last executing test programs:

1.327590938s ago: executing program 2 (id=6418):
socket$alg(0x26, 0x5, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c8, 0x0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x418, 0x3d8, 0x3d8, 0x418, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @local, [0xff, 0xffffffff, 0x0, 0xff000000], [0xffffff00, 0xff000000], 'erspan0\x00', 'wlan0\x00', {}, {0xff}, 0x2b, 0x3, 0x3}, 0x0, 0x1a0, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket(0x2c, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="ceffffff", @ANYRES16=r6, @ANYBLOB="010000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x24004000)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1}, 0x1c)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000e80)={{{@in=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{}, 0x0, @in=@local}}, &(0x7f0000000900)=0xe8)
r8 = gettid()
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001000)={{{@in6=@private0, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8)
r10 = socket$kcm(0x2, 0x5, 0x84)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, <r11=>0x0}, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000440)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r11, @ANYBLOB="00000000180000bf98b926203132d5493e251bfbce03d76e2691740adb8397", @ANYRES32, @ANYRES32], 0x58, 0x400}, 0x800)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000019100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000090a010100000000000000000000000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021080003400000014108000f"], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x8000000)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000c40)=<r13=>0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000cc0)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000dc0)=0xe8)
getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000000e40))
sendmmsg$unix(r3, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000677da7aab57446cd0bbbcdc7fd6f060b00000008000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r10, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r13, @ANYRES32=r14, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x98, 0x10}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)="98e8b6e7d50653c2f862736fae148aa43c999e11268d5bc7f0f8abb91f293ae988d8b32a1ca9580af01acf2184e153741973710551e6ab8fffc45bec0f362a6355fe250db01284f260b66b2fe5069c084d191a95cea3e398bf64432c535c132e2dc26074b9b2ef1d007f1bad02367a09162e8e26b5462dab34dc68f3f02c5f4bf63340ae33c05beaec673fa79c6a6b0ce0aa9ac78609c6680d7eb3cf24432b8c8ef9c8dc172055f1af29af8c280f8d5b676b83ac2f6ffa17b778fdea51d7afab7d54900b70aa66e62f", 0xc9}], 0x1, 0x0, 0x0, 0x4000000}}], 0x2, 0x40008d0)
setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000100)={@remote, @broadcast, @loopback}, 0xc)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r15, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r4, @ANYBLOB="05005b"], 0x24}}, 0x0)

1.077291557s ago: executing program 2 (id=6422):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x95}, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'macsec0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000880}, 0x10)
r4 = accept4(r3, &(0x7f00000000c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000180)=0x80, 0x80000)
sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x841}, 0x40000)
close(0x3)

969.85098ms ago: executing program 2 (id=6424):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a0104000000f5ffffff000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040)

969.337659ms ago: executing program 2 (id=6425):
socket$packet(0x11, 0x3, 0x300) (async)
syz_80211_inject_frame(&(0x7f0000000180), 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c000000200025a729bd7000fddbdf250a0000cdff00000102000100080006000000000008001000060000000d57e755cfc8954a0b14dd46beb433b533dcddc8c3fc93db4e2434ff6bddf9707d5356baf2d864f2d4b2e17e52f1e57f3bd63519d846ba65658784bd8ee769dfcebd85e78d82ed525ec9f646"], 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) (async)
r4 = socket(0x0, 0x3, 0xffffffff) (async, rerun: 32)
sendmsg$nl_route(r0, 0x0, 0x0) (async, rerun: 32)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x30, 0xffffffffffffffff, 0x4536e000)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r6, 0x800448d2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000013c0)) (async)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x1) (async, rerun: 64)
r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='cpuacct.usage_percpu\x00', 0x0, 0x0) (rerun: 64)
sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYRES16=0x0, @ANYRES16=r0], 0x44}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x55) (async, rerun: 64)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000002c0)=[@in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e20, 0x5d, @dev={0xfe, 0x80, '\x00', 0x29}, 0x18000000}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e22, @empty}], 0x4c) (rerun: 64)
socket$unix(0x1, 0x1, 0x0) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (rerun: 32)
r8 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0}) (rerun: 64)
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x800, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x7, 0x2}, {0x4, 0xffe0}, {0x10, 0xfff2}}, ["", ""]}, 0x24}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="360000001d00000427bd70008200", @ANYRES32=0x0, @ANYBLOB="000006e10800070023f9000008000d00df00000008000b00ffffffff"], 0x34}}, 0x0)

871.071672ms ago: executing program 2 (id=6426):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x301)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000380)={'gretap0\x00', <r1=>0x0, 0x4008, 0x80, 0x3, 0x5, {{0x29, 0x4, 0x0, 0x2, 0xa4, 0x67, 0x0, 0x2, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, {[@cipso={0x86, 0x1a, 0x1, [{0x1, 0x7, "ff24f60fe4"}, {0x0, 0x9, "5273039bc7c4e5"}, {0x6, 0x4, "9389"}]}, @generic={0x82, 0x12, "038de5ff0000004b4584ce1ee972a954"}, @lsrr={0x83, 0xf, 0x43, [@broadcast, @multicast2, @private=0xa010101]}, @timestamp_addr={0x44, 0x54, 0xe, 0x1, 0x8, [{@broadcast, 0x9}, {@remote, 0x7}, {@rand_addr=0x64010102, 0x4}, {@loopback, 0x2}, {@multicast2, 0xfffffffa}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x200}, {@remote, 0x8}, {@multicast2, 0x4}, {@rand_addr=0x9, 0xc480}, {@remote, 0x33cb}]}, @noop]}}}}})
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)={0x88, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x401}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x80000)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000340)={0x0, &(0x7f0000000080)}, 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={<r3=>r2})
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000100)={<r4=>0x0, 0xcd9}, &(0x7f0000000140)=0x8)
pipe(&(0x7f0000000480)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r8, 0x84, 0x1e, &(0x7f00000008c0)=0x2, 0x4)
r9 = socket$netlink(0x10, 0x3, 0x0)
writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004", 0x23}], 0x1)
writev(r9, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
splice(r5, 0x0, r7, 0x0, 0x10d00, 0xf)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICADD(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), r12)
ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000b00)={'wpan0\x00', <r14=>0x0})
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r12, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x1c, r13, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r14}]}, 0x1c}}, 0x50)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan4\x00', <r15=>0x0})
sendmsg$NL802154_CMD_GET_WPAN_PHY(r10, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, r11, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x14)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000180)={r4, @in={{0x2, 0x4e20, @local}}, 0x4, 0x4, 0x5, 0x8, 0x80, 0x3}, 0x9c)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0x1000fff, 0xffffffffffffffff, 0x0, 0xa0028000}, 0x86)

418.331733ms ago: executing program 1 (id=6441):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 64)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) (rerun: 64)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x7fffffff}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xfffffffc}]}}]}, 0x40}}, 0x800) (async)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
read$alg(r5, 0x0, 0x0) (async)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_VRING_ENDIAN(r6, 0x4001af83, &(0x7f0000000080)={0x0, 0x6}) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0xd, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0xce2}, @cb_func={0x18, 0x368a2c322e221ef1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000080)='GPL\x00', 0x8001, 0x6f, &(0x7f00000000c0)=""/111, 0x40f00, 0x40, '\x00', r3, @sock_ops, r4, 0x8, &(0x7f0000000180)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r5, 0x4, 0x0, &(0x7f00000001c0)=[{0x5, 0x4, 0x9, 0xc}, {0x3, 0x3, 0x10, 0x6}, {0x3, 0x4, 0xe}, {0x3, 0x3, 0x0, 0x9}], 0x10, 0x2}, 0x94)

341.21561ms ago: executing program 0 (id=6442):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000140)=[{{}, {0x0, 0x0, 0x1, 0x1}}], 0x8)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0)
pipe(&(0x7f0000000680)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
writev(r3, &(0x7f0000000200)=[{0x0}, {&(0x7f00000006c0)="e6", 0xfdef}], 0x2)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r4, 0x0)

290.54952ms ago: executing program 1 (id=6443):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
socket(0x21, 0x3, 0xa)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000500)=0x5, 0x4)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r2, &(0x7f00000002c0)="23000000010006", 0x7)
r3 = socket$inet6(0xa, 0x4, 0x7)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x2, @loopback, 0x5}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x2, @mcast1, 0xf}], 0x74)
r5 = socket$netlink(0x10, 0x3, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000001006e65746465767300000000000f0002006e657464657673696d3000"/46], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x4, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000f00100000000000009000000852000000300000000deff000000010095000000000000009cb2af89915b7c2795b8495f0e94dde2f8a3385e157d7ceb5b93561ce1786a3913a36e94d4f9497764b10dc1a1645654fb54781ee280ee20c8fa4f96d2d27f84af11d28385a82e0d14e0d25502e2f864410aaace63621f42045dce0fbf00269b5262f9e7a33cfb42f6181e08575df9ac05e0ab3a1e14b8320f0009000000957e19db29a14a44799fda1e"], &(0x7f0000000240)='GPL\x00', 0x3, 0x8c, &(0x7f0000000440)=""/140, 0x41000, 0x11, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0xa, 0x8000, 0x401}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000a80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r0], &(0x7f0000000ac0)=[{0x1, 0x4, 0x7, 0x6}, {0x4, 0x2, 0x5, 0x8}, {0x2, 0x4, 0xa}, {0x2, 0x3, 0x0, 0x8}, {0x0, 0x4, 0xd, 0xb}], 0x10, 0x5bb}, 0x94)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, r11, 0xd01, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x851}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r12, @ANYBLOB="08002600940900000400b8400800b70099000000"], 0x30}}, 0x0)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x1)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)

286.737077ms ago: executing program 0 (id=6444):
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000))
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000002100140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYRESDEC=0x0, @ANYRES64], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

209.028161ms ago: executing program 0 (id=6445):
r0 = socket$inet6(0xa, 0x1, 0x84)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003300000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0000ff", @ANYRES16=r4, @ANYBLOB="010029bd7000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c009900410000005f0000000800a00076090000080026006c0900000800270003000000"], 0x40}}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r6)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x3c, r8, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "78c73ef8ba"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac08}]}]}, 0x3c}}, 0xc0000)
sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r5, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4004)

206.519214ms ago: executing program 1 (id=6446):
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c12123c6b82ff5791e79975ef1dd953"], 0x30}], 0x1, 0x40) (async)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001140)=""/4096, &(0x7f0000000080)=0x1000) (async)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x84, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xff}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_PROTO={0x5}]}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0xfffffffffffffea2}}, 0x20048084)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="f000000010008c76fcffff070000000000000000000000000000000000000000ff0100000000000000000000000000014e240003201000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000020000000000000000000000001000000432000000fe8000000000000000000000000000bb00000000020000006508000000000000000000000000000000000000000000000000000000000000487d000000000000000000000000001000000000050000000000000004000000000000000d000000000000000a00000000000000000000000004000000000000fcffffff000000000a0001068800000000000000"], 0xf0}}, 0x20000000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000000206c806f6d20a9f454bdf963085010200000000000000020000000505000000000500010007000000050005000200000004000780"], 0x3c}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) (async)
r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read(r2, 0x0, 0x97) (async)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff0800044000000081080008400000000320000180"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) (async)
r3 = socket(0x2c, 0x3, 0x0) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x48)
setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000200)=[{{0x4, 0x0, 0x1}, {0x0, 0x1, 0x1}}, {{0x1, 0x1}, {0x2, 0x0, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x1}}, {{0x1, 0x1}, {0x3, 0x0, 0x1}}, {{0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x0, 0x1}}], 0x30)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) (async)
socket(0x2c, 0x3, 0x0) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async)
recvmmsg(r5, &(0x7f0000001740), 0x0, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040040)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async)
socket$xdp(0x2c, 0x3, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
socket$nl_generic(0x10, 0x3, 0x10)

150.794466ms ago: executing program 0 (id=6447):
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000080)={0x2, [0x3, 0x1]}, 0x8)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000000)={0x2, [0x5, 0x6]}, &(0x7f0000000040)=0x8)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r2, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4)
write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast2, @in6=@private1}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000340)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@mcast2, @in6=@ipv4={""/10, ""/2, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@empty}, 0x0, @in=@remote}}, &(0x7f0000000480)=0xe8)
r4 = accept4$rose(0xffffffffffffffff, &(0x7f0000000580)=@short={0xb, @dev, @bcast, 0x1, @bcast}, &(0x7f00000005c0)=0x1c, 0x80000)
r5 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000840))
sendmsg$netlink(r0, &(0x7f0000000640)={&(0x7f0000000200)=@kern={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)=[{&(0x7f0000003b40)={0x13d0, 0x12, 0x4, 0x70bd28, 0x25dfdbfb, "", [@nested={0x11bb, 0x91, 0x0, 0x1, [@generic="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", @nested={0x1ad, 0x144, 0x0, 0x1, [@generic="1f64f8da6f4b7b8337214b2e619dfe183c0905e7e9979957478780a9950e6c8ce28f864767c604e38e881ddfb0d0f7c6a97a12260a8b6351c8a6e7f00a7029072308403312c3c5ad9b07427cc773b1100251d8225f5e718e0026784c0ad17daeb4b4e0f8e38a9d5e21b9566563328c89bb4cc9c64867c1a5b13d2edd8ba214907ff037c218f051f43c6db7a9f6744159085d9e8937a319a9981a56745d88e133e63bd5648a3d70c6583f5bba4ac6762f967a16cb85cf7812650ed13e3c", @typed={0x8, 0x89, 0x0, 0x0, @fd=r5}, @typed={0xe4, 0x53, 0x0, 0x0, @binary="484a504fda9a9cab7571d572e4b636697f6ea9a1ae2a834a4ff0db2754d3d40889db9c197bc2243175f0d387b2cf3f55157983fab5fa0c69d6b8aea60bfd4026706fea25cea45733f93ac4669bb08ee07134b35a440b3d37ee9fab262dae189ed3daad2f366218696d9991df406738e741e8b5e41b9a79f882e1ccd9f8e7367f174623abc8100c618fe8974fa867d360296098d44fb8afa891ca461b169b13d1e5143b4d6a7aee69a8461d54ed3ece311f90341e4238cb20720bc634768dfe1a0dc0229afe2953819bd62058f07c5502fc3852413d414f76a7d6995272eab275"}]}, @nested={0x4, 0x9c}, @nested={0x4, 0x5c}]}, @nested={0x38, 0x2a, 0x0, 0x1, [@typed={0x8, 0x125, 0x0, 0x0, @u32}, @nested={0x4, 0xa8}, @typed={0x14, 0x3e, 0x0, 0x0, @ipv6=@private2}, @typed={0x14, 0x40, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, @generic="6b326a43ac6ae6709bcf112046683ff2f12134b3036ee8a8ab6243d6843564eed4eb7ddf3081b6264707eb4755a16909744980", @typed={0x8, 0x13d, 0x0, 0x0, @uid=r3}, @generic="83b9b8fab472c6b3c246cf7b6c836e7ef70178d97e23ac4694bdd88f1a7c860a21c4c83a1d98ada9311cde3f543509529fc335df306bd0e35210343556d9f877172973ce15327ca38947ce542a3c33898dbf10fa432c4f11353765bb77591a597d", @nested={0x12e, 0x88, 0x0, 0x1, [@generic="78ec6961c7fb64c157671cb88d4409b180f21d1fd539d9bc7cdf49e15aa7eea1faf824470eea16197c2709071f89b694a624a9", @generic="0b2ba659908170934ca874ec9392a9cdd7ff9ee4ccd40f2bebd7460af96d05a90a8ce400fca8ddc58d117ad1c88ae50c292b3e7539fd01f3d750142daa990559f11fb3e1bb5bd2288e5bb81ffd30bcfacb03e6a2bbd49d3e199b78fd09b81b287a84d94002b97acf8c2923b6019e6d30d4f1a452b12c4039842a05763d295f3bdda2945da0adcb3d66afbe262d17957c1cabb2b6aec466e0844534b1cfa35a8700a320144fd298e44a23b269de0463a431d48be62c055496eb2ed9f3afed9ef39b39003d5b62356d111381c45af9fb5ea73cc510388e3e2af8128f5dde221196559ca40b494e3e25acd3e6b3caec1f6c08850c90fdacb4"]}]}, 0x13d0}, {&(0x7f00000004c0)={0x1c, 0x3c, 0x8, 0x70bd26, 0x25dfdbfb, "", [@nested={0xc, 0x119, 0x0, 0x1, [@typed={0xffffffffffffffd4, 0x23, 0x0, 0x0, @u32=0x3ff}]}]}, 0x1c}, {&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x10c}], 0x3, &(0x7f0000000600)=[@rights={{0x28, 0x1, 0x1, [r0, r0, r4, r5, r0, r0]}}], 0x28, 0x48850}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r9, 0x11, 0x4, 0x0, {0x6}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x91}, {0x6, 0x16, 0x2}, {0x5}}]}, 0x50}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x4004, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x6, 0x1, 0x6}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4008094)
sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_deladdrlabel={0x24, 0x49, 0x800, 0x70bd25, 0x25dfdbfd, {0xa, 0x0, 0x10, 0x0, r7, 0x7fff}, [@IFAL_LABEL={0x8, 0x2, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x0, 0x3}, 0x9c)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0x8}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r10, &(0x7f0000000240), &(0x7f0000000080)=@udp, 0x19e6911585393082}, 0x20)
r11 = accept4$inet(r0, &(0x7f0000000700)={0x2, 0x0, @multicast2}, &(0x7f0000000740)=0x10, 0x80000)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'xfrm0\x00'})
ioctl$sock_inet_SIOCADDRT(r11, 0x890b, &(0x7f0000000780)={0x0, {0x2, 0x4e23, @loopback}, {0x2, 0x8, @remote}, {0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x401, 0x4})

96.465564ms ago: executing program 1 (id=6448):
r0 = socket(0x2, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf25030000000c000600020000000000000008000100000000000c0006000100000000000000640007800c00018008000100", @ANYRES32=r0, @ANYRESOCT, @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32=r0, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c000180080001007f3c908b234a5d5201ddc670e5ce9f68633d6c1768b6f1939cc4a4c63f0cd7df46", @ANYRES32=r0, @ANYBLOB="0c00018008000100", @ANYRES32=r0, @ANYBLOB="0c00018008000100", @ANYRES8, @ANYBLOB="0c0001800800000000", @ANYRES32=r0, @ANYBLOB="0d000a00237d5d292c5b25b17d0000000c0004000100fcffffff00000c0008000700000000000000"], 0xc0}, 0x1, 0x0, 0x0, 0x20004001}, 0xc0)

95.787584ms ago: executing program 0 (id=6449):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket(0x1e, 0x2, 0xb5)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="290b0000000000001c00128009000100626f6e64000000000c0002800500010001"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
syz_emit_ethernet(0x82, &(0x7f0000000240)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @rand_addr=0x4, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1=0xe0000089}, {@private}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0)

93.901741ms ago: executing program 1 (id=6450):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000140)=[{{}, {0x0, 0x0, 0x1, 0x1}}], 0x8)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0)
pipe(&(0x7f0000000680)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
writev(r3, &(0x7f0000000200)=[{0x0}, {&(0x7f00000006c0)="e6", 0xfdef}], 0x2)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r4, 0x0)

1.141559ms ago: executing program 1 (id=6451):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newsa={0x158, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in=@private=0xa010100, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7f}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0x2, 0x1, 0xfe}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x40, "6fc3070b4f8f7330202b93875f2d67a6a77871db764ec62c9599d2"}}]}, 0x158}}, 0x804)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
vmsplice(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000140)="438d9ea065cba49945c7638ceae1ae0ce81d2d58efd38019218141da7ee97f61370daaa59e5e4edee1adfb43605d7933647892544940be4a59f9d63d5aff73ce8b498e0e64898f4d38dfcf9a4ab12a254c24c199e882ca2207e036ddacc2ac995e14ad43c4391ecc34effaadb5d6559ea5669139d9c6f29ebe977a497c310a9c40", 0x81}], 0x1, 0x6)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r7, 0x0)
mkdirat$cgroup(r6, &(0x7f0000000080)='syz0\x00', 0x1ff)
ioctl$TUNSETLINK(r4, 0x400454cc, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r8, 0x400454ce, 0x9)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendto$inet(r3, &(0x7f0000000580)="17", 0xfffffffffffffe08, 0x10008095, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x8, 0x10}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x7d, "4dc5025621f7b75701a08f97ddfcbae3"}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x4000000)
socket$inet6(0xa, 0x2, 0x0)

875.75µs ago: executing program 0 (id=6452):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d28616573290000000000000000000000fffffff000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)

0s ago: executing program 2 (id=6453):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000600000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040)

kernel console output (not intermixed with test programs):

to HW filter on device bond16
[  268.726724][T18831] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address
[  268.732538][T18831] bond0: (slave vxcan3): Error -95 calling set_mac_address
[  268.921745][T18843] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4086'.
[  268.925341][T18843] block nbd0: not configured, cannot reconfigure
[  269.367169][T18870] ip_vti0: Master is either lo or non-ether device
[  269.865001][T18911] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  269.868079][T18911] mac80211_hwsim hwsim69 syzkaller0: entered promiscuous mode
[  269.873218][T18911] mac80211_hwsim hwsim69 syzkaller0: entered allmulticast mode
[  269.881496][T18911] mac80211_hwsim hwsim69 syzkaller0: Caught tx_queue_len zero misconfig
[  269.892947][T18911] netem: change failed
[  270.230552][T18938] mac80211_hwsim hwsim187 wlan1: entered allmulticast mode
[  270.247400][T18938] netlink: 'syz.0.4120': attribute type 10 has an invalid length.
[  270.300904][T18943] netlink: 'syz.1.4122': attribute type 13 has an invalid length.
[  270.304001][T18943] netlink: 'syz.1.4122': attribute type 17 has an invalid length.
[  270.315274][T18943] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  270.376232][T18943] lo speed is unknown, defaulting to 1000
[  271.451787][T18974] openvswitch: netlink: Flow actions attr not present in new flow.
[  271.801924][T18999] netlink: 'syz.2.4139': attribute type 10 has an invalid length.
[  272.046566][T19014] lo speed is unknown, defaulting to 1000
[  272.073803][T19022] block nbd0: not configured, cannot reconfigure
[  272.434504][T19048] lo speed is unknown, defaulting to 1000
[  272.547810][T19057] block nbd0: not configured, cannot reconfigure
[  273.173114][T19081] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  273.202793][T19082] __nla_validate_parse: 20 callbacks suppressed
[  273.202818][T19082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4167'.
[  273.210999][T19082] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4167'.
[  273.237914][T19084] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4168'.
[  273.442941][T19100] netlink: 'syz.2.4175': attribute type 1 has an invalid length.
[  273.445613][T19100] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4175'.
[  273.467004][T19102] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4176'.
[  273.593729][T19116] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4178'.
[  274.025019][T19141] netlink: 'syz.1.4186': attribute type 4 has an invalid length.
[  274.044397][ T5898] lo speed is unknown, defaulting to 1000
[  274.046511][ T5898] syz0: Port: 1 Link DOWN
[  274.048191][ T5898] lo speed is unknown, defaulting to 1000
[  274.056716][T19141] netlink: 'syz.1.4186': attribute type 4 has an invalid length.
[  274.074142][ T5898] lo speed is unknown, defaulting to 1000
[  274.076423][ T5898] syz0: Port: 1 Link ACTIVE
[  274.082267][ T5898] lo speed is unknown, defaulting to 1000
[  274.110855][T19145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4187'.
[  274.172376][T19157] netlink: 'syz.2.4191': attribute type 1 has an invalid length.
[  274.175997][T19157] workqueue: Failed to create a rescuer kthread for wq "bond45": -EINTR
[  274.291438][T19174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4193'.
[  274.301174][T19174] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4193'.
[  274.316604][T19167] 8021q: adding VLAN 0 to HW filter on device bond16
[  274.337404][T19167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4192'.
[  274.598957][T19189] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  274.605313][ T2333] lo speed is unknown, defaulting to 1000
[  274.607725][ T2333] syz0: Port: 1 Link DOWN
[  274.610057][ T2333] lo speed is unknown, defaulting to 1000
[  275.095061][T19220] 8021q: adding VLAN 0 to HW filter on device bond3
[  275.363540][T19230] geneve2: entered promiscuous mode
[  275.368230][T10570] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  275.379158][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  275.381718][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  275.388008][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  275.437507][T19232] netlink: 'syz.1.4213': attribute type 1 has an invalid length.
[  275.644178][T19247] netem: incorrect ge model size
[  275.646171][T19247] netem: change failed
[  275.773934][T19255] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20001
[  275.882165][T19265] block nbd0: not configured, cannot reconfigure
[  276.060366][T19286] netlink: 'syz.1.4230': attribute type 10 has an invalid length.
[  276.132665][T19290] caif0: entered promiscuous mode
[  276.184362][T19304] block nbd0: not configured, cannot reconfigure
[  276.293400][T19313] netlink: 'syz.0.4237': attribute type 9 has an invalid length.
[  276.421180][T19325] 8021q: adding VLAN 0 to HW filter on device bond5
[  276.436262][T19325] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  276.440427][T19325] bond5: (slave macvlan2): Enslaving as a backup interface with a down link
[  276.460653][T19325] bond5: (slave macvlan2): Releasing backup interface
[  276.465447][T19329] block nbd0: not configured, cannot reconfigure
[  276.619125][T19341] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  276.640916][T19341] mac80211_hwsim hwsim92 syzkaller0: entered promiscuous mode
[  276.644084][T19341] mac80211_hwsim hwsim92 syzkaller0: entered allmulticast mode
[  276.845916][T19366] block nbd0: not configured, cannot reconfigure
[  277.101271][T19384] ip_vti0: Master is either lo or non-ether device
[  277.186179][T19387] netlink: 'syz.2.4259': attribute type 12 has an invalid length.
[  277.673755][T19426] lo speed is unknown, defaulting to 1000
[  277.815614][T19430] lo speed is unknown, defaulting to 1000
[  278.124478][T19447] netlink: 'syz.1.4275': attribute type 1 has an invalid length.
[  278.177447][T19447] bond18: (slave vxcan9): The slave device specified does not support setting the MAC address
[  278.183615][T19447] bond18: (slave vxcan9): Error -95 calling set_mac_address
[  278.636176][T19469] __nla_validate_parse: 22 callbacks suppressed
[  278.636188][T19469] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4284'.
[  278.642493][T19469] nbd: couldn't find a device at index 0
[  278.666493][T19474] lo speed is unknown, defaulting to 1000
[  279.233891][T19484] netlink: 'syz.2.4287': attribute type 1 has an invalid length.
[  279.254228][T19484] 8021q: adding VLAN 0 to HW filter on device bond45
[  279.513273][T19492] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4290'.
[  279.573620][T19494] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4291'.
[  279.578617][T19494] nbd: couldn't find a device at index 0
[  279.605476][T19498] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4292'.
[  279.732059][T19509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4296'.
[  279.777661][T19515] ip_vti0: Master is either lo or non-ether device
[  279.815474][T19519] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4300'.
[  279.820983][T19519] nbd: couldn't find a device at index 0
[  279.864439][T19518] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4301'.
[  279.982191][T19539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4307'.
[  280.035420][T19544] ip_vti0: Master is either lo or non-ether device
[  280.103482][T19549] mac80211_hwsim hwsim47 wlan0: entered promiscuous mode
[  280.194336][T19564] netlink: 'syz.0.4314': attribute type 11 has an invalid length.
[  280.271706][T19571] netlink: 'syz.0.4316': attribute type 3 has an invalid length.
[  280.276766][T19571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4316'.
[  280.330588][T19578] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4319'.
[  280.334067][T19578] nbd: couldn't find a device at index 0
[  280.400721][T19583] netlink: 'syz.0.4321': attribute type 1 has an invalid length.
[  280.441403][T19585] lo speed is unknown, defaulting to 1000
[  280.656110][T19603] mac80211_hwsim hwsim197 wlan1: entered allmulticast mode
[  280.690396][T19606] bond3: option mode: unable to set because the bond device is up
[  280.702313][T19606] 8021q: adding VLAN 0 to HW filter on device macvlan6
[  280.706217][T19606] bond3: (slave macvlan6): Enslaving as a backup interface with a down link
[  280.710362][T19608] nbd: couldn't find a device at index 0
[  280.773335][T19616] mac80211_hwsim hwsim187 wlan1: left allmulticast mode
[  280.807067][T19619] veth0_to_bond: entered allmulticast mode
[  280.831886][T19616] netlink: 'syz.0.4331': attribute type 10 has an invalid length.
[  280.834638][T19617] netlink: 'syz.0.4331': attribute type 10 has an invalid length.
[  280.910820][T19627] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  280.949248][T19633] nbd: couldn't find a device at index 0
[  280.993003][T19635] lo speed is unknown, defaulting to 1000
[  281.159975][T19652] netlink: 'syz.1.4342': attribute type 1 has an invalid length.
[  281.169832][T19650] ip_vti0: Master is either lo or non-ether device
[  281.330389][T19660] netlink: 'syz.1.4345': attribute type 13 has an invalid length.
[  282.146440][T19695] netlink: 'syz.2.4356': attribute type 13 has an invalid length.
[  282.150718][T19695] netlink: 'syz.2.4356': attribute type 17 has an invalid length.
[  282.178473][T19695] 8021q: adding VLAN 0 to HW filter on device team0
[  282.196396][T19695] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  282.326493][T19709] netlink: 'syz.1.4360': attribute type 1 has an invalid length.
[  282.363854][T19714] bond3: option mode: unable to set because the bond device has slaves
[  282.724760][T19723] openvswitch: netlink: Flow actions attr not present in new flow.
[  282.975044][T19737] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  283.337803][T19747] lo speed is unknown, defaulting to 1000
[  283.867646][T19770] bond3: (slave macvlan6): Releasing backup interface
[  284.175058][T19804] __nla_validate_parse: 21 callbacks suppressed
[  284.175072][T19804] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4391'.
[  284.181259][T19804] openvswitch: netlink: Flow actions attr not present in new flow.
[  284.215867][T19805] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4390'.
[  284.257082][T19810] validate_nla: 4 callbacks suppressed
[  284.257093][T19810] netlink: 'syz.2.4392': attribute type 13 has an invalid length.
[  284.261467][T19810] netlink: 'syz.2.4392': attribute type 17 has an invalid length.
[  284.287409][T19810] lo speed is unknown, defaulting to 1000
[  284.535607][T19825] netlink: 'syz.0.4396': attribute type 15 has an invalid length.
[  284.603657][T19828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4397'.
[  284.774244][T19837] netlink: 'syz.1.4399': attribute type 10 has an invalid length.
[  285.427290][T19846] caif0: left promiscuous mode
[  285.430538][T19849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4403'.
[  285.433057][T19846] mac80211_hwsim hwsim47 wlan0: left promiscuous mode
[  285.438930][T19846] vlan2: left allmulticast mode
[  285.441059][T19846] mac80211_hwsim hwsim47 wlan0: left allmulticast mode
[  285.452152][T19846] geneve2: left promiscuous mode
[  285.470484][T10570] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  285.478481][T10570] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  285.481817][T10570] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  285.485066][T10570] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  285.577934][T19854] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4405'.
[  285.585625][T19854] nbd: couldn't find a device at index 0
[  285.603082][T19856] netlink: 'syz.2.4406': attribute type 10 has an invalid length.
[  285.666241][T19858] ip_vti0: Master is either lo or non-ether device
[  285.831475][T19869] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4411'.
[  285.991037][T19880] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4415'.
[  285.993785][T19880] openvswitch: netlink: Flow actions attr not present in new flow.
[  286.031509][T19887] netlink: 'syz.0.4416': attribute type 10 has an invalid length.
[  286.035275][T19887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4416'.
[  286.040928][T19887] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4416'.
[  286.044566][T19887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4416'.
[  286.091062][T19894] IPVS: length: 43 != 24
[  286.102518][T19895] netlink: 'syz.2.4414': attribute type 3 has an invalid length.
[  286.248984][T19900] team0: Mode changed to "activebackup"
[  286.353585][T19906] nbd: couldn't find a device at index 0
[  286.656556][T19922] ip_vti0: Master is either lo or non-ether device
[  286.750383][T19927] nbd: couldn't find a device at index 0
[  286.945013][T19940] ip_vti0: Master is either lo or non-ether device
[  287.010018][T19943] netlink: 'syz.0.4433': attribute type 10 has an invalid length.
[  287.051474][T19949] nbd: couldn't find a device at index 0
[  287.145626][T19954] lo speed is unknown, defaulting to 1000
[  287.274316][T19962] netlink: 'syz.0.4438': attribute type 11 has an invalid length.
[  287.335280][T19962] lo speed is unknown, defaulting to 1000
[  287.756632][T19979] nbd: couldn't find a device at index 0
[  287.880655][T19989] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  288.357393][T20031] mac80211_hwsim hwsim214 wlan0: entered promiscuous mode
[  288.361898][T20031] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  288.367917][T20032] netlink: 'syz.1.4460': attribute type 1 has an invalid length.
[  288.387828][T20032] 8021q: adding VLAN 0 to HW filter on device bond20
[  289.146245][T20093] netlink: 'syz.1.4478': attribute type 11 has an invalid length.
[  289.320979][T20101] __nla_validate_parse: 30 callbacks suppressed
[  289.320995][T20101] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4481'.
[  289.567280][T20130] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4488'.
[  289.587542][T20130] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4488'.
[  289.603896][T20129] pim6reg1: entered promiscuous mode
[  289.605817][T20129] pim6reg1: entered allmulticast mode
[  289.608275][T20133] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4490'.
[  289.653363][T20135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4491'.
[  289.656617][T20135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4491'.
[  289.658023][T20137] ip_vti0: Master is either lo or non-ether device
[  289.671475][T20138] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4489'.
[  289.702560][T20144] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4494'.
[  289.705458][T20144] nbd: couldn't find a device at index 0
[  289.722905][T20129] 8021q: adding VLAN 0 to HW filter on device bond17
[  289.725950][T20129] team0: Port device bond17 added
[  289.759606][T20148] validate_nla: 4 callbacks suppressed
[  289.759620][T20148] netlink: 'syz.2.4493': attribute type 10 has an invalid length.
[  289.833293][T20156] 8021q: adding VLAN 0 to HW filter on device bond5
[  289.850674][T20156] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  289.858173][T20156] bond5: (slave macvlan3): Enslaving as a backup interface with a down link
[  290.674928][T20156] team0: Port device bond17 removed
[  290.678927][T20156] bond5: (slave macvlan3): Releasing backup interface
[  290.727054][T20167] ip_vti0: Master is either lo or non-ether device
[  290.853118][T20183] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4506'.
[  290.937309][T20192] ip_vti0: Master is either lo or non-ether device
[  290.942786][T20194] netlink: 'syz.1.4510': attribute type 1 has an invalid length.
[  291.184635][T20225] netlink: 'syz.2.4515': attribute type 11 has an invalid length.
[  291.228789][T20221] lo speed is unknown, defaulting to 1000
[  291.291218][T20230] ip_vti0: Master is either lo or non-ether device
[  291.532087][T20234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4519'.
[  292.004063][T20261] lo speed is unknown, defaulting to 1000
[  292.167272][T20269] nbd: couldn't find a device at index 0
[  292.513692][T20287] nbd: couldn't find a device at index 0
[  292.564778][T20289] netlink: 'syz.0.4536': attribute type 1 has an invalid length.
[  292.596784][T20289] veth11: entered promiscuous mode
[  292.600770][T20289] bond18: (slave veth11): Enslaving as a backup interface with a down link
[  292.606024][T20289] bond18: (slave veth11): Releasing backup interface
[  292.683880][T20292] lo speed is unknown, defaulting to 1000
[  293.238307][T20306] nbd: couldn't find a device at index 0
[  293.270626][T20308] syzkaller1: entered promiscuous mode
[  293.272898][T20308] syzkaller1: entered allmulticast mode
[  293.283646][T20310] netlink: 'syz.0.4544': attribute type 5 has an invalid length.
[  293.324472][T20312] netlink: 'syz.0.4546': attribute type 1 has an invalid length.
[  293.345681][T20312] bond19: (slave vxcan3): The slave device specified does not support setting the MAC address
[  293.353871][T20312] bond19: (slave vxcan3): Error -95 calling set_mac_address
[  293.442039][T20317] veth13: entered promiscuous mode
[  293.443944][T20317] veth13: entered allmulticast mode
[  293.464980][T20319] mac80211_hwsim hwsim229 wlan0: entered promiscuous mode
[  293.559330][T20329] ip_vti0: Master is either lo or non-ether device
[  293.703578][T20331] lo speed is unknown, defaulting to 1000
[  293.899085][T20349] syzkaller1: entered promiscuous mode
[  293.905175][T20349] syzkaller1: entered allmulticast mode
[  294.036224][T20357] netlink: 'syz.0.4558': attribute type 5 has an invalid length.
[  294.070689][T20357] geneve3: entered promiscuous mode
[  294.072464][T20357] geneve3: entered allmulticast mode
[  294.075321][T20359] ip_vti0: Master is either lo or non-ether device
[  294.095068][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  294.100789][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  294.568286][T20392] ip_vti0: Master is either lo or non-ether device
[  294.987643][T20416] lo speed is unknown, defaulting to 1000
[  295.455380][T20428] __nla_validate_parse: 13 callbacks suppressed
[  295.455396][T20428] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4576'.
[  295.552987][T20430] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4577'.
[  295.705910][T20444] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4580'.
[  295.782501][T20440] netlink: 'syz.1.4579': attribute type 1 has an invalid length.
[  295.785899][T20440] netlink: 'syz.1.4579': attribute type 4 has an invalid length.
[  295.791052][T20440] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4579'.
[  295.795704][T20355] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  295.849307][T20355] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  295.917295][T10570] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  295.928910][T10570] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  295.985373][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  296.006979][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  296.049936][T20466] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4585'.
[  296.086773][T20469] netlink: 'syz.0.4586': attribute type 1 has an invalid length.
[  296.086799][T20470] netlink: 'syz.0.4586': attribute type 1 has an invalid length.
[  296.129074][T20469] bond20: (slave vxcan3): The slave device specified does not support setting the MAC address
[  296.133150][T20469] bond20: (slave vxcan3): Error -95 calling set_mac_address
[  296.173496][T20469] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4586'.
[  296.173501][T20470] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4586'.
[  296.252515][T20489] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4591'.
[  296.322634][T20494] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4592'.
[  296.326354][T20500] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4594'.
[  296.490627][T20513] openvswitch: netlink: Flow actions attr not present in new flow.
[  296.765625][T20542] netlink: 'syz.2.4611': attribute type 1 has an invalid length.
[  296.768074][T20542] netlink: 'syz.2.4611': attribute type 2 has an invalid length.
[  296.771339][T20542] netlink: 'syz.2.4611': attribute type 1 has an invalid length.
[  296.773754][T20542] netlink: 'syz.2.4611': attribute type 2 has an invalid length.
[  296.895310][T20552] netlink: 'syz.1.4610': attribute type 16 has an invalid length.
[  296.897904][T20552] netlink: 'syz.1.4610': attribute type 17 has an invalid length.
[  296.924915][T20552] 8021q: adding VLAN 0 to HW filter on device team0
[  296.933080][T20552] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  296.945612][T13771] lo speed is unknown, defaulting to 1000
[  296.947550][T13771] syz0: Port: 1 Link ACTIVE
[  296.949921][T13771] lo speed is unknown, defaulting to 1000
[  297.095284][T20568] tap0: tun_chr_ioctl cmd 1074025677
[  297.097151][T20568] tap0: linktype set to 0
[  297.577217][T20584] nbd: couldn't find a device at index 0
[  297.616773][T20588] ip_vti0: Master is either lo or non-ether device
[  297.843702][T20617] ip_vti0: Master is either lo or non-ether device
[  298.016920][T20630] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  298.082864][T20631] 8021q: adding VLAN 0 to HW filter on device bond46
[  298.093947][T20631] bond0: (slave bond46): Enslaving as an active interface with a down link
[  298.099936][T20634] netlink: 'syz.1.4639': attribute type 11 has an invalid length.
[  298.231245][T20645] syzkaller1: entered promiscuous mode
[  298.234273][T20645] syzkaller1: entered allmulticast mode
[  298.362996][T20663] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  298.402725][T20666] ip_vti0: Master is either lo or non-ether device
[  298.632580][T20685] IPVS: set_ctl: invalid protocol: 216 224.0.0.2:20003
[  298.645598][T20687] nbd: couldn't find a device at index 0
[  298.687706][T20691] ip_vti0: Master is either lo or non-ether device
[  299.093116][T20720] nbd: couldn't find a device at index 0
[  299.133807][T20722] pim6reg1: entered promiscuous mode
[  299.136421][T20722] pim6reg1: entered allmulticast mode
[  299.430785][T20732] veth0_to_bond: left allmulticast mode
[  299.433747][T20732] mac80211_hwsim hwsim92 syzkaller0: left promiscuous mode
[  299.436770][T20732] mac80211_hwsim hwsim92 syzkaller0: left allmulticast mode
[  299.441542][T20732] bond11: left promiscuous mode
[  299.444021][T20732] bridge7: left allmulticast mode
[  299.450476][ T5897] lo speed is unknown, defaulting to 1000
[  299.452772][ T5897] syz0: Port: 1 Link DOWN
[  299.454601][ T5897] lo speed is unknown, defaulting to 1000
[  300.204992][T20788] 8021q: adding VLAN 0 to HW filter on device team0
[  300.208706][T20788] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  300.214469][ T5897] lo speed is unknown, defaulting to 1000
[  300.216791][ T5897] syz0: Port: 1 Link ACTIVE
[  300.264294][ T5897] lo speed is unknown, defaulting to 1000
[  300.288666][T20788] lo speed is unknown, defaulting to 1000
[  300.492393][T20805] __nla_validate_parse: 23 callbacks suppressed
[  300.492404][T20805] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4680'.
[  300.809735][T20811] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4682'.
[  300.812651][T20811] nbd: couldn't find a device at index 0
[  300.913132][T10570] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  300.916745][T10570] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  300.921147][T10570] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  300.923709][T10570] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  301.096418][T20818] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4685'.
[  301.127094][T20820] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4686'.
[  301.140432][T20820] validate_nla: 7 callbacks suppressed
[  301.140446][T20820] netlink: 'syz.1.4686': attribute type 1 has an invalid length.
[  301.424675][T20833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4689'.
[  301.434497][T20833] veth4: entered promiscuous mode
[  301.444802][T20833] veth5: entered promiscuous mode
[  301.602017][T20841] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  301.645396][T20847] netlink: 'syz.1.4694': attribute type 11 has an invalid length.
[  301.742005][T20851] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4695'.
[  301.772722][T20857] ip_vti0: Master is either lo or non-ether device
[  301.799826][T20855] netlink: 'syz.2.4696': attribute type 11 has an invalid length.
[  301.920557][T20855] netlink: 'syz.2.4696': attribute type 11 has an invalid length.
[  301.989210][T20867] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4700'.
[  301.993909][T20867] nbd: couldn't find a device at index 0
[  301.996598][T20855] netlink: 'syz.2.4696': attribute type 11 has an invalid length.
[  302.052546][T20855] netlink: 'syz.2.4696': attribute type 11 has an invalid length.
[  302.110250][T20855] netlink: 'syz.2.4696': attribute type 11 has an invalid length.
[  302.145830][T20855] netlink: 'syz.2.4696': attribute type 11 has an invalid length.
[  302.215055][T20886] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4702'.
[  302.257616][T20855] netlink: 'syz.2.4696': attribute type 11 has an invalid length.
[  302.299661][T20855] netlink: 'syz.2.4696': attribute type 11 has an invalid length.
[  302.613092][T20904] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4709'.
[  302.615930][T20904] nbd: must specify at least one socket
[  302.621307][T20907] netlink: 'syz.1.4710': attribute type 1 has an invalid length.
[  302.807482][T20925] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  303.025230][T20934] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4720'.
[  303.077514][T20940] ip_vti0: Master is either lo or non-ether device
[  303.121104][T20942] netlink: 'syz.0.4723': attribute type 21 has an invalid length.
[  303.132113][T20944] nbd: couldn't find a device at index 0
[  303.171854][T20948] mac80211_hwsim hwsim241 wlan0: entered promiscuous mode
[  303.173834][T20946] netlink: 'syz.0.4725': attribute type 1 has an invalid length.
[  303.174499][T20948] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  303.211461][T20946] bond21: (slave vxcan3): The slave device specified does not support setting the MAC address
[  303.217721][T20946] bond21: (slave vxcan3): Error -95 calling set_mac_address
[  303.254152][T20946] ip6erspan0: entered promiscuous mode
[  303.257877][T20946] bond21: (slave ip6erspan0): making interface the new active one
[  303.263167][T20946] bond21: (slave ip6erspan0): Enslaving as an active interface with an up link
[  303.349953][T20963] ip_vti0: Master is either lo or non-ether device
[  303.406212][T20969] nbd: couldn't find a device at index 0
[  303.437238][T20971] tipc: Enabled bearer <eth:gre0>, priority 10
[  303.439996][T20971] netlink: 'syz.0.4733': attribute type 1 has an invalid length.
[  303.510384][T20984] openvswitch: netlink: Flow key attr not present in new flow.
[  303.664670][T20993] 8021q: adding VLAN 0 to HW filter on device bond6
[  303.684923][T20992] netlink: 'syz.0.4738': attribute type 10 has an invalid length.
[  303.725922][T20997] bond0: (slave bond46): Releasing active interface
[  303.810713][T20999] nbd: couldn't find a device at index 0
[  304.830599][T21035] netlink: 'syz.2.4753': attribute type 10 has an invalid length.
[  306.075734][T21083] netlink: 'syz.0.4766': attribute type 1 has an invalid length.
[  306.080864][T21083] __nla_validate_parse: 18 callbacks suppressed
[  306.080879][T21083] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4766'.
[  306.422519][T21105] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4772'.
[  306.426240][T21105] nbd: couldn't find a device at index 0
[  306.535048][T21116] netlink: 'syz.1.4776': attribute type 23 has an invalid length.
[  306.538815][T21114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4775'.
[  306.685667][T21139] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4781'.
[  306.694888][T21132] lo speed is unknown, defaulting to 1000
[  306.753454][T21142] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  306.757053][T21142] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4782'.
[  306.943544][T21154] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4786'.
[  307.012186][T21156] vxcan1: entered allmulticast mode
[  307.014373][T21156] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check.
[  307.131708][T21164] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4789'.
[  307.134512][T21164] nbd: couldn't find a device at index 0
[  307.404322][T21192] netlink: 'syz.0.4795': attribute type 23 has an invalid length.
[  307.710774][T21216] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4801'.
[  307.721211][T21222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4801'.
[  307.822665][T21229] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4804'.
[  308.014776][T21247] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  308.476671][T21286] ip_vti0: Master is either lo or non-ether device
[  308.547494][T21295] nla_validate_range_unsigned: 6 callbacks suppressed
[  308.547510][T21295] netlink: 'syz.0.4823': attribute type 11 has an invalid length.
[  308.744976][T21314] nbd: couldn't find a device at index 0
[  308.778692][T21315] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  308.833588][T21321] netlink: 'syz.1.4834': attribute type 9 has an invalid length.
[  309.108812][T21342] nbd: couldn't find a device at index 0
[  309.417949][T21361] netlink: 'syz.0.4845': attribute type 10 has an invalid length.
[  309.513952][T21363] IPVS: Scheduler module ip_vs_sip not found
[  309.676930][T21375] ip_vti0: Master is either lo or non-ether device
[  309.682106][T21373] 8021q: adding VLAN 0 to HW filter on device bond5
[  309.700117][T21378] nbd: couldn't find a device at index 0
[  309.704599][T21373] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  309.739389][T21373] bond5: (slave macvlan4): Enslaving as a backup interface with a down link
[  309.753222][T21376] bond5: (slave macvlan5): Error -98 calling set_mac_address
[  309.793096][T21387] bond21: (slave ip6erspan0): Releasing active interface
[  309.801504][T21387] bond5: (slave macvlan4): Releasing backup interface
[  310.025292][T21409] netlink: 'syz.0.4858': attribute type 10 has an invalid length.
[  310.053688][T21413] netlink: 'syz.0.4861': attribute type 83 has an invalid length.
[  310.095644][T21416] ip_vti0: Master is either lo or non-ether device
[  310.151387][T21420] lo speed is unknown, defaulting to 1000
[  310.655554][T21461] netlink: 'syz.2.4877': attribute type 3 has an invalid length.
[  310.669061][T21458] netlink: 'syz.0.4875': attribute type 5 has an invalid length.
[  310.722873][T21469] nbd: couldn't find a device at index 0
[  310.738058][T21461] 8021q: adding VLAN 0 to HW filter on device team0
[  310.752289][T21461] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  310.896734][T21480] netlink: 'syz.1.4882': attribute type 23 has an invalid length.
[  310.955409][T21490] nbd: couldn't find a device at index 0
[  311.006402][T21498] ip_vti0: Master is either lo or non-ether device
[  311.129498][T21510] netlink: 'syz.2.4892': attribute type 4 has an invalid length.
[  311.228334][T21518] __nla_validate_parse: 37 callbacks suppressed
[  311.228349][T21518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4896'.
[  311.252674][T21518] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4896'.
[  311.318666][T21527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4897'.
[  311.335376][T21529] netlink: 252 bytes leftover after parsing attributes in process `syz.0.4900'.
[  311.380178][T21534] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4902'.
[  311.475898][T21541] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4904'.
[  311.522666][T21543] netlink: 'syz.1.4905': attribute type 11 has an invalid length.
[  311.637492][T21545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4906'.
[  311.691472][T21550] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4907'.
[  311.695181][T21550] nbd: couldn't find a device at index 0
[  312.034883][T21567] mac80211_hwsim hwsim260 wlan1: entered allmulticast mode
[  312.048137][T21567] netlink: 'syz.1.4912': attribute type 10 has an invalid length.
[  312.056847][T21567] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  312.060470][T21567] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  344.360865][T21589] netlink: 'syz.1.4920': attribute type 13 has an invalid length.
[  344.365865][T21592] netlink: 'syz.0.4919': attribute type 13 has an invalid length.
[  344.464744][ T5897] lo speed is unknown, defaulting to 1000
[  344.467187][ T5897] syz0: Port: 1 Link DOWN
[  344.576288][ T5897] lo speed is unknown, defaulting to 1000
[  344.774000][T21611] ip_vti0: Master is either lo or non-ether device
[  344.866596][T21613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4925'.
[  345.258583][T21630] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4932'.
[  345.282630][T21635] mac80211_hwsim hwsim260 wlan1: left allmulticast mode
[  345.291340][T21632] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  345.306804][T21632] smc: net device bond0 applied user defined pnetid SYZ2
[  345.352075][T21635] netlink: 'syz.1.4933': attribute type 10 has an invalid length.
[  345.430071][T21646] ip_vti0: Master is either lo or non-ether device
[  345.508326][T21649] IPVS: Scheduler module ip_vs_sip not found
[  345.573852][T21659] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4940'.
[  345.587433][T21653] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4940'.
[  345.638220][T21663] netlink: 'syz.2.4942': attribute type 11 has an invalid length.
[  345.643807][T21663] netlink: 'syz.2.4942': attribute type 4 has an invalid length.
[  345.647473][T21663] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4942'.
[  345.661230][T21664] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4941'.
[  345.664171][T21664] nbd: couldn't find a device at index 0
[  345.800744][T21668] lo speed is unknown, defaulting to 1000
[  345.944461][T21672] ip_vti0: Master is either lo or non-ether device
[  346.686366][T21705] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4951'.
[  346.691517][T21705] nbd: couldn't find a device at index 0
[  346.788082][T21714] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4956'.
[  346.845840][T21715] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4955'.
[  347.062194][T21723] netlink: 'syz.1.4959': attribute type 12 has an invalid length.
[  347.122279][T21728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4959'.
[  347.171157][T21730] mac80211_hwsim hwsim69 syzkaller0: Caught tx_queue_len zero misconfig
[  347.203865][T21734] ip_vti0: Master is either lo or non-ether device
[  347.266466][T21741] geneve4: entered promiscuous mode
[  347.275137][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  347.286639][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  347.289609][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  347.627011][T21757] nbd: couldn't find a device at index 0
[  348.370392][T21771] ip_vti0: Master is either lo or non-ether device
[  348.823301][T21741] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.865248][T21741] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.905308][T21741] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.982047][ T5741] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  348.992546][ T5741] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  349.017983][ T5741] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  349.021632][ T5741] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  379.031321][T21792] __nla_validate_parse: 6 callbacks suppressed
[  379.031336][T21792] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4982'.
[  379.111815][T21788] netlink: 'syz.1.4980': attribute type 10 has an invalid length.
[  379.197048][T21800] 8021q: adding VLAN 0 to HW filter on device bond22
[  379.230530][T21800] bond0: (slave bond22): Enslaving as an active interface with a down link
[  379.245787][T21799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4984'.
[  379.258649][T21799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4984'.
[  379.355987][T21808] ip_vti0: Master is either lo or non-ether device
[  379.371972][T21812] netlink: 42 bytes leftover after parsing attributes in process `syz.1.4986'.
[  379.421661][T21818] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4990'.
[  379.424894][T21818] nbd: couldn't find a device at index 0
[  379.457088][T21820] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4992'.
[  379.688517][T21830] 8021q: adding VLAN 0 to HW filter on device bond23
[  379.704991][T21830] bond0: (slave bond23): Enslaving as an active interface with a down link
[  379.967174][T21837] ip_vti0: Master is either lo or non-ether device
[  380.440858][T21862] ip_vti0: Master is either lo or non-ether device
[  380.573519][T21867] netlink: 1327 bytes leftover after parsing attributes in process `syz.2.5008'.
[  380.696582][T21874] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5011'.
[  380.699695][T21874] nbd: couldn't find a device at index 0
[  380.822620][T21881] netlink: 'syz.0.5013': attribute type 3 has an invalid length.
[  380.825826][T21881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5013'.
[  380.935148][T21890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5016'.
[  381.005567][T21891] pim6reg1: entered promiscuous mode
[  381.007797][T21891] pim6reg1: entered allmulticast mode
[  381.094894][T21897] lo speed is unknown, defaulting to 1000
[  381.252831][T21901] netlink: 'syz.0.5018': attribute type 1 has an invalid length.
[  381.606052][T21916] lo speed is unknown, defaulting to 1000
[  381.620106][T21922] ip_vti0: Master is either lo or non-ether device
[  382.192379][T21945] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.264728][T21945] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.323743][T21945] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.363311][T21945] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.446019][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  382.456231][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  382.472008][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  382.481742][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  382.534018][T21951] ip_vti0: Master is either lo or non-ether device
[  382.752866][T21969] syz0: rxe_newlink: already configured on lo
[  382.821795][T21973] ip_vti0: Master is either lo or non-ether device
[  383.065893][T21989] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  383.081856][T21992] netlink: 'syz.0.5046': attribute type 10 has an invalid length.
[  383.132875][T21996] ip_vti0: Master is either lo or non-ether device
[  383.430053][T22033] netlink: 'syz.0.5055': attribute type 13 has an invalid length.
[  383.462276][T22037] nbd: couldn't find a device at index 0
[  383.582893][T22045] 8021q: adding VLAN 0 to HW filter on device team0
[  383.597212][T22045] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  383.616631][ T5898] lo speed is unknown, defaulting to 1000
[  383.634970][ T5898] syz0: Port: 1 Link ACTIVE
[  383.636879][ T5898] lo speed is unknown, defaulting to 1000
[  384.046294][T22070] netlink: 'syz.2.5062': attribute type 1 has an invalid length.
[  384.083558][T22070] bond47: (slave vxcan7): The slave device specified does not support setting the MAC address
[  384.089356][T22070] bond47: (slave vxcan7): Error -95 calling set_mac_address
[  384.124934][T22071] __nla_validate_parse: 18 callbacks suppressed
[  384.124957][T22071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5062'.
[  384.126594][T22072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5062'.
[  384.127514][T22071] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5062'.
[  384.138212][T22072] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5062'.
[  384.246941][T22077] netlink: 'syz.2.5064': attribute type 3 has an invalid length.
[  384.297962][T22079] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5065'.
[  384.302513][T22079] nbd: couldn't find a device at index 0
[  384.405929][T22086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5068'.
[  384.598140][T22096] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5072'.
[  384.602577][T22096] nbd: couldn't find a device at index 0
[  384.732033][T22109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5078'.
[  384.876689][T22117] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5081'.
[  384.888572][T22117] nbd: couldn't find a device at index 0
[  385.238245][T22130] mac80211_hwsim hwsim268 wlan1: entered allmulticast mode
[  385.441147][T22145] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5091'.
[  385.444098][T22145] nbd: couldn't find a device at index 0
[  385.777937][T22175] nbd: couldn't find a device at index 0
[  385.967731][T22182] netlink: 'syz.1.5104': attribute type 13 has an invalid length.
[  385.970497][T22182] netlink: 'syz.1.5104': attribute type 17 has an invalid length.
[  386.008564][T22183] 8021q: adding VLAN 0 to HW filter on device bond24
[  386.012386][T22183] bond0: (slave bond24): Enslaving as an active interface with a down link
[  386.121396][T22182] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  386.235318][T22194] netlink: 'syz.0.5107': attribute type 3 has an invalid length.
[  386.238255][T22194] mac80211_hwsim hwsim47 wlan0: entered promiscuous mode
[  386.265338][T22196] netlink: 'syz.0.5108': attribute type 5 has an invalid length.
[  386.726047][T22219] ip_vti0: Master is either lo or non-ether device
[  386.819346][T22223] netlink: 'syz.1.5117': attribute type 1 has an invalid length.
[  386.872295][T22223] 8021q: adding VLAN 0 to HW filter on device bond24
[  387.122448][T22237] syz0: rxe_newlink: already configured on lo
[  387.319855][T22256] smc: net device bond0 erased user defined pnetid SYZ2
[  387.424432][T22261] nbd: couldn't find a device at index 0
[  387.487872][T22265] ip_vti0: Master is either lo or non-ether device
[  387.544738][T22269] mac80211_hwsim hwsim268 wlan1: left allmulticast mode
[  387.720413][T22287] nbd: couldn't find a device at index 0
[  387.797196][T22294] ip_vti0: Master is either lo or non-ether device
[  388.241270][T22310] dummy0: mtu less than device minimum
[  388.364985][T22316] nbd: couldn't find a device at index 0
[  388.629857][T22338] netlink: 'syz.2.5152': attribute type 11 has an invalid length.
[  388.694384][T22341] ip_vti0: Master is either lo or non-ether device
[  388.710004][T22339] netlink: 'syz.2.5152': attribute type 11 has an invalid length.
[  388.830281][T22347] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  388.904790][T22347] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  388.966264][T22347] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.030596][T22347] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.104958][T22360] IPVS: Scheduler module ip_vs_sip not found
[  389.114389][ T5741] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  389.134750][T22359] IPVS: Scheduler module ip_vs_sip not found
[  389.139837][ T5741] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  389.167754][ T5741] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  389.196549][ T5741] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  389.296506][T22371] ip_vti0: Master is either lo or non-ether device
[  389.374373][T22373] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  389.381131][T22373] bond6: (slave macvlan4): Enslaving as a backup interface with a down link
[  389.410413][T22373] bond6: (slave macvlan4): Releasing backup interface
[  389.471871][T22375] __nla_validate_parse: 11 callbacks suppressed
[  389.471889][T22375] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5164'.
[  389.486253][T22375] nbd: couldn't find a device at index 0
[  389.773781][T22391] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5169'.
[  389.797637][T22389] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5167'.
[  389.882874][T22401] veth0: entered promiscuous mode
[  389.884896][T22401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5174'.
[  389.904848][T22401] veth0 (unregistering): left promiscuous mode
[  389.916523][T22395] ip6erspan0: left promiscuous mode
[  389.920129][T22395] mac80211_hwsim hwsim47 wlan0: left promiscuous mode
[  389.926460][T22395] veth11: left promiscuous mode
[  389.928363][T22395] geneve3: left promiscuous mode
[  389.930839][T22395] geneve3: left allmulticast mode
[  389.960728][T22404] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5174'.
[  389.965899][T22406] ip_vti0: Master is either lo or non-ether device
[  389.988181][T22408] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5176'.
[  389.993020][T22408] nbd: couldn't find a device at index 0
[  389.997985][T22410] netlink: 'syz.0.5178': attribute type 1 has an invalid length.
[  390.026988][T22410] veth13: entered promiscuous mode
[  390.031605][T22410] bond25: (slave veth13): Enslaving as a backup interface with a down link
[  390.065337][T22415] GUP no longer grows the stack in syz.0.5180 (22415): 200000003000-20000000a000 (200000001000)
[  390.070935][T22415] CPU: 0 UID: 0 PID: 22415 Comm: syz.0.5180 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  390.070949][T22415] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  390.070956][T22415] Call Trace:
[  390.070961][T22415]  <TASK>
[  390.070966][T22415]  dump_stack_lvl+0x189/0x250
[  390.070984][T22415]  ? __pfx_dump_stack_lvl+0x10/0x10
[  390.070994][T22415]  ? __pfx__printk+0x10/0x10
[  390.071006][T22415]  ? find_vma+0xe7/0x160
[  390.071024][T22415]  __get_user_pages+0x24d0/0x2ce0
[  390.071035][T22415]  ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190
[  390.071058][T22415]  ? rcu_is_watching+0x15/0xb0
[  390.071070][T22415]  __gup_longterm_locked+0xde9/0x1660
[  390.071086][T22415]  ? sanity_check_pinned_pages+0x123a/0x1300
[  390.071099][T22415]  gup_fast_fallback+0x1e6a/0x2010
[  390.071125][T22415]  ? __pfx_gup_fast_fallback+0x10/0x10
[  390.071133][T22415]  ? stack_trace_save+0x9c/0xe0
[  390.071142][T22415]  ? __pfx_stack_trace_save+0x10/0x10
[  390.071156][T22415]  ? pin_user_pages_fast+0x4d/0xb0
[  390.071167][T22415]  iov_iter_extract_pages+0x35a/0x5e0
[  390.071180][T22415]  extract_iter_to_sg+0xe46/0x24e0
[  390.071198][T22415]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  390.071217][T22415]  ? __asan_memset+0x22/0x50
[  390.071228][T22415]  af_alg_get_rsgl+0x436/0x810
[  390.071251][T22415]  aead_recvmsg+0x4cc/0x13f0
[  390.071273][T22415]  ? __pfx_aead_recvmsg+0x10/0x10
[  390.071285][T22415]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  390.071295][T22415]  ? __pfx_aead_recvmsg+0x10/0x10
[  390.071305][T22415]  sock_recvmsg_nosec+0x186/0x1c0
[  390.071318][T22415]  ____sys_recvmsg+0x3aa/0x460
[  390.071334][T22415]  ? __pfx_____sys_recvmsg+0x10/0x10
[  390.071354][T22415]  ? import_iovec+0x74/0xa0
[  390.071363][T22415]  ___sys_recvmsg+0x1b5/0x510
[  390.071377][T22415]  ? __pfx____sys_recvmsg+0x10/0x10
[  390.071404][T22415]  ? __might_fault+0xb0/0x130
[  390.071417][T22415]  do_recvmmsg+0x307/0x770
[  390.071433][T22415]  ? __pfx_do_recvmmsg+0x10/0x10
[  390.071443][T22415]  ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0
[  390.071461][T22415]  ? __pfx_do_futex+0x10/0x10
[  390.071479][T22415]  __x64_sys_recvmmsg+0x190/0x240
[  390.071492][T22415]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  390.071502][T22415]  ? rcu_is_watching+0x15/0xb0
[  390.071512][T22415]  ? do_syscall_64+0xbe/0x3b0
[  390.071525][T22415]  do_syscall_64+0xfa/0x3b0
[  390.071534][T22415]  ? lockdep_hardirqs_on+0x9c/0x150
[  390.071542][T22415]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  390.071551][T22415]  ? exc_page_fault+0x9f/0xf0
[  390.071561][T22415]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  390.071593][T22415] RIP: 0033:0x7fc8f3f8ebe9
[  390.071603][T22415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  390.071612][T22415] RSP: 002b:00007fc8f4e96038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  390.071622][T22415] RAX: ffffffffffffffda RBX: 00007fc8f41b5fa0 RCX: 00007fc8f3f8ebe9
[  390.071628][T22415] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000008
[  390.071634][T22415] RBP: 00007fc8f4011e19 R08: 0000000000000000 R09: 0000000000000000
[  390.071639][T22415] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000
[  390.071645][T22415] R13: 00007fc8f41b6038 R14: 00007fc8f41b5fa0 R15: 00007fffc7f0c1b8
[  390.071659][T22415]  </TASK>
[  390.237833][T22425] unknown channel width for channel at 909000KHz?
[  390.254381][T22427] ip_vti0: Master is either lo or non-ether device
[  390.305773][T22432] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5186'.
[  390.312621][T22432] nbd: couldn't find a device at index 0
[  390.521989][T22447] IPVS: Scheduler module ip_vs_sip not found
[  390.622027][T22456] netlink: 'syz.2.5195': attribute type 11 has an invalid length.
[  390.685941][T22458] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5196'.
[  390.692012][T22458] nbd: couldn't find a device at index 0
[  390.812691][T22471] netlink: 'syz.0.5200': attribute type 9 has an invalid length.
[  390.815886][T22471] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5200'.
[  390.911899][T22478] bond0: (slave bond22): Releasing active interface
[  390.915713][T22478] bond0: (slave bond24): Releasing active interface
[  390.920192][T22478] bond25: (slave veth13): Releasing backup interface
[  391.011542][T22483] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5205'.
[  391.014619][T22483] nbd: couldn't find a device at index 0
[  391.026464][T22485] netlink: 'syz.1.5206': attribute type 1 has an invalid length.
[  391.037184][T22485] netlink: 'syz.1.5206': attribute type 4 has an invalid length.
[  392.418673][T22504] nbd: couldn't find a device at index 0
[  392.642977][T22520] netlink: 'syz.1.5219': attribute type 74 has an invalid length.
[  392.681250][T22518] openvswitch: netlink: Flow actions attr not present in new flow.
[  392.881253][T22545] netlink: 'syz.1.5226': attribute type 16 has an invalid length.
[  392.883909][T22545] netlink: 'syz.1.5226': attribute type 17 has an invalid length.
[  392.884628][T22547] ip_vti0: Master is either lo or non-ether device
[  392.919096][ T5913] lo speed is unknown, defaulting to 1000
[  392.919147][ T5741] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  392.922834][ T5913] syz0: Port: 1 Link DOWN
[  392.923670][ T5741] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  392.937579][ T5741] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  392.940953][ T5913] lo speed is unknown, defaulting to 1000
[  392.942867][ T5741] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  393.884889][T22577] ip_vti0: Master is either lo or non-ether device
[  393.948966][T22584] netlink: 'syz.2.5238': attribute type 1 has an invalid length.
[  394.001082][T22584] bond49: (slave vxcan7): The slave device specified does not support setting the MAC address
[  394.005506][T22584] bond49: (slave vxcan7): Error -95 calling set_mac_address
[  394.036047][T22581] lo speed is unknown, defaulting to 1000
[  395.045428][T22607] ip_vti0: Master is either lo or non-ether device
[  395.079431][T22613] __nla_validate_parse: 10 callbacks suppressed
[  395.079451][T22613] netlink: 248 bytes leftover after parsing attributes in process `syz.0.5248'.
[  395.371153][T22633] netlink: 'syz.0.5254': attribute type 10 has an invalid length.
[  395.382754][T22625] netlink: 'syz.1.5253': attribute type 8 has an invalid length.
[  395.454961][T22642] sctp: [Deprecated]: syz.1.5256 (pid 22642) Use of int in max_burst socket option.
[  395.454961][T22642] Use struct sctp_assoc_value instead
[  395.482830][T22644] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5258'.
[  395.511732][T22646] ip_vti0: Master is either lo or non-ether device
[  395.519241][T22647] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5256'.
[  395.637578][T22654] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  395.642353][T22654] CPU: 0 UID: 0 PID: 22654 Comm: syz.1.5262 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  395.642377][T22654] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  395.642387][T22654] Call Trace:
[  395.642394][T22654]  <TASK>
[  395.642402][T22654]  dump_stack_lvl+0x189/0x250
[  395.642437][T22654]  ? __pfx_dump_stack_lvl+0x10/0x10
[  395.642456][T22654]  ? __pfx__printk+0x10/0x10
[  395.642482][T22654]  ? kernfs_path_from_node+0x2f/0x290
[  395.642499][T22654]  ? kernfs_path_from_node+0x250/0x290
[  395.642513][T22654]  ? kernfs_path_from_node+0x2f/0x290
[  395.642533][T22654]  sysfs_warn_dup+0x8e/0xa0
[  395.642549][T22654]  sysfs_do_create_link_sd+0xc0/0x110
[  395.642568][T22654]  device_add_class_symlinks+0x1cf/0x240
[  395.642593][T22654]  device_add+0x475/0xb50
[  395.642618][T22654]  wiphy_register+0x1ba6/0x28d0
[  395.642651][T22654]  ? __pfx_wiphy_register+0x10/0x10
[  395.642666][T22654]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  395.642693][T22654]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  395.642719][T22654]  ieee80211_register_hw+0x3425/0x4080
[  395.642754][T22654]  ? ieee80211_register_hw+0x1401/0x4080
[  395.642784][T22654]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  395.642809][T22654]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  395.642832][T22654]  ? __hrtimer_setup+0x187/0x210
[  395.642845][T22654]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  395.642871][T22654]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  395.642915][T22654]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  395.642930][T22654]  ? trace_kmalloc+0x1f/0xd0
[  395.642947][T22654]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  395.642966][T22654]  ? kstrndup+0xbf/0x160
[  395.642991][T22654]  hwsim_new_radio_nl+0xea4/0x1b10
[  395.643009][T22654]  ? __pfx___nla_validate_parse+0x10/0x10
[  395.643042][T22654]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  395.643102][T22654]  ? __nla_parse+0x40/0x60
[  395.643125][T22654]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  395.643148][T22654]  genl_family_rcv_msg_doit+0x215/0x300
[  395.643178][T22654]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  395.643232][T22654]  ? bpf_lsm_capable+0x9/0x20
[  395.643252][T22654]  ? security_capable+0x7e/0x2e0
[  395.643278][T22654]  genl_rcv_msg+0x60e/0x790
[  395.643306][T22654]  ? __pfx_genl_rcv_msg+0x10/0x10
[  395.643328][T22654]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  395.643356][T22654]  netlink_rcv_skb+0x208/0x470
[  395.643372][T22654]  ? __lock_acquire+0xab9/0xd20
[  395.643394][T22654]  ? __pfx_genl_rcv_msg+0x10/0x10
[  395.643424][T22654]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  395.643459][T22654]  ? down_read+0x1ad/0x2e0
[  395.643482][T22654]  genl_rcv+0x28/0x40
[  395.643503][T22654]  netlink_unicast+0x82f/0x9e0
[  395.643527][T22654]  ? __pfx_netlink_unicast+0x10/0x10
[  395.643546][T22654]  ? netlink_sendmsg+0x642/0xb30
[  395.643562][T22654]  ? skb_put+0x11b/0x210
[  395.643585][T22654]  netlink_sendmsg+0x805/0xb30
[  395.643612][T22654]  ? __pfx_netlink_sendmsg+0x10/0x10
[  395.643633][T22654]  ? aa_sock_msg_perm+0xf1/0x1d0
[  395.643655][T22654]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  395.643670][T22654]  ? __pfx_netlink_sendmsg+0x10/0x10
[  395.643689][T22654]  __sock_sendmsg+0x21c/0x270
[  395.643708][T22654]  ____sys_sendmsg+0x505/0x830
[  395.643734][T22654]  ? __pfx_____sys_sendmsg+0x10/0x10
[  395.643763][T22654]  ? import_iovec+0x74/0xa0
[  395.643781][T22654]  ___sys_sendmsg+0x21f/0x2a0
[  395.643804][T22654]  ? __pfx____sys_sendmsg+0x10/0x10
[  395.643858][T22654]  ? __fget_files+0x2a/0x420
[  395.643879][T22654]  ? __fget_files+0x3a0/0x420
[  395.643910][T22654]  __x64_sys_sendmsg+0x19b/0x260
[  395.643934][T22654]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  395.643964][T22654]  ? rcu_is_watching+0x15/0xb0
[  395.643983][T22654]  ? do_syscall_64+0xbe/0x3b0
[  395.644005][T22654]  do_syscall_64+0xfa/0x3b0
[  395.644024][T22654]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  395.644037][T22654]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  395.644083][T22654]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  395.644099][T22654] RIP: 0033:0x7f0cf578ebe9
[  395.644113][T22654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  395.644127][T22654] RSP: 002b:00007f0cf39f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  395.644144][T22654] RAX: ffffffffffffffda RBX: 00007f0cf59b5fa0 RCX: 00007f0cf578ebe9
[  395.644156][T22654] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008
[  395.644166][T22654] RBP: 00007f0cf5811e19 R08: 0000000000000000 R09: 0000000000000000
[  395.644174][T22654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  395.644189][T22654] R13: 00007f0cf59b6038 R14: 00007f0cf59b5fa0 R15: 00007ffe554bcb68
[  395.644217][T22654]  </TASK>
[  396.003896][T22670] ip_vti0: Master is either lo or non-ether device
[  396.080706][T22673] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  396.085156][T22673] CPU: 0 UID: 0 PID: 22673 Comm: syz.1.5268 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  396.085176][T22673] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  396.085185][T22673] Call Trace:
[  396.085192][T22673]  <TASK>
[  396.085198][T22673]  dump_stack_lvl+0x189/0x250
[  396.085224][T22673]  ? __pfx_dump_stack_lvl+0x10/0x10
[  396.085243][T22673]  ? __pfx__printk+0x10/0x10
[  396.085268][T22673]  ? kernfs_path_from_node+0x2f/0x290
[  396.085284][T22673]  ? kernfs_path_from_node+0x250/0x290
[  396.085299][T22673]  ? kernfs_path_from_node+0x2f/0x290
[  396.085318][T22673]  sysfs_warn_dup+0x8e/0xa0
[  396.085332][T22673]  sysfs_do_create_link_sd+0xc0/0x110
[  396.085351][T22673]  device_add_class_symlinks+0x1cf/0x240
[  396.085373][T22673]  device_add+0x475/0xb50
[  396.085395][T22673]  wiphy_register+0x1ba6/0x28d0
[  396.085425][T22673]  ? __pfx_wiphy_register+0x10/0x10
[  396.085440][T22673]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  396.085465][T22673]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  396.085488][T22673]  ieee80211_register_hw+0x3425/0x4080
[  396.085521][T22673]  ? ieee80211_register_hw+0x1401/0x4080
[  396.085547][T22673]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  396.085569][T22673]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  396.085590][T22673]  ? __hrtimer_setup+0x187/0x210
[  396.085602][T22673]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  396.085629][T22673]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  396.085671][T22673]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  396.085685][T22673]  ? trace_kmalloc+0x1f/0xd0
[  396.085701][T22673]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  396.085719][T22673]  ? kstrndup+0xbf/0x160
[  396.085742][T22673]  hwsim_new_radio_nl+0xea4/0x1b10
[  396.085758][T22673]  ? __pfx___nla_validate_parse+0x10/0x10
[  396.085787][T22673]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  396.085811][T22673]  ? __nla_parse+0x40/0x60
[  396.085830][T22673]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  396.085850][T22673]  genl_family_rcv_msg_doit+0x215/0x300
[  396.085876][T22673]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  396.085906][T22673]  ? bpf_lsm_capable+0x9/0x20
[  396.085922][T22673]  ? security_capable+0x7e/0x2e0
[  396.085944][T22673]  genl_rcv_msg+0x60e/0x790
[  396.085969][T22673]  ? __pfx_genl_rcv_msg+0x10/0x10
[  396.085988][T22673]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  396.086041][T22673]  netlink_rcv_skb+0x208/0x470
[  396.086057][T22673]  ? __lock_acquire+0xab9/0xd20
[  396.086078][T22673]  ? __pfx_genl_rcv_msg+0x10/0x10
[  396.086100][T22673]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  396.086132][T22673]  ? down_read+0x1ad/0x2e0
[  396.086151][T22673]  genl_rcv+0x28/0x40
[  396.086169][T22673]  netlink_unicast+0x82f/0x9e0
[  396.086207][T22673]  ? __pfx_netlink_unicast+0x10/0x10
[  396.086224][T22673]  ? netlink_sendmsg+0x642/0xb30
[  396.086239][T22673]  ? skb_put+0x11b/0x210
[  396.086260][T22673]  netlink_sendmsg+0x805/0xb30
[  396.086285][T22673]  ? __pfx_netlink_sendmsg+0x10/0x10
[  396.086305][T22673]  ? aa_sock_msg_perm+0xf1/0x1d0
[  396.086325][T22673]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  396.086338][T22673]  ? __pfx_netlink_sendmsg+0x10/0x10
[  396.086355][T22673]  __sock_sendmsg+0x21c/0x270
[  396.086372][T22673]  ____sys_sendmsg+0x505/0x830
[  396.086395][T22673]  ? __pfx_____sys_sendmsg+0x10/0x10
[  396.086421][T22673]  ? import_iovec+0x74/0xa0
[  396.086437][T22673]  ___sys_sendmsg+0x21f/0x2a0
[  396.086458][T22673]  ? __pfx____sys_sendmsg+0x10/0x10
[  396.086508][T22673]  ? __fget_files+0x2a/0x420
[  396.086527][T22673]  ? __fget_files+0x3a0/0x420
[  396.086555][T22673]  __x64_sys_sendmsg+0x19b/0x260
[  396.086575][T22673]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  396.086609][T22673]  ? do_syscall_64+0xbe/0x3b0
[  396.086635][T22673]  do_syscall_64+0xfa/0x3b0
[  396.086650][T22673]  ? lockdep_hardirqs_on+0x9c/0x150
[  396.086666][T22673]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  396.086680][T22673]  ? exc_page_fault+0x9f/0xf0
[  396.086696][T22673]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  396.086709][T22673] RIP: 0033:0x7f0cf578ebe9
[  396.086722][T22673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  396.086733][T22673] RSP: 002b:00007f0cf39f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  396.086747][T22673] RAX: ffffffffffffffda RBX: 00007f0cf59b5fa0 RCX: 00007f0cf578ebe9
[  396.086757][T22673] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008
[  396.086766][T22673] RBP: 00007f0cf5811e19 R08: 0000000000000000 R09: 0000000000000000
[  396.086775][T22673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  396.086782][T22673] R13: 00007f0cf59b6038 R14: 00007f0cf59b5fa0 R15: 00007ffe554bcb68
[  396.086807][T22673]  </TASK>
[  396.305980][T22685] netlink: 'syz.0.5272': attribute type 12 has an invalid length.
[  396.308707][T22685] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.5272'.
[  396.365341][T22687] netlink: 300 bytes leftover after parsing attributes in process `syz.2.5273'.
[  396.398349][T22695] ip_vti0: Master is either lo or non-ether device
[  396.429601][T22687] TCP: TCP_TX_DELAY enabled
[  396.442641][T22697] delete_channel: no stack
[  397.272298][T22709] netlink: 'syz.1.5282': attribute type 1 has an invalid length.
[  397.274852][T22709] netlink: 'syz.1.5282': attribute type 4 has an invalid length.
[  397.277393][T22709] netlink: 15538 bytes leftover after parsing attributes in process `syz.1.5282'.
[  397.316057][T22715] netlink: 'syz.0.5284': attribute type 12 has an invalid length.
[  397.320150][T22715] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.5284'.
[  397.452186][T22727] ip_vti0: Master is either lo or non-ether device
[  397.454725][T22726] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5288'.
[  397.457725][T22726] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5288'.
[  397.471028][T22726] netlink: 'syz.0.5288': attribute type 1 has an invalid length.
[  397.474373][T22726] netlink: 'syz.0.5288': attribute type 4 has an invalid length.
[  397.477581][T22726] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.5288'.
[  397.526274][T22735] sock: sock_timestamping_bind_phc: sock not bind to device
[  397.650779][T22745] netlink: 'syz.2.5296': attribute type 1 has an invalid length.
[  397.715468][T22751] ip_vti0: Master is either lo or non-ether device
[  397.976699][T22778] lo speed is unknown, defaulting to 1000
[  398.000963][T22782] ip_vti0: Master is either lo or non-ether device
[  398.271945][T22803] netlink: 'syz.0.5316': attribute type 3 has an invalid length.
[  398.371659][T22815] ip_vti0: Master is either lo or non-ether device
[  398.723946][T22832] mac80211_hwsim hwsim275 wlan1: entered allmulticast mode
[  398.796107][T22836] ip_vti0: Master is either lo or non-ether device
[  398.934851][T22847] mac80211_hwsim hwsim47 wlan0: entered promiscuous mode
[  399.049641][T22858] ip_vti0: Master is either lo or non-ether device
[  399.196172][T22875] openvswitch: netlink: Flow actions attr not present in new flow.
[  399.297589][T22884] netlink: 'syz.2.5348': attribute type 11 has an invalid length.
[  399.388789][T22892] ip_vti0: Master is either lo or non-ether device
[  399.461344][T22898] sctp: [Deprecated]: syz.2.5354 (pid 22898) Use of struct sctp_assoc_value in delayed_ack socket option.
[  399.461344][T22898] Use struct sctp_sack_info instead
[  399.648268][T22919] ip_vti0: Master is either lo or non-ether device
[  399.866166][T22930] IPVS: Scheduler module ip_vs_sip not found
[  399.980146][T22943] ip_vti0: Master is either lo or non-ether device
[  400.280111][T22965] ip_vti0: Master is either lo or non-ether device
[  400.399725][T22979] 8021q: adding VLAN 0 to HW filter on device bond6
[  400.417741][T22979] __nla_validate_parse: 13 callbacks suppressed
[  400.417755][T22979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5382'.
[  400.637443][T22998] batman_adv: batadv0: Adding interface: macvlan7
[  400.644690][T22998] batman_adv: batadv0: The MTU of interface macvlan7 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  400.658648][T22998] batman_adv: batadv0: Interface activated: macvlan7
[  400.663555][T23003] ip_vti0: Master is either lo or non-ether device
[  400.696528][T22998] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5390'.
[  400.813272][T23014] mac80211_hwsim hwsim69 syzkaller0: left promiscuous mode
[  400.816238][T23014] mac80211_hwsim hwsim69 syzkaller0: left allmulticast mode
[  401.025166][T23024] bond0 (unregistering): (slave bond23): Releasing active interface
[  401.028263][T23024] bond0 (unregistering): Released all slaves
[  401.042330][T23027] ip_vti0: Master is either lo or non-ether device
[  401.384572][T23051] validate_nla: 4 callbacks suppressed
[  401.384592][T23051] netlink: 'syz.2.5406': attribute type 1 has an invalid length.
[  401.390602][T23051] netlink: 'syz.2.5406': attribute type 3 has an invalid length.
[  401.394370][T23051] netlink: 'syz.2.5406': attribute type 1 has an invalid length.
[  401.397449][T23051] netlink: 204 bytes leftover after parsing attributes in process `syz.2.5406'.
[  401.403451][T23051] NCSI netlink: No device for ifindex 0
[  401.436312][T23049] netlink: zone id is out of range
[  401.439105][T23049] netlink: zone id is out of range
[  401.441180][T23049] netlink: zone id is out of range
[  401.443562][T23049] netlink: zone id is out of range
[  401.446223][T23049] netlink: zone id is out of range
[  401.463112][T23049] netlink: zone id is out of range
[  401.465142][T23049] netlink: zone id is out of range
[  401.467080][T23049] netlink: zone id is out of range
[  401.470293][T23049] netlink: zone id is out of range
[  401.529782][T23063] ip_vti0: Master is either lo or non-ether device
[  401.622069][T23074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5414'.
[  401.638050][T23074] gtp1: entered promiscuous mode
[  401.642849][T23074] gtp1: entered allmulticast mode
[  401.696453][T23086] ip_vti0: Master is either lo or non-ether device
[  401.702559][T23089] netlink: 'syz.2.5418': attribute type 23 has an invalid length.
[  401.766189][T23089] netlink: 'syz.2.5418': attribute type 23 has an invalid length.
[  401.812076][T23089] netlink: 'syz.2.5418': attribute type 23 has an invalid length.
[  401.846055][T23089] netlink: 'syz.2.5418': attribute type 23 has an invalid length.
[  401.880208][T23089] netlink: 'syz.2.5418': attribute type 23 has an invalid length.
[  401.890348][T23094] netlink: 'syz.0.5420': attribute type 13 has an invalid length.
[  401.893386][T23094] netlink: 'syz.0.5420': attribute type 17 has an invalid length.
[  402.022535][T23094] 8021q: adding VLAN 0 to HW filter on device team0
[  402.069277][T23097] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.5422'.
[  402.447774][T23110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5424'.
[  402.465783][T23107] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5424'.
[  402.783348][T23122] ip_vti0: Master is either lo or non-ether device
[  403.024256][T23145] ip_vti0: Master is either lo or non-ether device
[  403.095613][T23148] bond0 (unregistering): Released all slaves
[  403.291527][T23177] ip_vti0: Master is either lo or non-ether device
[  403.295318][T23176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5448'.
[  403.298090][T23176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5448'.
[  403.311152][T23155] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5442'.
[  403.614021][T23207] ip_vti0: Master is either lo or non-ether device
[  404.296922][T23245] ip_vti0: Master is either lo or non-ether device
[  404.353805][T23247] IPVS: Scheduler module ip_vs_sip not found
[  404.531378][T23258] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  404.534478][T23258] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  404.577328][T23270] ip_vti0: Master is either lo or non-ether device
[  405.173571][T23300] ip_vti0: Master is either lo or non-ether device
[  405.290717][T23308] macsec0: entered promiscuous mode
[  405.292436][T23308] team0: entered promiscuous mode
[  405.427857][T23313] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  405.430919][T23313] mac80211_hwsim hwsim69 syzkaller0: entered promiscuous mode
[  405.433342][T23313] mac80211_hwsim hwsim69 syzkaller0: entered allmulticast mode
[  405.524445][T23321] ip_vti0: Master is either lo or non-ether device
[  405.649825][T23329] __nla_validate_parse: 7 callbacks suppressed
[  405.649840][T23329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5498'.
[  405.654491][T23329] netlink: 312 bytes leftover after parsing attributes in process `syz.2.5498'.
[  405.657266][T23329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5498'.
[  405.709743][T23337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5501'.
[  405.712747][T23337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5501'.
[  405.803516][T23352] ip_vti0: Master is either lo or non-ether device
[  406.192219][T23375] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5514'.
[  406.256927][T23377] ip_vti0: Master is either lo or non-ether device
[  406.724068][T23396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5522'.
[  406.758859][T23398] ip_vti0: Master is either lo or non-ether device
[  406.795562][T23400] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  406.801600][T23400] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  406.804876][T23402] validate_nla: 13 callbacks suppressed
[  406.804894][T23402] netlink: 'syz.2.5525': attribute type 13 has an invalid length.
[  406.859771][T23400] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5524'.
[  406.863517][T23400] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5524'.
[  406.864118][T23405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5524'.
[  407.042852][T23427] ip_vti0: Master is either lo or non-ether device
[  407.067585][T23425] rdma_rxe: rxe_newlink: failed to add lo
[  407.089167][T23433] net_ratelimit: 307 callbacks suppressed
[  407.089184][T23433] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  407.296844][T23452] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  407.343424][T23454] openvswitch: netlink: IP tunnel dst address not specified
[  407.530100][T23468] ip_vti0: Master is either lo or non-ether device
[  407.630739][T23477] IPv6: Can't replace route, no match found
[  407.794779][T23488] ip_vti0: Master is either lo or non-ether device
[  407.836904][T23490] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  407.844587][T23490] CPU: 0 UID: 0 PID: 23490 Comm: syz.0.5552 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  407.844612][T23490] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  407.844624][T23490] Call Trace:
[  407.844630][T23490]  <TASK>
[  407.844638][T23490]  dump_stack_lvl+0x189/0x250
[  407.844667][T23490]  ? __pfx_dump_stack_lvl+0x10/0x10
[  407.844686][T23490]  ? __pfx__printk+0x10/0x10
[  407.844708][T23490]  ? kernfs_path_from_node+0x2f/0x290
[  407.844726][T23490]  ? kernfs_path_from_node+0x250/0x290
[  407.844739][T23490]  ? kernfs_path_from_node+0x2f/0x290
[  407.844756][T23490]  sysfs_warn_dup+0x8e/0xa0
[  407.844769][T23490]  sysfs_do_create_link_sd+0xc0/0x110
[  407.844786][T23490]  device_add_class_symlinks+0x1cf/0x240
[  407.844811][T23490]  device_add+0x475/0xb50
[  407.844835][T23490]  wiphy_register+0x1ba6/0x28d0
[  407.844864][T23490]  ? __pfx_wiphy_register+0x10/0x10
[  407.844883][T23490]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  407.844914][T23490]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  407.844968][T23490]  ieee80211_register_hw+0x3425/0x4080
[  407.845007][T23490]  ? ieee80211_register_hw+0x1401/0x4080
[  407.845035][T23490]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  407.845061][T23490]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  407.845089][T23490]  ? __hrtimer_setup+0x187/0x210
[  407.845104][T23490]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  407.845127][T23490]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  407.845171][T23490]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  407.845185][T23490]  ? trace_kmalloc+0x1f/0xd0
[  407.845204][T23490]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  407.845223][T23490]  ? kstrndup+0xbf/0x160
[  407.845248][T23490]  hwsim_new_radio_nl+0xea4/0x1b10
[  407.845266][T23490]  ? __pfx___nla_validate_parse+0x10/0x10
[  407.845298][T23490]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  407.845327][T23490]  ? __nla_parse+0x40/0x60
[  407.845346][T23490]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  407.845367][T23490]  genl_family_rcv_msg_doit+0x215/0x300
[  407.845400][T23490]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  407.845430][T23490]  ? bpf_lsm_capable+0x9/0x20
[  407.845446][T23490]  ? security_capable+0x7e/0x2e0
[  407.845468][T23490]  genl_rcv_msg+0x60e/0x790
[  407.845496][T23490]  ? __pfx_genl_rcv_msg+0x10/0x10
[  407.845512][T23490]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  407.845528][T23490]  netlink_rcv_skb+0x208/0x470
[  407.845537][T23490]  ? __lock_acquire+0xab9/0xd20
[  407.845549][T23490]  ? __pfx_genl_rcv_msg+0x10/0x10
[  407.845561][T23490]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  407.845587][T23490]  ? down_read+0x1ad/0x2e0
[  407.845602][T23490]  genl_rcv+0x28/0x40
[  407.845614][T23490]  netlink_unicast+0x82f/0x9e0
[  407.845628][T23490]  ? __pfx_netlink_unicast+0x10/0x10
[  407.845639][T23490]  ? netlink_sendmsg+0x642/0xb30
[  407.845649][T23490]  ? skb_put+0x11b/0x210
[  407.845663][T23490]  netlink_sendmsg+0x805/0xb30
[  407.845678][T23490]  ? __pfx_netlink_sendmsg+0x10/0x10
[  407.845689][T23490]  ? aa_sock_msg_perm+0xf1/0x1d0
[  407.845701][T23490]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  407.845709][T23490]  ? __pfx_netlink_sendmsg+0x10/0x10
[  407.845720][T23490]  __sock_sendmsg+0x21c/0x270
[  407.845730][T23490]  ____sys_sendmsg+0x505/0x830
[  407.845745][T23490]  ? __pfx_____sys_sendmsg+0x10/0x10
[  407.845761][T23490]  ? import_iovec+0x74/0xa0
[  407.845770][T23490]  ___sys_sendmsg+0x21f/0x2a0
[  407.845783][T23490]  ? __pfx____sys_sendmsg+0x10/0x10
[  407.845812][T23490]  ? __fget_files+0x2a/0x420
[  407.845824][T23490]  ? __fget_files+0x3a0/0x420
[  407.845841][T23490]  __x64_sys_sendmsg+0x19b/0x260
[  407.845853][T23490]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  407.845870][T23490]  ? rcu_is_watching+0x15/0xb0
[  407.845881][T23490]  ? do_syscall_64+0xbe/0x3b0
[  407.845893][T23490]  do_syscall_64+0xfa/0x3b0
[  407.845902][T23490]  ? lockdep_hardirqs_on+0x9c/0x150
[  407.845911][T23490]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.845919][T23490]  ? exc_page_fault+0x9f/0xf0
[  407.845954][T23490]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.845965][T23490] RIP: 0033:0x7fc8f3f8ebe9
[  407.845974][T23490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  407.845983][T23490] RSP: 002b:00007fc8f4e96038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  407.845994][T23490] RAX: ffffffffffffffda RBX: 00007fc8f41b5fa0 RCX: 00007fc8f3f8ebe9
[  407.846001][T23490] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000007
[  407.846008][T23490] RBP: 00007fc8f4011e19 R08: 0000000000000000 R09: 0000000000000000
[  407.846014][T23490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  407.846019][T23490] R13: 00007fc8f41b6038 R14: 00007fc8f41b5fa0 R15: 00007fffc7f0c1b8
[  407.846035][T23490]  </TASK>
[  408.083784][T23495] netlink: 'syz.0.5554': attribute type 10 has an invalid length.
[  408.086479][T23495] batadv0: entered promiscuous mode
[  408.089307][T23495] batadv0: entered allmulticast mode
[  408.091125][T23495] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  408.321504][T23521] gretap0: Device is already in use.
[  408.681949][T23543] ip_vti0: Master is either lo or non-ether device
[  409.345966][T23572] lo speed is unknown, defaulting to 1000
[  409.601634][T23577] ip_vti0: Master is either lo or non-ether device
[  409.803791][T23590] netlink: 'syz.2.5586': attribute type 8 has an invalid length.
[  409.855314][T23594] ip_vti0: Master is either lo or non-ether device
[  409.857849][T23595] netlink: 'syz.0.5587': attribute type 1 has an invalid length.
[  409.944512][T23596] geneve5: entered promiscuous mode
[  409.974285][T23606] netlink: 'syz.0.5590': attribute type 13 has an invalid length.
[  409.977308][T23606] netlink: 'syz.0.5590': attribute type 17 has an invalid length.
[  409.986670][T23606] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  409.994692][T23596] netlink: 'syz.1.5585': attribute type 11 has an invalid length.
[  410.062141][T23606] lo speed is unknown, defaulting to 1000
[  410.100485][T23611] mac80211_hwsim hwsim69 syzkaller0: left promiscuous mode
[  410.103184][T23611] mac80211_hwsim hwsim69 syzkaller0: left allmulticast mode
[  410.653255][T23616] ip_vti0: Master is either lo or non-ether device
[  410.860615][T23628] __nla_validate_parse: 17 callbacks suppressed
[  410.860630][T23628] netlink: 248 bytes leftover after parsing attributes in process `syz.1.5601'.
[  410.915437][T23629] netlink: 'syz.1.5601': attribute type 3 has an invalid length.
[  410.920401][T23629] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5601'.
[  410.923981][T23629] netlink: 'syz.1.5601': attribute type 3 has an invalid length.
[  410.931175][T23629] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5601'.
[  410.981703][T23631] ip_vti0: Master is either lo or non-ether device
[  411.009992][T23633] netlink: 252 bytes leftover after parsing attributes in process `syz.1.5603'.
[  411.480311][T23667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5614'.
[  411.793314][T23685] netlink: 248 bytes leftover after parsing attributes in process `syz.2.5620'.
[  411.874548][T23688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5621'.
[  411.922976][T23693] ip_vti0: Master is either lo or non-ether device
[  412.015952][T23701] IPVS: Scheduler module ip_vs_sip not found
[  412.089638][T23708] netlink: 'syz.1.5628': attribute type 23 has an invalid length.
[  412.181931][T23717] ip_vti0: Master is either lo or non-ether device
[  412.289946][T23728] netlink: 'syz.1.5635': attribute type 3 has an invalid length.
[  412.500007][T23742] netlink: 'syz.0.5640': attribute type 13 has an invalid length.
[  412.503260][T23743] netlink: 'syz.0.5640': attribute type 13 has an invalid length.
[  412.517717][T23742] tipc: Resetting bearer <eth:gre0>
[  412.734665][T23762] ip_vti0: Master is either lo or non-ether device
[  412.926029][T23789] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  412.932879][T23789] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  412.938778][T23792] ip_vti0: Master is either lo or non-ether device
[  412.963193][T23794] netlink: 'syz.2.5654': attribute type 10 has an invalid length.
[  412.986846][T23796] netlink: 252 bytes leftover after parsing attributes in process `syz.1.5658'.
[  413.239851][T23825] netlink: 'syz.2.5668': attribute type 4 has an invalid length.
[  413.289463][T23829] netlink: 260 bytes leftover after parsing attributes in process `syz.1.5669'.
[  413.347628][T23840] 8021q: adding VLAN 0 to HW filter on device bond3
[  413.361949][T23840] batman_adv: batadv0: Interface deactivated: macvlan7
[  413.364115][T23840] batman_adv: batadv0: Removing interface: macvlan7
[  413.393370][T23843] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5671'.
[  413.414271][T23845] netlink: 'syz.1.5672': attribute type 1 has an invalid length.
[  413.535143][T23852] lo speed is unknown, defaulting to 1000
[  413.574023][T23857] ip_vti0: Master is either lo or non-ether device
[  413.835993][T23875] vlan0: entered promiscuous mode
[  413.844876][T23875] dvmrp0: entered allmulticast mode
[  413.906872][T23883] netlink: 'syz.0.5686': attribute type 1 has an invalid length.
[  413.956629][T23886] ip_vti0: Master is either lo or non-ether device
[  414.003953][T23889] openvswitch: netlink: Unknown nsh attribute 0
[  414.005991][T23889] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  414.369819][T23906] ip_vti0: Master is either lo or non-ether device
[  414.857708][T23942] netlink: 'syz.1.5706': attribute type 2 has an invalid length.
[  414.928565][T23945] ip_vti0: Master is either lo or non-ether device
[  414.973961][T23949] netlink: 'syz.0.5708': attribute type 12 has an invalid length.
[  415.012514][T23954] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  415.142093][T23975] ip_vti0: Master is either lo or non-ether device
[  415.305446][T24001] ip_vti0: Master is either lo or non-ether device
[  415.574462][T24035] ip_vti0: Master is either lo or non-ether device
[  415.672289][T24043] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  415.788327][T24052] lo speed is unknown, defaulting to 1000
[  416.000745][T24064] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  416.003720][T24064] mac80211_hwsim hwsim47 syzkaller0: entered promiscuous mode
[  416.005977][T24064] mac80211_hwsim hwsim47 syzkaller0: entered allmulticast mode
[  416.009918][T24064] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  416.074621][T24068] ip_vti0: Master is either lo or non-ether device
[  416.688030][T24115] __nla_validate_parse: 13 callbacks suppressed
[  416.688044][T24115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5756'.
[  416.696511][T24115] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5756'.
[  416.929755][T24127] bond50: (slave vxcan7): The slave device specified does not support setting the MAC address
[  416.934682][T24127] bond50: (slave vxcan7): Error -95 calling set_mac_address
[  416.969137][T24129] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5759'.
[  417.116046][T24134] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5761'.
[  417.205689][T24138] validate_nla: 3 callbacks suppressed
[  417.205709][T24138] netlink: 'syz.1.5763': attribute type 1 has an invalid length.
[  417.213014][T24138] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5763'.
[  417.239006][T24140] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5764'.
[  417.242620][T24140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5764'.
[  417.246046][T24140] netlink: 'syz.0.5764': attribute type 5 has an invalid length.
[  417.357218][T24149] lo speed is unknown, defaulting to 1000
[  417.382431][T24153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5768'.
[  417.634148][T24161] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5770'.
[  417.983811][T24168] netlink: 248 bytes leftover after parsing attributes in process `syz.2.5772'.
[  418.214378][T24178] ip_vti0: Master is either lo or non-ether device
[  418.326069][T24191] netlink: 'syz.1.5780': attribute type 10 has an invalid length.
[  418.512865][T24209] ip_vti0: Master is either lo or non-ether device
[  418.567500][T24212] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  418.705694][T24221] mac80211_hwsim hwsim47 syzkaller0: left promiscuous mode
[  418.708251][T24221] mac80211_hwsim hwsim47 syzkaller0: left allmulticast mode
[  418.745690][T24221] 8021q: adding VLAN 0 to HW filter on device bond0
[  418.750154][T24221] team0: Port device bond0 added
[  418.937585][T24234] syzkaller1: entered promiscuous mode
[  418.944379][T24234] syzkaller1: entered allmulticast mode
[  419.015083][T24248] mac80211_hwsim hwsim298 wlan1: entered allmulticast mode
[  419.112699][T24266] ip_vti0: Master is either lo or non-ether device
[  419.115848][T24264] netlink: 'syz.1.5804': attribute type 10 has an invalid length.
[  419.133494][T24253] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  419.304004][T24290] ip_vti0: Master is either lo or non-ether device
[  419.438968][T24298] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  419.527500][T24316] ip_vti0: Master is either lo or non-ether device
[  419.711601][T24340] ip_vti0: Master is either lo or non-ether device
[  419.795914][T24348] netlink: 'syz.1.5833': attribute type 1 has an invalid length.
[  419.802882][T24331] openvswitch: netlink: Message has 4 unknown bytes.
[  419.826436][T24348] 8021q: adding VLAN 0 to HW filter on device bond0
[  419.844452][T24348] vlan0: entered allmulticast mode
[  419.846492][T24348] mac80211_hwsim hwsim241 wlan0: entered allmulticast mode
[  420.035959][T24376] netlink: 'syz.0.5842': attribute type 10 has an invalid length.
[  420.239614][T24387] netlink: zone id is out of range
[  420.242290][T24387] netlink: zone id is out of range
[  420.244637][T24387] netlink: zone id is out of range
[  420.246891][T24387] netlink: zone id is out of range
[  420.249512][T24387] netlink: zone id is out of range
[  420.252432][T24387] netlink: zone id is out of range
[  420.254684][T24387] netlink: zone id is out of range
[  420.256897][T24387] netlink: zone id is out of range
[  420.259373][T24387] netlink: zone id is out of range
[  420.535331][T24401] ip_vti0: Master is either lo or non-ether device
[  420.609152][T24403] lo speed is unknown, defaulting to 1000
[  420.871858][T24408] netlink: 'syz.2.5852': attribute type 1 has an invalid length.
[  420.905924][T24408] bond51: (slave vxcan7): The slave device specified does not support setting the MAC address
[  420.910644][T24408] bond51: (slave vxcan7): Error -95 calling set_mac_address
[  421.552392][T24449] netlink: 'syz.0.5867': attribute type 1 has an invalid length.
[  421.806325][T24468] __nla_validate_parse: 22 callbacks suppressed
[  421.806347][T24468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5871'.
[  421.952106][T24477] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5873'.
[  422.071854][T24486] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5878'.
[  422.185106][T24492] netlink: 'syz.0.5879': attribute type 13 has an invalid length.
[  422.188122][T24492] netlink: 'syz.0.5879': attribute type 17 has an invalid length.
[  422.239668][T24492] 8021q: adding VLAN 0 to HW filter on device team0
[  422.312019][T24501] ip_vti0: Master is either lo or non-ether device
[  422.359541][T24503] netlink: 'syz.0.5883': attribute type 10 has an invalid length.
[  422.514817][T24509] netlink: 'syz.0.5886': attribute type 1 has an invalid length.
[  422.537806][T24509] 8021q: adding VLAN 0 to HW filter on device bond27
[  422.872843][T24524] mac80211_hwsim hwsim214 wlan0: left promiscuous mode
[  422.877185][T24524] gtp1: left promiscuous mode
[  422.878811][T24524] gtp1: left allmulticast mode
[  422.977673][T24529] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  422.982441][T24529] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  423.029278][T24532] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5891'.
[  423.045975][T24534] netlink: 216 bytes leftover after parsing attributes in process `syz.1.5893'.
[  423.344094][T24552] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5900'.
[  423.417052][T24561] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5904'.
[  423.420137][T24561] nbd: couldn't find a device at index 0
[  423.422066][T24562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5903'.
[  423.531524][T24567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5906'.
[  423.657745][T24580] netlink: 'syz.0.5910': attribute type 4 has an invalid length.
[  423.661670][T24579] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5911'.
[  423.665981][T24579] nbd: couldn't find a device at index 0
[  423.670556][T24580] netlink: 'syz.0.5910': attribute type 4 has an invalid length.
[  423.744709][T24584] ip_vti0: Master is either lo or non-ether device
[  423.927983][T24595] netlink: 'syz.2.5918': attribute type 2 has an invalid length.
[  423.932952][T24595] netlink: 'syz.2.5918': attribute type 1 has an invalid length.
[  424.031157][T24603] ip_vti0: Master is either lo or non-ether device
[  424.222266][T24619] netlink: 'syz.1.5925': attribute type 13 has an invalid length.
[  424.225461][T24619] netlink: 'syz.1.5925': attribute type 17 has an invalid length.
[  424.247383][T24619] erspan0: entered promiscuous mode
[  424.270871][T24619] 8021q: adding VLAN 0 to HW filter on device team0
[  424.287288][ T2333] lo speed is unknown, defaulting to 1000
[  424.292349][ T2333] syz0: Port: 1 Link ACTIVE
[  424.302699][ T2333] lo speed is unknown, defaulting to 1000
[  424.404976][T24623] netlink: 'syz.2.5928': attribute type 16 has an invalid length.
[  424.407431][T24623] netlink: 'syz.2.5928': attribute type 17 has an invalid length.
[  424.449013][T24625] ip_vti0: Master is either lo or non-ether device
[  424.605290][T24637] syz.0.5932: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  424.614242][T24637] CPU: 0 UID: 0 PID: 24637 Comm: syz.0.5932 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  424.614267][T24637] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  424.614277][T24637] Call Trace:
[  424.614284][T24637]  <TASK>
[  424.614291][T24637]  dump_stack_lvl+0x189/0x250
[  424.614319][T24637]  ? __pfx_dump_stack_lvl+0x10/0x10
[  424.614336][T24637]  ? __pfx__printk+0x10/0x10
[  424.614356][T24637]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  424.614374][T24637]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  424.614423][T24637]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  424.614442][T24637]  warn_alloc+0x214/0x310
[  424.614470][T24637]  ? __pfx_warn_alloc+0x10/0x10
[  424.614497][T24637]  ? __get_vm_area_node+0x28f/0x300
[  424.614517][T24637]  ? xskq_create+0xbf/0x170
[  424.614536][T24637]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  424.614581][T24637]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  424.614605][T24637]  ? __kasan_kmalloc+0x93/0xb0
[  424.614626][T24637]  vmalloc_user_noprof+0xad/0xf0
[  424.614646][T24637]  ? xskq_create+0xbf/0x170
[  424.614661][T24637]  xskq_create+0xbf/0x170
[  424.614680][T24637]  xsk_init_queue+0xb0/0x110
[  424.614697][T24637]  xsk_setsockopt+0x57b/0x8d0
[  424.614714][T24637]  ? __pfx_xsk_setsockopt+0x10/0x10
[  424.614729][T24637]  ? __pfx_aa_sk_perm+0x10/0x10
[  424.614750][T24637]  ? __fget_files+0x2a/0x420
[  424.614769][T24637]  ? aa_sock_opt_perm+0xff/0x1b0
[  424.614791][T24637]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  424.614806][T24637]  ? __pfx_xsk_setsockopt+0x10/0x10
[  424.614822][T24637]  do_sock_setsockopt+0x17c/0x1b0
[  424.614846][T24637]  __x64_sys_setsockopt+0x13f/0x1b0
[  424.614875][T24637]  do_syscall_64+0xfa/0x3b0
[  424.614892][T24637]  ? lockdep_hardirqs_on+0x9c/0x150
[  424.614908][T24637]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.614923][T24637]  ? exc_page_fault+0x9f/0xf0
[  424.614940][T24637]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.614953][T24637] RIP: 0033:0x7fc8f3f8ebe9
[  424.614968][T24637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  424.614981][T24637] RSP: 002b:00007fc8f4e96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  424.614997][T24637] RAX: ffffffffffffffda RBX: 00007fc8f41b5fa0 RCX: 00007fc8f3f8ebe9
[  424.615007][T24637] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005
[  424.615016][T24637] RBP: 00007fc8f4011e19 R08: 0000000000000004 R09: 0000000000000000
[  424.615024][T24637] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000
[  424.615033][T24637] R13: 00007fc8f41b6038 R14: 00007fc8f41b5fa0 R15: 00007fffc7f0c1b8
[  424.615058][T24637]  </TASK>
[  424.615064][T24637] Mem-Info:
[  424.710698][T24637] active_anon:4747 inactive_anon:0 isolated_anon:0
[  424.710698][T24637]  active_file:1511 inactive_file:38329 isolated_file:0
[  424.710698][T24637]  unevictable:1768 dirty:55 writeback:0
[  424.710698][T24637]  slab_reclaimable:17915 slab_unreclaimable:169184
[  424.710698][T24637]  mapped:18303 shmem:2436 pagetables:1230
[  424.710698][T24637]  sec_pagetables:0 bounce:0
[  424.710698][T24637]  kernel_misc_reclaimable:0
[  424.710698][T24637]  free:164203 free_pcp:20626 free_cma:0
[  424.724787][T24637] Node 0 active_anon:8564kB inactive_anon:0kB active_file:4564kB inactive_file:86016kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34668kB dirty:124kB writeback:0kB shmem:4964kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9492kB pagetables:1696kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  424.735085][T24637] Node 1 active_anon:10492kB inactive_anon:0kB active_file:1480kB inactive_file:67300kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38544kB dirty:96kB writeback:0kB shmem:4780kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5896kB pagetables:3292kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  424.745049][T24637] Node 0 DMA free:13092kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  424.754160][T24637] lowmem_reserve[]: 0 811 811 811 811
[  424.756323][T24637] Node 0 DMA32 free:57988kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8564kB inactive_anon:0kB active_file:4564kB inactive_file:86016kB unevictable:3536kB writepending:124kB present:1556484kB managed:831000kB mlocked:0kB bounce:0kB free_pcp:24504kB local_pcp:8804kB free_cma:0kB
[  424.765627][T24637] lowmem_reserve[]: 0 0 0 0 0
[  424.767107][T24637] Node 1 DMA32 free:358112kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:14956kB local_pcp:5344kB free_cma:0kB
[  424.776250][T24637] lowmem_reserve[]: 0 0 854 854 854
[  424.777864][T24637] Node 1 Normal free:227428kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10552kB inactive_anon:0kB active_file:1480kB inactive_file:67300kB unevictable:3536kB writepending:96kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:43088kB local_pcp:18452kB free_cma:0kB
[  424.787890][T24637] lowmem_reserve[]: 0 0 0 0 0
[  424.789707][T24637] Node 0 DMA: 13*4kB (U) 12*8kB (U) 13*16kB (U) 12*32kB (U) 11*64kB (U) 11*128kB (U) 10*256kB (U) 9*512kB (U) 3*1024kB (U) 0*2048kB 0*4096kB = 13092kB
[  424.794493][T24637] Node 0 DMA32: 49*4kB (UME) 31*8kB (ME) 111*16kB (UM) 205*32kB (UME) 198*64kB (UM) 79*128kB (UME) 69*256kB (UM) 9*512kB (UME) 4*1024kB (UME) 0*2048kB 0*4096kB = 57932kB
[  424.799924][T24637] Node 1 DMA32: 130*4kB (UM) 119*8kB (UME) 104*16kB (UME) 107*32kB (UM) 99*64kB (UME) 93*128kB (UE) 88*256kB (UME) 81*512kB (UME) 65*1024kB (UM) 5*2048kB (UME) 47*4096kB (UM) = 358112kB
[  424.818715][T24637] Node 1 Normal: 899*4kB (UME) 358*8kB (UM) 77*16kB (UM) 548*32kB (UM) 231*64kB (UME) 20*128kB (U) 124*256kB (UME) 20*512kB (UE) 121*1024kB (UME) 3*2048kB (ME) 3*4096kB (UM) = 226892kB
[  424.825436][T24637] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB
[  424.828319][T24637] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  424.831853][T24637] 42293 total pagecache pages
[  424.833639][T24637] 0 pages in swap cache
[  424.835262][T24637] Free swap  = 124996kB
[  424.836882][T24637] Total swap = 124996kB
[  424.838655][T24637] 786301 pages RAM
[  424.840141][T24637] 0 pages HighMem/MovableOnly
[  424.842010][T24637] 241319 pages reserved
[  424.843676][T24637] 0 pages cma reserved
[  424.905233][T24658] ip_vti0: Master is either lo or non-ether device
[  424.948117][T24662] net_ratelimit: 333 callbacks suppressed
[  424.948132][T24662] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  425.102571][T24677] lo speed is unknown, defaulting to 1000
[  425.178210][T24689] ip_vti0: Master is either lo or non-ether device
[  425.310590][T24685] lo speed is unknown, defaulting to 1000
[  425.655936][T24721] netlink: 'syz.0.5955': attribute type 11 has an invalid length.
[  425.834935][T24729] ip_vti0: Master is either lo or non-ether device
[  426.096237][ T5913] lo speed is unknown, defaulting to 1000
[  426.098155][ T5913] syz0: Port: 1 Link DOWN
[  426.112141][T24742] pim6reg1: entered promiscuous mode
[  426.114417][T24742] pim6reg1: entered allmulticast mode
[  426.119665][ T5913] lo speed is unknown, defaulting to 1000
[  426.176719][T24757] pim6reg1: entered promiscuous mode
[  426.182579][T24757] pim6reg1: entered allmulticast mode
[  426.227404][T24750] lo speed is unknown, defaulting to 1000
[  426.271949][T24759] 8021q: adding VLAN 0 to HW filter on device bond28
[  426.275431][T24759] team0: Port device bond28 added
[  427.031904][T24783] __nla_validate_parse: 82 callbacks suppressed
[  427.031919][T24783] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5973'.
[  427.036682][T24783] openvswitch: netlink: Flow actions attr not present in new flow.
[  427.502245][T24813] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  427.506139][T24813] mac80211_hwsim hwsim47 syzkaller0: entered promiscuous mode
[  427.512815][T24813] mac80211_hwsim hwsim47 syzkaller0: entered allmulticast mode
[  427.517404][T24813] mac80211_hwsim hwsim47 syzkaller0: left promiscuous mode
[  427.522135][T24813] mac80211_hwsim hwsim47 syzkaller0: left allmulticast mode
[  427.552198][T24815] validate_nla: 5 callbacks suppressed
[  427.552217][T24815] netlink: 'syz.2.5983': attribute type 23 has an invalid length.
[  427.737312][T24829] netlink: 212296 bytes leftover after parsing attributes in process `syz.2.5988'.
[  427.755221][T24831] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  427.887958][T24841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5990'.
[  427.940400][T24846] ip_vti0: Master is either lo or non-ether device
[  427.984923][T24849] lo speed is unknown, defaulting to 1000
[  428.035428][T24853] netlink: 'syz.2.5992': attribute type 21 has an invalid length.
[  428.037951][T24853] netlink: 'syz.2.5992': attribute type 6 has an invalid length.
[  428.041433][T24853] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5992'.
[  428.046414][T24853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5992'.
[  428.250209][T24860] netlink: 'syz.2.5996': attribute type 3 has an invalid length.
[  428.253963][T24860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5996'.
[  428.635247][T24868] ip_vti0: Master is either lo or non-ether device
[  428.644545][T24870] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6001'.
[  428.647888][T24870] nbd: couldn't find a device at index 0
[  428.734769][T24874] netlink: 'syz.2.6002': attribute type 12 has an invalid length.
[  428.741208][T24874] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.6002'.
[  428.893259][T24881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6005'.
[  428.898454][T24881] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6005'.
[  428.906030][T24885] syzkaller1: entered promiscuous mode
[  428.912317][T24885] syzkaller1: entered allmulticast mode
[  428.964446][T24890] ip_vti0: Master is either lo or non-ether device
[  429.009238][T24894] nbd: couldn't find a device at index 0
[  429.013928][T24892] mac80211_hwsim hwsim69 syzkaller0: entered promiscuous mode
[  429.016223][T24892] mac80211_hwsim hwsim69 syzkaller0: entered allmulticast mode
[  429.020850][T24892] tipc: Resetting bearer <eth:syzkaller0>
[  429.023158][T24892] netlink: 'syz.2.6009': attribute type 11 has an invalid length.
[  429.202908][T24906] rdma_rxe: rxe_newlink: failed to add lo
[  429.213208][T24908] ip_vti0: Master is either lo or non-ether device
[  429.501558][T24928] ip_vti0: Master is either lo or non-ether device
[  429.848617][T24950] nbd: couldn't find a device at index 0
[  430.023475][T24964] netlink: 'syz.2.6036': attribute type 149 has an invalid length.
[  430.131721][T24973] nbd: couldn't find a device at index 0
[  430.819991][T25001] nbd: couldn't find a device at index 0
[  431.374847][T25039] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  431.380443][T25039] bond3: (slave macvlan3): Enslaving as a backup interface with a down link
[  431.392680][T25039] bond3: (slave macvlan3): Releasing backup interface
[  431.413468][T25047] ip_vti0: Master is either lo or non-ether device
[  431.466376][T25050] netlink: 'syz.1.6064': attribute type 23 has an invalid length.
[  431.534314][T25053] mac80211_hwsim hwsim330 wlan1: entered allmulticast mode
[  431.597896][T25053] netlink: 'syz.2.6066': attribute type 10 has an invalid length.
[  432.065951][T25084] netlink: 'syz.1.6075': attribute type 10 has an invalid length.
[  432.071255][T25084] syz_tun: entered promiscuous mode
[  432.083571][T25084] netlink: 'syz.1.6075': attribute type 10 has an invalid length.
[  432.086177][T25086] __nla_validate_parse: 12 callbacks suppressed
[  432.086187][T25086] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6074'.
[  432.092614][T25081] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6074'.
[  432.203033][T25096] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6078'.
[  432.216487][T25106] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6080'.
[  432.219766][T25106] nbd: couldn't find a device at index 0
[  432.271437][T25112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6083'.
[  432.320015][T25111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6082'.
[  432.352534][T25120] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.6086'.
[  432.357882][T25118] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  432.361349][T25118] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6085'.
[  432.413734][T25124] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6087'.
[  432.416685][T25124] openvswitch: netlink: Flow actions attr not present in new flow.
[  432.440247][ T2333] lo speed is unknown, defaulting to 1000
[  432.442536][ T2333] syz0: Port: 1 Link ACTIVE
[  432.448187][T13771] lo speed is unknown, defaulting to 1000
[  432.585723][T25143] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6092'.
[  432.862834][T25167] validate_nla: 2 callbacks suppressed
[  432.862853][T25167] netlink: 'syz.2.6099': attribute type 13 has an invalid length.
[  432.867997][T25167] netlink: 'syz.2.6099': attribute type 17 has an invalid length.
[  432.929906][T25167] 8021q: adding VLAN 0 to HW filter on device team0
[  432.936040][T25167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  433.112688][T25172] netlink: 'syz.2.6100': attribute type 10 has an invalid length.
[  433.269423][T25183] ip_vti0: Master is either lo or non-ether device
[  433.605461][T25204] lo speed is unknown, defaulting to 1000
[  433.893416][T25221] ip_vti0: Master is either lo or non-ether device
[  433.962676][T25226] netlink: 'syz.0.6117': attribute type 10 has an invalid length.
[  434.017252][T25230] nbd: couldn't find a device at index 0
[  434.203971][T25232] 8021q: adding VLAN 0 to HW filter on device bond25
[  434.207785][T25232] bond25: entered promiscuous mode
[  434.226891][T25232] team0: Port device bond25 added
[  434.329610][T25247] nbd: couldn't find a device at index 0
[  434.564539][T25253] lo speed is unknown, defaulting to 1000
[  437.726162][T25277] netlink: 'syz.2.6132': attribute type 13 has an invalid length.
[  437.862501][T25281] ip_vti0: Master is either lo or non-ether device
[  437.935436][T25285] __nla_validate_parse: 17 callbacks suppressed
[  437.935457][T25285] netlink: 248 bytes leftover after parsing attributes in process `syz.1.6135'.
[  438.006043][T25287] netlink: 'syz.2.6136': attribute type 13 has an invalid length.
[  438.015339][T25289] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6135'.
[  438.387504][T25315] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6142'.
[  438.394390][T25318] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6145'.
[  438.396543][T25315] nbd: couldn't find a device at index 0
[  438.399291][T25318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6145'.
[  438.415280][T25318] syz_tun: entered allmulticast mode
[  438.426433][T25318] erspan0: left promiscuous mode
[  438.445618][T25318] syz_tun: left promiscuous mode
[  438.453008][T25318] 8021q: adding VLAN 0 to HW filter on device team0
[  438.458151][T25318] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  438.474600][T25317] syz_tun: left allmulticast mode
[  438.663330][T25341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6147'.
[  438.834403][T25350] lo speed is unknown, defaulting to 1000
[  438.873801][T25353] IPVS: set_ctl: invalid protocol: 58 100.1.1.2:20022
[  438.897761][T25355] ip_vti0: Master is either lo or non-ether device
[  439.014807][T25361] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6153'.
[  439.070668][T25363] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6154'.
[  443.073874][T25424] netlink: 248 bytes leftover after parsing attributes in process `syz.0.6167'.
[  443.133001][T25425] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6167'.
[  443.146743][T25430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6165'.
[  443.255860][T25434] netlink: 'syz.0.6170': attribute type 10 has an invalid length.
[  443.453023][T25451] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6174'.
[  443.582468][T25459] nbd: must specify at least one socket
[  443.620890][T25462] netlink: 'syz.0.6178': attribute type 4 has an invalid length.
[  443.696188][T25467] ip_vti0: Master is either lo or non-ether device
[  443.783136][T25473] IPVS: Scheduler module ip_vs_sip not found
[  443.934401][T25486] ip_vti0: Master is either lo or non-ether device
[  444.048235][T25496] syzkaller1: entered promiscuous mode
[  444.050769][T25496] syzkaller1: entered allmulticast mode
[  444.164005][T25503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6191'.
[  444.282548][T25510] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6193'.
[  444.435682][T25525] ip_vti0: Master is either lo or non-ether device
[  444.485406][T25528] netlink: 248 bytes leftover after parsing attributes in process `syz.2.6199'.
[  444.587473][T25530] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6200'.
[  444.592203][T25530] openvswitch: netlink: Flow key attr not present in new flow.
[  444.595501][T25530] netlink: 'syz.2.6200': attribute type 11 has an invalid length.
[  444.607334][T25533] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6200'.
[  444.613674][T25533] openvswitch: netlink: Flow key attr not present in new flow.
[  444.666035][T25539] netlink: 'syz.2.6202': attribute type 23 has an invalid length.
[  444.777821][T25538] mac80211_hwsim hwsim92 syzkaller0: entered promiscuous mode
[  444.781846][T25538] mac80211_hwsim hwsim92 syzkaller0: entered allmulticast mode
[  444.785203][T25538] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6203'.
[  444.894209][T25550] nbd: couldn't find a device at index 0
[  445.567283][T25584] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  445.959299][T25602] nbd: couldn't find a device at index 0
[  446.006331][T25608] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  446.062287][T25613] netlink: 'syz.2.6229': attribute type 6 has an invalid length.
[  446.072323][T25613] netlink: 'syz.2.6229': attribute type 2 has an invalid length.
[  446.080005][T25613] mac80211_hwsim hwsim341 wlan0: entered promiscuous mode
[  446.083036][T25613] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  446.092028][T25617] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  446.096259][T25617] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  446.203036][T25630] nbd: couldn't find a device at index 0
[  446.251170][T25634] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  446.263742][T25639] netlink: 'syz.2.6231': attribute type 13 has an invalid length.
[  446.266164][T25639] netlink: 'syz.2.6231': attribute type 17 has an invalid length.
[  446.340041][T25639] 8021q: adding VLAN 0 to HW filter on device team0
[  446.346001][T25639] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  446.351921][T25638] syzkaller1: entered allmulticast mode
[  446.360034][T25636] unknown channel width for channel at 909000KHz?
[  446.434941][T25646] lo speed is unknown, defaulting to 1000
[  446.479105][T25649] IPv6: Can't replace route, no match found
[  446.610837][T25661] ip_vti0: Master is either lo or non-ether device
[  446.786684][T25671] nbd: couldn't find a device at index 0
[  447.443149][T25700] nbd: couldn't find a device at index 0
[  447.620495][T25710] ip_vti0: Master is either lo or non-ether device
[  447.738530][T25719] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  447.763053][T25708] 8021q: adding VLAN 0 to HW filter on device bond26
[  447.770424][T25708] bond0: (slave bond26): Enslaving as an active interface with a down link
[  448.195166][T25755] __nla_validate_parse: 20 callbacks suppressed
[  448.195179][T25755] netlink: 248 bytes leftover after parsing attributes in process `syz.0.6266'.
[  448.369842][T25770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6270'.
[  448.435243][T25777] netlink: 216 bytes leftover after parsing attributes in process `syz.0.6272'.
[  448.440322][T25777] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6272'.
[  448.448612][T25777] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6272'.
[  448.828058][T25793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6276'.
[  448.830033][T25794] netlink: 1104 bytes leftover after parsing attributes in process `syz.2.6276'.
[  448.917570][T25798] netlink: 348 bytes leftover after parsing attributes in process `syz.2.6278'.
[  449.055906][T25811] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6280'.
[  449.060173][T25811] nbd: couldn't find a device at index 0
[  449.063733][T25809] lo speed is unknown, defaulting to 1000
[  449.444661][T25826] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6285'.
[  449.447549][T25826] openvswitch: netlink: Flow actions attr not present in new flow.
[  449.483758][T25828] ip_vti0: Master is either lo or non-ether device
[  449.591184][T25830] macvlan4: entered promiscuous mode
[  449.592897][T25830] bond0: entered promiscuous mode
[  449.597409][T25830] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  449.640225][T25835] nbd: couldn't find a device at index 0
[  449.705176][T25840] netlink: 'syz.0.6291': attribute type 10 has an invalid length.
[  449.712617][T25839] openvswitch: netlink: Flow actions attr not present in new flow.
[  449.889367][T25853] lo speed is unknown, defaulting to 1000
[  450.088738][T25850] block nbd2: server does not support multiple connections per device.
[  450.092608][T25850] block nbd2: shutting down sockets
[  450.623315][T25887] 8021q: adding VLAN 0 to HW filter on device bond6
[  450.666119][T25891] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  450.744405][T25896] netlink: 'syz.2.6306': attribute type 4 has an invalid length.
[  450.863011][T25893] infiniband syz1: set down
[  450.864543][T25893] infiniband syz1: added macvlan1
[  450.885324][T25893] RDS/IB: syz1: added
[  450.886766][T25893] smc: adding ib device syz1 with port count 1
[  450.888895][T25893] smc:    ib device syz1 port 1 has pnetid 
[  451.295054][T25912] mac80211_hwsim hwsim47 syzkaller0: Caught tx_queue_len zero misconfig
[  451.438028][T25920] netlink: zone id is out of range
[  451.442695][T25920] netlink: zone id is out of range
[  451.444645][T25920] netlink: zone id is out of range
[  451.446715][T25920] netlink: zone id is out of range
[  451.450014][T25920] netlink: zone id is out of range
[  451.455218][T25920] netlink: zone id is out of range
[  451.456897][T25920] netlink: zone id is out of range
[  451.464521][T25920] netlink: zone id is out of range
[  451.466173][T25920] netlink: zone id is out of range
[  451.622344][ T2333] lo speed is unknown, defaulting to 1000
[  451.624972][ T2333] syz0: Port: 1 Link DOWN
[  451.626436][ T2333] lo speed is unknown, defaulting to 1000
[  451.860790][T25964] netlink: 'syz.2.6323': attribute type 1 has an invalid length.
[  451.896692][T25964] 8021q: adding VLAN 0 to HW filter on device bond52
[  451.939769][T25964] vlan2: entered allmulticast mode
[  451.941807][T25964] mac80211_hwsim hwsim341 wlan0: entered allmulticast mode
[  451.945123][T25964] bond52: (slave vlan2): Error -34 calling dev_set_mtu
[  452.930285][T25995] ip_vti0: Master is either lo or non-ether device
[  452.990797][T26000] mac80211_hwsim hwsim92 syzkaller0: left promiscuous mode
[  452.993738][T26000] mac80211_hwsim hwsim92 syzkaller0: left allmulticast mode
[  453.197850][T26020] batadv0: left promiscuous mode
[  453.199699][T26020] batadv0: left allmulticast mode
[  453.202785][T26020] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  453.205727][T26020] mac80211_hwsim hwsim47 syzkaller0: entered promiscuous mode
[  453.208117][T26020] mac80211_hwsim hwsim47 syzkaller0: entered allmulticast mode
[  453.282859][T26025] __nla_validate_parse: 23 callbacks suppressed
[  453.282873][T26025] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6345'.
[  453.559360][T26042] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6348'.
[  453.562369][T26042] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6348'.
[  453.565252][T26042] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6348'.
[  453.571185][T26042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6348'.
[  453.575679][T26042] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6348'.
[  453.612600][T26044] pim6reg1: entered promiscuous mode
[  453.614478][T26044] pim6reg1: entered allmulticast mode
[  453.618142][T26044] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6349'.
[  453.618168][T26045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6349'.
[  453.662063][T26045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6349'.
[  453.664788][T26045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6349'.
[  453.759026][T26049] netlink: 'syz.1.6350': attribute type 1 has an invalid length.
[  453.890848][T26055] netlink: 'syz.1.6352': attribute type 10 has an invalid length.
[  454.006020][T26066] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  454.006583][T26065] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  454.112010][T26076] netlink: 'syz.1.6356': attribute type 1 has an invalid length.
[  454.158059][T26076] 8021q: adding VLAN 0 to HW filter on device bond27
[  454.170722][T26082] netlink: 'syz.2.6358': attribute type 1 has an invalid length.
[  454.203314][T26087] ip_vti0: Master is either lo or non-ether device
[  454.216709][T26073] netlink: 'syz.0.6357': attribute type 10 has an invalid length.
[  454.405437][T26096] 8021q: adding VLAN 0 to HW filter on device bond53
[  454.416883][T26096] bond0: (slave bond53): Enslaving as an active interface with a down link
[  454.745104][T26119] nbd: couldn't find a device at index 0
[  454.795399][T26113] 8021q: adding VLAN 0 to HW filter on device bond54
[  454.801748][T26113] bond0: (slave bond54): Enslaving as an active interface with a down link
[  454.804847][T26123] netlink: 'syz.0.6370': attribute type 28 has an invalid length.
[  454.948023][T26128] ip_vti0: Master is either lo or non-ether device
[  457.104600][T26193] ip_vti0: Master is either lo or non-ether device
[  457.630855][T26224] ip_vti0: Master is either lo or non-ether device
[  457.719247][T26226] netlink: 'syz.1.6403': attribute type 12 has an invalid length.
[  457.882969][T26231] netlink: 'syz.1.6405': attribute type 1 has an invalid length.
[  457.915044][T26231] bond28: (slave vxcan13): The slave device specified does not support setting the MAC address
[  457.922865][T26231] bond28: (slave vxcan13): Error -95 calling set_mac_address
[  457.924578][T26237] netlink: 'syz.2.6407': attribute type 13 has an invalid length.
[  457.933554][T26237] gretap0: refused to change device tx_queue_len
[  457.935557][T26237] net_ratelimit: 310 callbacks suppressed
[  457.935566][T26237] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  458.046087][T26247] netlink: 'syz.2.6410': attribute type 13 has an invalid length.
[  458.086725][T26246] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  458.090536][T26246] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  458.094222][T26246] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  458.097852][T26246] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  458.104392][T26246] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  458.108005][T26246] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  458.112324][T26246] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  458.115807][T26246] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  458.119463][T26246] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  458.122961][T26246] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  458.126469][T26246] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  458.130125][T26246] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  458.133637][T26246] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  458.137150][T26246] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  458.345999][T26264] ip_vti0: Master is either lo or non-ether device
[  458.429726][T26271] netlink: 'syz.0.6420': attribute type 4 has an invalid length.
[  458.437351][T26271] tipc: Resetting bearer <eth:gre0>
[  458.514174][T26273] __nla_validate_parse: 17 callbacks suppressed
[  458.514189][T26273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6418'.
[  458.642635][T26282] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6421'.
[  458.745790][T26289] netlink: 'syz.2.6425': attribute type 1 has an invalid length.
[  458.750127][T26287] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6423'.
[  458.752850][T26287] openvswitch: netlink: Flow actions attr not present in new flow.
[  458.764538][T26289] 8021q: adding VLAN 0 to HW filter on device bond55
[  458.849394][T26302] netlink: 'syz.2.6426': attribute type 4 has an invalid length.
[  458.856341][T26302] netlink: 'syz.2.6426': attribute type 4 has an invalid length.
[  459.089782][T26329] pim6reg1: entered promiscuous mode
[  459.092147][T26329] pim6reg1: entered allmulticast mode
[  459.172954][T26336] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6437'.
[  459.254055][T26345] vlan0: left promiscuous mode
[  459.257428][T26345] mac80211_hwsim hwsim47 wlan0: left promiscuous mode
[  459.261672][T26345] mac80211_hwsim hwsim47 syzkaller0: left promiscuous mode
[  459.263938][T26345] mac80211_hwsim hwsim47 syzkaller0: left allmulticast mode
[  459.271175][T26345] veth13: left promiscuous mode
[  459.429715][T26360] ip_vti0: Master is either lo or non-ether device
[  459.517877][T26368] IPVS: length: 4096 != 8
[  459.525498][T26366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6447'.
[  459.530090][T26366] netlink: 'syz.0.6447': attribute type 1 has an invalid length.
[  459.577747][T26372] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6448'.
[  459.581894][T26372] nbd: couldn't find a device at index 0
[  459.583828][T26374] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6449'.
[  459.621298][T26374] bond29: entered promiscuous mode
[  459.623379][T26374] bond29: entered allmulticast mode
[  459.625784][T26374] 8021q: adding VLAN 0 to HW filter on device bond29
[  459.730745][T26379] ==================================================================
[  459.733323][T26379] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  459.735743][T26379] Read of size 2 at addr ffff888113a7b742 by task syz.1.6451/26379
[  459.738290][T26379] 
[  459.739484][T26379] CPU: 0 UID: 0 PID: 26379 Comm: syz.1.6451 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  459.739499][T26379] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  459.739506][T26379] Call Trace:
[  459.739512][T26379]  <TASK>
[  459.739518][T26379]  dump_stack_lvl+0x189/0x250
[  459.739535][T26379]  ? __kasan_check_byte+0x12/0x40
[  459.739549][T26379]  ? __pfx_dump_stack_lvl+0x10/0x10
[  459.739560][T26379]  ? lock_release+0x4b/0x3e0
[  459.739576][T26379]  ? __virt_addr_valid+0x4a5/0x5c0
[  459.739588][T26379]  print_report+0xca/0x240
[  459.739597][T26379]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  459.739609][T26379]  kasan_report+0x118/0x150
[  459.739621][T26379]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  459.739635][T26379]  __xfrm_state_lookup+0x6ad/0x8d0
[  459.739648][T26379]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  459.739668][T26379]  xfrm_state_add+0x27d/0xc40
[  459.739684][T26379]  xfrm_add_sa+0x35a1/0x4070
[  459.739695][T26379]  ? __pfx_xfrm_add_sa+0x10/0x10
[  459.739702][T26379]  ? apparmor_capable+0x137/0x1b0
[  459.739712][T26379]  ? __nla_parse+0x40/0x60
[  459.739724][T26379]  xfrm_user_rcv_msg+0x7a3/0xab0
[  459.739732][T26379]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  459.739747][T26379]  ? __pfx___mutex_trylock_common+0x10/0x10
[  459.739757][T26379]  ? rcu_is_watching+0x15/0xb0
[  459.739767][T26379]  ? trace_contention_end+0x39/0x120
[  459.739775][T26379]  ? __mutex_lock+0x335/0x1360
[  459.739787][T26379]  netlink_rcv_skb+0x208/0x470
[  459.739799][T26379]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  459.739807][T26379]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  459.739820][T26379]  ? netlink_deliver_tap+0x2e/0x1b0
[  459.739829][T26379]  ? netlink_deliver_tap+0x2e/0x1b0
[  459.739838][T26379]  xfrm_netlink_rcv+0x79/0x90
[  459.739845][T26379]  netlink_unicast+0x82f/0x9e0
[  459.739856][T26379]  ? __pfx_netlink_unicast+0x10/0x10
[  459.739866][T26379]  ? netlink_sendmsg+0x642/0xb30
[  459.739875][T26379]  ? skb_put+0x11b/0x210
[  459.739887][T26379]  netlink_sendmsg+0x805/0xb30
[  459.739899][T26379]  ? __pfx_netlink_sendmsg+0x10/0x10
[  459.739909][T26379]  ? aa_sock_msg_perm+0xf1/0x1d0
[  459.739919][T26379]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  459.739928][T26379]  ? __pfx_netlink_sendmsg+0x10/0x10
[  459.739938][T26379]  __sock_sendmsg+0x21c/0x270
[  459.739948][T26379]  ____sys_sendmsg+0x505/0x830
[  459.739960][T26379]  ? __pfx_____sys_sendmsg+0x10/0x10
[  459.739973][T26379]  ? import_iovec+0x74/0xa0
[  459.739981][T26379]  ___sys_sendmsg+0x21f/0x2a0
[  459.739992][T26379]  ? __pfx____sys_sendmsg+0x10/0x10
[  459.740010][T26379]  ? __fget_files+0x2a/0x420
[  459.740022][T26379]  ? __fget_files+0x3a0/0x420
[  459.740034][T26379]  __x64_sys_sendmsg+0x19b/0x260
[  459.740046][T26379]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  459.740059][T26379]  ? rcu_is_watching+0x15/0xb0
[  459.740067][T26379]  ? do_syscall_64+0xbe/0x3b0
[  459.740078][T26379]  do_syscall_64+0xfa/0x3b0
[  459.740087][T26379]  ? lockdep_hardirqs_on+0x9c/0x150
[  459.740096][T26379]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  459.740104][T26379]  ? exc_page_fault+0x9f/0xf0
[  459.740113][T26379]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  459.740121][T26379] RIP: 0033:0x7f0cf578ebe9
[  459.740130][T26379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  459.740166][T26379] RSP: 002b:00007f0cf39f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  459.740177][T26379] RAX: ffffffffffffffda RBX: 00007f0cf59b5fa0 RCX: 00007f0cf578ebe9
[  459.740184][T26379] RDX: 0000000000000804 RSI: 0000200000000100 RDI: 0000000000000009
[  459.740191][T26379] RBP: 00007f0cf5811e19 R08: 0000000000000000 R09: 0000000000000000
[  459.740197][T26379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  459.740203][T26379] R13: 00007f0cf59b6038 R14: 00007f0cf59b5fa0 R15: 00007ffe554bcb68
[  459.740215][T26379]  </TASK>
[  459.740219][T26379] 
[  459.856253][T26379] Allocated by task 24191:
[  459.857608][T26379]  kasan_save_track+0x3e/0x80
[  459.859018][T26379]  __kasan_slab_alloc+0x6c/0x80
[  459.860481][T26379]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  459.862168][T26379]  xfrm_state_alloc+0x24/0x2f0
[  459.863636][T26379]  __find_acq_core+0x8a7/0x1c00
[  459.865138][T26379]  xfrm_find_acq+0x78/0xa0
[  459.866521][T26379]  xfrm_alloc_userspi+0x6b3/0xc90
[  459.868064][T26379]  xfrm_user_rcv_msg+0x7a3/0xab0
[  459.869582][T26379]  netlink_rcv_skb+0x208/0x470
[  459.871066][T26379]  xfrm_netlink_rcv+0x79/0x90
[  459.872549][T26379]  netlink_unicast+0x82f/0x9e0
[  459.874014][T26379]  netlink_sendmsg+0x805/0xb30
[  459.875490][T26379]  __sock_sendmsg+0x21c/0x270
[  459.877037][T26379]  ____sys_sendmsg+0x505/0x830
[  459.878562][T26379]  ___sys_sendmsg+0x21f/0x2a0
[  459.880020][T26379]  __x64_sys_sendmsg+0x19b/0x260
[  459.881593][T26379]  do_syscall_64+0xfa/0x3b0
[  459.882994][T26379]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  459.884815][T26379] 
[  459.885568][T26379] Freed by task 2333:
[  459.886804][T26379]  kasan_save_track+0x3e/0x80
[  459.888302][T26379]  kasan_save_free_info+0x46/0x50
[  459.889845][T26379]  __kasan_slab_free+0x5b/0x80
[  459.891328][T26379]  kmem_cache_free+0x18f/0x400
[  459.892807][T26379]  xfrm_state_gc_task+0x52d/0x6b0
[  459.894454][T26379]  process_scheduled_works+0xae1/0x17b0
[  459.896156][T26379]  worker_thread+0x8a0/0xda0
[  459.897590][T26379]  kthread+0x711/0x8a0
[  459.898847][T26379]  ret_from_fork+0x3fc/0x770
[  459.900277][T26379]  ret_from_fork_asm+0x1a/0x30
[  459.901769][T26379] 
[  459.902575][T26379] The buggy address belongs to the object at ffff888113a7b600
[  459.902575][T26379]  which belongs to the cache xfrm_state of size 928
[  459.906763][T26379] The buggy address is located 322 bytes inside of
[  459.906763][T26379]  freed 928-byte region [ffff888113a7b600, ffff888113a7b9a0)
[  459.910858][T26379] 
[  459.911591][T26379] The buggy address belongs to the physical page:
[  459.913530][T26379] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888113a79b00 pfn:0x113a78
[  459.916653][T26379] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  459.919260][T26379] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  459.921611][T26379] page_type: f5(slab)
[  459.922925][T26379] raw: 057ff00000000040 ffff88801d7773c0 dead000000000122 0000000000000000
[  459.925581][T26379] raw: ffff888113a79b00 00000000800e000d 00000000f5000000 0000000000000000
[  459.928204][T26379] head: 057ff00000000040 ffff88801d7773c0 dead000000000122 0000000000000000
[  459.930814][T26379] head: ffff888113a79b00 00000000800e000d 00000000f5000000 0000000000000000
[  459.933458][T26379] head: 057ff00000000002 ffffea00044e9e01 00000000ffffffff 00000000ffffffff
[  459.936058][T26379] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  459.938704][T26379] page dumped because: kasan: bad access detected
[  459.940674][T26379] page_owner tracks the page as allocated
[  459.942499][T26379] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6248, tgid 6247 (syz.2.87), ts 66685826140, free_ts 66607987126
[  459.948193][T26379]  post_alloc_hook+0x240/0x2a0
[  459.949679][T26379]  get_page_from_freelist+0x21e4/0x22c0
[  459.951392][T26379]  __alloc_frozen_pages_noprof+0x181/0x370
[  459.953176][T26379]  alloc_pages_mpol+0x232/0x4a0
[  459.954680][T26379]  allocate_slab+0x8a/0x370
[  459.956064][T26379]  ___slab_alloc+0xbeb/0x1410
[  459.957602][T26379]  kmem_cache_alloc_noprof+0x283/0x3c0
[  459.959284][T26379]  xfrm_state_alloc+0x24/0x2f0
[  459.960777][T26379]  xfrm_add_sa+0x17d1/0x4070
[  459.962289][T26379]  xfrm_user_rcv_msg+0x7a3/0xab0
[  459.963822][T26379]  netlink_rcv_skb+0x208/0x470
[  459.965340][T26379]  xfrm_netlink_rcv+0x79/0x90
[  459.966769][T26379]  netlink_unicast+0x82f/0x9e0
[  459.968253][T26379]  netlink_sendmsg+0x805/0xb30
[  459.969745][T26379]  __sock_sendmsg+0x21c/0x270
[  459.971285][T26379]  ____sys_sendmsg+0x505/0x830
[  459.972788][T26379] page last free pid 6243 tgid 6242 stack trace:
[  459.974716][T26379]  __free_frozen_pages+0xbc4/0xd30
[  459.976236][T26379]  stack_depot_save_flags+0x436/0x860
[  459.977864][T26379]  kasan_save_track+0x4f/0x80
[  459.979310][T26379]  __kasan_kmalloc+0x93/0xb0
[  459.980727][T26379]  __kmalloc_cache_noprof+0x230/0x3d0
[  459.982467][T26379]  __hw_addr_add_ex+0x1f4/0x770
[  459.983976][T26379]  __hw_addr_sync+0x126/0x280
[  459.985468][T26379]  ieee80211_set_multicast_list+0x14d/0x220
[  459.987303][T26379]  dev_mc_add+0xc8/0x120
[  459.988620][T26379]  igmp6_group_added+0x225/0x800
[  459.990088][T26379]  ipv6_mc_up+0x31f/0x580
[  459.991400][T26379]  addrconf_notify+0x6a3/0x1010
[  459.992910][T26379]  notifier_call_chain+0x1b6/0x3e0
[  459.994500][T26379]  netif_open+0xfd/0x170
[  459.995813][T26379]  dev_open+0x125/0x260
[  459.997097][T26379]  bond_enslave+0x111b/0x3a20
[  459.998554][T26379] 
[  459.999306][T26379] Memory state around the buggy address:
[  460.001022][T26379]  ffff888113a7b600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  460.003652][T26379]  ffff888113a7b680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  460.006093][T26379] >ffff888113a7b700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  460.008538][T26379]                                            ^
[  460.010438][T26379]  ffff888113a7b780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  460.012932][T26379]  ffff888113a7b800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  460.015386][T26379] ==================================================================
[  460.017999][T26379] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  460.020234][T26379] CPU: 0 UID: 0 PID: 26379 Comm: syz.1.6451 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  460.023981][T26379] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  460.027070][T26379] Call Trace:
[  460.028128][T26379]  <TASK>
[  460.029180][T26379]  dump_stack_lvl+0x99/0x250
[  460.030625][T26379]  ? __asan_memcpy+0x40/0x70
[  460.032060][T26379]  ? __pfx_dump_stack_lvl+0x10/0x10
[  460.033910][T26379]  ? __pfx__printk+0x10/0x10
[  460.035374][T26379]  vpanic+0x281/0x750
[  460.036615][T26379]  ? __pfx_vpanic+0x10/0x10
[  460.038019][T26379]  ? irqentry_exit+0x74/0x90
[  460.039482][T26379]  panic+0xb9/0xc0
[  460.040654][T26379]  ? __pfx_panic+0x10/0x10
[  460.042057][T26379]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  460.043882][T26379]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  460.045710][T26379]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  460.047351][T26379]  check_panic_on_warn+0x89/0xb0
[  460.048827][T26379]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  460.050396][T26379]  end_report+0x78/0x160
[  460.051662][T26379]  kasan_report+0x129/0x150
[  460.053194][T26379]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  460.054829][T26379]  __xfrm_state_lookup+0x6ad/0x8d0
[  460.056421][T26379]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  460.058193][T26379]  xfrm_state_add+0x27d/0xc40
[  460.059646][T26379]  xfrm_add_sa+0x35a1/0x4070
[  460.061060][T26379]  ? __pfx_xfrm_add_sa+0x10/0x10
[  460.062645][T26379]  ? apparmor_capable+0x137/0x1b0
[  460.064214][T26379]  ? __nla_parse+0x40/0x60
[  460.065561][T26379]  xfrm_user_rcv_msg+0x7a3/0xab0
[  460.067054][T26379]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  460.068734][T26379]  ? __pfx___mutex_trylock_common+0x10/0x10
[  460.070523][T26379]  ? rcu_is_watching+0x15/0xb0
[  460.072044][T26379]  ? trace_contention_end+0x39/0x120
[  460.073724][T26379]  ? __mutex_lock+0x335/0x1360
[  460.075204][T26379]  netlink_rcv_skb+0x208/0x470
[  460.076684][T26379]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  460.078356][T26379]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  460.079969][T26379]  ? netlink_deliver_tap+0x2e/0x1b0
[  460.081748][T26379]  ? netlink_deliver_tap+0x2e/0x1b0
[  460.083442][T26379]  xfrm_netlink_rcv+0x79/0x90
[  460.084886][T26379]  netlink_unicast+0x82f/0x9e0
[  460.086367][T26379]  ? __pfx_netlink_unicast+0x10/0x10
[  460.087990][T26379]  ? netlink_sendmsg+0x642/0xb30
[  460.089525][T26379]  ? skb_put+0x11b/0x210
[  460.090842][T26379]  netlink_sendmsg+0x805/0xb30
[  460.092360][T26379]  ? __pfx_netlink_sendmsg+0x10/0x10
[  460.093966][T26379]  ? aa_sock_msg_perm+0xf1/0x1d0
[  460.095491][T26379]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  460.097124][T26379]  ? __pfx_netlink_sendmsg+0x10/0x10
[  460.098734][T26379]  __sock_sendmsg+0x21c/0x270
[  460.100185][T26379]  ____sys_sendmsg+0x505/0x830
[  460.101664][T26379]  ? __pfx_____sys_sendmsg+0x10/0x10
[  460.103363][T26379]  ? import_iovec+0x74/0xa0
[  460.104782][T26379]  ___sys_sendmsg+0x21f/0x2a0
[  460.106260][T26379]  ? __pfx____sys_sendmsg+0x10/0x10
[  460.107887][T26379]  ? __fget_files+0x2a/0x420
[  460.109343][T26379]  ? __fget_files+0x3a0/0x420
[  460.110800][T26379]  __x64_sys_sendmsg+0x19b/0x260
[  460.112346][T26379]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  460.114007][T26379]  ? rcu_is_watching+0x15/0xb0
[  460.115495][T26379]  ? do_syscall_64+0xbe/0x3b0
[  460.116946][T26379]  do_syscall_64+0xfa/0x3b0
[  460.118344][T26379]  ? lockdep_hardirqs_on+0x9c/0x150
[  460.119950][T26379]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.121794][T26379]  ? exc_page_fault+0x9f/0xf0
[  460.123321][T26379]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.125140][T26379] RIP: 0033:0x7f0cf578ebe9
[  460.126514][T26379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  460.132530][T26379] RSP: 002b:00007f0cf39f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  460.135065][T26379] RAX: ffffffffffffffda RBX: 00007f0cf59b5fa0 RCX: 00007f0cf578ebe9
[  460.137496][T26379] RDX: 0000000000000804 RSI: 0000200000000100 RDI: 0000000000000009
[  460.139925][T26379] RBP: 00007f0cf5811e19 R08: 0000000000000000 R09: 0000000000000000
[  460.142385][T26379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  460.144830][T26379] R13: 00007f0cf59b6038 R14: 00007f0cf59b5fa0 R15: 00007ffe554bcb68
[  460.147303][T26379]  </TASK>
[  460.148895][T26379] Kernel Offset: disabled
[  460.150249][T26379] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:39:52  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000037 RBX=0000000000000037 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000029d6 RDI=00000000000029d7 RBP=00000000000003f8 RSP=ffffc90004db69d0
R8 =ffff888106628237 R9 =1ffff11020cc5046 R10=dffffc0000000000 R11=ffffffff854e72a0
R12=dffffc0000000000 R13=ffffffff99af28c8 R14=ffffffff99de74e0 R15=0000000000000000
RIP=ffffffff854e731c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f0cf39f66c0 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8d10e4a440 CR3=0000000045556000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=7269642065676e61 68632074276e6163 XMM01=2e36312e3627206f 742079726f746365
XMM02=393831312d72656c 6c616b7a79732d30 XMM03=2d35393865616130 6137616363672d35
XMM04=2779747269642d35 3938656161306137 XMM05=616363672d353938 31312d72656c6c61
XMM06=6b7a79732d302e36 312e3627206f7420 XMM07=79726f7463657269 642065676e616863
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b44d6b RBX=1ffff11009608341 RCX=ffff888043dc1cc0 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc900042df600 RSP=ffffc900042df480
R8 =ffff88801a47d547 R9 =1ffff1100348faa8 R10=dffffc0000000000 R11=ffffed100348faa9
R12=ffff88804b041a08 R13=dffffc0000000000 R14=ffff88813663b1c0 R15=0000000000000000
RIP=ffffffff81b44d53 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa27b38a6c0 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc8f4ce56c0 CR3=0000000028eea000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
