has an invalid length.
[  599.262787][ T2255] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  599.268682][ T2255] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  599.789205][ T3556] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  600.273093][ T2332] netlink: 'syz.0.5024': attribute type 16 has an invalid length.
[  600.276459][ T2332] netlink: 'syz.0.5024': attribute type 17 has an invalid length.
[  600.474307][T11908] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  600.488096][T11908] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  600.500906][T11908] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  600.512302][T11908] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  600.967085][ T2361] 8021q: adding VLAN 0 to HW filter on device bond0
[  600.990534][ T2361] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  601.033024][ T2359] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  601.046496][T31735] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  601.286620][T31735] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  601.320869][ T2376] mac80211_hwsim hwsim201 syzkaller0: left promiscuous mode
[  601.324408][ T2376] mac80211_hwsim hwsim201 syzkaller0: left allmulticast mode
[  601.330626][ T2376] tipc: Resetting bearer <eth:syzkaller0>
[  601.521485][ T2392] __nla_validate_parse: 5 callbacks suppressed
[  601.521499][ T2392] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5035'.
[  601.571497][ T2395] tipc: Resetting bearer <eth:syzkaller0>
[  602.024001][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  602.029374][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  602.626057][ T2432] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5040'.
[  602.720304][ T2446] validate_nla: 7 callbacks suppressed
[  602.720321][ T2446] netlink: 'syz.2.5043': attribute type 10 has an invalid length.
[  602.870451][ T2462] netlink: 'syz.0.5048': attribute type 10 has an invalid length.
[  602.875497][ T2462] bond0: (slave 0!): Releasing backup interface
[  602.884252][ T2462] team0: Failed to send options change via netlink (err -105)
[  602.888004][ T2462] team0: Port device 0! added
[  602.937256][ T2478] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  603.050908][ T2485] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  603.431797][ T2491] netlink: 'syz.0.5052': attribute type 10 has an invalid length.
[  603.440955][ T2494] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5053'.
[  603.479370][ T2494] sctp: [Deprecated]: syz.2.5053 (pid 2494) Use of struct sctp_assoc_value in delayed_ack socket option.
[  603.479370][ T2494] Use struct sctp_sack_info instead
[  603.575929][ T2508] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  603.628991][ T2519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5057'.
[  603.774343][T24707] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  604.110854][ T2565] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5063'.
[  604.173419][ T2570] netlink: 'syz.1.5064': attribute type 1 has an invalid length.
[  604.212699][ T2570] 8021q: adding VLAN 0 to HW filter on device bond30
[  604.289887][ T2570] 8021q: adding VLAN 0 to HW filter on device bond30
[  604.293517][ T2570] bond30: (slave vxcan21): The slave device specified does not support setting the MAC address
[  604.301219][ T2570] bond30: (slave vxcan21): Error -95 calling set_mac_address
[  604.361906][ T2580] veth55: entered promiscuous mode
[  604.369918][ T2580] bond30: (slave veth55): Enslaving as an active interface with a down link
[  604.392922][T24702] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  604.534398][T24707] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  604.870983][ T2631] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5074'.
[  604.930499][ T2621] netlink: 'syz.2.5074': attribute type 10 has an invalid length.
[  605.046504][ T2649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5075'.
[  605.460971][ T2675] netlink: 'syz.2.5079': attribute type 6 has an invalid length.
[  605.467091][ T2675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5079'.
[  605.471875][ T2675] netlink: 13572 bytes leftover after parsing attributes in process `syz.2.5079'.
[  605.558074][ T7959] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  605.561067][ T2681] netlink: 'syz.0.5081': attribute type 10 has an invalid length.
[  605.639029][ T2691] netlink: 'syz.1.5083': attribute type 13 has an invalid length.
[  605.643622][ T2691] netlink: 'syz.1.5083': attribute type 17 has an invalid length.
[  605.664207][ T2691] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  605.733487][ T2696] netlink: 'syz.2.5084': attribute type 10 has an invalid length.
[  605.745506][ T2702] mac80211_hwsim hwsim24 syzkaller0: entered promiscuous mode
[  605.749994][ T2702] mac80211_hwsim hwsim24 syzkaller0: entered allmulticast mode
[  605.753497][ T2702] tipc: Resetting bearer <eth:syzkaller0>
[  605.952128][ T2726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5090'.
[  606.176559][ T2743] IPv6: NLM_F_REPLACE set, but no existing node found!
[  606.733370][ T2757] __nla_validate_parse: 1 callbacks suppressed
[  606.733386][ T2757] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5097'.
[  606.744121][ T2756] netlink: 'syz.1.5097': attribute type 11 has an invalid length.
[  606.896587][ T2759] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5098'.
[  607.688867][ T2805] tipc: Resetting bearer <eth:syzkaller0>
[  607.729433][ T2807] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5107'.
[  607.749819][ T2807] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5107'.
[  608.243985][ T2825] validate_nla: 4 callbacks suppressed
[  608.244003][ T2825] netlink: 'syz.1.5110': attribute type 10 has an invalid length.
[  608.487362][ T2827] netlink: 'syz.1.5111': attribute type 10 has an invalid length.
[  608.552230][ T2828] 8021q: VLANs not supported on ip6tnl0
[  608.555230][ T2830] 8021q: VLANs not supported on ip6tnl0
[  608.639377][ T2833] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5113'.
[  608.643900][ T2833] netlink: 'syz.2.5113': attribute type 10 has an invalid length.
[  608.653334][ T2833] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  608.657595][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  608.663250][ T2833] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  608.945005][T24711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  608.949179][T24711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  609.025369][ T2860] netlink: 200 bytes leftover after parsing attributes in process `syz.0.5118'.
[  609.032024][ T2860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5118'.
[  609.091290][ T2866] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5119'.
[  609.145452][ T2866] netlink: 'syz.0.5119': attribute type 10 has an invalid length.
[  609.252162][ T2874] sctp: [Deprecated]: syz.0.5120 (pid 2874) Use of int in maxseg socket option.
[  609.252162][ T2874] Use struct sctp_assoc_value instead
[  609.426047][  T793] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  609.539287][ T2882] netlink: 'syz.2.5123': attribute type 10 has an invalid length.
[  609.646951][ T2885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5124'.
[  609.790159][ T2900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5126'.
[  609.801654][ T2896] netlink: 'syz.2.5127': attribute type 10 has an invalid length.
[  610.035174][T24707] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  610.066848][ T2918] netlink: 'syz.0.5131': attribute type 10 has an invalid length.
[  610.229825][ T2932] netlink: 'syz.0.5133': attribute type 1 has an invalid length.
[  610.272750][ T2937] netlink: 'syz.2.5135': attribute type 13 has an invalid length.
[  610.277413][ T2937] netlink: 'syz.2.5135': attribute type 17 has an invalid length.
[  610.478221][ T2945] mac80211_hwsim hwsim24 syzkaller0: left promiscuous mode
[  610.481168][ T2945] mac80211_hwsim hwsim24 syzkaller0: left allmulticast mode
[  610.484576][ T2945] tipc: Resetting bearer <eth:syzkaller0>
[  610.628703][ T2959] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  610.669478][ T2962] blkio.reset_stats is deprecated
[  610.949910][ T2985] 8021q: adding VLAN 0 to HW filter on device bond38
[  610.978637][ T2985] 8021q: adding VLAN 0 to HW filter on device bond38
[  610.981153][ T2985] bond38: (slave vxcan11): The slave device specified does not support setting the MAC address
[  610.986177][ T2985] bond38: (slave vxcan11): Error -95 calling set_mac_address
[  611.034098][ T2990] veth55: entered promiscuous mode
[  611.045093][ T2990] bond38: (slave veth55): Enslaving as an active interface with a down link
[  611.054049][T24491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  611.059442][T24491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  611.399878][ T3016] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  611.403165][ T3016] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  611.597160][ T3030] tipc: Invalid UDP bearer configuration
[  611.597220][ T3030] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  611.604030][ T3034] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  611.624499][ T3034] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  611.928013][T24707] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  611.930929][T24707] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  612.273978][ T3082] __nla_validate_parse: 14 callbacks suppressed
[  612.273998][ T3082] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5165'.
[  612.286750][ T3082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5165'.
[  612.636091][ T3092] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5167'.
[  613.435944][   T11] block nbd1: Possible stuck request ffff8880215d0000: control (read@0,1024B). Runtime 30 seconds
[  613.440088][   T11] block nbd1: Possible stuck request ffff8880215d0200: control (read@1024,1024B). Runtime 30 seconds
[  613.443451][   T11] block nbd1: Possible stuck request ffff8880215d0400: control (read@2048,1024B). Runtime 30 seconds
[  613.447353][   T11] block nbd1: Possible stuck request ffff8880215d0600: control (read@3072,1024B). Runtime 30 seconds
[  613.480094][ T3131] validate_nla: 5 callbacks suppressed
[  613.480115][ T3131] netlink: 'syz.1.5170': attribute type 10 has an invalid length.
[  613.677992][ T3137] netlink: 'syz.0.5172': attribute type 6 has an invalid length.
[  613.855345][ T3147] netlink: 'syz.2.5173': attribute type 10 has an invalid length.
[  613.944471][ T3163] netlink: 'syz.0.5177': attribute type 10 has an invalid length.
[  614.022490][ T3167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5180'.
[  614.053172][ T3171] netlink: 200 bytes leftover after parsing attributes in process `syz.1.5181'.
[  614.136441][ T3171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5181'.
[  614.291990][ T3186] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5184'.
[  614.295652][ T3186] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  614.309306][ T3186] netlink: 200 bytes leftover after parsing attributes in process `syz.0.5184'.
[  614.317747][ T3186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5184'.
[  614.459297][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  614.462958][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  614.897884][ T3195] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5187'.
[  614.901655][ T3195] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  614.907666][ T3195] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  615.564531][ T3244] netlink: 'syz.2.5196': attribute type 12 has an invalid length.
[  615.753703][ T3262] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  615.765848][ T3262] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  616.212177][ T3291] netlink: 'syz.2.5207': attribute type 10 has an invalid length.
[  616.320625][ T3306] pim6reg1: entered promiscuous mode
[  616.322630][ T3306] pim6reg1: entered allmulticast mode
[  616.364248][ T3311] netlink: 'syz.0.5212': attribute type 13 has an invalid length.
[  616.370406][ T3311] netlink: 'syz.0.5212': attribute type 17 has an invalid length.
[  616.384552][ T3311] gretap0: entered promiscuous mode
[  616.451095][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0
[  616.454898][ T3311] 8021q: adding VLAN 0 to HW filter on device team0
[  616.464577][ T3311] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  616.476758][  T793] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  616.826971][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  617.099327][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  617.262981][ T3363] netlink: 'syz.1.5224': attribute type 11 has an invalid length.
[  617.420342][T24491] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  617.449521][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  617.511974][ T3373] __nla_validate_parse: 13 callbacks suppressed
[  617.511989][ T3373] netlink: 200 bytes leftover after parsing attributes in process `syz.1.5228'.
[  617.528213][ T3373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5228'.
[  617.742962][ T3382] tipc: Resetting bearer <eth:syzkaller0>
[  617.799726][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  618.384571][ T3396] netlink: 'syz.0.5233': attribute type 1 has an invalid length.
[  618.503942][ T3403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5234'.
[  618.605297][ T3396] 8021q: adding VLAN 0 to HW filter on device bond39
[  618.617224][ T3399] bond39: (slave wlan0): Enslaving as an active interface with a down link
[  618.625550][ T3402] vlan2: entered allmulticast mode
[  618.629051][ T3402] bond39: (slave vlan2): Opening slave failed
[  618.838665][ T3433] netlink: 'syz.0.5240': attribute type 13 has an invalid length.
[  618.848763][ T3433] netlink: 'syz.0.5240': attribute type 17 has an invalid length.
[  618.875541][ T3433] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  618.886170][  T793] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  618.952328][ T3427] netlink: 'syz.1.5239': attribute type 10 has an invalid length.
[  619.006693][ T3447] netlink: 'syz.0.5242': attribute type 10 has an invalid length.
[  619.242605][T24702] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  619.355930][  T793] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  619.399485][ T3473] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.5247'.
[  619.458097][ T3482] pim6reg1: entered promiscuous mode
[  619.460171][ T3482] pim6reg1: entered allmulticast mode
[  619.464739][ T3482] netlink: 'syz.1.5248': attribute type 27 has an invalid length.
[  619.543531][ T3482] veth55: left promiscuous mode
[  619.549975][ T3482] pim6reg1: left promiscuous mode
[  619.552080][ T3482] pim6reg1: left allmulticast mode
[  619.961349][ T3531] netlink: 'syz.0.5259': attribute type 13 has an invalid length.
[  619.963979][ T3531] netlink: 'syz.0.5259': attribute type 17 has an invalid length.
[  619.972814][ T3531] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  619.996551][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  620.014972][ T3531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5259'.
[  620.111826][ T3534] netlink: 'syz.1.5260': attribute type 10 has an invalid length.
[  620.187623][ T3544] netlink: 'syz.1.5261': attribute type 1 has an invalid length.
[  620.191318][ T3543] netlink: 'syz.1.5261': attribute type 1 has an invalid length.
[  620.234792][ T3544] 8021q: adding VLAN 0 to HW filter on device bond31
[  620.244263][ T3545] bond31: (slave wlan0): Enslaving as an active interface with a down link
[  620.287949][ T3548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5262'.
[  620.330345][ T3548] 
[  620.331358][ T3548] ======================================================
[  620.334022][ T3548] WARNING: possible circular locking dependency detected
[  620.336735][ T3548] syzkaller #0 Not tainted
[  620.338685][ T3548] ------------------------------------------------------
[  620.342708][ T3548] syz.1.5262/3548 is trying to acquire lock:
[  620.344784][ T3548] ffffffff8f68f8b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720
[  620.346785][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  620.348151][ T3548] 
[  620.348151][ T3548] but task is already holding lock:
[  620.348159][ T3548] ffffffff8f68f858 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  620.356820][ T3548] 
[  620.356820][ T3548] which lock already depends on the new lock.
[  620.356820][ T3548] 
[  620.360679][ T3548] 
[  620.360679][ T3548] the existing dependency chain (in reverse order) is:
[  620.364036][ T3548] 
[  620.364036][ T3548] -> #2 (nr_neigh_list_lock){+...}-{3:3}:
[  620.367098][ T3548]        lock_acquire+0x120/0x360
[  620.369130][ T3548]        _raw_spin_lock_bh+0x36/0x50
[  620.371159][ T3548]        nr_rt_ioctl+0x390/0xd50
[  620.373108][ T3548]        sock_do_ioctl+0xdc/0x300
[  620.375065][ T3548]        sock_ioctl+0x576/0x790
[  620.376936][ T3548]        __se_sys_ioctl+0xfc/0x170
[  620.378952][ T3548]        do_syscall_64+0xfa/0x3b0
[  620.380868][ T3548]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  620.383284][ T3548] 
[  620.383284][ T3548] -> #1 (&nr_node->node_lock){+...}-{3:3}:
[  620.386301][ T3548]        lock_acquire+0x120/0x360
[  620.388328][ T3548]        _raw_spin_lock_bh+0x36/0x50
[  620.390353][ T3548]        nr_rt_ioctl+0x193/0xd50
[  620.392255][ T3548]        sock_do_ioctl+0xdc/0x300
[  620.394272][ T3548]        sock_ioctl+0x576/0x790
[  620.396144][ T3548]        __se_sys_ioctl+0xfc/0x170
[  620.397909][ T3548]        do_syscall_64+0xfa/0x3b0
[  620.399552][ T3548]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  620.402106][ T3548] 
[  620.402106][ T3548] -> #0 (nr_node_list_lock){+...}-{3:3}:
[  620.405046][ T3548]        validate_chain+0xb9b/0x2140
[  620.407162][ T3548]        __lock_acquire+0xab9/0xd20
[  620.409324][ T3548]        lock_acquire+0x120/0x360
[  620.411295][ T3548]        _raw_spin_lock_bh+0x36/0x50
[  620.413368][ T3548]        nr_rt_device_down+0xa9/0x720
[  620.415420][ T3548]        nr_device_event+0x137/0x150
[  620.417183][ T3548]        notifier_call_chain+0x1b6/0x3e0
[  620.419095][ T3548]        netif_close_many+0x29c/0x410
[  620.421094][ T3548]        netif_close+0x158/0x210
[  620.422843][ T3548]        dev_close+0x10a/0x220
[  620.424526][ T3548]        bpq_device_event+0x377/0x6a0
[  620.426230][ T3548]        notifier_call_chain+0x1b6/0x3e0
[  620.427935][ T3548]        netif_close_many+0x29c/0x410
[  620.429739][ T3548]        netif_close+0x158/0x210
[  620.431630][ T3548]        dev_close+0x10a/0x220
[  620.433432][ T3548]        bond_setup_by_slave+0x5f/0x3f0
[  620.435488][ T3548]        bond_enslave+0x7a0/0x3a70
[  620.437353][ T3548]        bond_do_ioctl+0x635/0x9b0
[  620.439240][ T3548]        bond_siocdevprivate+0x17e/0x350
[  620.441181][ T3548]        dev_ifsioc+0xb57/0xf00
[  620.443039][ T3548]        dev_ioctl+0x84c/0x1150
[  620.444770][ T3548]        sock_ioctl+0x719/0x790
[  620.446695][ T3548]        __se_sys_ioctl+0xfc/0x170
[  620.448676][ T3548]        do_syscall_64+0xfa/0x3b0
[  620.450672][ T3548]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  620.453266][ T3548] 
[  620.453266][ T3548] other info that might help us debug this:
[  620.453266][ T3548] 
[  620.457167][ T3548] Chain exists of:
[  620.457167][ T3548]   nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock
[  620.457167][ T3548] 
[  620.461898][ T3548]  Possible unsafe locking scenario:
[  620.461898][ T3548] 
[  620.464379][ T3548]        CPU0                    CPU1
[  620.466288][ T3548]        ----                    ----
[  620.468214][ T3548]   lock(nr_neigh_list_lock);
[  620.470182][ T3548]                                lock(&nr_node->node_lock);
[  620.472939][ T3548]                                lock(nr_neigh_list_lock);
[  620.475611][ T3548]   lock(nr_node_list_lock);
[  620.477282][ T3548] 
[  620.477282][ T3548]  *** DEADLOCK ***
[  620.477282][ T3548] 
[  620.480336][ T3548] 2 locks held by syz.1.5262/3548:
[  620.482292][ T3548]  #0: ffffffff8f53a1c8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150
[  620.485236][ T3548]  #1: ffffffff8f68f858 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  620.488873][ T3548] 
[  620.488873][ T3548] stack backtrace:
[  620.491146][ T3548] CPU: 0 UID: 0 PID: 3548 Comm: syz.1.5262 Not tainted syzkaller #0 PREEMPT(full) 
[  620.491165][ T3548] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  620.491175][ T3548] Call Trace:
[  620.491184][ T3548]  <TASK>
[  620.491193][ T3548]  dump_stack_lvl+0x189/0x250
[  620.491221][ T3548]  ? __pfx_dump_stack_lvl+0x10/0x10
[  620.491234][ T3548]  ? __pfx__printk+0x10/0x10
[  620.491249][ T3548]  ? print_lock_name+0xde/0x100
[  620.491265][ T3548]  print_circular_bug+0x2ee/0x310
[  620.491281][ T3548]  check_noncircular+0x134/0x160
[  620.491297][ T3548]  validate_chain+0xb9b/0x2140
[  620.491312][ T3548]  ? rt6_disable_ip+0x6b3/0x720
[  620.491327][ T3548]  ? __lock_acquire+0xab9/0xd20
[  620.491344][ T3548]  __lock_acquire+0xab9/0xd20
[  620.491362][ T3548]  ? nr_rt_device_down+0xa9/0x720
[  620.491380][ T3548]  lock_acquire+0x120/0x360
[  620.491397][ T3548]  ? nr_rt_device_down+0xa9/0x720
[  620.491416][ T3548]  ? nr_rt_device_down+0xa9/0x720
[  620.491431][ T3548]  _raw_spin_lock_bh+0x36/0x50
[  620.491448][ T3548]  ? nr_rt_device_down+0xa9/0x720
[  620.491464][ T3548]  nr_rt_device_down+0xa9/0x720
[  620.491480][ T3548]  ? do_raw_spin_unlock+0x4d/0x240
[  620.491493][ T3548]  nr_device_event+0x137/0x150
[  620.491505][ T3548]  notifier_call_chain+0x1b6/0x3e0
[  620.491518][ T3548]  netif_close_many+0x29c/0x410
[  620.491530][ T3548]  ? __pfx_netif_close_many+0x10/0x10
[  620.491540][ T3548]  ? bond_netdev_event+0x227/0xe80
[  620.491554][ T3548]  netif_close+0x158/0x210
[  620.491563][ T3548]  ? __pfx_netif_close+0x10/0x10
[  620.491572][ T3548]  ? tun_device_event+0x77/0x1020
[  620.491583][ T3548]  ? __pfx___neigh_ifdown+0x10/0x10
[  620.491597][ T3548]  ? macsec_notify+0x104/0x660
[  620.491611][ T3548]  dev_close+0x10a/0x220
[  620.491623][ T3548]  bpq_device_event+0x377/0x6a0
[  620.491634][ T3548]  notifier_call_chain+0x1b6/0x3e0
[  620.491646][ T3548]  netif_close_many+0x29c/0x410
[  620.491656][ T3548]  ? __pfx_netif_close_many+0x10/0x10
[  620.491668][ T3548]  netif_close+0x158/0x210
[  620.491677][ T3548]  ? __pfx_netif_close+0x10/0x10
[  620.491686][ T3548]  ? do_raw_spin_lock+0x121/0x290
[  620.491698][ T3548]  ? __local_bh_enable_ip+0x12d/0x1c0
[  620.491709][ T3548]  ? lockdep_hardirqs_on+0x9c/0x150
[  620.491721][ T3548]  dev_close+0x10a/0x220
[  620.491735][ T3548]  bond_setup_by_slave+0x5f/0x3f0
[  620.491754][ T3548]  bond_enslave+0x7a0/0x3a70
[  620.491770][ T3548]  ? unwind_get_return_address+0x4d/0x90
[  620.491790][ T3548]  ? __pfx_stack_trace_save+0x10/0x10
[  620.491806][ T3548]  ? __pfx_bond_enslave+0x10/0x10
[  620.491824][ T3548]  ? apparmor_capable+0x137/0x1b0
[  620.491839][ T3548]  ? full_name_hash+0x92/0xe0
[  620.491853][ T3548]  ? netdev_name_node_lookup+0xdf/0x120
[  620.491871][ T3548]  bond_do_ioctl+0x635/0x9b0
[  620.491884][ T3548]  ? __pfx_bond_do_ioctl+0x10/0x10
[  620.491901][ T3548]  ? rcu_is_watching+0x15/0xb0
[  620.491915][ T3548]  bond_siocdevprivate+0x17e/0x350
[  620.491928][ T3548]  ? __pfx_bond_siocdevprivate+0x10/0x10
[  620.491939][ T3548]  ? __lock_acquire+0xab9/0xd20
[  620.491988][ T3548]  ? full_name_hash+0x92/0xe0
[  620.492002][ T3548]  ? netdev_name_node_lookup+0xdf/0x120
[  620.492017][ T3548]  dev_ifsioc+0xb57/0xf00
[  620.492032][ T3548]  dev_ioctl+0x84c/0x1150
[  620.492044][ T3548]  sock_ioctl+0x719/0x790
[  620.492061][ T3548]  ? __pfx_sock_ioctl+0x10/0x10
[  620.492076][ T3548]  ? __fget_files+0x3a0/0x420
[  620.492086][ T3548]  ? __fget_files+0x2a/0x420
[  620.492097][ T3548]  ? bpf_lsm_file_ioctl+0x9/0x20
[  620.492110][ T3548]  ? __pfx_sock_ioctl+0x10/0x10
[  620.492125][ T3548]  __se_sys_ioctl+0xfc/0x170
[  620.492139][ T3548]  do_syscall_64+0xfa/0x3b0
[  620.492152][ T3548]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  620.492164][ T3548]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  620.492177][ T3548]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  620.492188][ T3548] RIP: 0033:0x7fa348f8ec29
[  620.492202][ T3548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  620.492222][ T3548] RSP: 002b:00007fa349e34038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  620.492235][ T3548] RAX: ffffffffffffffda RBX: 00007fa3491d5fa0 RCX: 00007fa348f8ec29
[  620.492244][ T3548] RDX: 0000200000000180 RSI: 00000000000089f0 RDI: 0000000000000009
[  620.492252][ T3548] RBP: 00007fa349011e41 R08: 0000000000000000 R09: 0000000000000000
[  620.492260][ T3548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  620.492267][ T3548] R13: 00007fa3491d6038 R14: 00007fa3491d5fa0 R15: 00007fff2ab13328
[  620.492280][ T3548]  </TASK>
[  620.691216][ T3548] 8021q: adding VLAN 0 to HW filter on device bond0
[  620.700331][ T3548] bond0: (slave rose0): Enslaving as an active interface with an up link
[  620.705934][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  620.755987][   T53] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  620.766148][ T8140] bond31: (slave wlan0): failed to get link speed/duplex
[  620.771023][ T3548] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5262'.
[  620.774750][ T3558] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5262'.
[  620.876352][ T6143] bond31: (slave wlan0): failed to get link speed/duplex
[  620.996073][   T12] bond31: (slave wlan0): failed to get link speed/duplex
[  621.116102][   T12] bond31: (slave wlan0): failed to get link speed/duplex
[  621.226107][   T12] bond31: (slave wlan0): failed to get link speed/duplex
[  621.335946][   T12] bond31: (slave wlan0): failed to get link speed/duplex
[  621.446175][ T5882] bond31: (slave wlan0): failed to get link speed/duplex
[  621.556473][   T12] bond31: (slave wlan0): failed to get link speed/duplex
[  621.666004][ T5882] bond31: (slave wlan0): failed to get link speed/duplex
[  621.776082][ T6143] bond31: (slave wlan0): failed to get link speed/duplex
[  621.825957][   T53] wlan0: Trigger new scan to find an IBSS to join
[  621.885945][   T12] bond31: (slave wlan0): failed to get link speed/duplex
[  621.996016][   T12] bond31: (slave wlan0): failed to get link speed/duplex
[  622.105970][   T12] bond31: (slave wlan0): failed to get link speed/duplex
[  622.216037][T11908] bond31: (slave wlan0): failed to get link speed/duplex
[  622.326180][ T6143] bond31: (slave wlan0): failed to get link speed/duplex
[  622.436100][ T1444] bond31: (slave wlan0): failed to get link speed/duplex
[  622.546259][ T5882] bond31: (slave wlan0): failed to get link speed/duplex
[  623.826003][T24707] wlan0: Trigger new scan to find an IBSS to join
[  624.785892][T24707] wlan0: Trigger new scan to find an IBSS to join
[  624.946081][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  626.576225][   T12] net_ratelimit: 35 callbacks suppressed
[  626.576243][   T12] bond31: (slave wlan0): failed to get link speed/duplex
[  626.686004][   T12] bond31: (slave wlan0): failed to get link speed/duplex
[  626.795946][T24707] wlan0: Trigger new scan to find an IBSS to join
[  626.796194][ T5882] bond31: (slave wlan0): failed to get link speed/duplex
[  626.906287][ T5882] bond31: (slave wlan0): failed to get link speed/duplex
[  627.015948][ T5882] bond31: (slave wlan0): failed to get link speed/duplex
[  627.126153][   T12] bond31: (slave wlan0): failed to get link speed/duplex
[  627.235989][ T5882] bond31: (slave wlan0): failed to get link speed/duplex
[  627.345980][   T12] bond31: (slave wlan0): failed to get link speed/duplex
[  627.455897][   T12] bond31: (slave wlan0): failed to get link speed/duplex
[  627.576095][ T1444] bond31: (slave wlan0): failed to get link speed/duplex
[  627.746104][T24707] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  627.826079][T24491] wlan0: Trigger new scan to find an IBSS to join
[  628.716369][T24491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  629.426215][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!

VM DIAGNOSIS:
20:54:59  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90028d168b0
R8 =ffff88801fd38237 R9 =1ffff11003fa7046 R10=dffffc0000000000 R11=ffffffff854fad60
R12=dffffc0000000000 R13=ffffffff99b038db R14=ffffffff99df8460 R15=0000000000000000
RIP=ffffffff854faddc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa349e346c0 ffffffff 00c00000
GS =0000 ffff8880b8612000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f676abd2ba8 CR3=00000000625d6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000003172
XMM02=00007fb6db5a7498 00007fb6db5a7470 XMM03=00007fb6db5a74a8 00007fb6db5a74a0
XMM04=00007fb6dc10d100 00007fb6db5a7460 XMM05=00007fb6db5a7478 00007fb6db5a74c0
XMM06=00007fb6db5a74b8 00007fb6db5a74b0 XMM07=00007fb6db5a74a8 00007fb6db5a74a0
XMM08=0000000000000000 00007fb6db412f0f XMM09=0000000000000000 00007fb6db412fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=1ffff11009608341 RCX=ffff888109069cc0 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000312f6c0 RSP=ffffc9000312f540
R8 =ffffffff8fa3a837 R9 =1ffffffff1f47506 R10=dffffc0000000000 R11=fffffbfff1f47507
R12=ffff88804b041a08 R13=dffffc0000000000 R14=ffff88813663b1c0 R15=0000000000000000
RIP=ffffffff81b44e68 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555817ee500 ffffffff 00c00000
GS =0000 ffff8881a3c12000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000565176b65000 CR3=000000010dd86000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
