last executing test programs:

2.467942754s ago: executing program 2 (id=2715):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000020000000850000000e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xd, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffd74, 0x40004, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x12, 0x0, 0x8000, 0x23, @ipv4={'\x00', '\xff\xff', @empty}, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x8, 0x0, 0x0, 0x6}})
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='veno\x00', 0x5)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bond0\x00', <r5=>0x0})
listen(0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000240), 0x4)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000ac0), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000400000000000000050000007201610000003b3f95"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc3cb}, 0x94)
sendmsg$NET_DM_CMD_STOP(r6, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x4008080)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15)
socket(0x2c, 0x5, 0x4c26)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x1, 0x80}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000004400000008000300", @ANYRES64=r0, @ANYRES64], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

2.348206986s ago: executing program 0 (id=2716):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0xf) (async)
socket$phonet_pipe(0x23, 0x5, 0x2) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0000000000000009e400001400028005000d00000000000500090001000000"], 0x44}}, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea61", 0x2}], 0x1, &(0x7f00000002c0)=ANY=[], 0x18}, 0xc800) (async)
setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000000), 0x4) (async)
recvmmsg(0xffffffffffffffff, &(0x7f0000000d00)=[{{&(0x7f0000000140)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000300)=""/12, 0xc}], 0x1, &(0x7f0000000380)=""/81, 0x51}, 0x5}, {{&(0x7f0000000480)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000600)=""/221, 0xdd}, {&(0x7f0000000700)=""/76, 0x4c}, {&(0x7f0000000840)=""/184, 0xb8}, {&(0x7f0000000780)=""/13, 0xd}, {&(0x7f0000003280)=""/228, 0xe4}, {&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000000ec0)=""/225, 0xe1}, {&(0x7f00000007c0)=""/13, 0xd}], 0x9}, 0xf64}], 0x2, 0x2, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6)
r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r6) (async, rerun: 64)
r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (rerun: 64)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000c6000000000000"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB="05"], 0x10)
close(r7) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
listen(r0, 0xa)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r8}, &(0x7f0000000500), &(0x7f0000000540)=r7}, 0x20)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000003180)=ANY=[@ANYBLOB="0f000000040000000400008b59171b21d574a00044e1a0f950dea60426dfda78466916ec82bb91e20775808819046883766aaacf4e3242dbce53fa06a32c36c5995f28b241f0eaae6c0f53ae533ef8ceab3678185cc6d8b1fd5b43f91fffe3645b88a0a0749f043ee1bfb7f960ec72f7ec8a3e1522cd9987485f4df1fb42261541bd2102c7ea28b4b620d1936048e23ff275fc36", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) (async, rerun: 32)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r9}, &(0x7f0000000100), 0x0}, 0x20) (async, rerun: 32)
close(r6)
ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r11=>0x0})
sendmsg$nl_route(r10, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003380)=ANY=[@ANYBLOB="240000001800010000000000fddbdf251d01040008000a00", @ANYRES32=r11, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB], 0x24}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)

2.237011529s ago: executing program 0 (id=2717):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000400000071106d000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_int(r0, 0x1, 0xe, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80)
sendfile(r1, r2, 0x0, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}}, 0x4000)
sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000ffdbdf250f0000001800018014000100"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x90)

2.236701772s ago: executing program 0 (id=2718):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24001040}, 0x40010)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lc\x00', 0x1, 0x4, 0x8}, 0x2c)
r3 = socket$kcm(0xa, 0x2, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@empty, @in6=@private1, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x0, 0x80, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffe, 0x0, 0x0, 0x6}, 0x0, 0x6e6bb0, 0x1, 0x0, 0x2}, {{@in=@broadcast, 0x4d6, 0x32}, 0x0, @in6=@loopback, 0x1, 0x3, 0x0, 0xb7, 0x1fd, 0xffffffff, 0xfffffff9}}, 0xe8)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000010000b0026bd70200040000003000000080002000700339d060001"], 0x24}}, 0x4040080)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x2c, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x2, 0x12d5c, 0x12d5c}}, 0x44)
sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r1)
r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
getsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, 0x0, &(0x7f0000000080))
sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r6, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094)
r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={<r9=>0x0}, &(0x7f0000000080)=0xc)
readv(r0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/152, 0x98}, {&(0x7f00000001c0)=""/221, 0xdd}, {&(0x7f00000002c0)=""/246, 0xf6}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/152, 0x98}], 0x5)
write$cgroup_pid(r8, &(0x7f00000000c0)=r9, 0x12)

1.606143321s ago: executing program 2 (id=2725):
r0 = socket$inet6(0xa, 0x5, 0x7)
sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x4}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)="f4735a49be072a95d1ced6759a9f8422a30bc5b276b23d", 0x17}], 0x1, &(0x7f00000000c0)=[@dstopts_2292={{0x68, 0x29, 0x4, {0x6, 0x9, '\x00', [@ra={0x5, 0x2, 0x7e}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x1}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x32}}, @calipso={0x7, 0x18, {0x0, 0x4, 0x3, 0x3, [0x5, 0x2]}}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x44}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xe8ec}}, @tclass={{0x14, 0x29, 0x43, 0x6c54}}, @dontfrag={{0x14, 0x29, 0x3e, 0x200}}, @hoplimit={{0x14, 0x29, 0x34, 0xa890}}, @tclass={{0x14, 0x29, 0x43, 0x2}}, @rthdr={{0xb8, 0x29, 0x39, {0x29, 0x14, 0x0, 0xe, 0x0, [@dev={0xfe, 0x80, '\x00', 0x25}, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}, @loopback, @remote, @private2, @loopback, @dev={0xfe, 0x80, '\x00', 0x1d}, @local, @mcast2]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}, @tclass={{0x14, 0x29, 0x43, 0x7}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}], 0x1e0}}, {{&(0x7f00000002c0)={0xa, 0x4e22, 0x1, @private0, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000300)="ce826ea94bf1f40c9727e6674425ceeea21bcbf2d5c9c38c1231e1668dbf08db0ad00ced508ebbb54cc8465e40bfa74c5bddf0d0cfe4ba9af1cc414a01dd190d07ea939ac00036816ab714c0085a37c18d499e71b3cc5512db675e1f49f3f8c5168ff33f2d8eecd780cb53c78fd521afaddf5b4f0e0eb2be62aa144d4adf785e3991d817914c7a5a12e126e78c6d6521d07902d00ff22f2fcc50c497a67000ad38b38c5618a22b4c4c8ba5c2a8f0672bfa20f0abe14abeec913595a5b23d322656658ca15a2b71b4f4", 0xc9}, {&(0x7f0000000400)="6aba90e251bfe85eb4deb2b489f173eddbf36b3786834bf9c2b9914c66128489ed094c3b9034371c00eccee3d8d53658f7c5bfe3452706baf583c614c264eb44ba44a13249f663c46c7bb3e04a01fbb8d30a4a26b1153c3652ce869c27eb5c81ea5ac4da4bf19580bcd8586e4920ff96e750d1d27aa21297d5b3510683f369e13e034ec1ee061db6aee3e8f2f803f6f75c71aef876c3ed0edd8e994129d0dbb96808fb225be85dc9b4c82e71fa24d7197905875ffebb60c708a3136f736afeda858b879abd4b6d43cc3d9b187a568f57a484e112c4d1a6182c8e6db03f84cf1c8bc9e2", 0xe3}, {&(0x7f0000000500)="d355fec0c94d3deaf06ed46029bdf438482b4efc182e7f4afca53bab95dcc0b09664ee990b5b0ef02d2a709df9981915125d24ddeb25e80a633dc19510f0c838f4f8dbe8cc59f4a3a8fd7d01dfe90c33aeca05e6397b98f7e246dacdc0dfc0b5eae394a2886ea1c57af24d3118b4f54378e44dd4e5c35a0241c648f8fd3fb15f0671659d2f361b8e1bcb2393355d172d1d725c03a546adad766f1951b341319868fe93c81df22b7928089ad3cd1c435daf69a7a2ef7f19de6b3b1d2b60511342b6c2d8a01aac720a3768", 0xca}, {&(0x7f0000000600)="06f367d5ae58707d7b39408217d92052e33cef8c30abc33d043bb4b4ffb89e988f8550e62d4403be05d08f1797b2db456f5c63425ae582a049189ea41910848ef8b8230901e4eb97491991b28043f50fd69c5088573901ba7ad993984685b30ace6e99c827b068f31d3d35d7ba98d6bec9111ce62250530db776ada109adc24248a4548e0d9a063519e59a6550ede52cd909fcdf8f15c4d3cab02e9c94840df416454c57450f06567de8c1a8e4adde146974dda22cc3ff886eb5cdef1db9b43084c3fc59c92bf7e996499f1708d570cfc6914e4a1e5f2be67d1ce3056e34d834f9693753", 0xe4}, {&(0x7f0000000700)="dde05716bde34d3c061613a7211ce45a833a8015963f4667511267507808915f3d4197ce8c22c23e4b2ff788e89187b1dec69b38d66a68abf3cc864e8762e4fcc9c1f8a595f303075f8796a30694102cf5b609c687730961d4bc", 0x5a}], 0x5}}], 0x2, 0x8040)
ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x4c, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x8}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x3}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x3}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x3}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xfffffff7}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x2c}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000a00)={<r3=>r0, 0x0, 0x8001, 0x1})
bind$rxrpc(r3, &(0x7f0000000a40)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x24)
syz_80211_inject_frame(&(0x7f0000000a80)=@broadcast, &(0x7f0000000ac0)=@mgmt_frame=@action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x7ff8}, @device_a, @broadcast, @from_mac=@broadcast, {0x9, 0x4}}, @tdls_setup_resp={0xc, 0x1, 0x5c, 0x81, @void, @val={0x1, 0x3, [{0x4}, {0xb, 0x1}, {0x48, 0x1}]}, @val={0x2d, 0x1a, {0x2, 0x2, 0x1, 0x0, {0x3, 0x66, 0x0, 0x37f, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x1ff, 0xff}}, @val={0x65, 0x12, {@from_mac, @broadcast}}}}, 0x52)
recvmsg(r0, &(0x7f0000002040)={&(0x7f0000000b40)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000000bc0)=""/205, 0xcd}, {&(0x7f0000000cc0)=""/243, 0xf3}, {&(0x7f0000000dc0)=""/74, 0x4a}, {&(0x7f0000000e40)=""/78, 0x4e}, {&(0x7f0000000ec0)=""/97, 0x61}, {&(0x7f0000000f40)=""/57, 0x39}, {&(0x7f0000000f80)=""/4096, 0x1000}], 0x7, &(0x7f0000002000)=""/64, 0x40}, 0x2020)
sendmsg$rds(r3, &(0x7f0000002280)={&(0x7f0000002080)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000002240)=[{&(0x7f00000020c0)=""/54, 0x36}, {&(0x7f0000002100)=""/215, 0xd7}, {&(0x7f0000002200)=""/47, 0x2f}], 0x3, 0x0, 0x0, 0x20040000}, 0x0)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000002300), r3)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000023c0)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x80081ae}, 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x24, r4, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80)
r5 = socket(0x5, 0x6, 0xd5)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002440), r3)
sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000002540)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002500)={&(0x7f0000002480)={0x60, r6, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x801)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$kcm(r5, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000002580)="37f217f920139959bcd280e4c3a9789f4dd93d878818150519605dc942c2d67552bb269777f0000bed8bb2f2ec87f955985f405514769f112b15ab2d911f1e80db78ee98813c7599158d1c6509232c9fab13ae12356bffa854ab52bed67983cdcb1afb9d70d119289ed755133f059ca2bcfdc48ff0736c156b85f9f59e1f7dc8098a2e6aca0c67332fb4c715ce9d694c7eddff4b57277d7c873103ae2a023c4ebb8c00803d3ad0691892e81ea9e653980ea9513b4f8340c3fa56d003fc423a8451f99ffb5dca62cf08b58e5dca3a5f5f34a104d51025f7d9761db02f3363dc53f8497fee583a97b25879cce9a0b394a1ddd9652f07cc0e", 0xf7}], 0x1, &(0x7f00000026c0)=[{0x70, 0x10d, 0x4, "e82f131ff7fcb2dc38903cfb0c0f556ea532a64847ecde7e25c942a38ca561efc8d7ceccef422fc2a33e7a26e3caf4fa43a4cf959f56531df1b7bde62a28b6204dfc310e30b0d4d9df395279f156220307fbbc526205a371c2c170fb"}, {0x38, 0x10b, 0x3, "938909dcdb75d6855529c29c8761348e536f4ab6f73a4cb942879352e88a2635b904"}, {0xe8, 0x1, 0x1000, "636f58fcf5531e7a0c9cd8499dcfb459aaa22336254996569d48675c97c1393e0b44d204ae00e24f3067c4734c9471c0aa54a239bd7f1d7d2526f1bb5a0cac3ee78c850d995465040dd316927b65f0bd3f512fb2625f87450127892d5a81fca6b1313cd62a1e2cedebfc3d0910f01503b6b1ed9641a5aa7d75c7270a686a0807c115545291379697571438cd71251d7a101ed1b2571713baeadc6257b7f640062950987daeb8023d2577b3a6e6f98261f3d7b7d940e5b5a5ca509647f1e278f733a9118c46ab318a6c094f4316a1547924e2e9671b3a60be"}, {0x88, 0x101, 0x2, "ecd54cdf512d30fd1dcd19c2a874ede78040f6440b8f998c0e57fd336313a0d1634b24375a4241adae1994ad0d7c6680d5621f21f3ca8ebbae0eb59d780904fd61faafa916627099e5d82eb1ead7156057120a4aa39f4cf4f7b5e7b8aadd45a44a41583b4726075390bcc7c13fdcf2aea254ab"}, {0xf8, 0x115, 0x6, "77ef42ff59b49fae43d101a7c6682aea14389950e6bd7eb63b973d388d8d50b30f5a86b5ead87b2afb7715c385d5ca3911bc4f721f8df097cb395cea49f269ff9398c04d0416346b0c0469cabb924fa9997ff63a38304359df178ba6bb72f468d5e8635766a92968ee74c0ad7e77040170f3e5854a1c83a63d99c177f575bde99b6503610e305ddeed6336420456dbff24cb8a358f14c70635f824f76071e85747cb410472f7b42a36b750ac5c532f4293c374ab428476b14c9864b1b61550006f8109f29723901c077e83b0cc3d25988d2b98866ad68b1eede7c6c2a874b5121e"}, {0xa0, 0x10d, 0x7, "7c8a07cf43d013ffa9621bbe04073c9fabc8302e99a34b4bab97a7ca7ead80ba56bd3c6d518c19137925a34bf54c8c395d3f88a168f6590a9efee79fcde6a35cb18421ff115e64fcc07269f5f94f2268d01e918209219d425d0c73f2f4a59f4fee65aee2273ee5c873b0649e796c338d97253d8ef55acabccd64575d3045dc5494b6ab88f81f86d6f9990b53a7ddb6"}, {0x98, 0x114, 0x2, "b31bfe52d28fe91a9238faba36b6b8264418c8c9c68df9fb97e229746407e44716042bacaccadd5af44a4b1e821a4557ac5af4874e979d3ecc26753dd500f2edb5011d56e8a7c8576ac924526a700dd2834ef25ab902bd0072aff400186dd34a28b84fea0593db6a1d2aff06e6a8c7e6d4911e7b67e679be6ae2e3a2764acd9a7601"}, {0x38, 0x116, 0x9, "21adcab89a940c682fc80c5ab47756897b0d28cfb9ad66e572118bf072797e57b11ca848"}], 0x480}, 0x8080)
setsockopt$packet_int(r5, 0x107, 0xe, &(0x7f0000002b80)=0xd4aa, 0x4)
ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000002bc0)={'nicvf0\x00', {0x2, 0x4e21, @loopback}})
getsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f0000002c00), &(0x7f0000002c40)=0x4)
ioctl$EXT4_IOC_SETFSUUID(r3, 0x4008662c, &(0x7f0000002c80)={0x10, 0x0, "f27a209fe02390c812f868c507197f54"})
openat$cgroup_devices(r3, &(0x7f0000002cc0)='devices.deny\x00', 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002d40)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000002e40)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002e00)={&(0x7f0000002d80)={0x70, r2, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3, 0x62}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xba0}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xa02}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x18f}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1266}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x1c081}, 0x80)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000002ec0)={'sit0\x00', &(0x7f0000002e80)={@private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x1c}})
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000002f00)={0x0, 'pim6reg0\x00', {0x1}, 0x3})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002f40)={'vxcan0\x00', <r8=>0x0})
openat$cgroup_devices(r3, &(0x7f0000002f80)='devices.deny\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000003340)={0x1, 0x1a, &(0x7f0000002fc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7ff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_val={0x18, 0x7, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000030c0)='syzkaller\x00', 0x10001, 0x9b, &(0x7f0000003100)=""/155, 0x40f00, 0xa, '\x00', r8, @fallback=0x29, r3, 0x8, &(0x7f00000031c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000003200)={0x0, 0x8, 0xc, 0x9}, 0x10, 0xffffffffffffffff, r3, 0x5, &(0x7f0000003280)=[r3, r3, r3, r3, 0xffffffffffffffff], &(0x7f00000032c0)=[{0x4, 0x1, 0xa, 0x7}, {0x1, 0x4, 0x6, 0x7}, {0x4, 0x3, 0x3, 0x8}, {0x4, 0x5, 0xd, 0x1}, {0x1, 0x5, 0xa, 0x5}], 0x10, 0x94}, 0x94)

1.312822137s ago: executing program 0 (id=2728):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockname(r1, 0x0, &(0x7f0000000000))
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x0)

1.312387777s ago: executing program 0 (id=2729):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}]}, &(0x7f00000001c0)=0x10)
r1 = socket(0x2, 0x80805, 0xffffffff)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) (async)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x83, &(0x7f0000000140)={r3}, 0x8) (async)
setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x83, &(0x7f0000000140)={r3}, 0x8)

948.907278ms ago: executing program 2 (id=2733):
r0 = socket$kcm(0x21, 0x2, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x4000040)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f00000001c0))
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001100)={<r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x20}}], 0x2, 0x24048090)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000040a03000006000000000000020000080900010073797a30000000007ff02dddc83717721fdff840f31507a07b884e08008e27daa320951f66fdfd67090a3a523b610cf9a4b443db84000a"], 0x20}, 0x1, 0x0, 0x0, 0x48840}, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c)
shutdown(r6, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={<r7=>0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000100)=0x10)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r8, 0x84, 0x81, &(0x7f00000000c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r8, 0x84, 0x15, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000140)={r7, @in={{0x2, 0x4e21, @empty}}, 0x7, 0xfe00, 0x2, 0x6, 0x54, 0x6, 0xf9}, &(0x7f0000000000)=0x9c)
r9 = socket$kcm(0x2b, 0x1, 0x0)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000040)={<r10=>0x0, 0x4}, &(0x7f0000000080)=0x8)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r11, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100000000000000002914000000240007800c0005"], 0x38}}, 0x0)
setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000100)={r10, 0x1000, 0x0, 0x1}, 0x10)
listen(r9, 0x6)
setsockopt$inet6_buf(r6, 0x29, 0x30, &(0x7f0000000200)="d4e4c81b053ac4fb7754b10c9ec353d54e94ca849a7ee0385db586e869db5bfc6a7278a84bfd70297198126fe9921a98961be5a193cda747e12b38ecaf9cc1bab4cb0336b62cd2fdd2610b1c604159017772f6a8d01745abad6076b581bc509432cda645ee9e5550a85be25ddb72bfeebbaece4d5e75ea3b02a442bf085fefdfea24c54a831c", 0x86)
close(r9)

899.096392ms ago: executing program 2 (id=2734):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', <r2=>0x0})
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x87, @dev={0xac, 0x14, 0x14, 0x35}, 0x4e21, 0x3, 'sh\x00', 0x0, 0x7, 0x12}, 0x2c)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r2, @ANYBLOB="080003"], 0x44}}, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00'}) (async)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x87, @dev={0xac, 0x14, 0x14, 0x35}, 0x4e21, 0x3, 'sh\x00', 0x0, 0x7, 0x12}, 0x2c) (async)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r2, @ANYBLOB="080003"], 0x44}}, 0x0) (async)

838.043442ms ago: executing program 2 (id=2735):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x29, 0x2, 0x0) (async)
r1 = socket$kcm(0x29, 0x2, 0x0)
r2 = socket(0x1d, 0x2, 0x6)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x6a, 0x5, 0x20000000, 0x10004)
sendmmsg$inet(r1, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="1844ab68257d2068f56d57a02a7eae952da77917f3d3bcfd17fa697866339abc453b61dec0b0cc634d93cda9ed0568f89163a15513547104661234827edb11431d00de617faf10b5325091e6ea70bd944773d08f73c872eace457ba5f58ada6d8990441f2d87f6c1bae3f521039cb80523708fe6b91397d87277dd924be366aa9c7651e9c398a161f7d1a747d585013de417ce572a38b47e7a73da49f859b81397bf6664db41e97563541e39d05c03e9304513a9d7da57dcbfafc8315adb5695c8d37428c186f136f81f76cebb70b48a4970b0c55921f6ba846526e173bf568fc59fac1f823a562bb4", 0xe9}], 0x1, 0x0, 0x0, 0x5000000}}, {{0x0, 0x0, &(0x7f00000010c0)=[{0x0, 0x12}, {&(0x7f0000001040)="7824a0dc9ad7f268aac63ae0191537bc82ee3d56e4fb23064596", 0x1a}], 0x2}}], 0x2, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305, 0x7e15}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x8004}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_VLAN_FILTERING={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)

835.77173ms ago: executing program 2 (id=2737):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x15, &(0x7f0000000000)=0x7b, 0x4)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8)

418.702171ms ago: executing program 0 (id=2740):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050)
socket$inet(0x2, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001700)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0x16747c6d2baaace}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x40000002, 0x7, 0x7f, 0x0, 0x2}, 0x609d, 0x1, 0x8, 0xfffffffa, 0x2, 0x2, 0x18, 0x1, 0x6, 0xe, {0x3, 0xffbffeff, 0x5, 0x0, 0x9, 0x2}}}}]}, 0x78}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
shutdown(r3, 0x2000000)
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000100)=0x7, 0x4)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r8, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf2501000000080002000000000005000500000000000800030001"], 0x84}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000)
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r10, &(0x7f0000000080)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r11 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000040)={0x10000000})

354.808716ms ago: executing program 1 (id=2741):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
r1 = socket$inet(0x2, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5e}, {@in=@rand_addr=0x64010100, 0x800004d5, 0x32}, @in6=@private1, {0x14, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x1}, {0x40000, 0x0, 0xfffffffffffffffd}, {0x1}, 0x0, 0x40000000, 0x2, 0x3, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x70bd2a, 0x70bd26, 0x70bd28, 0x8000}}]}, 0x154}}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r2, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x1, @mcast1, 0x7daa}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x2, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x810)
bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
close(0x4)

354.305878ms ago: executing program 1 (id=2742):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$kcm(0xa, 0x5, 0x0)
socket$kcm(0xa, 0x5, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000100bfa30000000000000703000000feffff"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0xd00, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0)

269.020373ms ago: executing program 1 (id=2743):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000dd0000000a000000000000", @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYRESOCT=r0], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x2f}, 0x94)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000020194e3e14400000053e60000000a000005dc4a97725003a95c35d5cad91c59c4a628642743809b81e2b0f5ee953dfe31"], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b'], 0x48) (async, rerun: 64)
r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4080001) (async)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async, rerun: 32)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r5 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64)
socket(0x400000000010, 0x3, 0x0) (rerun: 64)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffbffff, {0x0, 0x0, 0x0, r7, {0x9, 0x4}, {0xffff, 0x1}, {0x0, 0x2}}}, 0x24}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x2, 0xa}, {0x1, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080) (async)
r9 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r9, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x17, r7, 0x1, 0xf9}, 0x14)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)

208.55453ms ago: executing program 1 (id=2744):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r0], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x883)
syz_emit_ethernet(0x4a, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaac4bc9cac968686dd600a843504142bfffe800000faffffffffffffff000000bbfeb13a3a8da4570ca500000000000fff00020000", @ANYRES8=r0, @ANYRES16=r0, @ANYBLOB="0300000000000000", @ANYRES16=r0, @ANYBLOB="504d6364bc2cf5a826c4d5fc6db1bef2b59dda03a583bec5575cda40daad6b78aff45cb8da6adb68abed8d389678bd216e1aa39ac96b5ade25a813e4edf786bd1a5944e0c08fba89ae5e8dbf9be68ee110e376d34bf454cc8642e0bc5b9ac8405be80777f88291c0bc0780bf158856b65669574e8d4cae382a6d2d8f69"], 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100))
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000003d000900ffff02000000df25020000000498bb800c002000ffffffffffffffff3ad9b8c0ad9ae6df5edcc95fdef93ce2659e1f10b661aad57e8d755ca5a5659f798201a5dc74626460b24db478a3db64ae7c08f4adad17bd83661bd4bdcbab05b3eae69391645e995778557a10ac10b1243c7100"/130], 0x74}, 0x1, 0x0, 0x0, 0x40004}, 0x800)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c00000013000100"/20, @ANYBLOB="21f0dc"], 0x5c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000015c0))
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000040)={0x7, 'netdevsim0\x00', {}, 0xc8})
syz_open_procfs$namespace(0x0, 0x0)
unshare(0x6a040000)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002001, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
close(0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x520}}, 0x80)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r4], 0x1c}, 0x1, 0x0, 0x0, 0xc845}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

542.606µs ago: executing program 1 (id=2745):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x3)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='dctcp\x00', 0x6)
syz_emit_ethernet(0x46d, &(0x7f0000000540)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x8, 0x6, "80bbf2", 0x437, 0x2f, 0x0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@dstopts={0x0, 0x17, '\x00', [@generic={0x3, 0x56, "79f4e867dfb38145084ee4fa37390c697177f73e720de2f9ab83960d849bd5c5a8ce7f97513c43b85d01979c8be332dc5b782d1a8a9bb04377afab00da68419af4499743afb57b05b22cd34a57d26e10f4d7a61b2c85"}, @enc_lim, @enc_lim={0x4, 0x1, 0x81}, @ra={0x5, 0x2, 0x8000}, @enc_lim={0x4, 0x1, 0xc}, @pad1, @generic={0x2, 0x4a, "bc336255e730672a0c79f9035a46b85775c04751f26e3c7fa87a513fbd8ed75c6292e760c541386dfd973926683a294c42010e3f3ad5e502fa32b1f97201b50b1ab545be5556315b616e"}, @jumbo={0xc2, 0x4, 0x7}, @padn={0x1, 0x2, [0x0, 0x0]}]}, @dstopts={0x4, 0x17, '\x00', [@hao={0xc9, 0x10, @remote}, @generic={0x81, 0x9c, "adf67bd002a9a1436ecafbdbaf572feb742e5d9c91bf74f7ec65fde56eaa8978ac6f9ba78836ccb7a4c9bbcbe1cc2875ecff3cfc25ae8762cd6b5618b5eba3d49f6fe2712c8dc2cca292203f57661c0191be8333e0940f6266c4d765a19fc4b3286c39eb0a52e7bad53502350d05cfd182e6d693de4017798dc7a2cc984e9425bfa684c8f664826c3628f3895f3a05e49b19aeae436ff1cd82688325"}, @jumbo={0xc2, 0x4, 0x1}, @ra={0x5, 0x2, 0x2}]}, @routing={0x21, 0x10, 0x2, 0xa, 0x0, [@mcast1, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @empty, @dev={0xfe, 0x80, '\x00', 0x43}, @ipv4={'\x00', '\xff\xff', @local}]}, @fragment={0x32, 0x0, 0x80, 0x1, 0x0, 0x8, 0x68}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xa, 0x0, [0x7, 0x7ff7], "eb81c59ef324f107d35e"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x7f, 0x6, 0x7f], "b04c1b7c93d831491cebfffda63a7a9df38f40d8220fb5db9ccb465f390d95a3bc81c2f9587c9dd9c39c50b19d2785e841eaf2647ec3b9e9c68a152348655e87ffdbd901c00b1dfe1892aaf00f050244ac8f5e24e3d464326aebf2fccdf2651ef467572891f0eefdadd3b8979061669365ba9f573e6795b72ed80c87dff941c4"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x401], "3a11b8e70dcda621f388a7d4d4454996fa22361f8f1a9d755e3ae2f9624952fc313d1e8ce8dd723e4512f286807e8d8f07c93fa87ab89a57aff226c997e7044318a9dc3065a6779b51e2fde5c3e9894c5aefee7bf850ed97f3bddf782c4fcac58962686e4df8ad1b09619ded23e5cfbc88142ac69cf95a356ae31211f15a1941cead191e95a14015057579a2e66fc3963e13782e8bbb57257393882a2b4b7104eb39814cd31d6942f140b423b71ad96bc3f5"}, {0x8, 0x88be, 0x4, {{0x9, 0x1, 0x1, 0x3, 0x0, 0x3, 0x7, 0x2}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x4, {{0x8, 0x2, 0x5, 0x1, 0x0, 0x3, 0x2, 0xfb}, 0x2, {0x5, 0x0, 0x2, 0x5, 0x1, 0x0, 0x3}}}, {0x8, 0x6558, 0x1, "48ca8a63021f4ac0d6ea07843d5e1c1702f1907786adbd98f22eb69a6c26d888a75db08d6f2d2f30ecc6754150a0b908d14cdd31f707b61a20d428c07e5b7c88139121361976ffd1e912b56f3289b0007c876fc8b8f9c6a83854ecf9f4cd82bfd91622b0ad5ef9d10a92379b7da212f818b4966eb02cd5fa905ba2b2c61041db498dd7800da7968100bb31"}}}}}}}, 0x0)

0s ago: executing program 1 (id=2746):
ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000000)=0x20)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x34, r1, 0x401, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x34}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'bond0\x00', <r3=>0x0})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@private, @initdev, <r4=>0x0}, &(0x7f00000001c0)=0xc)
r5 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000002c0)={'team0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb8, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xbb80}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffd], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x6}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0xb, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x0, 0x3, 0x1}]}]}]}}]}, 0xb8}}, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'rose0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r8], 0x20}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth1_to_team\x00', <r10=>0x0})
r11 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r11, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r12=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'sit0\x00', <r13=>0x0})
setsockopt$XDP_TX_RING(r11, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
bind$xdp(r11, &(0x7f0000000100)={0x2c, 0x0, r13}, 0x10)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000700)={0x2c4, r1, 0x100, 0x26, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x214, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x98, 0x5, "88d330c881c878940b23ff4aa67868fb530d4840d479632a5497de8413dc030b125a85c85b01dcd78a2c1c9114f3a4a34083f1fef093d24302105b2cbc15d22d2325ed0d1e934512658a975487004b896854aef9633cbb4d6291cd4a2191ee423516e8d2db0924aadb54b4be01cb39645919ed6c947fe34154d258c6b7530b0b1e39fb6d69865913e6fac7ef35eb0a3db79e0ec0"}, @ETHTOOL_A_BITSET_BITS={0x138, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'macvlan\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x86}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ']./@@&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-]\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8cf}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'macvlan\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '.@(-\xc4\x8d\'{-)\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, ')\xfc,&:/-]]I[d\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x3d, 0x4, "928e70ee088ebbb548ffe2f3efb06163080823d7f15ce7a689b59efcfb854823e287ea9d7e984153148496af3e03e37a0163b433cee69a6778"}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x4040}, 0x4008808)
r14 = socket(0xa, 0x3, 0x3a)
ioctl$sock_SIOCETHTOOL(r14, 0x8946, &(0x7f00000000c0)={'pim6reg0\x00', &(0x7f0000000080)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0xffffffff, 0x1, 0x4000000, 0xc, 0x0, 0xfffffffc, 0x0, 0x2]}})
socket$igmp(0x2, 0x3, 0x2)
r15 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r15, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x60, 0x10, 0x40d, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5019}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0xfffff000}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0)

kernel console output (not intermixed with test programs):

700][T12218] syzkaller0: entered allmulticast mode
[  205.785043][T12222] tipc: Resetting bearer <eth:syzkaller0>
[  205.787883][T12215] tipc: Resetting bearer <eth:syzkaller0>
[  205.799373][T12215] tipc: Disabling bearer <eth:syzkaller0>
[  206.095837][T12250] 8021q: adding VLAN 0 to HW filter on device bond11
[  206.112729][T12250] netlink: 'syz.0.1586': attribute type 9 has an invalid length.
[  206.391216][T12260] netlink: 'syz.0.1589': attribute type 14 has an invalid length.
[  206.394262][T12260] netlink: 'syz.0.1589': attribute type 13 has an invalid length.
[  206.699436][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  206.845901][T12272] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  207.030046][T12290] wg1 speed is unknown, defaulting to 1000
[  207.033732][T12290] lo speed is unknown, defaulting to 1000
[  207.037575][T12290] lo speed is unknown, defaulting to 1000
[  207.233088][T12301] 8021q: VLANs not supported on ip6tnl0
[  207.276001][T12303] netlink: 'syz.2.1598': attribute type 30 has an invalid length.
[  207.407310][T12308] netlink: zone id is out of range
[  207.411832][T12308] netlink: zone id is out of range
[  207.414748][T12308] netlink: zone id is out of range
[  207.416552][T12308] netlink: zone id is out of range
[  207.418411][T12308] netlink: zone id is out of range
[  207.421261][T12308] netlink: zone id is out of range
[  207.423270][T12308] netlink: zone id is out of range
[  207.870803][T12319] wg1 speed is unknown, defaulting to 1000
[  207.874446][T12319] lo speed is unknown, defaulting to 1000
[  207.882898][T12319] lo speed is unknown, defaulting to 1000
[  208.146986][T12335] wg1 speed is unknown, defaulting to 1000
[  208.164010][T12329] wg1 speed is unknown, defaulting to 1000
[  208.172260][T12335] lo speed is unknown, defaulting to 1000
[  208.175086][T12335] lo speed is unknown, defaulting to 1000
[  208.195491][T12329] lo speed is unknown, defaulting to 1000
[  208.203055][T12329] lo speed is unknown, defaulting to 1000
[  208.597701][T12372] __nla_validate_parse: 19 callbacks suppressed
[  208.597717][T12372] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1615'.
[  208.607881][T12380] lo: entered promiscuous mode
[  208.612811][  T793] lo speed is unknown, defaulting to 1000
[  208.618278][  T793] syz2: Port: 1 Link DOWN
[  208.648124][T12382] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1617'.
[  208.656381][T12382] netlink: 'syz.0.1617': attribute type 11 has an invalid length.
[  208.675391][T12382] netlink: 'syz.0.1617': attribute type 1 has an invalid length.
[  208.731745][T12382] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address
[  208.740791][T12382] bond12: (slave vxcan3): Error -95 calling set_mac_address
[  208.778420][T12388] bond12: (slave bridge5): Enslaving as an active interface with a down link
[  208.866692][T12393] wg1 speed is unknown, defaulting to 1000
[  208.882112][T12393] lo speed is unknown, defaulting to 1000
[  208.885713][T12393] lo speed is unknown, defaulting to 1000
[  208.951757][T12398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1620'.
[  210.849376][    C1] net_ratelimit: 21 callbacks suppressed
[  210.849399][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  211.889725][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  212.137387][T12422] netlink: 'syz.0.1624': attribute type 1 has an invalid length.
[  212.157516][T12425] netlink: 'syz.2.1625': attribute type 9 has an invalid length.
[  212.195271][T12422] netlink: 'syz.0.1624': attribute type 1 has an invalid length.
[  212.236586][T12429] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1626'.
[  212.237379][T12430] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1626'.
[  212.258416][T12432] netlink: 87 bytes leftover after parsing attributes in process `syz.0.1627'.
[  212.495956][T12448] wg1 speed is unknown, defaulting to 1000
[  212.498893][T12448] lo speed is unknown, defaulting to 1000
[  212.503222][T12448] lo speed is unknown, defaulting to 1000
[  212.528651][T12447] wg1 speed is unknown, defaulting to 1000
[  212.534804][T12447] lo speed is unknown, defaulting to 1000
[  212.553479][T12447] lo speed is unknown, defaulting to 1000
[  212.592528][T12448] netlink: 'syz.0.1631': attribute type 4 has an invalid length.
[  212.612755][T12448] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1631'.
[  212.732810][T12452] wg1 speed is unknown, defaulting to 1000
[  212.735643][T12452] lo speed is unknown, defaulting to 1000
[  212.738377][T12452] lo speed is unknown, defaulting to 1000
[  212.870408][T12458] wg1 speed is unknown, defaulting to 1000
[  212.873312][T12458] lo speed is unknown, defaulting to 1000
[  212.876150][T12458] lo speed is unknown, defaulting to 1000
[  212.929680][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  213.001269][T12469] dvmrp8: entered allmulticast mode
[  213.021476][T12471] netlink: 276 bytes leftover after parsing attributes in process `syz.2.1636'.
[  213.026556][T12469] wg1 speed is unknown, defaulting to 1000
[  213.029626][T12469] lo speed is unknown, defaulting to 1000
[  213.033008][T12469] lo speed is unknown, defaulting to 1000
[  213.062595][T12471] wg1 speed is unknown, defaulting to 1000
[  213.066019][T12471] lo speed is unknown, defaulting to 1000
[  213.066467][T12473] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1637'.
[  213.077302][T12471] lo speed is unknown, defaulting to 1000
[  213.131597][T12475] netlink: 'syz.2.1636': attribute type 21 has an invalid length.
[  213.134285][T12475] netlink: 'syz.2.1636': attribute type 22 has an invalid length.
[  213.144168][T12475] netlink: 'syz.2.1636': attribute type 23 has an invalid length.
[  213.146926][T12475] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1636'.
[  213.222978][T12480] netlink: 'syz.2.1636': attribute type 12 has an invalid length.
[  213.245530][T12468] dvmrp8: left allmulticast mode
[  213.481407][T12483] nbd1: detected capacity change from 0 to 63
[  213.489592][   T56] block nbd1: Receive control failed (result -32)
[  213.500492][T12413] block nbd1: Send control failed (result -32)
[  213.502663][T12413] block nbd1: Request send failed, requeueing
[  213.507232][   T98] block nbd1: Dead connection, failed to find a fallback
[  213.510392][   T98] block nbd1: shutting down sockets
[  213.512496][   T98] blk_print_req_error: 24 callbacks suppressed
[  213.512508][   T98] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  213.518151][   T98] buffer_io_error: 23 callbacks suppressed
[  213.518159][   T98] Buffer I/O error on dev nbd1, logical block 0, async page read
[  213.526595][T12413] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  213.529941][T12413] Buffer I/O error on dev nbd1, logical block 1, async page read
[  213.533880][T12413] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  213.537603][T12413] Buffer I/O error on dev nbd1, logical block 2, async page read
[  213.542563][T12413] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  213.546240][T12413] Buffer I/O error on dev nbd1, logical block 3, async page read
[  213.556485][T12413] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  213.561240][T12413] Buffer I/O error on dev nbd1, logical block 0, async page read
[  213.564057][T12413] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  213.567657][T12413] Buffer I/O error on dev nbd1, logical block 1, async page read
[  213.572699][T12413] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  213.577208][T12413] Buffer I/O error on dev nbd1, logical block 2, async page read
[  213.580852][T12413] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  213.584939][T12413] Buffer I/O error on dev nbd1, logical block 3, async page read
[  213.588372][T12413] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  213.592827][T12413] Buffer I/O error on dev nbd1, logical block 0, async page read
[  213.597291][T12413] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  213.601264][T12413] Buffer I/O error on dev nbd1, logical block 1, async page read
[  213.608898][T12413] ldm_validate_partition_table(): Disk read failed.
[  213.612955][T12413] Dev nbd1: unable to read RDB block 0
[  213.617964][T12413]  nbd1: unable to read partition table
[  213.644939][T12413] ldm_validate_partition_table(): Disk read failed.
[  213.654030][T12413] Dev nbd1: unable to read RDB block 0
[  213.668388][T12413]  nbd1: unable to read partition table
[  213.969420][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  214.034062][T12496] wg1 speed is unknown, defaulting to 1000
[  214.037960][T12496] lo speed is unknown, defaulting to 1000
[  214.042689][T12496] lo speed is unknown, defaulting to 1000
[  214.074939][T12500] __nla_validate_parse: 2 callbacks suppressed
[  214.074954][T12500] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1645'.
[  214.099038][T12500] bridge6: entered allmulticast mode
[  214.176040][T12504] wg1 speed is unknown, defaulting to 1000
[  214.181409][T12504] lo speed is unknown, defaulting to 1000
[  214.186390][T12504] lo speed is unknown, defaulting to 1000
[  214.215580][T12506] netlink: 'syz.0.1646': attribute type 12 has an invalid length.
[  214.218870][T12506] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.1646'.
[  214.411299][T12514] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20003
[  214.538722][T12519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1650'.
[  214.592105][T12526] netlink: 'syz.1.1651': attribute type 9 has an invalid length.
[  214.660637][T12530] lo: left promiscuous mode
[  214.677133][T12530] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  214.682751][ T5901] lo speed is unknown, defaulting to 1000
[  214.685134][ T5901] syz2: Port: 1 Link ACTIVE
[  214.705956][T12528] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1653'.
[  214.740759][T12530] wg1 speed is unknown, defaulting to 1000
[  214.743791][T12530] lo speed is unknown, defaulting to 1000
[  214.747777][T12530] lo speed is unknown, defaulting to 1000
[  214.795197][T12535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  215.012262][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  215.065895][T12547] netlink: 161716 bytes leftover after parsing attributes in process `syz.1.1657'.
[  215.070197][T12547] netlink: zone id is out of range
[  215.332809][T12566] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  215.471741][T12572] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1665'.
[  215.608527][T12570] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1664'.
[  215.672606][T12582] wg1 speed is unknown, defaulting to 1000
[  215.677897][T12582] lo speed is unknown, defaulting to 1000
[  215.682240][T12582] lo speed is unknown, defaulting to 1000
[  215.812252][T12582] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1667'.
[  216.049307][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  216.057001][T12594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1670'.
[  216.120278][T12595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1670'.
[  216.241992][T12599] wg1 speed is unknown, defaulting to 1000
[  216.244745][T12599] lo speed is unknown, defaulting to 1000
[  216.247696][T12599] lo speed is unknown, defaulting to 1000
[  216.309994][T12595] block nbd2: server does not support multiple connections per device.
[  216.321066][T12595] block nbd2: shutting down sockets
[  216.438992][T12608] delete_channel: no stack
[  216.663604][T12623] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  216.687143][T12621] wg1 speed is unknown, defaulting to 1000
[  216.691180][T12621] lo speed is unknown, defaulting to 1000
[  216.694969][T12621] lo speed is unknown, defaulting to 1000
[  216.737846][T12622] wg1 speed is unknown, defaulting to 1000
[  216.763897][T12622] lo speed is unknown, defaulting to 1000
[  216.767090][T12622] lo speed is unknown, defaulting to 1000
[  217.089773][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  217.142484][T12642] wg1 speed is unknown, defaulting to 1000
[  217.147222][T12642] lo speed is unknown, defaulting to 1000
[  217.161503][T12642] lo speed is unknown, defaulting to 1000
[  217.401117][T12658] wg1 speed is unknown, defaulting to 1000
[  217.405614][T12658] lo speed is unknown, defaulting to 1000
[  217.411939][T12658] lo speed is unknown, defaulting to 1000
[  217.756209][T12672] validate_nla: 6 callbacks suppressed
[  217.756225][T12672] netlink: 'syz.1.1690': attribute type 83 has an invalid length.
[  217.786274][T12672] wg1 speed is unknown, defaulting to 1000
[  217.790765][T12672] lo speed is unknown, defaulting to 1000
[  217.794158][T12672] lo speed is unknown, defaulting to 1000
[  218.136016][T12684] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  218.140005][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  218.694464][T12728] syzkaller0: entered promiscuous mode
[  218.696327][T12728] syzkaller0: entered allmulticast mode
[  218.702925][T12728] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  218.743191][T12725] wg1 speed is unknown, defaulting to 1000
[  218.746458][T12725] lo speed is unknown, defaulting to 1000
[  218.751021][T12725] lo speed is unknown, defaulting to 1000
[  218.768055][T12730] tipc: Enabling of bearer <et:g> rejected, media not registered
[  218.786421][T12730] netlink: 'syz.0.1703': attribute type 1 has an invalid length.
[  218.837322][T12730] wg1 speed is unknown, defaulting to 1000
[  218.841347][T12730] lo speed is unknown, defaulting to 1000
[  218.845082][T12730] lo speed is unknown, defaulting to 1000
[  219.086382][T12749] netlink: 'syz.1.1710': attribute type 10 has an invalid length.
[  219.168337][T12758] wg1 speed is unknown, defaulting to 1000
[  219.170453][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  219.183398][T12758] lo speed is unknown, defaulting to 1000
[  219.187482][T12758] lo speed is unknown, defaulting to 1000
[  219.306045][T12767] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  219.308658][T12767] CPU: 0 UID: 0 PID: 12767 Comm: syz.1.1713 Not tainted syzkaller #0 PREEMPT(full) 
[  219.308671][T12767] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  219.308677][T12767] Call Trace:
[  219.308683][T12767]  <TASK>
[  219.308688][T12767]  dump_stack_lvl+0x189/0x250
[  219.308706][T12767]  ? __pfx_dump_stack_lvl+0x10/0x10
[  219.308719][T12767]  ? __pfx__printk+0x10/0x10
[  219.308735][T12767]  ? kernfs_path_from_node+0x2f/0x290
[  219.308746][T12767]  ? kernfs_path_from_node+0x250/0x290
[  219.308755][T12767]  ? kernfs_path_from_node+0x2f/0x290
[  219.308766][T12767]  sysfs_warn_dup+0x8e/0xa0
[  219.308778][T12767]  sysfs_do_create_link_sd+0xc0/0x110
[  219.308788][T12767]  device_add_class_symlinks+0x1cf/0x240
[  219.308800][T12767]  device_add+0x475/0xb50
[  219.308812][T12767]  wiphy_register+0x1ba6/0x28d0
[  219.308831][T12767]  ? __pfx_wiphy_register+0x10/0x10
[  219.308839][T12767]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  219.308887][T12767]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  219.308910][T12767]  ieee80211_register_hw+0x3484/0x4100
[  219.308932][T12767]  ? ieee80211_register_hw+0x1471/0x4100
[  219.308949][T12767]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  219.308962][T12767]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  219.308981][T12767]  ? __hrtimer_setup+0x187/0x210
[  219.308990][T12767]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  219.309008][T12767]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  219.309035][T12767]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  219.309046][T12767]  ? trace_kmalloc+0x1f/0xd0
[  219.309057][T12767]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  219.309068][T12767]  ? kstrndup+0xbf/0x160
[  219.309082][T12767]  hwsim_new_radio_nl+0xea4/0x1b10
[  219.309095][T12767]  ? __pfx___nla_validate_parse+0x10/0x10
[  219.309116][T12767]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  219.309133][T12767]  ? __nla_parse+0x40/0x60
[  219.309158][T12767]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  219.309177][T12767]  genl_family_rcv_msg_doit+0x215/0x300
[  219.309192][T12767]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  219.309212][T12767]  ? bpf_lsm_capable+0x9/0x20
[  219.309226][T12767]  ? security_capable+0x7e/0x2e0
[  219.309244][T12767]  genl_rcv_msg+0x60e/0x790
[  219.309258][T12767]  ? __pfx_genl_rcv_msg+0x10/0x10
[  219.309269][T12767]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  219.309287][T12767]  netlink_rcv_skb+0x208/0x470
[  219.309294][T12767]  ? __lock_acquire+0xab9/0xd20
[  219.309306][T12767]  ? __pfx_genl_rcv_msg+0x10/0x10
[  219.309317][T12767]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  219.309335][T12767]  ? down_read+0x1ad/0x2e0
[  219.309346][T12767]  genl_rcv+0x28/0x40
[  219.309356][T12767]  netlink_unicast+0x82f/0x9e0
[  219.309373][T12767]  ? __pfx_netlink_unicast+0x10/0x10
[  219.309386][T12767]  ? netlink_sendmsg+0x642/0xb30
[  219.309394][T12767]  ? skb_put+0x11b/0x210
[  219.309405][T12767]  netlink_sendmsg+0x805/0xb30
[  219.309419][T12767]  ? __pfx_netlink_sendmsg+0x10/0x10
[  219.309429][T12767]  ? aa_sock_msg_perm+0xf1/0x1d0
[  219.309439][T12767]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  219.309448][T12767]  ? __pfx_netlink_sendmsg+0x10/0x10
[  219.309457][T12767]  __sock_sendmsg+0x21c/0x270
[  219.309472][T12767]  ____sys_sendmsg+0x505/0x830
[  219.309484][T12767]  ? __pfx_____sys_sendmsg+0x10/0x10
[  219.309499][T12767]  ? import_iovec+0x74/0xa0
[  219.309511][T12767]  ___sys_sendmsg+0x21f/0x2a0
[  219.309522][T12767]  ? __pfx____sys_sendmsg+0x10/0x10
[  219.309550][T12767]  ? __fget_files+0x2a/0x420
[  219.309558][T12767]  ? __fget_files+0x3a0/0x420
[  219.309570][T12767]  __x64_sys_sendmsg+0x19b/0x260
[  219.309582][T12767]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  219.309597][T12767]  ? rcu_is_watching+0x15/0xb0
[  219.309608][T12767]  ? do_syscall_64+0xbe/0x3b0
[  219.309621][T12767]  do_syscall_64+0xfa/0x3b0
[  219.309630][T12767]  ? lockdep_hardirqs_on+0x9c/0x150
[  219.309638][T12767]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.309646][T12767]  ? exc_page_fault+0x9f/0xf0
[  219.309656][T12767]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.309663][T12767] RIP: 0033:0x7f689ab8eba9
[  219.309673][T12767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  219.309681][T12767] RSP: 002b:00007f689ba8a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  219.309691][T12767] RAX: ffffffffffffffda RBX: 00007f689add6090 RCX: 00007f689ab8eba9
[  219.309697][T12767] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000c
[  219.309702][T12767] RBP: 00007f689ac11e19 R08: 0000000000000000 R09: 0000000000000000
[  219.309707][T12767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  219.309712][T12767] R13: 00007f689add6128 R14: 00007f689add6090 R15: 00007ffcfd9f3488
[  219.309728][T12767]  </TASK>
[  220.095320][T12786] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  220.209305][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  220.254423][T12793] wg1 speed is unknown, defaulting to 1000
[  220.258292][T12793] lo speed is unknown, defaulting to 1000
[  220.262463][T12793] lo speed is unknown, defaulting to 1000
[  221.249285][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  221.506815][T12826] __nla_validate_parse: 20 callbacks suppressed
[  221.506827][T12826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1729'.
[  221.514768][T12826] openvswitch: netlink: Flow actions attr not present in new flow.
[  221.558544][T12830] netlink: 'syz.1.1731': attribute type 9 has an invalid length.
[  221.591148][T12831] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  221.593896][T12831] CPU: 0 UID: 0 PID: 12831 Comm: syz.0.1729 Not tainted syzkaller #0 PREEMPT(full) 
[  221.593928][T12831] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  221.593934][T12831] Call Trace:
[  221.593941][T12831]  <TASK>
[  221.593946][T12831]  dump_stack_lvl+0x189/0x250
[  221.593962][T12831]  ? __pfx_dump_stack_lvl+0x10/0x10
[  221.593975][T12831]  ? __pfx__printk+0x10/0x10
[  221.593992][T12831]  ? kernfs_path_from_node+0x2f/0x290
[  221.594002][T12831]  ? kernfs_path_from_node+0x250/0x290
[  221.594010][T12831]  ? kernfs_path_from_node+0x2f/0x290
[  221.594020][T12831]  sysfs_warn_dup+0x8e/0xa0
[  221.594029][T12831]  sysfs_do_create_link_sd+0xc0/0x110
[  221.594039][T12831]  device_add_class_symlinks+0x1cf/0x240
[  221.594051][T12831]  device_add+0x475/0xb50
[  221.594061][T12831]  wiphy_register+0x1ba6/0x28d0
[  221.594079][T12831]  ? __pfx_wiphy_register+0x10/0x10
[  221.594087][T12831]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  221.594110][T12831]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  221.594130][T12831]  ieee80211_register_hw+0x3484/0x4100
[  221.594159][T12831]  ? ieee80211_register_hw+0x1471/0x4100
[  221.594185][T12831]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  221.594204][T12831]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  221.594226][T12831]  ? __hrtimer_setup+0x187/0x210
[  221.594237][T12831]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  221.594258][T12831]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  221.594304][T12831]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  221.594321][T12831]  ? trace_kmalloc+0x1f/0xd0
[  221.594337][T12831]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  221.594354][T12831]  ? kstrndup+0xbf/0x160
[  221.594377][T12831]  hwsim_new_radio_nl+0xea4/0x1b10
[  221.594400][T12831]  ? __pfx___nla_validate_parse+0x10/0x10
[  221.594428][T12831]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  221.594445][T12831]  ? __nla_parse+0x40/0x60
[  221.594456][T12831]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  221.594480][T12831]  genl_family_rcv_msg_doit+0x215/0x300
[  221.594506][T12831]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  221.594544][T12831]  ? bpf_lsm_capable+0x9/0x20
[  221.594564][T12831]  ? security_capable+0x7e/0x2e0
[  221.594595][T12831]  genl_rcv_msg+0x60e/0x790
[  221.594620][T12831]  ? __pfx_genl_rcv_msg+0x10/0x10
[  221.594632][T12831]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  221.594651][T12831]  netlink_rcv_skb+0x208/0x470
[  221.594658][T12831]  ? __lock_acquire+0xab9/0xd20
[  221.594671][T12831]  ? __pfx_genl_rcv_msg+0x10/0x10
[  221.594682][T12831]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  221.594700][T12831]  ? down_read+0x1ad/0x2e0
[  221.594711][T12831]  genl_rcv+0x28/0x40
[  221.594720][T12831]  netlink_unicast+0x82f/0x9e0
[  221.594783][T12831]  ? __pfx_netlink_unicast+0x10/0x10
[  221.594807][T12831]  ? netlink_sendmsg+0x642/0xb30
[  221.594819][T12831]  ? skb_put+0x11b/0x210
[  221.594839][T12831]  netlink_sendmsg+0x805/0xb30
[  221.594857][T12831]  ? __pfx_netlink_sendmsg+0x10/0x10
[  221.594871][T12831]  ? aa_sock_msg_perm+0xf1/0x1d0
[  221.594888][T12831]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  221.594927][T12831]  ? __pfx_netlink_sendmsg+0x10/0x10
[  221.594943][T12831]  __sock_sendmsg+0x21c/0x270
[  221.594971][T12831]  ____sys_sendmsg+0x505/0x830
[  221.594996][T12831]  ? __pfx_____sys_sendmsg+0x10/0x10
[  221.595017][T12831]  ? import_iovec+0x74/0xa0
[  221.595029][T12831]  ___sys_sendmsg+0x21f/0x2a0
[  221.595040][T12831]  ? __pfx____sys_sendmsg+0x10/0x10
[  221.595068][T12831]  ? __fget_files+0x2a/0x420
[  221.595076][T12831]  ? __fget_files+0x3a0/0x420
[  221.595090][T12831]  __x64_sys_sendmsg+0x19b/0x260
[  221.595102][T12831]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  221.595117][T12831]  ? rcu_is_watching+0x15/0xb0
[  221.595130][T12831]  ? do_syscall_64+0xbe/0x3b0
[  221.595142][T12831]  do_syscall_64+0xfa/0x3b0
[  221.595151][T12831]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.595160][T12831]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  221.595172][T12831]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.595182][T12831] RIP: 0033:0x7fc4a0f8eba9
[  221.595191][T12831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  221.595198][T12831] RSP: 002b:00007fc4a1d5a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  221.595208][T12831] RAX: ffffffffffffffda RBX: 00007fc4a11d6090 RCX: 00007fc4a0f8eba9
[  221.595215][T12831] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000d
[  221.595222][T12831] RBP: 00007fc4a1011e19 R08: 0000000000000000 R09: 0000000000000000
[  221.595227][T12831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  221.595233][T12831] R13: 00007fc4a11d6128 R14: 00007fc4a11d6090 R15: 00007ffc05eff0a8
[  221.595248][T12831]  </TASK>
[  221.835585][T12836] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1733'.
[  221.844204][T12838] netlink: 'syz.2.1734': attribute type 9 has an invalid length.
[  221.887101][T12842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1735'.
[  222.008011][T12848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1737'.
[  222.173616][T12857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1739'.
[  222.177255][T12857] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1739'.
[  222.289634][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  222.488160][T12872] wg1 speed is unknown, defaulting to 1000
[  222.492879][T12872] lo speed is unknown, defaulting to 1000
[  222.496626][T12872] lo speed is unknown, defaulting to 1000
[  222.630084][T12881] wg1 speed is unknown, defaulting to 1000
[  222.634164][T12881] lo speed is unknown, defaulting to 1000
[  222.637998][T12881] lo speed is unknown, defaulting to 1000
[  222.698135][T12885] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1747'.
[  222.895745][T12901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1751'.
[  223.003131][T12902] netlink: 'syz.1.1752': attribute type 10 has an invalid length.
[  223.027962][T12902] !: entered promiscuous mode
[  223.033929][T12902] !: entered allmulticast mode
[  223.036493][T12902] bond0: (slave 0!): Enslaving as an active interface with an up link
[  223.329324][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  223.670738][T12901] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1751'.
[  223.784187][T12915] netlink: 'syz.0.1754': attribute type 9 has an invalid length.
[  223.848157][T12919] netlink: 91 bytes leftover after parsing attributes in process `syz.2.1756'.
[  223.897372][T12928] siw: device registration error -23
[  224.293517][T12968] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  224.369300][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  224.410695][T12970] wg1 speed is unknown, defaulting to 1000
[  224.416296][T12970] lo speed is unknown, defaulting to 1000
[  224.424439][T12970] lo speed is unknown, defaulting to 1000
[  225.216041][T12991] wg1 speed is unknown, defaulting to 1000
[  225.227629][T12991] lo speed is unknown, defaulting to 1000
[  225.245947][T12991] lo speed is unknown, defaulting to 1000
[  225.419283][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  225.490892][ T5880] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  225.494098][ T5880] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  225.497394][ T5880] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  225.502099][ T5880] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  225.844440][T13019] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  225.848856][T13019] syzkaller0: entered promiscuous mode
[  225.851884][T13019] syzkaller0: entered allmulticast mode
[  225.994070][T13027] wg1 speed is unknown, defaulting to 1000
[  225.996822][T13027] lo speed is unknown, defaulting to 1000
[  226.000815][T13027] lo speed is unknown, defaulting to 1000
[  226.449582][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  226.571734][T13069] __nla_validate_parse: 7 callbacks suppressed
[  226.571747][T13069] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1795'.
[  226.612487][T13074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1796'.
[  226.639718][T13074] syzkaller1: entered promiscuous mode
[  226.641797][T13074] syzkaller1: entered allmulticast mode
[  226.798232][T13085] wg1 speed is unknown, defaulting to 1000
[  226.810886][T13085] lo speed is unknown, defaulting to 1000
[  226.815879][T13085] lo speed is unknown, defaulting to 1000
[  227.126106][T13104] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1802'.
[  227.139758][T13106] netlink: 'syz.0.1803': attribute type 1 has an invalid length.
[  227.163522][T13106] 8021q: adding VLAN 0 to HW filter on device bond15
[  227.182040][T13106] bond15: (slave geneve4): making interface the new active one
[  227.187808][T13106] bond15: (slave geneve4): Enslaving as an active interface with an up link
[  227.191588][ T5860] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  227.194626][ T5860] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  227.207965][ T5860] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  227.218699][ T5860] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  227.428284][T13124] syzkaller0: entered promiscuous mode
[  227.431079][T13124] syzkaller0: entered allmulticast mode
[  227.489256][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  228.032979][T13146] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1811'.
[  228.539250][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  229.153663][T13161] netlink: 'syz.1.1817': attribute type 1 has an invalid length.
[  229.156453][T13161] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  229.197586][T13159] geneve3: entered promiscuous mode
[  229.264690][T13165] wg1 speed is unknown, defaulting to 1000
[  229.268644][T13165] lo speed is unknown, defaulting to 1000
[  229.273165][T13165] lo speed is unknown, defaulting to 1000
[  229.380963][T13169] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  229.569418][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  229.656225][T13186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1821'.
[  230.058849][T13195] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1823'.
[  230.217116][T13198] netlink: 'syz.0.1824': attribute type 29 has an invalid length.
[  230.223603][T13199] netlink: 'syz.0.1824': attribute type 29 has an invalid length.
[  230.561943][T13214] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  230.573902][T13214] syzkaller0: MTU too low for tipc bearer
[  230.576294][T13214] tipc: Disabling bearer <eth:syzkaller0>
[  230.600922][T13219] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  230.609639][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  230.613227][T13219] syzkaller0: entered promiscuous mode
[  230.614990][T13219] syzkaller0: entered allmulticast mode
[  230.737897][T13229] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1831'.
[  230.866566][T13243] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20000
[  230.953062][T13249] syzkaller1: entered promiscuous mode
[  230.954862][T13249] syzkaller1: entered allmulticast mode
[  231.099489][T13255] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1838'.
[  231.536655][T13260] bond0: (slave 0!): Releasing backup interface
[  231.539677][T13260] !: left promiscuous mode
[  231.541705][T13260] !: left allmulticast mode
[  231.547444][T13260] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  231.608271][T13261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1840'.
[  231.611970][T13261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1840'.
[  231.649435][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  231.735600][T13263] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1841'.
[  231.816997][T13265] wg1 speed is unknown, defaulting to 1000
[  231.822132][T13265] lo speed is unknown, defaulting to 1000
[  231.825754][T13265] lo speed is unknown, defaulting to 1000
[  232.090298][T13274] syz_tun: entered allmulticast mode
[  232.101030][T13275] dvmrp8: entered allmulticast mode
[  232.116093][T13275] syz_tun: left allmulticast mode
[  232.118293][T13275] dvmrp8: left allmulticast mode
[  232.228431][T13282] netlink: 'syz.2.1846': attribute type 39 has an invalid length.
[  232.233583][T13283] netlink: 'syz.0.1847': attribute type 16 has an invalid length.
[  232.236784][T13283] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1847'.
[  232.271562][T13283] wg1 speed is unknown, defaulting to 1000
[  232.276066][T13283] lo speed is unknown, defaulting to 1000
[  232.280571][T13283] lo speed is unknown, defaulting to 1000
[  232.617807][T13300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  232.668941][T13307] siw: device registration error -23
[  232.689447][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  232.876089][T13314] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1857'.
[  233.046094][T13320] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1859'.
[  233.347393][T13324] netlink: 'syz.0.1860': attribute type 10 has an invalid length.
[  233.453192][T13328] siw: device registration error -23
[  233.456258][T13328] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1861'.
[  233.729225][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  233.815186][T13336] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1863'.
[  233.944616][T13344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1865'.
[  234.716500][   T33] audit: type=1107 audit(1757931538.169:3): pid=13358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ߋSkUټc:7uDǍΓs,^h'
[  234.764571][T13364] netlink: 'syz.2.1870': attribute type 10 has an invalid length.
[  234.769352][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  234.797261][T13364] can: request_module (can-proto-5) failed.
[  235.052251][T13378] netlink: 'syz.1.1875': attribute type 9 has an invalid length.
[  235.232396][T13387] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1876'.
[  235.462380][T13404] syzkaller0: entered promiscuous mode
[  235.465021][T13404] syzkaller0: entered allmulticast mode
[  235.573030][T13407] netlink: 'syz.1.1882': attribute type 9 has an invalid length.
[  235.626379][T13409] netlink: 'syz.1.1883': attribute type 21 has an invalid length.
[  235.809363][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  236.849413][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  237.053043][T13437] ip6erspan0: entered promiscuous mode
[  237.109585][T13441] __nla_validate_parse: 8 callbacks suppressed
[  237.109601][T13441] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1891'.
[  237.308287][T13449] netlink: 'syz.1.1894': attribute type 9 has an invalid length.
[  237.367285][T13451] wg1 speed is unknown, defaulting to 1000
[  237.375385][T13451] lo speed is unknown, defaulting to 1000
[  237.379053][T13451] lo speed is unknown, defaulting to 1000
[  237.566445][T13456] netlink: 212364 bytes leftover after parsing attributes in process `syz.1.1896'.
[  237.572446][T13456] netlink: 'syz.1.1896': attribute type 1 has an invalid length.
[  237.575577][T13456] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1896'.
[  237.793525][T13465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1900'.
[  237.798813][T13468] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1899'.
[  237.864213][T13475] netlink: 'syz.2.1901': attribute type 4 has an invalid length.
[  237.874358][T13475] netlink: 'syz.2.1901': attribute type 4 has an invalid length.
[  237.889364][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  237.954273][T13480] syzkaller1: entered promiscuous mode
[  237.956682][T13480] syzkaller1: entered allmulticast mode
[  238.108969][T13489] wg1 speed is unknown, defaulting to 1000
[  238.115070][T13493] wg1 speed is unknown, defaulting to 1000
[  238.115210][T13489] lo speed is unknown, defaulting to 1000
[  238.124275][T13489] lo speed is unknown, defaulting to 1000
[  238.124279][T13493] lo speed is unknown, defaulting to 1000
[  238.141377][T13493] lo speed is unknown, defaulting to 1000
[  238.658357][T13516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1912'.
[  238.665686][T13516] netlink: 'syz.0.1912': attribute type 30 has an invalid length.
[  238.685965][ T5860] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  238.689038][ T5860] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  238.696119][ T5860] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  238.700322][T13520] syz_tun: entered allmulticast mode
[  238.704113][ T5860] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  238.717006][T13520] dvmrp8: entered allmulticast mode
[  238.752040][T13520] wg1 speed is unknown, defaulting to 1000
[  238.757588][T13520] lo speed is unknown, defaulting to 1000
[  238.763736][T13520] lo speed is unknown, defaulting to 1000
[  238.904182][T13520] syz_tun: left allmulticast mode
[  238.906314][T13520] dvmrp8: left allmulticast mode
[  238.929326][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  239.665878][T13551] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1921'.
[  239.677954][T13551] IPVS: ip_vs_edit_dest(): server weight less than zero
[  239.721905][T13556] netlink: 'syz.0.1922': attribute type 9 has an invalid length.
[  239.785764][T13559] wg1 speed is unknown, defaulting to 1000
[  239.792916][T13559] lo speed is unknown, defaulting to 1000
[  239.796917][T13559] lo speed is unknown, defaulting to 1000
[  239.962436][T13564] netlink: 'syz.2.1924': attribute type 3 has an invalid length.
[  239.965537][T13564] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1924'.
[  239.968966][T13564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1924'.
[  239.971934][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  240.236232][T13580] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  240.286544][T13585] wg1 speed is unknown, defaulting to 1000
[  240.294373][T13585] lo speed is unknown, defaulting to 1000
[  240.298237][T13585] lo speed is unknown, defaulting to 1000
[  240.544373][T13609] sctp: [Deprecated]: syz.2.1935 (pid 13609) Use of struct sctp_assoc_value in delayed_ack socket option.
[  240.544373][T13609] Use struct sctp_sack_info instead
[  240.564309][T13605] wg1 speed is unknown, defaulting to 1000
[  240.568519][T13605] lo speed is unknown, defaulting to 1000
[  240.583774][T13605] lo speed is unknown, defaulting to 1000
[  240.615977][T13615] xt_l2tp: missing protocol rule (udp|l2tpip)
[  240.657942][T13605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1934'.
[  241.009367][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  241.051038][T13640] netlink: 'syz.1.1944': attribute type 10 has an invalid length.
[  241.054357][T13640] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  241.557101][T13666] netlink: 'syz.2.1951': attribute type 3 has an invalid length.
[  241.868559][T13681] macvlan7: entered promiscuous mode
[  241.977179][T13686] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  241.997650][T13686] wg1 speed is unknown, defaulting to 1000
[  242.007741][T13686] lo speed is unknown, defaulting to 1000
[  242.012460][T13686] lo speed is unknown, defaulting to 1000
[  242.049391][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  242.130278][    C0] TC_ACT_REPEAT abuse ?
[  242.133210][    C0] TC_ACT_REPEAT abuse ?
[  242.238837][T13691] __nla_validate_parse: 3 callbacks suppressed
[  242.238858][T13691] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1958'.
[  242.290340][    C1] TC_ACT_REPEAT abuse ?
[  242.464177][T13701] wg1 speed is unknown, defaulting to 1000
[  242.467004][T13701] lo speed is unknown, defaulting to 1000
[  242.471849][T13701] lo speed is unknown, defaulting to 1000
[  242.518192][T13703] wg1 speed is unknown, defaulting to 1000
[  242.523442][T13703] lo speed is unknown, defaulting to 1000
[  242.527299][T13703] lo speed is unknown, defaulting to 1000
[  242.606135][T13707] wg1 speed is unknown, defaulting to 1000
[  242.617128][T13707] lo speed is unknown, defaulting to 1000
[  242.620623][T13707] lo speed is unknown, defaulting to 1000
[  242.991169][T13724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1967'.
[  243.089428][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  243.095081][T13730] netlink: 'syz.1.1969': attribute type 21 has an invalid length.
[  243.103432][T13730] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1969'.
[  243.111979][T13730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1969'.
[  243.114934][T13730] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1969'.
[  243.118346][T13730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1969'.
[  243.162494][T13732] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1970'.
[  243.194422][T13738] wg1 speed is unknown, defaulting to 1000
[  243.198185][T13738] lo speed is unknown, defaulting to 1000
[  243.203581][T13738] lo speed is unknown, defaulting to 1000
[  243.332054][ T5858] Bluetooth: hci2: command 0x0406 tx timeout
[  243.475138][T13766] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1978'.
[  243.546098][T13765] wg1 speed is unknown, defaulting to 1000
[  243.548740][T13765] lo speed is unknown, defaulting to 1000
[  243.556080][T13765] lo speed is unknown, defaulting to 1000
[  243.574234][T13773] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1974'.
[  243.577828][T13773] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1974'.
[  243.593407][T13773] netlink: 'syz.0.1974': attribute type 5 has an invalid length.
[  243.721107][T13781] netlink: 'syz.2.1981': attribute type 2 has an invalid length.
[  243.970088][T13792] wg1 speed is unknown, defaulting to 1000
[  243.976681][T13792] lo speed is unknown, defaulting to 1000
[  243.981761][T13792] lo speed is unknown, defaulting to 1000
[  244.088935][T13800] dvmrp0: left allmulticast mode
[  244.129382][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  244.270967][T13809] wg1 speed is unknown, defaulting to 1000
[  244.283514][T13809] lo speed is unknown, defaulting to 1000
[  244.287062][T13809] lo speed is unknown, defaulting to 1000
[  244.295628][T13817] netlink: 'syz.0.1992': attribute type 6 has an invalid length.
[  244.302640][T13817] IPv6: NLM_F_CREATE should be specified when creating new route
[  244.323383][T13823] netlink: 'syz.1.1993': attribute type 9 has an invalid length.
[  244.396250][T13828] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  244.420798][T13830] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma?
[  244.453359][T13832] delete_channel: no stack
[  244.496727][T13832] wg1 speed is unknown, defaulting to 1000
[  244.502263][T13832] lo speed is unknown, defaulting to 1000
[  244.505228][T13832] lo speed is unknown, defaulting to 1000
[  244.545536][T13835] can: request_module (can-proto-3) failed.
[  244.758764][T13849] sch_tbf: burst 5 is lower than device lo mtu (81) !
[  244.778313][T13851] netlink: 'syz.2.2001': attribute type 10 has an invalid length.
[  244.795650][T13849] veth9: entered promiscuous mode
[  244.806198][T13849] siw: device registration error -23
[  245.169497][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  246.209357][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  247.249453][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  248.289399][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  249.329423][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  250.369399][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  251.409401][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  252.449352][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  253.499390][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  254.539384][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  255.572587][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  256.619327][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  257.649454][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  258.689372][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  259.729479][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  260.769422][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  261.809422][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  262.849423][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  263.889372][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  264.929346][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  265.970130][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  267.009435][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  268.059429][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  269.099407][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  270.139391][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  271.179401][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  272.209655][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  273.249489][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  274.289411][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  275.329449][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  276.369446][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  277.409483][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  278.449427][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  279.489367][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  280.475492][T13868] __nla_validate_parse: 5 callbacks suppressed
[  280.475502][T13868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2005'.
[  280.529463][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  280.588101][T13878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2008'.
[  280.589675][T13877] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  280.654967][T13883] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2009'.
[  280.736568][T13890] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2011'.
[  280.801841][T13898] lo: entered allmulticast mode
[  280.809634][T13898] lo: left allmulticast mode
[  280.817327][T13890] wg1 speed is unknown, defaulting to 1000
[  280.820681][T13898] netlink: 'syz.1.2013': attribute type 4 has an invalid length.
[  280.821602][T13890] lo speed is unknown, defaulting to 1000
[  280.823642][T13898] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2013'.
[  280.827418][T13890] lo speed is unknown, defaulting to 1000
[  280.858223][T13898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2013'.
[  280.858267][T13899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2013'.
[  281.015842][T13914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2019'.
[  281.040218][T13914] wg1 speed is unknown, defaulting to 1000
[  281.044349][T13914] lo speed is unknown, defaulting to 1000
[  281.047024][T13914] lo speed is unknown, defaulting to 1000
[  281.125925][T13924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2022'.
[  281.131881][T13924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2022'.
[  281.394881][T13941] netlink: 'syz.2.2026': attribute type 1 has an invalid length.
[  281.413310][T13941] 8021q: adding VLAN 0 to HW filter on device bond10
[  281.462583][T13946] wg1 speed is unknown, defaulting to 1000
[  281.465318][T13946] lo speed is unknown, defaulting to 1000
[  281.467903][T13946] lo speed is unknown, defaulting to 1000
[  281.493233][T13947] netlink: 'syz.1.2027': attribute type 5 has an invalid length.
[  281.522473][T13946] wg1 speed is unknown, defaulting to 1000
[  281.525186][T13946] lo speed is unknown, defaulting to 1000
[  281.528068][T13946] lo speed is unknown, defaulting to 1000
[  281.569405][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  281.608514][T13946] wg1 speed is unknown, defaulting to 1000
[  281.611667][T13946] lo speed is unknown, defaulting to 1000
[  281.614307][T13946] lo speed is unknown, defaulting to 1000
[  281.668731][T13946] wg1 speed is unknown, defaulting to 1000
[  281.672503][T13946] lo speed is unknown, defaulting to 1000
[  281.675968][T13946] lo speed is unknown, defaulting to 1000
[  281.728117][T13946] wg1 speed is unknown, defaulting to 1000
[  281.731291][T13946] lo speed is unknown, defaulting to 1000
[  281.733887][T13946] lo speed is unknown, defaulting to 1000
[  281.784032][T13946] wg1 speed is unknown, defaulting to 1000
[  281.787894][T13946] lo speed is unknown, defaulting to 1000
[  281.790856][T13946] lo speed is unknown, defaulting to 1000
[  281.969736][T13946] wg1 speed is unknown, defaulting to 1000
[  281.973471][T13946] lo speed is unknown, defaulting to 1000
[  281.979574][T13946] lo speed is unknown, defaulting to 1000
[  282.055772][T13946] wg1 speed is unknown, defaulting to 1000
[  282.065243][T13946] lo speed is unknown, defaulting to 1000
[  282.068959][T13946] lo speed is unknown, defaulting to 1000
[  282.215188][T13946] wg1 speed is unknown, defaulting to 1000
[  282.219884][T13946] lo speed is unknown, defaulting to 1000
[  282.224745][T13946] lo speed is unknown, defaulting to 1000
[  282.298331][T13974] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  282.446556][T13979] batadv0: entered promiscuous mode
[  282.448886][T13979] batadv0: entered allmulticast mode
[  282.490241][T13980] batadv0: entered promiscuous mode
[  282.492423][T13980] batadv0: entered allmulticast mode
[  282.612234][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  282.809668][T13992] netlink: 'syz.1.2037': attribute type 10 has an invalid length.
[  282.827513][T13992] !: entered promiscuous mode
[  282.831223][T13992] !: entered allmulticast mode
[  282.833471][T13992] bond0: (slave 0!): Enslaving as an active interface with an up link
[  283.095580][T14027] netlink: 'syz.2.2046': attribute type 5 has an invalid length.
[  283.129089][T14024] IPVS: set_ctl: invalid protocol: 44 172.20.20.42:20000
[  283.135952][T14024] netlink: 'syz.1.2047': attribute type 4 has an invalid length.
[  283.139847][T14024] netlink: 'syz.1.2047': attribute type 1 has an invalid length.
[  283.142409][T14024] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  283.436115][T14057] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  283.628806][T14077] wg1 speed is unknown, defaulting to 1000
[  283.636131][T14077] lo speed is unknown, defaulting to 1000
[  283.642378][T14077] lo speed is unknown, defaulting to 1000
[  283.649547][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  283.771078][T14083] netlink: 'syz.0.2062': attribute type 10 has an invalid length.
[  283.798279][T14083] bond16: entered promiscuous mode
[  283.801042][T14083] bond16: entered allmulticast mode
[  283.803449][T14083] 8021q: adding VLAN 0 to HW filter on device bond16
[  283.896493][T14083] bond16 (unregistering): Released all slaves
[  284.001679][T14096] netlink: 'syz.0.2065': attribute type 9 has an invalid length.
[  284.048082][T14098] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  284.064275][T14098] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  284.068288][T14098] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.126769][T14098] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  284.131404][T14098] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.194654][T14098] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  284.198741][T14098] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.236953][T14098] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  284.241044][T14098] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.314333][ T5860] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  284.318182][ T5860] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  284.330803][ T5881] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  284.335269][ T5881] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  284.353467][ T5881] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  284.356839][ T5881] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  284.368001][ T5881] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  284.372187][ T5881] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  284.593742][T14105] nbd: must specify an index to disconnect
[  284.667524][T14108] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  284.676895][T14108] syzkaller0: entered promiscuous mode
[  284.678659][T14108] syzkaller0: entered allmulticast mode
[  284.689371][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  284.697478][T14108] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  284.729297][T14108] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) !
[  284.736887][T14108] tipc: Resetting bearer <eth:syzkaller0>
[  284.750541][T14110] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  284.783126][T14107] tipc: Resetting bearer <eth:syzkaller0>
[  284.803691][T14107] tipc: Disabling bearer <eth:syzkaller0>
[  284.818964][T14112] netlink: 'syz.2.2072': attribute type 9 has an invalid length.
[  285.000758][T14136] wg1 speed is unknown, defaulting to 1000
[  285.003784][T14136] lo speed is unknown, defaulting to 1000
[  285.006444][T14136] lo speed is unknown, defaulting to 1000
[  285.054321][T14134] wg1 speed is unknown, defaulting to 1000
[  285.109005][T14134] lo speed is unknown, defaulting to 1000
[  285.120301][T14134] lo speed is unknown, defaulting to 1000
[  285.300287][T14145] 8021q: adding VLAN 0 to HW filter on device bond9
[  285.491356][T14157] __nla_validate_parse: 30 callbacks suppressed
[  285.491371][T14157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2083'.
[  285.562998][T14161] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2085'.
[  285.641915][T14163] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2084'.
[  285.822656][T14177] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  286.082904][T14191] syz_tun: entered allmulticast mode
[  286.093634][T14191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2092'.
[  286.095266][T14194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2093'.
[  286.195355][T14191] tipc: Disabling bearer <eth:team0>
[  286.270119][T14191] syz_tun: left allmulticast mode
[  286.442877][T14215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2097'.
[  286.446447][T14215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2097'.
[  286.576530][T14222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2101'.
[  286.580811][T14222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2101'.
[  286.656563][T14224] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2102'.
[  287.364346][T14240] validate_nla: 6 callbacks suppressed
[  287.364357][T14240] netlink: 'syz.0.2106': attribute type 7 has an invalid length.
[  287.435180][T14243] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-tlb(5)
[  287.445330][T14243] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-tlb(5)
[  287.732971][T14258] netlink: 'syz.1.2112': attribute type 12 has an invalid length.
[  287.859724][T14271] IPVS: rr: FWM 3 0x00000003 - no destination available
[  287.961372][T14277] wg1 speed is unknown, defaulting to 1000
[  287.965188][T14277] lo speed is unknown, defaulting to 1000
[  287.968845][T14277] lo speed is unknown, defaulting to 1000
[  288.689471][ T5854] Bluetooth: hci2: command 0x0406 tx timeout
[  288.934354][T14336] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  288.937095][T14334] syzkaller0: entered promiscuous mode
[  288.940833][T14334] syzkaller0: entered allmulticast mode
[  288.946391][T14335] tipc: Resetting bearer <eth:syzkaller0>
[  288.949106][T14333] tipc: Resetting bearer <eth:syzkaller0>
[  288.961274][T14333] tipc: Disabling bearer <eth:syzkaller0>
[  289.158281][T14340] wg1 speed is unknown, defaulting to 1000
[  289.162420][T14340] lo speed is unknown, defaulting to 1000
[  289.165403][T14340] lo speed is unknown, defaulting to 1000
[  289.331294][T14351] wg1 speed is unknown, defaulting to 1000
[  289.334128][T14351] lo speed is unknown, defaulting to 1000
[  289.336882][T14351] lo speed is unknown, defaulting to 1000
[  289.824434][T14364] macvlan8: entered allmulticast mode
[  289.826417][T14364] hsr0: entered allmulticast mode
[  289.828262][T14364] hsr_slave_0: entered allmulticast mode
[  289.831895][T14364] hsr_slave_1: entered allmulticast mode
[  289.835569][T14364] hsr0: left allmulticast mode
[  289.837549][T14364] hsr_slave_0: left allmulticast mode
[  289.839922][T14364] hsr_slave_1: left allmulticast mode
[  290.037446][T14372] netlink: 'syz.0.2139': attribute type 9 has an invalid length.
[  290.134943][T14376] wg1 speed is unknown, defaulting to 1000
[  290.137670][T14376] lo speed is unknown, defaulting to 1000
[  290.142776][T14376] lo speed is unknown, defaulting to 1000
[  290.302891][T14387] netlink: 'syz.0.2143': attribute type 4 has an invalid length.
[  290.310235][ T5901] lo speed is unknown, defaulting to 1000
[  290.312685][ T5901] syz2: Port: 1 Link DOWN
[  290.314656][T14387] netlink: 'syz.0.2143': attribute type 4 has an invalid length.
[  290.322856][ T5901] lo speed is unknown, defaulting to 1000
[  290.325324][ T5901] syz2: Port: 1 Link ACTIVE
[  290.337720][T14387] netlink: 'syz.0.2143': attribute type 1 has an invalid length.
[  290.497952][T14394] sctp: [Deprecated]: syz.2.2146 (pid 14394) Use of struct sctp_assoc_value in delayed_ack socket option.
[  290.497952][T14394] Use struct sctp_sack_info instead
[  290.537049][T14396] netlink: 'syz.2.2147': attribute type 9 has an invalid length.
[  290.571742][T14398] bond0: Device is already in use.
[  290.614244][T14405] ": renamed from ip6erspan0
[  290.707998][T14412] wg1 speed is unknown, defaulting to 1000
[  290.716027][T14412] lo speed is unknown, defaulting to 1000
[  290.723330][T14412] lo speed is unknown, defaulting to 1000
[  290.812828][T14414] wg1 speed is unknown, defaulting to 1000
[  290.818247][T14414] lo speed is unknown, defaulting to 1000
[  290.831389][T14414] lo speed is unknown, defaulting to 1000
[  290.914880][T14421] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  290.965520][T14425] netlink: 'syz.2.2155': attribute type 9 has an invalid length.
[  291.140577][T14434] sch_tbf: burst 5 is lower than device lo mtu (11337746) !
[  291.157635][T14435] syzkaller1: entered promiscuous mode
[  291.161601][T14435] syzkaller1: entered allmulticast mode
[  291.377062][T14454] netlink: 'syz.0.2163': attribute type 1 has an invalid length.
[  291.407511][T14454] 8021q: adding VLAN 0 to HW filter on device bond16
[  291.424992][T14454] ipvlan2: entered allmulticast mode
[  291.439784][T14454] bond16: entered allmulticast mode
[  291.530709][T14466] can: request_module (can-proto-5) failed.
[  291.566226][T14473] netlink: 'syz.1.2168': attribute type 9 has an invalid length.
[  291.575944][ T5858] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  291.697023][T14481] __nla_validate_parse: 13 callbacks suppressed
[  291.697041][T14481] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2171'.
[  291.776580][T14484] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2172'.
[  291.780164][T14484] NCSI netlink: No device for ifindex 813332851
[  291.803972][T14484] wg1 speed is unknown, defaulting to 1000
[  291.807553][T14484] lo speed is unknown, defaulting to 1000
[  291.817255][T14484] lo speed is unknown, defaulting to 1000
[  291.879120][T14492] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4.
[  292.058364][T14496] wg1 speed is unknown, defaulting to 1000
[  292.083580][T14496] lo speed is unknown, defaulting to 1000
[  292.086334][T14496] lo speed is unknown, defaulting to 1000
[  292.131668][T14507] wg1 speed is unknown, defaulting to 1000
[  292.146118][T14507] lo speed is unknown, defaulting to 1000
[  292.158290][T14507] lo speed is unknown, defaulting to 1000
[  292.252063][T14511] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.2179'.
[  292.296043][T14514] bond17: (slave vxcan3): The slave device specified does not support setting the MAC address
[  292.304390][T14514] bond17: (slave vxcan3): Error -95 calling set_mac_address
[  292.363011][T14518] bond17: (slave bridge10): Enslaving as an active interface with a down link
[  292.380210][T14514] macvlan9: entered promiscuous mode
[  292.382355][T14514] macvlan9: entered allmulticast mode
[  292.385096][T14514] bond17: entered promiscuous mode
[  292.387785][T14514] 8021q: adding VLAN 0 to HW filter on device macvlan9
[  292.393397][T14514] bond17: left promiscuous mode
[  293.215672][T14534] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2182'.
[  294.125460][T14542] validate_nla: 3 callbacks suppressed
[  294.125479][T14542] netlink: 'syz.1.2184': attribute type 9 has an invalid length.
[  294.244470][T14550] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  294.296851][T14554] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2185'.
[  294.303089][T14554] openvswitch: netlink: Flow key attr not present in new flow.
[  294.327380][T14553] wg1 speed is unknown, defaulting to 1000
[  294.333004][T14553] lo speed is unknown, defaulting to 1000
[  294.336813][T14553] lo speed is unknown, defaulting to 1000
[  294.522284][T14561] wg1 speed is unknown, defaulting to 1000
[  294.526997][T14561] lo speed is unknown, defaulting to 1000
[  294.532654][T14561] lo speed is unknown, defaulting to 1000
[  294.565797][T14562] netlink: 'syz.0.2190': attribute type 12 has an invalid length.
[  294.570112][T14562] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.2190'.
[  294.781882][T14570] wg1 speed is unknown, defaulting to 1000
[  294.785624][T14570] lo speed is unknown, defaulting to 1000
[  294.789547][T14570] lo speed is unknown, defaulting to 1000
[  294.841131][T14581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2194'.
[  294.850240][T14581] netlink: 'syz.2.2194': attribute type 1 has an invalid length.
[  294.854482][T14581] netlink: 'syz.2.2194': attribute type 2 has an invalid length.
[  294.878067][T14570] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2192'.
[  294.908069][T14586] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2196'.
[  294.911568][T14586] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2196'.
[  295.057256][T14590] tc_dump_action: action bad kind
[  295.076977][T14590] syzkaller1: entered promiscuous mode
[  295.078674][T14590] syzkaller1: entered allmulticast mode
[  295.750793][T14595] wg1 speed is unknown, defaulting to 1000
[  295.753557][T14595] lo speed is unknown, defaulting to 1000
[  295.756642][T14595] lo speed is unknown, defaulting to 1000
[  296.240480][T14629] netlink: 'syz.2.2209': attribute type 1 has an invalid length.
[  296.267130][T14629] bond11: entered promiscuous mode
[  296.270687][T14629] 8021q: adding VLAN 0 to HW filter on device bond11
[  296.280840][T14636] netlink: 'syz.2.2209': attribute type 1 has an invalid length.
[  296.331349][T14639] wg1 speed is unknown, defaulting to 1000
[  296.334604][T14639] lo speed is unknown, defaulting to 1000
[  296.338735][T14639] lo speed is unknown, defaulting to 1000
[  296.384460][T14645] wg1 speed is unknown, defaulting to 1000
[  296.387979][T14644] netlink: 'syz.2.2213': attribute type 13 has an invalid length.
[  296.392859][T14644] netlink: 'syz.2.2213': attribute type 17 has an invalid length.
[  296.435390][T14645] lo speed is unknown, defaulting to 1000
[  296.453680][T14644] 8021q: adding VLAN 0 to HW filter on device bond0
[  296.458280][T14644] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  296.486145][T14645] lo speed is unknown, defaulting to 1000
[  296.607940][T14665] can: request_module (can-proto-0) failed.
[  296.633439][T14668] wg1 speed is unknown, defaulting to 1000
[  296.637128][T14668] lo speed is unknown, defaulting to 1000
[  296.640191][T14668] lo speed is unknown, defaulting to 1000
[  297.141262][T14688] geneve5: entered promiscuous mode
[  297.153653][ T5881] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  297.158497][ T5881] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  297.163840][ T5881] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  297.167977][ T5881] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  297.382931][T14694] wg1 speed is unknown, defaulting to 1000
[  297.386670][T14694] lo speed is unknown, defaulting to 1000
[  297.406734][T14696] __nla_validate_parse: 39 callbacks suppressed
[  297.406752][T14696] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2225'.
[  297.408948][T14694] lo speed is unknown, defaulting to 1000
[  297.661828][T14710] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2229'.
[  297.665329][T14710] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2229'.
[  298.116961][T14715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2230'.
[  298.238335][T14719] netlink: 'syz.1.2232': attribute type 1 has an invalid length.
[  298.263411][T14719] 8021q: adding VLAN 0 to HW filter on device bond10
[  298.270200][T14719] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2232'.
[  298.488962][T14731] pimreg: entered allmulticast mode
[  298.502797][T14731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2236'.
[  298.586803][T14739] netlink: 'syz.2.2238': attribute type 9 has an invalid length.
[  298.654873][T14741] 8021q: adding VLAN 0 to HW filter on device bond12
[  298.664741][T14746] IPv6: Can't replace route, no match found
[  298.860191][T14763] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2244'.
[  298.863616][T14763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2244'.
[  298.891072][T14763] gretap0: entered promiscuous mode
[  298.895999][T14763] gretap0: left promiscuous mode
[  298.937562][T14766] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  299.257844][T14783] wg1 speed is unknown, defaulting to 1000
[  299.267172][T14783] lo speed is unknown, defaulting to 1000
[  299.274106][T14783] lo speed is unknown, defaulting to 1000
[  299.418909][T14794] bridge11: entered promiscuous mode
[  299.421816][T14794] bridge11: entered allmulticast mode
[  299.432382][T14793] bridge12: entered promiscuous mode
[  299.435028][T14793] bridge12: entered allmulticast mode
[  299.496441][T14797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2253'.
[  299.575916][T14801] nbd: nbd0 already in use
[  299.581540][T14801] block nbd0: NBD_DISCONNECT
[  299.583442][T14801] block nbd0: Send disconnect failed -32
[  299.600388][T14801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2254'.
[  299.734637][T14809] validate_nla: 3 callbacks suppressed
[  299.734664][T14809] netlink: 'syz.0.2257': attribute type 6 has an invalid length.
[  299.743540][T14809] netlink: 'syz.0.2257': attribute type 6 has an invalid length.
[  299.915901][T14813] wg1 speed is unknown, defaulting to 1000
[  299.918820][T14813] lo speed is unknown, defaulting to 1000
[  299.923584][T14813] lo speed is unknown, defaulting to 1000
[  300.486097][T14845] wg1 speed is unknown, defaulting to 1000
[  300.490818][T14845] lo speed is unknown, defaulting to 1000
[  300.495017][T14845] lo speed is unknown, defaulting to 1000
[  300.666460][T14850] netlink: 'syz.2.2268': attribute type 8 has an invalid length.
[  301.923238][T14887] wg1 speed is unknown, defaulting to 1000
[  301.926271][T14887] lo speed is unknown, defaulting to 1000
[  301.941796][T14887] lo speed is unknown, defaulting to 1000
[  302.281344][T14895] 8021q: VLANs not supported on caif0
[  302.402744][T14908] netlink: 'syz.2.2283': attribute type 58 has an invalid length.
[  302.411719][T14908] __nla_validate_parse: 7 callbacks suppressed
[  302.411737][T14908] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2283'.
[  302.457776][T14910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2284'.
[  302.467170][T14910] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  302.470066][T14910] IPv6: NLM_F_CREATE should be set when creating new route
[  302.473100][T14910] IPv6: NLM_F_CREATE should be set when creating new route
[  302.731726][T14931] sctp: [Deprecated]: syz.0.2290 (pid 14931) Use of int in max_burst socket option.
[  302.731726][T14931] Use struct sctp_assoc_value instead
[  303.506929][T14950] netlink: 'syz.1.2295': attribute type 9 has an invalid length.
[  303.596452][T14953] wg1 speed is unknown, defaulting to 1000
[  303.601286][T14953] lo speed is unknown, defaulting to 1000
[  303.604169][T14953] lo speed is unknown, defaulting to 1000
[  303.690505][T14954] wg1 speed is unknown, defaulting to 1000
[  303.693752][T14954] lo speed is unknown, defaulting to 1000
[  303.696587][T14954] lo speed is unknown, defaulting to 1000
[  303.699039][T14957] wg1 speed is unknown, defaulting to 1000
[  303.702264][T14957] lo speed is unknown, defaulting to 1000
[  303.707381][T14957] lo speed is unknown, defaulting to 1000
[  303.997155][T14983] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  304.001756][T14983] syzkaller0: entered promiscuous mode
[  304.003680][T14983] syzkaller0: entered allmulticast mode
[  304.010548][T14983] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  304.038055][T14983] tipc: Resetting bearer <eth:syzkaller0>
[  304.084988][T14981] tipc: Resetting bearer <eth:syzkaller0>
[  304.103482][T14981] tipc: Disabling bearer <eth:syzkaller0>
[  304.223659][T14989] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2307'.
[  304.256352][T14991] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2308'.
[  304.324776][T14991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2308'.
[  304.449466][T15005] vlan3: entered promiscuous mode
[  304.451113][T15005] veth1_to_bridge: entered promiscuous mode
[  304.487578][T15008] wg1 speed is unknown, defaulting to 1000
[  304.494708][T15008] lo speed is unknown, defaulting to 1000
[  304.498803][T15008] lo speed is unknown, defaulting to 1000
[  304.880702][T15035] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2321'.
[  305.081527][T15048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2324'.
[  305.084403][T15048] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2324'.
[  305.087613][T15048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2324'.
[  305.092613][T15048] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2324'.
[  305.678574][T15063] tipc: Invalid UDP bearer configuration
[  305.678607][T15063] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  306.848434][ T5901] lo speed is unknown, defaulting to 1000
[  306.848480][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  306.851952][ T5901] syz2: Port: 1 Link DOWN
[  306.853189][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  306.857044][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  306.861100][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  306.863733][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  306.866381][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  306.868976][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  306.871961][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  307.052475][T15098] wg1 speed is unknown, defaulting to 1000
[  307.056526][T15098] lo speed is unknown, defaulting to 1000
[  307.061918][T15098] lo speed is unknown, defaulting to 1000
[  307.751471][T15095] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  307.823681][T15121] wg1 speed is unknown, defaulting to 1000
[  307.827298][T15121] lo speed is unknown, defaulting to 1000
[  307.830678][T15121] lo speed is unknown, defaulting to 1000
[  307.863387][T15123] netlink: 'syz.1.2339': attribute type 1 has an invalid length.
[  307.916283][T15121] wg1 speed is unknown, defaulting to 1000
[  307.920404][T15121] lo speed is unknown, defaulting to 1000
[  307.924086][T15121] lo speed is unknown, defaulting to 1000
[  308.348254][T15134] wg1 speed is unknown, defaulting to 1000
[  308.360150][T15134] lo speed is unknown, defaulting to 1000
[  308.366166][T15134] lo speed is unknown, defaulting to 1000
[  308.379803][T15141] __nla_validate_parse: 12 callbacks suppressed
[  308.379824][T15141] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2343'.
[  308.586906][T15149] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  308.592778][T15149] CPU: 1 UID: 0 PID: 15149 Comm: syz.2.2344 Not tainted syzkaller #0 PREEMPT(full) 
[  308.592797][T15149] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  308.592806][T15149] Call Trace:
[  308.592820][T15149]  <TASK>
[  308.592827][T15149]  dump_stack_lvl+0x189/0x250
[  308.592851][T15149]  ? __pfx_dump_stack_lvl+0x10/0x10
[  308.592865][T15149]  ? __pfx__printk+0x10/0x10
[  308.592885][T15149]  ? kernfs_path_from_node+0x2f/0x290
[  308.592898][T15149]  ? kernfs_path_from_node+0x250/0x290
[  308.592909][T15149]  ? kernfs_path_from_node+0x2f/0x290
[  308.592925][T15149]  sysfs_warn_dup+0x8e/0xa0
[  308.592939][T15149]  sysfs_do_create_link_sd+0xc0/0x110
[  308.592955][T15149]  device_add_class_symlinks+0x1cf/0x240
[  308.593000][T15149]  device_add+0x475/0xb50
[  308.593016][T15149]  wiphy_register+0x1ba6/0x28d0
[  308.593041][T15149]  ? __pfx_wiphy_register+0x10/0x10
[  308.593052][T15149]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  308.593074][T15149]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  308.593094][T15149]  ieee80211_register_hw+0x3484/0x4100
[  308.593122][T15149]  ? ieee80211_register_hw+0x1471/0x4100
[  308.593144][T15149]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  308.593165][T15149]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  308.593186][T15149]  ? __hrtimer_setup+0x187/0x210
[  308.593198][T15149]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  308.593221][T15149]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  308.593264][T15149]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  308.593281][T15149]  ? trace_kmalloc+0x1f/0xd0
[  308.593296][T15149]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  308.593314][T15149]  ? kstrndup+0xbf/0x160
[  308.593337][T15149]  hwsim_new_radio_nl+0xea4/0x1b10
[  308.593357][T15149]  ? __pfx___nla_validate_parse+0x10/0x10
[  308.593390][T15149]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  308.593419][T15149]  ? __nla_parse+0x40/0x60
[  308.593435][T15149]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  308.593460][T15149]  genl_family_rcv_msg_doit+0x215/0x300
[  308.593484][T15149]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  308.593514][T15149]  ? bpf_lsm_capable+0x9/0x20
[  308.593530][T15149]  ? security_capable+0x7e/0x2e0
[  308.593556][T15149]  genl_rcv_msg+0x60e/0x790
[  308.593579][T15149]  ? __pfx_genl_rcv_msg+0x10/0x10
[  308.593595][T15149]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  308.593625][T15149]  netlink_rcv_skb+0x208/0x470
[  308.593637][T15149]  ? __lock_acquire+0xab9/0xd20
[  308.593657][T15149]  ? __pfx_genl_rcv_msg+0x10/0x10
[  308.593675][T15149]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  308.593704][T15149]  ? down_read+0x1ad/0x2e0
[  308.593723][T15149]  genl_rcv+0x28/0x40
[  308.593738][T15149]  netlink_unicast+0x82f/0x9e0
[  308.593765][T15149]  ? __pfx_netlink_unicast+0x10/0x10
[  308.593787][T15149]  ? netlink_sendmsg+0x642/0xb30
[  308.593799][T15149]  ? skb_put+0x11b/0x210
[  308.593823][T15149]  netlink_sendmsg+0x805/0xb30
[  308.593846][T15149]  ? __pfx_netlink_sendmsg+0x10/0x10
[  308.593863][T15149]  ? aa_sock_msg_perm+0xf1/0x1d0
[  308.593878][T15149]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  308.593893][T15149]  ? __pfx_netlink_sendmsg+0x10/0x10
[  308.593908][T15149]  __sock_sendmsg+0x21c/0x270
[  308.593930][T15149]  ____sys_sendmsg+0x505/0x830
[  308.593951][T15149]  ? __pfx_____sys_sendmsg+0x10/0x10
[  308.594003][T15149]  ? import_iovec+0x74/0xa0
[  308.594023][T15149]  ___sys_sendmsg+0x21f/0x2a0
[  308.594041][T15149]  ? __pfx____sys_sendmsg+0x10/0x10
[  308.594093][T15149]  ? __fget_files+0x2a/0x420
[  308.594105][T15149]  ? __fget_files+0x3a0/0x420
[  308.594126][T15149]  __x64_sys_sendmsg+0x19b/0x260
[  308.594144][T15149]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  308.594172][T15149]  ? rcu_is_watching+0x15/0xb0
[  308.594191][T15149]  ? do_syscall_64+0xbe/0x3b0
[  308.594210][T15149]  do_syscall_64+0xfa/0x3b0
[  308.594223][T15149]  ? lockdep_hardirqs_on+0x9c/0x150
[  308.594237][T15149]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.594253][T15149]  ? exc_page_fault+0x9f/0xf0
[  308.594269][T15149]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.594281][T15149] RIP: 0033:0x7f3d2738eba9
[  308.594295][T15149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  308.594307][T15149] RSP: 002b:00007f3d2824a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  308.594322][T15149] RAX: ffffffffffffffda RBX: 00007f3d275d6180 RCX: 00007f3d2738eba9
[  308.594331][T15149] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000012
[  308.594340][T15149] RBP: 00007f3d27411e19 R08: 0000000000000000 R09: 0000000000000000
[  308.594347][T15149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  308.594355][T15149] R13: 00007f3d275d6218 R14: 00007f3d275d6180 R15: 00007ffc848cc248
[  308.594379][T15149]  </TASK>
[  308.895865][T15153] wg1 speed is unknown, defaulting to 1000
[  308.898609][T15153] lo speed is unknown, defaulting to 1000
[  308.904349][T15153] lo speed is unknown, defaulting to 1000
[  308.993750][T15154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2345'.
[  308.996970][T15154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2345'.
[  309.055027][T15161] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2348'.
[  309.104478][T15164] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2349'.
[  309.143231][T15166] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  309.194691][T15167] syzkaller1: entered promiscuous mode
[  309.197370][T15167] syzkaller1: entered allmulticast mode
[  309.775019][T15197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2358'.
[  309.817709][T15202] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2359'.
[  309.822354][T15203] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2359'.
[  309.887266][T15202] netlink: 'syz.2.2359': attribute type 21 has an invalid length.
[  309.892047][T15202] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2359'.
[  310.138626][T15215] wg1 speed is unknown, defaulting to 1000
[  310.141820][T15215] lo speed is unknown, defaulting to 1000
[  310.145082][T15215] lo speed is unknown, defaulting to 1000
[  310.325111][T15224] bridge9: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  310.436986][T15229] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2367'.
[  310.772688][T15242] wg1 speed is unknown, defaulting to 1000
[  310.776814][T15242] lo speed is unknown, defaulting to 1000
[  310.783947][T15242] lo speed is unknown, defaulting to 1000
[  311.068160][T15259] netlink: 'syz.2.2375': attribute type 3 has an invalid length.
[  311.348044][T15270] mac80211_hwsim hwsim51 wlan0: entered promiscuous mode
[  311.351416][T15270] mac80211_hwsim hwsim51 wlan0: entered allmulticast mode
[  311.445637][T15277] wg1 speed is unknown, defaulting to 1000
[  311.450092][T15277] lo speed is unknown, defaulting to 1000
[  311.453798][T15277] lo speed is unknown, defaulting to 1000
[  312.434516][T15302] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  312.437600][T15302] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  312.642283][T15318] netlink: 'syz.1.2392': attribute type 5 has an invalid length.
[  312.752244][T15327] netlink: 'syz.1.2394': attribute type 9 has an invalid length.
[  313.027402][T15345] macvlan0: entered promiscuous mode
[  313.033334][T15345] macvlan0: left promiscuous mode
[  313.185851][ T5880] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  313.190421][ T5880] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  313.193881][ T5880] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  313.197362][ T5880] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  313.284153][T15357] netlink: 'syz.1.2402': attribute type 21 has an invalid length.
[  313.287387][T15357] netlink: 'syz.1.2402': attribute type 5 has an invalid length.
[  313.291460][T15357] netlink: 'syz.1.2402': attribute type 6 has an invalid length.
[  313.384788][T15366] netlink: 'syz.0.2406': attribute type 3 has an invalid length.
[  313.397409][T15366] syz_tun: left allmulticast mode
[  313.399852][T15366] dvmrp8: left allmulticast mode
[  313.450504][T15368] __nla_validate_parse: 10 callbacks suppressed
[  313.450520][T15368] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2406'.
[  313.725604][T15383] wg1 speed is unknown, defaulting to 1000
[  313.730070][T15383] lo speed is unknown, defaulting to 1000
[  313.733911][T15383] lo speed is unknown, defaulting to 1000
[  313.788453][T15386] wg1 speed is unknown, defaulting to 1000
[  313.794643][T15386] lo speed is unknown, defaulting to 1000
[  313.797828][T15386] lo speed is unknown, defaulting to 1000
[  313.866075][T15390] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2410'.
[  313.871591][T15390] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2410'.
[  313.878605][T15390] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2410'.
[  313.882885][T15390] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2410'.
[  313.987107][T15404] netlink: 'syz.2.2414': attribute type 1 has an invalid length.
[  314.012183][T15404] 8021q: adding VLAN 0 to HW filter on device bond13
[  314.020980][T15404] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2414'.
[  314.155910][T15411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2417'.
[  314.232295][T15413] syzkaller1: entered promiscuous mode
[  314.234145][T15413] syzkaller1: entered allmulticast mode
[  314.313281][T15418] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2419'.
[  314.316491][T15418] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2419'.
[  314.328927][T15418] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2419'.
[  314.360957][T15422] bond0: entered promiscuous mode
[  314.365862][T15422] bond0: left promiscuous mode
[  314.415001][T15424] syzkaller0: entered promiscuous mode
[  314.416855][T15424] syzkaller0: entered allmulticast mode
[  314.424090][T15422] pimreg: entered allmulticast mode
[  315.736648][T15425] pimreg: left allmulticast mode
[  315.814033][T15432] syzkaller0: entered promiscuous mode
[  315.816673][T15432] syzkaller0: entered allmulticast mode
[  315.828010][T15432] delete_channel: no stack
[  315.936814][T15442] bond0: Error: Cannot enslave bond to itself.
[  316.082724][T15462] syzkaller1: entered promiscuous mode
[  316.088085][T15462] syzkaller1: entered allmulticast mode
[  316.253406][T15470] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (5)
[  316.347933][T15472] netlink: 'syz.0.2436': attribute type 13 has an invalid length.
[  316.439119][T15474] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  316.992559][T15493] wg1 speed is unknown, defaulting to 1000
[  316.996299][T15493] lo speed is unknown, defaulting to 1000
[  317.000763][T15493] lo speed is unknown, defaulting to 1000
[  317.358808][T15508] wg1 speed is unknown, defaulting to 1000
[  317.362458][T15508] lo speed is unknown, defaulting to 1000
[  317.366232][T15508] lo speed is unknown, defaulting to 1000
[  317.513927][T15517] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  317.522356][T15517] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  317.524975][T15517] CPU: 0 UID: 0 PID: 15517 Comm: syz.0.2447 Not tainted syzkaller #0 PREEMPT(full) 
[  317.524987][T15517] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  317.524992][T15517] Call Trace:
[  317.524996][T15517]  <TASK>
[  317.525001][T15517]  dump_stack_lvl+0x189/0x250
[  317.525016][T15517]  ? __pfx_dump_stack_lvl+0x10/0x10
[  317.525026][T15517]  ? __pfx__printk+0x10/0x10
[  317.525040][T15517]  ? kernfs_path_from_node+0x2f/0x290
[  317.525049][T15517]  ? kernfs_path_from_node+0x250/0x290
[  317.525056][T15517]  ? kernfs_path_from_node+0x2f/0x290
[  317.525067][T15517]  sysfs_warn_dup+0x8e/0xa0
[  317.525076][T15517]  sysfs_do_create_link_sd+0xc0/0x110
[  317.525085][T15517]  device_add_class_symlinks+0x1cf/0x240
[  317.525097][T15517]  device_add+0x475/0xb50
[  317.525107][T15517]  wiphy_register+0x1ba6/0x28d0
[  317.525124][T15517]  ? __pfx_wiphy_register+0x10/0x10
[  317.525132][T15517]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  317.525148][T15517]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  317.525160][T15517]  ieee80211_register_hw+0x3484/0x4100
[  317.525179][T15517]  ? ieee80211_register_hw+0x1471/0x4100
[  317.525194][T15517]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  317.525207][T15517]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  317.525219][T15517]  ? __hrtimer_setup+0x187/0x210
[  317.525227][T15517]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  317.525241][T15517]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  317.525266][T15517]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  317.525282][T15517]  ? trace_kmalloc+0x1f/0xd0
[  317.525292][T15517]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  317.525302][T15517]  ? kstrndup+0xbf/0x160
[  317.525316][T15517]  hwsim_new_radio_nl+0xea4/0x1b10
[  317.525328][T15517]  ? __pfx___nla_validate_parse+0x10/0x10
[  317.525348][T15517]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  317.525365][T15517]  ? __nla_parse+0x40/0x60
[  317.525373][T15517]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  317.525389][T15517]  genl_family_rcv_msg_doit+0x215/0x300
[  317.525403][T15517]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  317.525420][T15517]  ? bpf_lsm_capable+0x9/0x20
[  317.525431][T15517]  ? security_capable+0x7e/0x2e0
[  317.525447][T15517]  genl_rcv_msg+0x60e/0x790
[  317.525460][T15517]  ? __pfx_genl_rcv_msg+0x10/0x10
[  317.525470][T15517]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  317.525512][T15517]  netlink_rcv_skb+0x208/0x470
[  317.525519][T15517]  ? __lock_acquire+0xab9/0xd20
[  317.525534][T15517]  ? __pfx_genl_rcv_msg+0x10/0x10
[  317.525546][T15517]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  317.525563][T15517]  ? down_read+0x1ad/0x2e0
[  317.525574][T15517]  genl_rcv+0x28/0x40
[  317.525584][T15517]  netlink_unicast+0x82f/0x9e0
[  317.525601][T15517]  ? __pfx_netlink_unicast+0x10/0x10
[  317.525614][T15517]  ? netlink_sendmsg+0x642/0xb30
[  317.525621][T15517]  ? skb_put+0x11b/0x210
[  317.525632][T15517]  netlink_sendmsg+0x805/0xb30
[  317.525645][T15517]  ? __pfx_netlink_sendmsg+0x10/0x10
[  317.525655][T15517]  ? aa_sock_msg_perm+0xf1/0x1d0
[  317.525664][T15517]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  317.525673][T15517]  ? __pfx_netlink_sendmsg+0x10/0x10
[  317.525682][T15517]  __sock_sendmsg+0x21c/0x270
[  317.525696][T15517]  ____sys_sendmsg+0x505/0x830
[  317.525709][T15517]  ? __pfx_____sys_sendmsg+0x10/0x10
[  317.525723][T15517]  ? import_iovec+0x74/0xa0
[  317.525734][T15517]  ___sys_sendmsg+0x21f/0x2a0
[  317.525745][T15517]  ? __pfx____sys_sendmsg+0x10/0x10
[  317.525772][T15517]  ? __fget_files+0x2a/0x420
[  317.525779][T15517]  ? __fget_files+0x3a0/0x420
[  317.525791][T15517]  __x64_sys_sendmsg+0x19b/0x260
[  317.525802][T15517]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  317.525817][T15517]  ? rcu_is_watching+0x15/0xb0
[  317.525833][T15517]  ? do_syscall_64+0xbe/0x3b0
[  317.525845][T15517]  do_syscall_64+0xfa/0x3b0
[  317.525853][T15517]  ? lockdep_hardirqs_on+0x9c/0x150
[  317.525861][T15517]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.525868][T15517]  ? exc_page_fault+0x9f/0xf0
[  317.525877][T15517]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.525885][T15517] RIP: 0033:0x7fc4a0f8eba9
[  317.525893][T15517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  317.525900][T15517] RSP: 002b:00007fc4a1d7b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  317.525909][T15517] RAX: ffffffffffffffda RBX: 00007fc4a11d5fa0 RCX: 00007fc4a0f8eba9
[  317.525915][T15517] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000b
[  317.525920][T15517] RBP: 00007fc4a1011e19 R08: 0000000000000000 R09: 0000000000000000
[  317.525925][T15517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  317.525929][T15517] R13: 00007fc4a11d6038 R14: 00007fc4a11d5fa0 R15: 00007ffc05eff0a8
[  317.525943][T15517]  </TASK>
[  317.762373][T15524] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  318.095293][T15559] netlink: 'syz.0.2454': attribute type 27 has an invalid length.
[  318.124883][T15562] Bluetooth: MGMT ver 1.23
[  318.217972][T15565] netlink: 'syz.2.2458': attribute type 10 has an invalid length.
[  318.220883][T15565] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  318.223342][T15565] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  318.231276][T15565] bond0: (slave netdevsim0): Enslaving as an active interface with a down link
[  318.329773][T15569] syzkaller1: entered promiscuous mode
[  318.331585][T15569] syzkaller1: entered allmulticast mode
[  318.576241][T15579] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  318.582466][T15579] syzkaller0: entered promiscuous mode
[  318.584636][T15579] syzkaller0: entered allmulticast mode
[  318.603855][T15579] __nla_validate_parse: 13 callbacks suppressed
[  318.603875][T15579] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2463'.
[  318.611780][T15579] tipc: Resetting bearer <eth:syzkaller0>
[  318.615594][T15578] tipc: Resetting bearer <eth:syzkaller0>
[  318.628625][T15578] tipc: Disabling bearer <eth:syzkaller0>
[  318.896543][T15593] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2466'.
[  318.911250][T15593] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2466'.
[  319.012887][T15604] wg1 speed is unknown, defaulting to 1000
[  319.016818][T15604] lo speed is unknown, defaulting to 1000
[  319.022457][T15604] lo speed is unknown, defaulting to 1000
[  319.045059][T15609] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2471'.
[  319.051457][T15609] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2471'.
[  319.455125][T15632] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2477'.
[  319.531874][T15645] netlink: 'syz.1.2482': attribute type 4 has an invalid length.
[  319.553465][ T5915] lo speed is unknown, defaulting to 1000
[  319.555887][ T5915] syz1: Port: 1 Link DOWN
[  319.608189][T15647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2481'.
[  319.665989][T15657] netlink: 212280 bytes leftover after parsing attributes in process `syz.2.2484'.
[  319.685670][T15660] openvswitch: netlink: EtherType 50a is less than min 600
[  319.685670][T15659] openvswitch: netlink: EtherType 50a is less than min 600
[  319.693541][T15659] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2485'.
[  319.874667][T15675] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  319.877929][T15675] CPU: 0 UID: 0 PID: 15675 Comm: syz.2.2490 Not tainted syzkaller #0 PREEMPT(full) 
[  319.877951][T15675] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  319.877961][T15675] Call Trace:
[  319.877968][T15675]  <TASK>
[  319.877977][T15675]  dump_stack_lvl+0x189/0x250
[  319.878006][T15675]  ? __pfx_dump_stack_lvl+0x10/0x10
[  319.878023][T15675]  ? __pfx__printk+0x10/0x10
[  319.878049][T15675]  ? kernfs_path_from_node+0x2f/0x290
[  319.878067][T15675]  ? kernfs_path_from_node+0x250/0x290
[  319.878080][T15675]  ? kernfs_path_from_node+0x2f/0x290
[  319.878098][T15675]  sysfs_warn_dup+0x8e/0xa0
[  319.878115][T15675]  sysfs_do_create_link_sd+0xc0/0x110
[  319.878132][T15675]  device_add_class_symlinks+0x1cf/0x240
[  319.878153][T15675]  device_add+0x475/0xb50
[  319.878173][T15675]  wiphy_register+0x1ba6/0x28d0
[  319.878208][T15675]  ? __pfx_wiphy_register+0x10/0x10
[  319.878223][T15675]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  319.878251][T15675]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  319.878275][T15675]  ieee80211_register_hw+0x3484/0x4100
[  319.878307][T15675]  ? ieee80211_register_hw+0x1471/0x4100
[  319.878372][T15675]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  319.878398][T15675]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  319.878423][T15675]  ? __hrtimer_setup+0x187/0x210
[  319.878436][T15675]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  319.878465][T15675]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  319.878513][T15675]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  319.878533][T15675]  ? trace_kmalloc+0x1f/0xd0
[  319.878551][T15675]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  319.878570][T15675]  ? kstrndup+0xbf/0x160
[  319.878596][T15675]  hwsim_new_radio_nl+0xea4/0x1b10
[  319.878618][T15675]  ? __pfx___nla_validate_parse+0x10/0x10
[  319.878652][T15675]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  319.878683][T15675]  ? __nla_parse+0x40/0x60
[  319.878700][T15675]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  319.878728][T15675]  genl_family_rcv_msg_doit+0x215/0x300
[  319.878752][T15675]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  319.878783][T15675]  ? bpf_lsm_capable+0x9/0x20
[  319.878802][T15675]  ? security_capable+0x7e/0x2e0
[  319.878828][T15675]  genl_rcv_msg+0x60e/0x790
[  319.878851][T15675]  ? __pfx_genl_rcv_msg+0x10/0x10
[  319.878869][T15675]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  319.878902][T15675]  netlink_rcv_skb+0x208/0x470
[  319.878915][T15675]  ? __lock_acquire+0xab9/0xd20
[  319.878939][T15675]  ? __pfx_genl_rcv_msg+0x10/0x10
[  319.878981][T15675]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  319.879016][T15675]  ? down_read+0x1ad/0x2e0
[  319.879038][T15675]  genl_rcv+0x28/0x40
[  319.879058][T15675]  netlink_unicast+0x82f/0x9e0
[  319.879087][T15675]  ? __pfx_netlink_unicast+0x10/0x10
[  319.879111][T15675]  ? netlink_sendmsg+0x642/0xb30
[  319.879124][T15675]  ? skb_put+0x11b/0x210
[  319.879145][T15675]  netlink_sendmsg+0x805/0xb30
[  319.879169][T15675]  ? __pfx_netlink_sendmsg+0x10/0x10
[  319.879188][T15675]  ? aa_sock_msg_perm+0xf1/0x1d0
[  319.879204][T15675]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  319.879220][T15675]  ? __pfx_netlink_sendmsg+0x10/0x10
[  319.879236][T15675]  __sock_sendmsg+0x21c/0x270
[  319.879261][T15675]  ____sys_sendmsg+0x505/0x830
[  319.879284][T15675]  ? __pfx_____sys_sendmsg+0x10/0x10
[  319.879311][T15675]  ? import_iovec+0x74/0xa0
[  319.879340][T15675]  ___sys_sendmsg+0x21f/0x2a0
[  319.879388][T15675]  ? __pfx____sys_sendmsg+0x10/0x10
[  319.879441][T15675]  ? __fget_files+0x2a/0x420
[  319.879455][T15675]  ? __fget_files+0x3a0/0x420
[  319.879479][T15675]  __x64_sys_sendmsg+0x19b/0x260
[  319.879502][T15675]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  319.879537][T15675]  ? do_syscall_64+0xbe/0x3b0
[  319.879558][T15675]  do_syscall_64+0xfa/0x3b0
[  319.879572][T15675]  ? lockdep_hardirqs_on+0x9c/0x150
[  319.879587][T15675]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.879601][T15675]  ? exc_page_fault+0x9f/0xf0
[  319.879617][T15675]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.879634][T15675] RIP: 0033:0x7f3d2738eba9
[  319.879650][T15675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  319.879663][T15675] RSP: 002b:00007f3d2826b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  319.879681][T15675] RAX: ffffffffffffffda RBX: 00007f3d275d6090 RCX: 00007f3d2738eba9
[  319.879693][T15675] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a
[  319.879702][T15675] RBP: 00007f3d27411e19 R08: 0000000000000000 R09: 0000000000000000
[  319.879714][T15675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  319.879722][T15675] R13: 00007f3d275d6128 R14: 00007f3d275d6090 R15: 00007ffc848cc248
[  319.879745][T15675]  </TASK>
[  320.428493][T15680] netlink: 'syz.0.2491': attribute type 1 has an invalid length.
[  320.739813][T15686] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2493'.
[  321.305447][T15701] wg1 speed is unknown, defaulting to 1000
[  321.308191][T15701] lo speed is unknown, defaulting to 1000
[  321.311577][T15701] lo speed is unknown, defaulting to 1000
[  321.351246][T15705] netlink: 'syz.2.2498': attribute type 1 has an invalid length.
[  321.849337][T15750] netlink: 'syz.1.2509': attribute type 10 has an invalid length.
[  321.855059][T15750] caif0: Master is either lo or non-ether device
[  322.094345][T15782] IPv6: sit4: Disabled Multicast RS
[  322.097280][T15782] sit4: entered allmulticast mode
[  322.332022][T15801] netlink: 'syz.2.2523': attribute type 1 has an invalid length.
[  322.387628][T15801] tipc: Invalid UDP bearer configuration
[  322.387660][T15801] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  322.603937][T15813] netlink: 'syz.2.2526': attribute type 1 has an invalid length.
[  322.815299][T15838] wg1 speed is unknown, defaulting to 1000
[  322.822787][T15838] lo speed is unknown, defaulting to 1000
[  322.826314][T15838] lo speed is unknown, defaulting to 1000
[  323.331515][T15870] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  323.333901][T15870] CPU: 1 UID: 0 PID: 15870 Comm: syz.0.2543 Not tainted syzkaller #0 PREEMPT(full) 
[  323.333913][T15870] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  323.333918][T15870] Call Trace:
[  323.333922][T15870]  <TASK>
[  323.333927][T15870]  dump_stack_lvl+0x189/0x250
[  323.333944][T15870]  ? __pfx_dump_stack_lvl+0x10/0x10
[  323.333953][T15870]  ? __pfx__printk+0x10/0x10
[  323.333968][T15870]  ? kernfs_path_from_node+0x2f/0x290
[  323.333978][T15870]  ? kernfs_path_from_node+0x250/0x290
[  323.333986][T15870]  ? kernfs_path_from_node+0x2f/0x290
[  323.333996][T15870]  sysfs_warn_dup+0x8e/0xa0
[  323.334006][T15870]  sysfs_do_create_link_sd+0xc0/0x110
[  323.334016][T15870]  device_add_class_symlinks+0x1cf/0x240
[  323.334028][T15870]  device_add+0x475/0xb50
[  323.334042][T15870]  wiphy_register+0x1ba6/0x28d0
[  323.334060][T15870]  ? __pfx_wiphy_register+0x10/0x10
[  323.334068][T15870]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  323.334085][T15870]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  323.334099][T15870]  ieee80211_register_hw+0x3484/0x4100
[  323.334119][T15870]  ? ieee80211_register_hw+0x1471/0x4100
[  323.334134][T15870]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  323.334146][T15870]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  323.334180][T15870]  ? __hrtimer_setup+0x187/0x210
[  323.334191][T15870]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  323.334206][T15870]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  323.334232][T15870]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  323.334242][T15870]  ? trace_kmalloc+0x1f/0xd0
[  323.334252][T15870]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  323.334263][T15870]  ? kstrndup+0xbf/0x160
[  323.334278][T15870]  hwsim_new_radio_nl+0xea4/0x1b10
[  323.334291][T15870]  ? __pfx___nla_validate_parse+0x10/0x10
[  323.334312][T15870]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  323.334329][T15870]  ? __nla_parse+0x40/0x60
[  323.334338][T15870]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  323.334355][T15870]  genl_family_rcv_msg_doit+0x215/0x300
[  323.334369][T15870]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  323.334387][T15870]  ? bpf_lsm_capable+0x9/0x20
[  323.334399][T15870]  ? security_capable+0x7e/0x2e0
[  323.334417][T15870]  genl_rcv_msg+0x60e/0x790
[  323.334430][T15870]  ? __pfx_genl_rcv_msg+0x10/0x10
[  323.334440][T15870]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  323.334458][T15870]  netlink_rcv_skb+0x208/0x470
[  323.334465][T15870]  ? __lock_acquire+0xab9/0xd20
[  323.334479][T15870]  ? __pfx_genl_rcv_msg+0x10/0x10
[  323.334489][T15870]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  323.334507][T15870]  ? down_read+0x1ad/0x2e0
[  323.334518][T15870]  genl_rcv+0x28/0x40
[  323.334527][T15870]  netlink_unicast+0x82f/0x9e0
[  323.334545][T15870]  ? __pfx_netlink_unicast+0x10/0x10
[  323.334558][T15870]  ? netlink_sendmsg+0x642/0xb30
[  323.334565][T15870]  ? skb_put+0x11b/0x210
[  323.334577][T15870]  netlink_sendmsg+0x805/0xb30
[  323.334590][T15870]  ? __pfx_netlink_sendmsg+0x10/0x10
[  323.334599][T15870]  ? aa_sock_msg_perm+0xf1/0x1d0
[  323.334609][T15870]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  323.334618][T15870]  ? __pfx_netlink_sendmsg+0x10/0x10
[  323.334627][T15870]  __sock_sendmsg+0x21c/0x270
[  323.334642][T15870]  ____sys_sendmsg+0x505/0x830
[  323.334655][T15870]  ? __pfx_____sys_sendmsg+0x10/0x10
[  323.334669][T15870]  ? import_iovec+0x74/0xa0
[  323.334682][T15870]  ___sys_sendmsg+0x21f/0x2a0
[  323.334692][T15870]  ? __pfx____sys_sendmsg+0x10/0x10
[  323.334719][T15870]  ? __fget_files+0x2a/0x420
[  323.334727][T15870]  ? __fget_files+0x3a0/0x420
[  323.334739][T15870]  __x64_sys_sendmsg+0x19b/0x260
[  323.334750][T15870]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  323.334764][T15870]  ? rcu_is_watching+0x15/0xb0
[  323.334775][T15870]  ? do_syscall_64+0xbe/0x3b0
[  323.334788][T15870]  do_syscall_64+0xfa/0x3b0
[  323.334796][T15870]  ? lockdep_hardirqs_on+0x9c/0x150
[  323.334804][T15870]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.334812][T15870]  ? exc_page_fault+0x9f/0xf0
[  323.334820][T15870]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.334828][T15870] RIP: 0033:0x7fc4a0f8eba9
[  323.334836][T15870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  323.334843][T15870] RSP: 002b:00007fc4a1d5a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  323.334852][T15870] RAX: ffffffffffffffda RBX: 00007fc4a11d6090 RCX: 00007fc4a0f8eba9
[  323.334858][T15870] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000d
[  323.334863][T15870] RBP: 00007fc4a1011e19 R08: 0000000000000000 R09: 0000000000000000
[  323.334867][T15870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  323.334872][T15870] R13: 00007fc4a11d6128 R14: 00007fc4a11d6090 R15: 00007ffc05eff0a8
[  323.334886][T15870]  </TASK>
[  323.766821][T15888] __nla_validate_parse: 17 callbacks suppressed
[  323.766833][T15888] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2548'.
[  324.080866][T15893] syzkaller1: entered promiscuous mode
[  324.083919][T15893] syzkaller1: entered allmulticast mode
[  324.435979][T15920] syzkaller0: entered promiscuous mode
[  324.440094][T15920] syzkaller0: entered allmulticast mode
[  324.558906][ T5880] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[  324.928051][T15935] wg1 speed is unknown, defaulting to 1000
[  324.931773][T15935] lo speed is unknown, defaulting to 1000
[  324.934462][T15935] lo speed is unknown, defaulting to 1000
[  325.000632][T15938] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2563'.
[  325.004750][T15938] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2563'.
[  325.061124][T15939] openvswitch: netlink: Key 8 has unexpected len 4568 expected 40
[  325.503651][T15947] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2566'.
[  326.721353][T15945] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  326.723896][T15945] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  326.724812][T15954] dvmrp8: entered allmulticast mode
[  326.729598][T15954] dvmrp8: left allmulticast mode
[  326.751724][T15945] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  326.754120][T15945] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  327.003241][T15971] wg1 speed is unknown, defaulting to 1000
[  327.006387][T15971] lo speed is unknown, defaulting to 1000
[  327.013978][T15971] lo speed is unknown, defaulting to 1000
[  327.098411][T15971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2570'.
[  327.102878][T15971] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2570'.
[  327.277631][T15997] netlink: 'syz.0.2577': attribute type 1 has an invalid length.
[  327.283023][T15997] netlink: 'syz.0.2577': attribute type 3 has an invalid length.
[  327.286094][T15997] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2577'.
[  327.446394][T16005] syzkaller0: entered promiscuous mode
[  327.448620][T16005] syzkaller0: entered allmulticast mode
[  327.608575][T16020] syzkaller0: entered promiscuous mode
[  327.612507][T16020] syzkaller0: entered allmulticast mode
[  327.678833][T16019] wg1 speed is unknown, defaulting to 1000
[  327.683633][T16016] wg1 speed is unknown, defaulting to 1000
[  327.683654][T16019] lo speed is unknown, defaulting to 1000
[  327.690341][T16019] lo speed is unknown, defaulting to 1000
[  327.691396][T16016] lo speed is unknown, defaulting to 1000
[  327.702854][T16016] lo speed is unknown, defaulting to 1000
[  327.810196][T16027] siw: device registration error -23
[  327.814336][T16027] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2584'.
[  328.005689][T16029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2585'.
[  328.005866][T16031] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2586'.
[  328.056518][T16034] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  328.152128][T16041] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  328.182816][T16046] wg1 speed is unknown, defaulting to 1000
[  328.185857][T16046] lo speed is unknown, defaulting to 1000
[  328.188491][T16046] lo speed is unknown, defaulting to 1000
[  329.215892][T16077] _Z`Ԁ@S!: entered promiscuous mode
[  329.331008][T16090] wg1 speed is unknown, defaulting to 1000
[  329.334858][T16090] lo speed is unknown, defaulting to 1000
[  329.338425][T16090] lo speed is unknown, defaulting to 1000
[  329.605090][T16104] __nla_validate_parse: 4 callbacks suppressed
[  329.605109][T16104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2603'.
[  329.629068][T16106] netlink: 'syz.2.2605': attribute type 16 has an invalid length.
[  329.633670][T16106] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.2605'.
[  329.683046][T16112] macsec0: entered allmulticast mode
[  329.685645][T16112] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  330.159756][T16155] netlink: 'syz.1.2617': attribute type 3 has an invalid length.
[  330.175406][T16144] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2615'.
[  330.209919][ T5858] Bluetooth: hci0: command tx timeout
[  330.320557][T16160] wg1 speed is unknown, defaulting to 1000
[  330.323585][T16160] lo speed is unknown, defaulting to 1000
[  330.326320][T16160] lo speed is unknown, defaulting to 1000
[  330.416295][T16161] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2619'.
[  330.419841][T16161] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2619'.
[  330.423339][T16161] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2619'.
[  330.426367][T16161] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2619'.
[  330.812545][T16165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2620'.
[  331.237469][T16182] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  331.684094][T16184] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2626'.
[  331.974729][T16193] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2628'.
[  332.296172][T16212] wg1 speed is unknown, defaulting to 1000
[  332.300774][T16212] lo speed is unknown, defaulting to 1000
[  332.304256][T16212] lo speed is unknown, defaulting to 1000
[  332.310916][T16215] wg1 speed is unknown, defaulting to 1000
[  332.315619][T16216] netlink: 'syz.0.2634': attribute type 9 has an invalid length.
[  332.321931][T16215] lo speed is unknown, defaulting to 1000
[  332.328014][T16215] lo speed is unknown, defaulting to 1000
[  332.632043][T16221] netlink: 'syz.2.2636': attribute type 15 has an invalid length.
[  333.183833][T16267] siw: device registration error -23
[  333.249580][T16271] sctp: [Deprecated]: syz.2.2650 (pid 16271) Use of int in maxseg socket option.
[  333.249580][T16271] Use struct sctp_assoc_value instead
[  333.440907][T16300] netlink: 'syz.1.2657': attribute type 1 has an invalid length.
[  333.568148][T16311] netlink: 'syz.1.2660': attribute type 2 has an invalid length.
[  333.709660][T16323] wg1 speed is unknown, defaulting to 1000
[  333.712573][T16323] lo speed is unknown, defaulting to 1000
[  333.715520][T16323] lo speed is unknown, defaulting to 1000
[  334.056789][T16346] netlink: 'syz.1.2670': attribute type 10 has an invalid length.
[  334.063189][T16346] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  334.095965][T16348] siw: device registration error -23
[  334.132035][T16350] vlan2: entered promiscuous mode
[  334.133991][T16350] vlan2: entered allmulticast mode
[  334.970312][T16399] __nla_validate_parse: 13 callbacks suppressed
[  334.970323][T16399] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2687'.
[  334.977198][T16399] netlink: 'syz.1.2687': attribute type 4 has an invalid length.
[  334.983678][T16399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2687'.
[  335.277126][T16418] netlink: 'syz.0.2694': attribute type 16 has an invalid length.
[  335.281064][T16418] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2694'.
[  335.302274][T16419] wg1 speed is unknown, defaulting to 1000
[  335.307553][T16419] lo speed is unknown, defaulting to 1000
[  335.311998][T16419] lo speed is unknown, defaulting to 1000
[  335.443211][T16427] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  335.446627][T16427] CPU: 0 UID: 0 PID: 16427 Comm: syz.2.2696 Not tainted syzkaller #0 PREEMPT(full) 
[  335.446644][T16427] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  335.446651][T16427] Call Trace:
[  335.446657][T16427]  <TASK>
[  335.446663][T16427]  dump_stack_lvl+0x189/0x250
[  335.446685][T16427]  ? __pfx_dump_stack_lvl+0x10/0x10
[  335.446715][T16427]  ? __pfx__printk+0x10/0x10
[  335.446737][T16427]  ? kernfs_path_from_node+0x2f/0x290
[  335.446750][T16427]  ? kernfs_path_from_node+0x250/0x290
[  335.446762][T16427]  ? kernfs_path_from_node+0x2f/0x290
[  335.446778][T16427]  sysfs_warn_dup+0x8e/0xa0
[  335.446791][T16427]  sysfs_do_create_link_sd+0xc0/0x110
[  335.446806][T16427]  device_add_class_symlinks+0x1cf/0x240
[  335.446823][T16427]  device_add+0x475/0xb50
[  335.446838][T16427]  wiphy_register+0x1ba6/0x28d0
[  335.446865][T16427]  ? __pfx_wiphy_register+0x10/0x10
[  335.446877][T16427]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  335.446899][T16427]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  335.446918][T16427]  ieee80211_register_hw+0x3484/0x4100
[  335.446946][T16427]  ? ieee80211_register_hw+0x1471/0x4100
[  335.446970][T16427]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  335.446988][T16427]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  335.447007][T16427]  ? __hrtimer_setup+0x187/0x210
[  335.447018][T16427]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  335.447038][T16427]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  335.447077][T16427]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  335.447092][T16427]  ? trace_kmalloc+0x1f/0xd0
[  335.447105][T16427]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  335.447121][T16427]  ? kstrndup+0xbf/0x160
[  335.447141][T16427]  hwsim_new_radio_nl+0xea4/0x1b10
[  335.447160][T16427]  ? __pfx___nla_validate_parse+0x10/0x10
[  335.447189][T16427]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  335.447214][T16427]  ? __nla_parse+0x40/0x60
[  335.447228][T16427]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  335.447251][T16427]  genl_family_rcv_msg_doit+0x215/0x300
[  335.447272][T16427]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  335.447296][T16427]  ? bpf_lsm_capable+0x9/0x20
[  335.447310][T16427]  ? security_capable+0x7e/0x2e0
[  335.447331][T16427]  genl_rcv_msg+0x60e/0x790
[  335.447351][T16427]  ? __pfx_genl_rcv_msg+0x10/0x10
[  335.447369][T16427]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  335.447396][T16427]  netlink_rcv_skb+0x208/0x470
[  335.447409][T16427]  ? __lock_acquire+0xab9/0xd20
[  335.447426][T16427]  ? __pfx_genl_rcv_msg+0x10/0x10
[  335.447443][T16427]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  335.447469][T16427]  ? down_read+0x1ad/0x2e0
[  335.447483][T16427]  genl_rcv+0x28/0x40
[  335.447523][T16427]  netlink_unicast+0x82f/0x9e0
[  335.447549][T16427]  ? __pfx_netlink_unicast+0x10/0x10
[  335.447570][T16427]  ? netlink_sendmsg+0x642/0xb30
[  335.447582][T16427]  ? skb_put+0x11b/0x210
[  335.447606][T16427]  netlink_sendmsg+0x805/0xb30
[  335.447629][T16427]  ? __pfx_netlink_sendmsg+0x10/0x10
[  335.447645][T16427]  ? aa_sock_msg_perm+0xf1/0x1d0
[  335.447657][T16427]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  335.447670][T16427]  ? __pfx_netlink_sendmsg+0x10/0x10
[  335.447683][T16427]  __sock_sendmsg+0x21c/0x270
[  335.447704][T16427]  ____sys_sendmsg+0x505/0x830
[  335.447724][T16427]  ? __pfx_____sys_sendmsg+0x10/0x10
[  335.447747][T16427]  ? import_iovec+0x74/0xa0
[  335.447764][T16427]  ___sys_sendmsg+0x21f/0x2a0
[  335.447781][T16427]  ? __pfx____sys_sendmsg+0x10/0x10
[  335.447827][T16427]  ? __fget_files+0x2a/0x420
[  335.447838][T16427]  ? __fget_files+0x3a0/0x420
[  335.447860][T16427]  __x64_sys_sendmsg+0x19b/0x260
[  335.447878][T16427]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  335.447899][T16427]  ? rcu_is_watching+0x15/0xb0
[  335.447916][T16427]  ? do_syscall_64+0xbe/0x3b0
[  335.447933][T16427]  do_syscall_64+0xfa/0x3b0
[  335.447944][T16427]  ? lockdep_hardirqs_on+0x9c/0x150
[  335.447958][T16427]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.447969][T16427]  ? exc_page_fault+0x9f/0xf0
[  335.447982][T16427]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.447992][T16427] RIP: 0033:0x7f3d2738eba9
[  335.448001][T16427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  335.448009][T16427] RSP: 002b:00007f3d2826b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  335.448018][T16427] RAX: ffffffffffffffda RBX: 00007f3d275d6090 RCX: 00007f3d2738eba9
[  335.448023][T16427] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000b
[  335.448028][T16427] RBP: 00007f3d27411e19 R08: 0000000000000000 R09: 0000000000000000
[  335.448033][T16427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  335.448037][T16427] R13: 00007f3d275d6128 R14: 00007f3d275d6090 R15: 00007ffc848cc248
[  335.448051][T16427]  </TASK>
[  335.694811][T16426] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  335.697860][T16426] CPU: 0 UID: 0 PID: 16426 Comm: syz.2.2696 Not tainted syzkaller #0 PREEMPT(full) 
[  335.697877][T16426] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  335.697886][T16426] Call Trace:
[  335.697892][T16426]  <TASK>
[  335.697898][T16426]  dump_stack_lvl+0x189/0x250
[  335.697922][T16426]  ? __pfx_dump_stack_lvl+0x10/0x10
[  335.697938][T16426]  ? __pfx__printk+0x10/0x10
[  335.697960][T16426]  ? kernfs_path_from_node+0x2f/0x290
[  335.697976][T16426]  ? kernfs_path_from_node+0x250/0x290
[  335.697989][T16426]  ? kernfs_path_from_node+0x2f/0x290
[  335.698007][T16426]  sysfs_warn_dup+0x8e/0xa0
[  335.698021][T16426]  sysfs_do_create_link_sd+0xc0/0x110
[  335.698038][T16426]  device_add_class_symlinks+0x1cf/0x240
[  335.698056][T16426]  device_add+0x475/0xb50
[  335.698074][T16426]  wiphy_register+0x1ba6/0x28d0
[  335.698104][T16426]  ? __pfx_wiphy_register+0x10/0x10
[  335.698117][T16426]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  335.698140][T16426]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  335.698161][T16426]  ieee80211_register_hw+0x3484/0x4100
[  335.698187][T16426]  ? ieee80211_register_hw+0x1471/0x4100
[  335.698211][T16426]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  335.698232][T16426]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  335.698252][T16426]  ? __hrtimer_setup+0x187/0x210
[  335.698264][T16426]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  335.698287][T16426]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  335.698328][T16426]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  335.698342][T16426]  ? trace_kmalloc+0x1f/0xd0
[  335.698356][T16426]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  335.698373][T16426]  ? kstrndup+0xbf/0x160
[  335.698395][T16426]  hwsim_new_radio_nl+0xea4/0x1b10
[  335.698415][T16426]  ? __pfx___nla_validate_parse+0x10/0x10
[  335.698448][T16426]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  335.698507][T16426]  ? __nla_parse+0x40/0x60
[  335.698524][T16426]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  335.698548][T16426]  genl_family_rcv_msg_doit+0x215/0x300
[  335.698571][T16426]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  335.698605][T16426]  ? bpf_lsm_capable+0x9/0x20
[  335.698622][T16426]  ? security_capable+0x7e/0x2e0
[  335.698646][T16426]  genl_rcv_msg+0x60e/0x790
[  335.698668][T16426]  ? __pfx_genl_rcv_msg+0x10/0x10
[  335.698684][T16426]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  335.698710][T16426]  netlink_rcv_skb+0x208/0x470
[  335.698721][T16426]  ? __lock_acquire+0xab9/0xd20
[  335.698739][T16426]  ? __pfx_genl_rcv_msg+0x10/0x10
[  335.698757][T16426]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  335.698786][T16426]  ? down_read+0x1ad/0x2e0
[  335.698803][T16426]  genl_rcv+0x28/0x40
[  335.698818][T16426]  netlink_unicast+0x82f/0x9e0
[  335.698845][T16426]  ? __pfx_netlink_unicast+0x10/0x10
[  335.698864][T16426]  ? netlink_sendmsg+0x642/0xb30
[  335.698876][T16426]  ? skb_put+0x11b/0x210
[  335.698895][T16426]  netlink_sendmsg+0x805/0xb30
[  335.698915][T16426]  ? __pfx_netlink_sendmsg+0x10/0x10
[  335.698930][T16426]  ? aa_sock_msg_perm+0xf1/0x1d0
[  335.698944][T16426]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  335.698958][T16426]  ? __pfx_netlink_sendmsg+0x10/0x10
[  335.698972][T16426]  __sock_sendmsg+0x21c/0x270
[  335.698991][T16426]  ____sys_sendmsg+0x505/0x830
[  335.699010][T16426]  ? __pfx_____sys_sendmsg+0x10/0x10
[  335.699031][T16426]  ? import_iovec+0x74/0xa0
[  335.699047][T16426]  ___sys_sendmsg+0x21f/0x2a0
[  335.699065][T16426]  ? __pfx____sys_sendmsg+0x10/0x10
[  335.699111][T16426]  ? __fget_files+0x2a/0x420
[  335.699122][T16426]  ? __fget_files+0x3a0/0x420
[  335.699138][T16426]  __x64_sys_sendmsg+0x19b/0x260
[  335.699178][T16426]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  335.699203][T16426]  ? rcu_is_watching+0x15/0xb0
[  335.699221][T16426]  ? do_syscall_64+0xbe/0x3b0
[  335.699240][T16426]  do_syscall_64+0xfa/0x3b0
[  335.699253][T16426]  ? lockdep_hardirqs_on+0x9c/0x150
[  335.699267][T16426]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.699279][T16426]  ? exc_page_fault+0x9f/0xf0
[  335.699293][T16426]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.699306][T16426] RIP: 0033:0x7f3d2738eba9
[  335.699319][T16426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  335.699330][T16426] RSP: 002b:00007f3d2828c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  335.699344][T16426] RAX: ffffffffffffffda RBX: 00007f3d275d5fa0 RCX: 00007f3d2738eba9
[  335.699353][T16426] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000b
[  335.699361][T16426] RBP: 00007f3d27411e19 R08: 0000000000000000 R09: 0000000000000000
[  335.699369][T16426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  335.699377][T16426] R13: 00007f3d275d6038 R14: 00007f3d275d5fa0 R15: 00007ffc848cc248
[  335.699401][T16426]  </TASK>
[  335.949719][T16432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2697'.
[  336.055059][T16436] netlink: 'syz.1.2699': attribute type 1 has an invalid length.
[  336.057819][T16436] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2699'.
[  336.068130][T16436] netlink: 'syz.1.2699': attribute type 1 has an invalid length.
[  336.105232][T16436] bond12: (slave geneve6): making interface the new active one
[  336.108499][T16436] bond12: (slave geneve6): Enslaving as an active interface with an up link
[  336.130921][T16436] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2699'.
[  336.131205][ T5881] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  336.163692][T13772] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  336.167225][T13772] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  336.174156][T13772] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  336.180305][T16439] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  336.187411][T16439] syzkaller0: entered promiscuous mode
[  336.188351][T16441] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2701'.
[  336.189735][T16439] syzkaller0: entered allmulticast mode
[  336.245673][T16438] tipc: Resetting bearer <eth:syzkaller0>
[  336.255375][T16441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2701'.
[  336.258149][T16441] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2701'.
[  336.262588][T16441] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2701'.
[  336.263826][T16438] tipc: Disabling bearer <eth:syzkaller0>
[  336.269877][T16441] netlink: 'syz.2.2701': attribute type 10 has an invalid length.
[  336.376205][T16455] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  336.380753][T16459] nbd: must specify a size in bytes for the device
[  336.455864][T16469] tipc: Enabling of bearer <eth:sy> rejected, failed to enable media
[  336.504884][T16474] wg1 speed is unknown, defaulting to 1000
[  336.507910][T16474] lo speed is unknown, defaulting to 1000
[  336.511100][T16474] lo speed is unknown, defaulting to 1000
[  336.565631][T16479] bond16: entered promiscuous mode
[  336.567761][T16479] 8021q: adding VLAN 0 to HW filter on device bond16
[  336.580388][T16479] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  336.583395][T16479] IPv6: NLM_F_CREATE should be set when creating new route
[  336.586338][T16479] IPv6: NLM_F_CREATE should be set when creating new route
[  336.592699][T16479] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  336.985469][T16501] IPVS: set_ctl: invalid protocol: 44 100.1.1.0:20004
[  337.345468][T16508] validate_nla: 2 callbacks suppressed
[  337.345485][T16508] netlink: 'syz.1.2720': attribute type 1 has an invalid length.
[  337.378736][T16508] 8021q: adding VLAN 0 to HW filter on device bond13
[  337.392545][T16508] ipvlan0: entered allmulticast mode
[  337.394748][T16508] bond13: entered allmulticast mode
[  337.411040][T16508] bond13: (slave gretap4): making interface the new active one
[  337.414155][T16508] gretap4: entered allmulticast mode
[  337.418281][T16508] bond13: (slave gretap4): Enslaving as an active interface with an up link
[  337.714550][T16526] wg1 speed is unknown, defaulting to 1000
[  337.718576][T16526] lo speed is unknown, defaulting to 1000
[  337.723911][T16526] lo speed is unknown, defaulting to 1000
[  337.770872][T16528] wg1 speed is unknown, defaulting to 1000
[  337.774587][T16528] lo speed is unknown, defaulting to 1000
[  337.778427][T16528] lo speed is unknown, defaulting to 1000
[  338.052942][T16544] wg1 speed is unknown, defaulting to 1000
[  338.091243][T16546] netlink: 'syz.1.2732': attribute type 1 has an invalid length.
[  338.094886][T16544] lo speed is unknown, defaulting to 1000
[  338.098650][T16544] lo speed is unknown, defaulting to 1000
[  338.168794][T16546] wg1 speed is unknown, defaulting to 1000
[  338.183627][T16546] lo speed is unknown, defaulting to 1000
[  338.190289][T16546] lo speed is unknown, defaulting to 1000
[  338.318586][T16561] netlink: 'syz.1.2736': attribute type 1 has an invalid length.
[  338.327002][T16561] netlink: 'syz.1.2736': attribute type 1 has an invalid length.
[  338.668937][T16571] wg1 speed is unknown, defaulting to 1000
[  338.673393][T16571] lo speed is unknown, defaulting to 1000
[  338.676128][T16571] lo speed is unknown, defaulting to 1000
[  338.998380][T16591] wg1 speed is unknown, defaulting to 1000
[  339.002525][T16591] lo speed is unknown, defaulting to 1000
[  339.006583][T16591] lo speed is unknown, defaulting to 1000
[  339.253917][T16605] ==================================================================
[  339.256520][T16605] BUG: KASAN: use-after-free in xfrm_alloc_spi+0x570/0xf30
[  339.259185][T16605] Read of size 4 at addr ffff888109be5bc4 by task syz.2.2747/16605
[  339.262391][T16605] 
[  339.263573][T16605] CPU: 1 UID: 0 PID: 16605 Comm: syz.2.2747 Not tainted syzkaller #0 PREEMPT(full) 
[  339.263585][T16605] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  339.263591][T16605] Call Trace:
[  339.263596][T16605]  <TASK>
[  339.263601][T16605]  dump_stack_lvl+0x189/0x250
[  339.263614][T16605]  ? __kasan_check_byte+0x12/0x40
[  339.263628][T16605]  ? __pfx_dump_stack_lvl+0x10/0x10
[  339.263637][T16605]  ? lock_release+0x4b/0x3e0
[  339.263650][T16605]  ? __virt_addr_valid+0x4a5/0x5c0
[  339.263661][T16605]  print_report+0xca/0x240
[  339.263669][T16605]  ? xfrm_alloc_spi+0x570/0xf30
[  339.263680][T16605]  kasan_report+0x118/0x150
[  339.263691][T16605]  ? xfrm_alloc_spi+0x570/0xf30
[  339.263702][T16605]  xfrm_alloc_spi+0x570/0xf30
[  339.263712][T16605]  ? xfrm_alloc_spi+0x2a0/0xf30
[  339.263725][T16605]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  339.263734][T16605]  ? xfrm_find_acq+0x87/0xa0
[  339.263746][T16605]  xfrm_alloc_userspi+0x70b/0xc90
[  339.263761][T16605]  ? apparmor_capable+0x137/0x1b0
[  339.263772][T16605]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  339.263783][T16605]  ? __nla_parse+0x40/0x60
[  339.263791][T16605]  xfrm_user_rcv_msg+0x7a3/0xab0
[  339.263803][T16605]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  339.263819][T16605]  ? __pfx___mutex_trylock_common+0x10/0x10
[  339.263829][T16605]  ? rcu_is_watching+0x15/0xb0
[  339.263837][T16605]  ? trace_contention_end+0x39/0x120
[  339.263845][T16605]  ? __mutex_lock+0x335/0x1350
[  339.263855][T16605]  netlink_rcv_skb+0x208/0x470
[  339.263864][T16605]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  339.263875][T16605]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  339.263885][T16605]  ? netlink_deliver_tap+0x2e/0x1b0
[  339.263893][T16605]  ? netlink_deliver_tap+0x2e/0x1b0
[  339.263900][T16605]  xfrm_netlink_rcv+0x79/0x90
[  339.263911][T16605]  netlink_unicast+0x82f/0x9e0
[  339.263924][T16605]  ? __pfx_netlink_unicast+0x10/0x10
[  339.263935][T16605]  ? netlink_sendmsg+0x642/0xb30
[  339.263943][T16605]  ? skb_put+0x11b/0x210
[  339.263952][T16605]  netlink_sendmsg+0x805/0xb30
[  339.263961][T16605]  ? __pfx_netlink_sendmsg+0x10/0x10
[  339.263970][T16605]  ? aa_sock_msg_perm+0xf1/0x1d0
[  339.263977][T16605]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  339.263985][T16605]  ? __pfx_netlink_sendmsg+0x10/0x10
[  339.263993][T16605]  __sock_sendmsg+0x21c/0x270
[  339.264005][T16605]  ____sys_sendmsg+0x505/0x830
[  339.264015][T16605]  ? __pfx_____sys_sendmsg+0x10/0x10
[  339.264025][T16605]  ? import_iovec+0x74/0xa0
[  339.264035][T16605]  ___sys_sendmsg+0x21f/0x2a0
[  339.264044][T16605]  ? __pfx____sys_sendmsg+0x10/0x10
[  339.264060][T16605]  ? __fget_files+0x2a/0x420
[  339.264067][T16605]  ? __fget_files+0x3a0/0x420
[  339.264075][T16605]  __x64_sys_sendmsg+0x19b/0x260
[  339.264084][T16605]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  339.264095][T16605]  ? rcu_is_watching+0x15/0xb0
[  339.264103][T16605]  ? do_syscall_64+0xbe/0x3b0
[  339.264113][T16605]  do_syscall_64+0xfa/0x3b0
[  339.264121][T16605]  ? lockdep_hardirqs_on+0x9c/0x150
[  339.264129][T16605]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  339.264137][T16605]  ? exc_page_fault+0x9f/0xf0
[  339.264144][T16605]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  339.264156][T16605] RIP: 0033:0x7f3d2738eba9
[  339.264165][T16605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  339.264171][T16605] RSP: 002b:00007f3d2828c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  339.264180][T16605] RAX: ffffffffffffffda RBX: 00007f3d275d5fa0 RCX: 00007f3d2738eba9
[  339.264185][T16605] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005
[  339.264190][T16605] RBP: 00007f3d27411e19 R08: 0000000000000000 R09: 0000000000000000
[  339.264195][T16605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  339.264200][T16605] R13: 00007f3d275d6038 R14: 00007f3d275d5fa0 R15: 00007ffc848cc248
[  339.264208][T16605]  </TASK>
[  339.264211][T16605] 
[  339.384681][T16605] The buggy address belongs to the physical page:
[  339.386678][T16605] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x109be5
[  339.390270][T16605] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff)
[  339.393306][T16605] raw: 057ff00000000000 0000000000000000 00000000ffffffff 0000000000000000
[  339.396942][T16605] raw: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000
[  339.400402][T16605] page dumped because: kasan: bad access detected
[  339.403000][T16605] page_owner tracks the page as freed
[  339.405209][T16605] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6081, tgid 6080 (syz.2.41), ts 70745789260, free_ts 324377358652
[  339.412800][T16605]  post_alloc_hook+0x240/0x2a0
[  339.414773][T16605]  get_page_from_freelist+0x21e4/0x22c0
[  339.417083][T16605]  __alloc_frozen_pages_noprof+0x181/0x370
[  339.419526][T16605]  alloc_pages_mpol+0x232/0x4a0
[  339.421605][T16605]  allocate_slab+0x8a/0x370
[  339.423304][T16605]  ___slab_alloc+0xbeb/0x1420
[  339.425150][T16605]  kmem_cache_alloc_noprof+0x283/0x3c0
[  339.427237][T16605]  xfrm_state_alloc+0x24/0x2f0
[  339.429359][T16605]  pfkey_add+0x6e4/0x2e00
[  339.431089][T16605]  pfkey_sendmsg+0xbfe/0x1090
[  339.432809][T16605]  __sock_sendmsg+0x21c/0x270
[  339.434707][T16605]  ____sys_sendmsg+0x505/0x830
[  339.436724][T16605]  ___sys_sendmsg+0x21f/0x2a0
[  339.438596][T16605]  __x64_sys_sendmsg+0x19b/0x260
[  339.440624][T16605]  do_syscall_64+0xfa/0x3b0
[  339.442516][T16605]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  339.444899][T16605] page last free pid 15918 tgid 15918 stack trace:
[  339.447546][T16605]  __free_frozen_pages+0xbc4/0xd30
[  339.449894][T16605]  __slab_free+0x303/0x3c0
[  339.451750][T16605]  qlist_free_all+0x97/0x140
[  339.453648][T16605]  kasan_quarantine_reduce+0x148/0x160
[  339.455905][T16605]  __kasan_slab_alloc+0x22/0x80
[  339.457921][T16605]  kmem_cache_alloc_bulk_noprof+0x4e0/0x790
[  339.460373][T16605]  mas_alloc_nodes+0x447/0x8e0
[  339.462324][T16605]  mas_preallocate+0x3ad/0x6f0
[  339.464214][T16605]  __split_vma+0x2fa/0xa00
[  339.465983][T16605]  vma_modify+0x12c3/0x1970
[  339.467832][T16605]  vma_modify_flags+0x1e8/0x230
[  339.469837][T16605]  mprotect_fixup+0x407/0x9c0
[  339.471765][T16605]  do_mprotect_pkey+0x8cd/0xce0
[  339.473752][T16605]  __x64_sys_mprotect+0x80/0x90
[  339.475751][T16605]  do_syscall_64+0xfa/0x3b0
[  339.477596][T16605]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  339.479988][T16605] 
[  339.480993][T16605] Memory state around the buggy address:
[  339.483350][T16605]  ffff888109be5a80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  339.486439][T16605]  ffff888109be5b00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  339.489557][T16605] >ffff888109be5b80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  339.492687][T16605]                                            ^
[  339.495042][T16605]  ffff888109be5c00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  339.498196][T16605]  ffff888109be5c80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  339.501329][T16605] ==================================================================
[  339.505013][T16605] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  339.507980][T16605] CPU: 1 UID: 0 PID: 16605 Comm: syz.2.2747 Not tainted syzkaller #0 PREEMPT(full) 
[  339.511755][T16605] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  339.515794][T16605] Call Trace:
[  339.517158][T16605]  <TASK>
[  339.518387][T16605]  dump_stack_lvl+0x99/0x250
[  339.520221][T16605]  ? __asan_memcpy+0x40/0x70
[  339.522151][T16605]  ? __pfx_dump_stack_lvl+0x10/0x10
[  339.524235][T16605]  ? __pfx__printk+0x10/0x10
[  339.526144][T16605]  vpanic+0x281/0x750
[  339.527744][T16605]  ? __pfx_vpanic+0x10/0x10
[  339.529644][T16605]  ? irqentry_exit+0x74/0x90
[  339.531540][T16605]  panic+0xb9/0xc0
[  339.533015][T16605]  ? __pfx_panic+0x10/0x10
[  339.534850][T16605]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  339.537369][T16605]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  339.539867][T16605]  ? xfrm_alloc_spi+0x570/0xf30
[  339.541842][T16605]  check_panic_on_warn+0x89/0xb0
[  339.543943][T16605]  ? xfrm_alloc_spi+0x570/0xf30
[  339.546003][T16605]  end_report+0x78/0x160
[  339.547813][T16605]  kasan_report+0x129/0x150
[  339.549748][T16605]  ? xfrm_alloc_spi+0x570/0xf30
[  339.551773][T16605]  xfrm_alloc_spi+0x570/0xf30
[  339.553783][T16605]  ? xfrm_alloc_spi+0x2a0/0xf30
[  339.555819][T16605]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  339.557960][T16605]  ? xfrm_find_acq+0x87/0xa0
[  339.559833][T16605]  xfrm_alloc_userspi+0x70b/0xc90
[  339.561840][T16605]  ? apparmor_capable+0x137/0x1b0
[  339.563846][T16605]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  339.566186][T16605]  ? __nla_parse+0x40/0x60
[  339.567983][T16605]  xfrm_user_rcv_msg+0x7a3/0xab0
[  339.569960][T16605]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  339.572117][T16605]  ? __pfx___mutex_trylock_common+0x10/0x10
[  339.573979][T16605]  ? rcu_is_watching+0x15/0xb0
[  339.575506][T16605]  ? trace_contention_end+0x39/0x120
[  339.577150][T16605]  ? __mutex_lock+0x335/0x1350
[  339.578655][T16605]  netlink_rcv_skb+0x208/0x470
[  339.580153][T16605]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  339.581854][T16605]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  339.583520][T16605]  ? netlink_deliver_tap+0x2e/0x1b0
[  339.585133][T16605]  ? netlink_deliver_tap+0x2e/0x1b0
[  339.586750][T16605]  xfrm_netlink_rcv+0x79/0x90
[  339.588223][T16605]  netlink_unicast+0x82f/0x9e0
[  339.589726][T16605]  ? __pfx_netlink_unicast+0x10/0x10
[  339.591400][T16605]  ? netlink_sendmsg+0x642/0xb30
[  339.592927][T16605]  ? skb_put+0x11b/0x210
[  339.594260][T16605]  netlink_sendmsg+0x805/0xb30
[  339.595784][T16605]  ? __pfx_netlink_sendmsg+0x10/0x10
[  339.597425][T16605]  ? aa_sock_msg_perm+0xf1/0x1d0
[  339.598952][T16605]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  339.600607][T16605]  ? __pfx_netlink_sendmsg+0x10/0x10
[  339.602244][T16605]  __sock_sendmsg+0x21c/0x270
[  339.603708][T16605]  ____sys_sendmsg+0x505/0x830
[  339.605192][T16605]  ? __pfx_____sys_sendmsg+0x10/0x10
[  339.606829][T16605]  ? import_iovec+0x74/0xa0
[  339.608248][T16605]  ___sys_sendmsg+0x21f/0x2a0
[  339.609748][T16605]  ? __pfx____sys_sendmsg+0x10/0x10
[  339.611516][T16605]  ? __fget_files+0x2a/0x420
[  339.613089][T16605]  ? __fget_files+0x3a0/0x420
[  339.614924][T16605]  __x64_sys_sendmsg+0x19b/0x260
[  339.616581][T16605]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  339.618455][T16605]  ? rcu_is_watching+0x15/0xb0
[  339.620188][T16605]  ? do_syscall_64+0xbe/0x3b0
[  339.622019][T16605]  do_syscall_64+0xfa/0x3b0
[  339.623766][T16605]  ? lockdep_hardirqs_on+0x9c/0x150
[  339.625667][T16605]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  339.627613][T16605]  ? exc_page_fault+0x9f/0xf0
[  339.629144][T16605]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  339.631081][T16605] RIP: 0033:0x7f3d2738eba9
[  339.632685][T16605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  339.638737][T16605] RSP: 002b:00007f3d2828c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  339.641317][T16605] RAX: ffffffffffffffda RBX: 00007f3d275d5fa0 RCX: 00007f3d2738eba9
[  339.644523][T16605] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005
[  339.647658][T16605] RBP: 00007f3d27411e19 R08: 0000000000000000 R09: 0000000000000000
[  339.650829][T16605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  339.654005][T16605] R13: 00007f3d275d6038 R14: 00007f3d275d5fa0 R15: 00007ffc848cc248
[  339.657193][T16605]  </TASK>
[  339.659141][T16605] Kernel Offset: disabled
[  339.660941][T16605] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:20:42  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000010 RBX=ffff888022b1bf10 RCX=5b952a4676f28300 RDX=0000000000140dc2
RSI=0000000000000010 RDI=ffffc90004ddf040 RBP=ffffc90004ddf130 RSP=ffffc90004ddeff8
R8 =ffffc90004ddef90 R9 =000000000000000f R10=ffffc90004ddef18 R11=ffffffff81ac3ae0
R12=dffffc0000000000 R13=1ffff920009bbe04 R14=ffffc90004ddf040 R15=1ffff110045637e2
RIP=ffffffff84fefe44 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f689ba8a6c0 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c35a974 CR3=000000011d654000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fc4a1012e53
XMM06=0000000000000000 00007fc4a1012e4d XMM07=0000000000000000 00007fc4a1012e61
XMM08=0000000000000000 00007fc4a1012ee7 XMM09=0000000000000000 00007fc4a1012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90004e5e9f0
R8 =ffff88801ff50237 R9 =1ffff11003fea046 R10=dffffc0000000000 R11=ffffffff854f4b80
R12=dffffc0000000000 R13=ffffffff99b018d4 R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f4bfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f3d2828c6c0 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f952c130008 CR3=000000010bbba000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f3d275a7498 00007f3d275a7470 XMM03=00007f3d275a74a8 00007f3d275a74a0
XMM04=00007f3d2810d100 00007f3d275a7460 XMM05=00007f3d275a7478 00007f3d275a74c0
XMM06=00007f3d275a74b8 00007f3d275a74b0 XMM07=00007f3d275a74a8 00007f3d275a74a0
XMM08=0000000000000000 00007f3d27412ee7 XMM09=0000000000000000 00007f3d27412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
