last executing test programs:

2.49984587s ago: executing program 1 (id=9647):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000100)="9cfc", &(0x7f0000000000)=""/82}, 0x20)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x2710}, 0x10)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000040)="0600", 0x2}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000100)="a5b4", 0x2}], 0x1}}], 0x2, 0x8000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r5, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026"], 0x80}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000940)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000900)={&(0x7f0000000680)={0x264, r5, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x60a, 0x71}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3a370651af5be7fb14eaf4d3041fa7d7760795300b627f10"}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "130371c51eaadf5b5feae3f9146e90669db3076290e49220"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "af95d75ef56b9e60d5633b8f12782bbb76a65419b2ea4c9e"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "405953797aab8bc8810711845712b98543e889c3d39f4927"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0f5d9502dee25cc896a019a0eb253787a51c0238e912ce2a"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "593fe85165f262f1d979d4dd117c2daf69f623e290c52a9c"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c5334dd91e117c3403c160d73ed19e29dafe8e8c8a4e4bd5"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c11a810cc7ce3f36863d6311ccd2ba449b7f98937d589628"}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x264}, 0x1, 0x0, 0x0, 0x4000}, 0x88d0)
sendmmsg$inet(r1, &(0x7f0000002780)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008004)

2.409846029s ago: executing program 1 (id=9648):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0xb}}}, 0x51}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x4000, r0}, 0x18)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r6, 0x20, &(0x7f0000000100)={0x0, 0x0, <r7=>0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r7, 0x4)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x14, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="b70000000000000007000000000000009500e200000000001e5286574356940658273ad1326fc65be4b1037a74cfb5af100fc4e94d123d9b22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe68fe46421a161eedd1a5cee316f68f7617859f06c8efd5da6abe446649c322209b1af93c6c999058168ad0a70992124d19c7c9cc22ff9a6b1a058039ab938480e8697f8715bcb18e1fd0773909464a783148e0e7b604a6c47b33c43a3ffff92ec8bbde1af40f29cfcf0836a70a2f6b1192ab8f24ca363492393e1c2a3b190180caafbf8cfca720074bdcc7cbd978efd8404a1c700000000d97899514e64e36cad5eba82010b2d149ac02e5f07000000000000000000000000000000000000000000009d5df0e0dbb9821d9c5402474d5866ce5eb60188d83ac741b45aeacac594cf09de9b460f48b96ae8a0eead478e46c8ca3e4c5d2b3cb4ad48c830e8003c45f5b2dcbf36b7e8be59ca4b46266cf75bea8a22ab71895d954dc6d28864144c73391770690a9301cde97565d509effc252599b26555355d7955f551df82ea475a711ec56d00000000a89c7533c9955fd63cd00cb83d1228"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, r5}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f00000000c0)=r8, 0x4)
r9 = syz_init_net_socket$llc(0x1a, 0x3, 0x0)
getsockopt$llc_int(r9, 0x10c, 0x6, &(0x7f0000000000), &(0x7f0000000080)=0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r11 = openat$cgroup_netprio_ifpriomap(r10, &(0x7f0000000080), 0x2, 0x0)
sendfile(r11, r11, &(0x7f00000000c0)=0x4, 0x38c6)
socket$netlink(0x10, 0x3, 0x10)
r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x1}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, <r13=>0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000740)='%pS    \x00'}, 0x20)
r14 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000940)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={r5, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r15=>0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000a40)=[0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r16=>0x0, 0x38, &(0x7f0000000ac0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000b00), &(0x7f0000000b40), 0x8, 0x81, 0x8, 0x8, &(0x7f0000000b80)}}, 0x10)
r17 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d00)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x7, '\x00', r15, 0xffffffffffffffff, 0xfffffffe, 0x3, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x0, 0x28, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@ldst={0x1, 0x1, 0x2, 0x9, 0x7}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x636}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x9c}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, @map_val={0x18, 0x6, 0x2, 0x0, r13, 0x0, 0x0, 0x0, 0x1}, @ringbuf_output], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000900)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, @fallback=0x4, r14, 0x8, &(0x7f0000000980)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000009c0)={0x5, 0x10, 0x588, 0x5}, 0x10, r16, 0xffffffffffffffff, 0x2, &(0x7f0000000d80)=[r17], &(0x7f0000000dc0)=[{0x0, 0x5, 0x0, 0xb}, {0x5, 0x1, 0xe, 0xa}], 0x10, 0x8}, 0x94)
ioctl$XFS_IOC_FD_TO_HANDLE(r9, 0xc038586a, &(0x7f0000000400)={<r18=>r0, &(0x7f00000001c0)='\x00', 0x0, &(0x7f0000000200)={@align=0x4, {0x4, 0x9, 0x3, 0x2}}, 0xfffffff3, &(0x7f0000000280), &(0x7f00000003c0)=0x5})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x4, 0x0, r18, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x50)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)

2.409516017s ago: executing program 1 (id=9649):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x1)
getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=0x1000)
recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0xb94}], 0x1, 0x0, 0x0)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080))
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4)
listen(r2, 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010001000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec587547"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

2.079912476s ago: executing program 1 (id=9653):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r1, 0x0, r1, 0x0, 0x8000f28, 0x6)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xf18, 0x30, 0xb, 0x0, 0x0, {}, [{0xf04, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xeb8, 0x2, 0x0, 0x0, {{0xa}, {0xe8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe6b, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x20003, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffbc, 0x80, 0x3}, {0x3ff, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0xffffffff, 0x3, 0x80, 0x0, 0xacc4, 0x42}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0x1001, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3fd, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x1, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x5, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x4, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x3, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x3, 0x40007023, 0x1ff, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0xc000, 0x2, 0x89, 0x2}, {0x10001, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x1, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x5}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xffd, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x8, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0x9, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x55, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x8, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0xf9, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x2, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0x40c651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1ac6}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x7, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d3, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x808, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xebd8}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x4}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf18}}, 0x0)
ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x4028af11, &(0x7f0000000240))
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r3)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01600000000000000100077400062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080004200000000014000600626f6e64300000000000000000030000080003"], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x80}, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r5, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x8884)

2.078210205s ago: executing program 1 (id=9655):
r0 = socket$packet(0x11, 0x2, 0x300)
unshare(0x22020600)
getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, 0x0, &(0x7f00000000c0))
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x22}}, 0x4, 0x2, 0x4}}, 0x26)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x40)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4)
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x14}, @val={0x8}, @val={0xc, 0x99, {0x9, 0x5a}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x248015}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xd}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000002d40)=@newtaction={0x44c, 0x31, 0x3d, 0x0, 0x0, {}, [{0x438, 0x1, [@m_police={0x434, 0x1e, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x8, 0x6, 0x8000, 0x100000, 0x1, 0x7ff, 0x1, 0x10000, 0x9, 0x0, 0x10000, 0x4, 0x9, 0x6, 0x5, 0x10, 0x1000, 0x200, 0x1, 0x0, 0x4, 0xa0, 0x32d4, 0xa, 0x80000000, 0x10000, 0x4f7, 0x0, 0x9, 0x3, 0xfffffff5, 0x7, 0x3, 0x4, 0x80ed, 0x7fff, 0xfffffff9, 0x4, 0x4, 0x6, 0x0, 0xb7, 0x7f, 0x43, 0x2, 0xfffffffb, 0x1, 0x1ff, 0x3, 0x9, 0x4, 0x1, 0x905, 0x7, 0x6, 0x3, 0x1, 0x7, 0xffffffff, 0x58, 0x9, 0x7ff, 0xad, 0x2, 0xffffff61, 0x8a8, 0x1, 0x0, 0x8, 0x5, 0xffff8000, 0x2, 0x3, 0xffffffff, 0x4, 0xb, 0x1, 0x8, 0x10001, 0x302160e2, 0x0, 0x1, 0xff, 0x4, 0x80, 0x3, 0x4, 0x1, 0x7, 0x1, 0x7ff, 0xfffffffc, 0x81, 0x7, 0x66d3, 0xffffffff, 0xef2, 0x9, 0x6, 0x7fffffff, 0xe52, 0x7, 0x4, 0x400, 0x0, 0xffffffff, 0x7fffffff, 0x3, 0x2, 0x0, 0x2, 0x9265, 0x3, 0x8, 0xff, 0xb58, 0xe3, 0x0, 0x7000, 0x9ae, 0x2, 0x0, 0x550, 0x2, 0x59, 0x4ca, 0x559b, 0x0, 0x2, 0x2, 0x400, 0x37, 0x1ff, 0x1, 0x6, 0x4, 0xc40, 0x1, 0x1, 0x74, 0xee, 0x9, 0x10000, 0x401, 0xc, 0x59b1, 0xd117, 0xf, 0x7, 0x4, 0xff, 0x80, 0x620a, 0x9, 0x1, 0x2, 0x2, 0x8, 0xfffffbff, 0x43, 0x7, 0x8, 0x2, 0x38a9, 0xd85, 0x8, 0x3, 0x38, 0x4404, 0x1, 0x1020, 0x3ff, 0xf4d, 0x63ae, 0xffffff00, 0xffffffff, 0x9, 0x81, 0xd8, 0x8, 0x1, 0xc1e4, 0xfffffff8, 0x8, 0x3, 0xb, 0x7, 0x1, 0x0, 0x6, 0xc, 0x9, 0x1, 0xe, 0x0, 0x5, 0x8, 0x8, 0x0, 0x66, 0x7, 0x8, 0x1, 0x3, 0x8, 0x0, 0x6, 0x80, 0x6, 0x68f, 0x7, 0x3, 0x7, 0x8, 0xfff, 0x2, 0xe7d, 0x4, 0x4, 0x3, 0x7, 0x9, 0x3, 0x1ff, 0xfffffffd, 0xf45b, 0x8, 0x76, 0x1, 0x2, 0x0, 0x4, 0x326, 0x8, 0x8, 0x80000000, 0x30000, 0x2, 0x800000, 0x1e, 0x40, 0x5, 0x4, 0x9, 0x2, 0xffff, 0x80000001, 0x8, 0x4b, 0x84d1, 0xff, 0x84, 0x9, 0x2, 0x9]}]]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x44c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1})
getsockopt$inet_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9)

2.009980255s ago: executing program 1 (id=9657):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)="b9", 0x1}], 0x1}}], 0x2, 0xc8040)
splice(r2, 0x0, r1, 0x0, 0x7ffff000, 0x6)
sendto$inet6(r2, &(0x7f00000003c0)="1fd3cd769319b31fc20d6646fac13f48b2f7ec15b6b63ef5cd38233423fb13dd9615ec85a5e34358348584e6b016340cea509829b4bb2639b54dd265e7258b7c954a6fe743", 0x45, 0x24044001, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32, @ANYBLOB="4000270006"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10)
setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000140), 0x8)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000080)={0xfffff1bf, 0x6, 0x5}, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x2000000}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmmsg$sock(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@txtime={{0x18, 0x1, 0x3d, 0x800000000}}], 0x18}}], 0x1, 0x800)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x28, r7, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x6, 0x30}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x200008d5}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)

447.525774ms ago: executing program 2 (id=9681):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff61a4f0ff000000002d040000000000003d400300000000006504000001ed000079130000000000006c440000000000007a0ab0fe000000007b13d00000000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af05000000f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e655400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d390dd65be2467b373eafd9aa58f2077184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae564162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6ffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd86975023cb08cc7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c5538a294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead35a655e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f05beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba5823a34a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d0a874c74b777df005c55fc30511d00000000c85265b2bd83d64a532869d708000000000000007baa5b6a682b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a56edbd287eba77f35c35d91f3c62a0ca74836a640224de85f2b4a5fee500bbc584328a6a7a4628c4378c9b71dff64075b74a6520adb187b40d2cccbcb08c0634ee74658d3e23bf511c8b0bf1b69d2b3782b3f481c314e7bd4615dbbf24c06ac95bd639e68d0e6aa7f0d07bf69a93365f803f0144af37236ea133c2255b0613bf8ba1d538e06c2411e8d70053b712084fd0e313de9bb19266e49a3a2190cb039c6f89610acd896319b9c8d1b8aac2eaa5a4f8be7419a09e3fb5be3be2fcdadd2299839cc40e684e6e2b4e1385fde7a0babcb0be672110268a34dad364fddee69e564119cebb6940c6356ff83ca527c573d700000000000000c6299263e6d9097f225de969485bce3d7dc471c0669bb6a467cf0de54dfcc1857048fe22a19dbb1b3cb9babaa839f1f6e817a62d95a5b971ff96a5c66c338c6f2a2da4644519f40761402e9c81013d76c7152c95ba5efa24ce1930f23a2277f057ffb6b0144f3b434a2adc456ef4d2fbdf7c6238c2bb00ffcf2d23d68cb9b027f3b225ec4e09b089f7956b66c5692b46ea03abb6a404c8ccceaa4ba4161409fcb54b86eaca26b2a0c4b81f7b71cbfcef"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0100001900010000000000ffffff80e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880)

445.059011ms ago: executing program 2 (id=9683):
r0 = socket(0x29, 0x5, 0x0)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00', 0xdc050000}) (async, rerun: 32)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r1, @ANYBLOB="0002000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000004000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000208500000017000000bf91000000000000b7020000210000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async)
listen(r2, 0xfffffffc) (async)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async)
r4 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(r4, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) (async)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) (async)
sendmsg$nl_generic(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0x8, 0xa, 0x0, 0x0, @ipv4}]}, 0x20}}, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async, rerun: 32)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'dummy0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001780)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x3, 0xa}, {0xffe0, 0xd}, {0x2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4051}, 0x4000000)

396.827825ms ago: executing program 0 (id=9684):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xff}]}, 0x70}}, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x3)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28)
sendto$inet6(r3, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x66)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c0001801400030000000000000000000000000000000000140100000000000000000000000000008000000000000000000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000000c000280050001000000000008000740000000001800068014000400ff01000000000000000000000000000100000000"], 0xac}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd700000000040020000000800", @ANYRES32=r7, @ANYBLOB="0c009900d308000079000000080026006c0900000800a08d1d4a2a390800270002"], 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0b04000000000000000002000007400004803c0001800b00010065787468647200002c00028008000440000000a80800074085c97c3fe2635dbd00000001080001400000000c080003400000000114000580080002400000000308000140000089140900010073797a3000000000140000002a5bc4026cc0c343927695c8075f00010000000000000000000000000a"], 0x9c}}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000070601010000000007000004"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000108fdfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000042104020008001b000000000038001a8004002d8030000a80050008"], 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)

348.622905ms ago: executing program 2 (id=9685):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xafffffff}, [@map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}]}, &(0x7f0000000240)='syzkaller\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

348.440783ms ago: executing program 0 (id=9686):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4)
sendmsg$sock(r0, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e22, 0x81, @empty, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x51, 0xfffffffb}}], 0x18}, 0x240880c0)

345.340046ms ago: executing program 2 (id=9687):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a000000}, 0xb94}], 0x1, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f00000001c0)={@val={0x0, 0x8864}, @void, @eth={@multicast, @local, @val={@void, {0x8100, 0x4}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0xf4, 0x0, 0x41, 0x11, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x13}}, '\x00\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x32)

289.333209ms ago: executing program 0 (id=9688):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x7, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000006400000000009500"/32], &(0x7f0000000040)='GPL\x00', 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='veth0_macvtap\x00', 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @local}, "00186371ae9b1c03"}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4060000000000007111b100000000008510000002000000850000000700000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000600)=0x82, 0x4)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto(r2, 0x0, 0x0, 0x20000810, &(0x7f00000027c0)=@un=@file={0x0, './file0\x00'}, 0x80)
setsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0x0, 0x0)

285.451141ms ago: executing program 0 (id=9689):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000080)={@multicast2, @loopback}, 0xc)
setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000340)=0x7e, 0x4)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
recvmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x12160, 0x0)
getpeername(r1, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000100)=0x80)
listen(r1, 0x0)
setsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f00000000c0)=0x1, 0x4)

122.578213ms ago: executing program 0 (id=9690):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
socket$key(0xf, 0x3, 0x2)
sendmsg$kcm(r2, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000002600010005bd7000fcdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

119.396573ms ago: executing program 2 (id=9691):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
socket$inet(0x2, 0x4000000000000001, 0x0)
pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

118.92651ms ago: executing program 0 (id=9692):
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
socket$rds(0x15, 0x5, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x30, 0xffffffffffffffff, 0xfffff000)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x6e073, 0xffffffffffffffff, 0x2000)
sendto$inet6(0xffffffffffffffff, &(0x7f0000001000)="f9", 0x1, 0x20000040, &(0x7f0000000040)={0xa, 0x0, 0x2, @private2}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{0x0}], 0x1}, 0x40000300)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000001180)=""/129, &(0x7f00000001c0)=0x81)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}}, 0x40)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000210a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
socket$packet(0x11, 0x3, 0x300)
r4 = socket$packet(0x11, 0xa, 0x300)
r5 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0xc0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30044800)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="31830000000000000000190400000c000180080003"], 0x20}}, 0x0)
r6 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r6, &(0x7f0000000100)={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}, 0x1c)
getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f0000000000))
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x41)

0s ago: executing program 2 (id=9693):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x5)
syz_emit_ethernet(0x0, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
shutdown(r1, 0x1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000700)=[@in6={0xa, 0x4e22, 0xc89, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}], 0x1c)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
vmsplice(r4, 0x0, 0x0, 0x0)
close(0x3)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x9)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000003a0fc6858aa5323c874fc2825c09ce2748b388106eeced18e810aec1db7c2bff7de27a5b42e3cb0df18c1ffd6879841fe8f6281f59bdf5e92ab639831fe8393482f56516bd7504e1fa256e7ebfea24093539c26eaa588aaf62ddb2e757be91d7ac4b368e2741f075bcd87cc8791cda73433e931208380fd866442b1e1f4f3ef0d90fb04835c8ac150fa3e46246c0c3c4b33f18734fc7bee0c2309ea82990dd44894078ec5075ee291f9b735e9a3308c8990bee75c105847b8ecfb4f60f99b87a72cc81d07227d4011c04c8b434a7e862", @ANYRES16=r5, @ANYBLOB="01002cbd700000000000010000001400018006000100020000000800060003000000"], 0x28}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, 0x0, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48040}, 0x0)

kernel console output (not intermixed with test programs):

486051][T25796] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8112'.
[  452.492577][T25797] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8112'.
[  452.498259][T25796] erspan0: refused to change device tx_queue_len
[  452.501743][T25796] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  452.508711][T25797] erspan0: refused to change device tx_queue_len
[  452.512017][T25797] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  452.586344][   T12] nci: nci_rsp_packet: unknown rsp opcode 0xa08
[  452.601524][   T12] nci: nci_rsp_packet: unknown rsp opcode 0xa08
[  455.475569][T25796] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  456.089465][T25859] lo speed is unknown, defaulting to 1000
[  456.090872][T25874] bond0: Caught tx_queue_len zero misconfig
[  456.093993][T25874] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8132'.
[  456.177576][T25883] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  456.181428][T25883] CPU: 0 UID: 0 PID: 25883 Comm: syz.2.8134 Not tainted syzkaller #0 PREEMPT(full) 
[  456.181441][T25883] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  456.181447][T25883] Call Trace:
[  456.181452][T25883]  <TASK>
[  456.181455][T25883]  dump_stack_lvl+0xe8/0x150
[  456.181475][T25883]  sysfs_warn_dup+0x8e/0xa0
[  456.181485][T25883]  sysfs_do_create_link_sd+0xc0/0x110
[  456.181496][T25883]  device_add_class_symlinks+0x1cf/0x240
[  456.181510][T25883]  device_add+0x475/0xbb0
[  456.181523][T25883]  wiphy_register+0x1dc5/0x2dc0
[  456.181541][T25883]  ? __pfx_wiphy_register+0x10/0x10
[  456.181551][T25883]  ? __pfx_netdev_run_todo+0x10/0x10
[  456.181569][T25883]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  456.181585][T25883]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  456.181597][T25883]  ieee80211_register_hw+0x3d82/0x4a70
[  456.181615][T25883]  ? ieee80211_register_hw+0x18e1/0x4a70
[  456.181634][T25883]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  456.181645][T25883]  ? __asan_memset+0x22/0x50
[  456.181656][T25883]  ? __hrtimer_setup+0x1b7/0x260
[  456.181667][T25883]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  456.181677][T25883]  mac80211_hwsim_new_radio+0x3334/0x5ba0
[  456.181701][T25883]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  456.181711][T25883]  ? kstrndup+0xbf/0x160
[  456.181726][T25883]  hwsim_new_radio_nl+0xf6a/0x1c00
[  456.181746][T25883]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  456.181761][T25883]  ? rcu_is_watching+0x15/0xb0
[  456.181769][T25883]  ? trace_kmalloc+0x2a/0xf0
[  456.181781][T25883]  ? __nla_parse+0x40/0x60
[  456.181792][T25883]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  456.181802][T25883]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  456.181845][T25883]  genl_family_rcv_msg_doit+0x22a/0x330
[  456.181860][T25883]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  456.181875][T25883]  ? bpf_lsm_capable+0x9/0x20
[  456.181888][T25883]  ? security_capable+0x7e/0x2c0
[  456.181903][T25883]  genl_rcv_msg+0x61c/0x7a0
[  456.181915][T25883]  ? __pfx_genl_rcv_msg+0x10/0x10
[  456.181924][T25883]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  456.181941][T25883]  netlink_rcv_skb+0x232/0x4b0
[  456.181954][T25883]  ? __pfx_genl_rcv_msg+0x10/0x10
[  456.181962][T25883]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  456.181979][T25883]  ? down_read+0x270/0x2e0
[  456.181988][T25883]  ? genl_rcv+0xd/0x40
[  456.181997][T25883]  genl_rcv+0x28/0x40
[  456.182004][T25883]  netlink_unicast+0x75c/0x8e0
[  456.182018][T25883]  netlink_sendmsg+0x813/0xb40
[  456.182032][T25883]  ? __pfx_netlink_sendmsg+0x10/0x10
[  456.182045][T25883]  ? aa_sock_msg_perm+0xf1/0x1b0
[  456.182054][T25883]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  456.182082][T25883]  ____sys_sendmsg+0x972/0x9f0
[  456.182096][T25883]  ? __might_fault+0xaf/0x130
[  456.182107][T25883]  ? __pfx_____sys_sendmsg+0x10/0x10
[  456.182122][T25883]  ? import_iovec+0x73/0xa0
[  456.182133][T25883]  ___sys_sendmsg+0x2a5/0x360
[  456.182139][T25883]  ? __lock_acquire+0x6b5/0x2cf0
[  456.182154][T25883]  ? __pfx____sys_sendmsg+0x10/0x10
[  456.182166][T25883]  ? futex_wait+0x2a2/0x390
[  456.182188][T25883]  ? __fget_files+0x2a/0x420
[  456.182198][T25883]  ? __fget_files+0x3a0/0x420
[  456.182209][T25883]  __x64_sys_sendmsg+0x1bd/0x2a0
[  456.182218][T25883]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  456.182229][T25883]  ? rcu_is_watching+0x15/0xb0
[  456.182243][T25883]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  456.182252][T25883]  do_syscall_64+0x15f/0xf80
[  456.182261][T25883]  ? trace_irq_disable+0x3b/0x140
[  456.182273][T25883]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  456.182281][T25883] RIP: 0033:0x7f3d5ad9c819
[  456.182290][T25883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  456.182297][T25883] RSP: 002b:00007f3d5bbd4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  456.182308][T25883] RAX: ffffffffffffffda RBX: 00007f3d5b015fa0 RCX: 00007f3d5ad9c819
[  456.182315][T25883] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  456.182322][T25883] RBP: 00007f3d5ae32c91 R08: 0000000000000000 R09: 0000000000000000
[  456.182328][T25883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  456.182333][T25883] R13: 00007f3d5b016038 R14: 00007f3d5b015fa0 R15: 00007ffedf89fe18
[  456.182348][T25883]  </TASK>
[  456.839656][T25890] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  456.962374][T25901] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8141'.
[  456.966719][T25901] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8141'.
[  457.029305][T25905] netlink: 'syz.0.8144': attribute type 8 has an invalid length.
[  457.035756][T25905] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8144'.
[  457.071858][T25909] tipc: Resetting bearer <eth:syzkaller0>
[  457.454309][T25935] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8154'.
[  457.617765][T25945] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8158'.
[  457.662623][T25945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8158'.
[  457.670714][T25945] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8158'.
[  457.822421][T25954] openvswitch: netlink: IP tunnel dst address not specified
[  458.045580][T25974] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8167'.
[  458.148773][T25991] sock: sock_timestamping_bind_phc: sock not bind to device
[  458.295761][T26004] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8174'.
[  458.518066][T26030] netlink: 'syz.2.8181': attribute type 89 has an invalid length.
[  458.732755][T26063] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  458.843816][T26071] team0: No ports can be present during mode change
[  459.571384][T26107] netlink: 'syz.0.8200': attribute type 5 has an invalid length.
[  459.850003][T26110] lo speed is unknown, defaulting to 1000
[  460.991455][T26142] smc: ib device syz0 ibport 2 erased user defined pnetid SYZ2
[  461.266845][T26154] __nla_validate_parse: 14 callbacks suppressed
[  461.266857][T26154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8211'.
[  461.716347][T26182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8219'.
[  461.737986][T26182] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.8219'.
[  461.806271][T26183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8219'.
[  461.857534][T26182] infiniband syz1: set active
[  461.859329][T26182] infiniband syz1: added bond0
[  461.869854][T26182] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  461.875600][T26182] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  461.882154][T26182] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  461.896474][T26182] RDS/IB: syz1: added
[  461.898075][T26182] smc: adding ib device syz1 with port count 1
[  461.900884][T26182] smc:    ib device syz1 port 1 has no pnetid
[  463.191329][T26205] openvswitch: netlink: Missing valid actions attribute.
[  463.194215][T26205] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  463.444404][T26213] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.8228'.
[  463.449742][T26213] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8228'.
[  466.918884][T26243] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8240'.
[  466.973531][T26246] netlink: 'syz.1.8242': attribute type 3 has an invalid length.
[  467.201529][ T5890] lo speed is unknown, defaulting to 1000
[  467.203770][ T5890] syz2: Port: 1 Link DOWN
[  467.269138][T26264] netlink: 'syz.2.8245': attribute type 5 has an invalid length.
[  467.273349][T26264] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.8245'.
[  467.280623][T26264] netlink: 'syz.2.8245': attribute type 7 has an invalid length.
[  467.284037][T26264] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.8245'.
[  467.410913][T26269] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8247'.
[  467.598054][T26273] bond0: option arp_validate: invalid value (55553)
[  468.117278][T26284] netlink: 'syz.0.8251': attribute type 4 has an invalid length.
[  468.120941][T26284] netlink: 'syz.0.8251': attribute type 4 has an invalid length.
[  468.263464][T26293] netlink: 220 bytes leftover after parsing attributes in process `syz.0.8255'.
[  468.303963][T26295] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8256'.
[  468.312171][   T12] tipc: Subscription rejected, illegal request
[  468.338269][T26299] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8255'.
[  468.343180][T26301] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8258'.
[  468.364660][T26304] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8259'.
[  468.489147][T26316] tipc: Resetting bearer <eth:syzkaller0>
[  468.494356][T26316] sch_tbf: burst 256 is lower than device syzkaller0 mtu (313) !
[  469.402236][T26335] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  469.404940][T26335] CPU: 1 UID: 0 PID: 26335 Comm: syz.1.8271 Not tainted syzkaller #0 PREEMPT(full) 
[  469.404959][T26335] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  469.404968][T26335] Call Trace:
[  469.404973][T26335]  <TASK>
[  469.404978][T26335]  dump_stack_lvl+0xe8/0x150
[  469.404998][T26335]  sysfs_warn_dup+0x8e/0xa0
[  469.405010][T26335]  sysfs_do_create_link_sd+0xc0/0x110
[  469.405022][T26335]  device_add_class_symlinks+0x1cf/0x240
[  469.405038][T26335]  device_add+0x475/0xbb0
[  469.405052][T26335]  wiphy_register+0x1dc5/0x2dc0
[  469.405072][T26335]  ? __pfx_wiphy_register+0x10/0x10
[  469.405083][T26335]  ? __pfx_netdev_run_todo+0x10/0x10
[  469.405091][T26335]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  469.405105][T26335]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  469.405117][T26335]  ieee80211_register_hw+0x3d82/0x4a70
[  469.405139][T26335]  ? ieee80211_register_hw+0x18e1/0x4a70
[  469.405159][T26335]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  469.405171][T26335]  ? __asan_memset+0x22/0x50
[  469.405181][T26335]  ? __hrtimer_setup+0x1b7/0x260
[  469.405189][T26335]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  469.405199][T26335]  mac80211_hwsim_new_radio+0x3334/0x5ba0
[  469.405222][T26335]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  469.405233][T26335]  ? kstrndup+0xbf/0x160
[  469.405248][T26335]  hwsim_new_radio_nl+0xf6a/0x1c00
[  469.405269][T26335]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  469.405284][T26335]  ? rcu_is_watching+0x15/0xb0
[  469.405292][T26335]  ? trace_kmalloc+0x2a/0xf0
[  469.405306][T26335]  ? __nla_parse+0x40/0x60
[  469.405319][T26335]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  469.405329][T26335]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  469.405341][T26335]  genl_family_rcv_msg_doit+0x22a/0x330
[  469.405353][T26335]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  469.405367][T26335]  ? bpf_lsm_capable+0x9/0x20
[  469.405377][T26335]  ? security_capable+0x7e/0x2c0
[  469.405391][T26335]  genl_rcv_msg+0x61c/0x7a0
[  469.405403][T26335]  ? __pfx_genl_rcv_msg+0x10/0x10
[  469.405411][T26335]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  469.405428][T26335]  netlink_rcv_skb+0x232/0x4b0
[  469.405440][T26335]  ? __pfx_genl_rcv_msg+0x10/0x10
[  469.405449][T26335]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  469.405466][T26335]  ? down_read+0x270/0x2e0
[  469.405476][T26335]  ? genl_rcv+0xd/0x40
[  469.405485][T26335]  genl_rcv+0x28/0x40
[  469.405492][T26335]  netlink_unicast+0x75c/0x8e0
[  469.405507][T26335]  netlink_sendmsg+0x813/0xb40
[  469.405521][T26335]  ? __pfx_netlink_sendmsg+0x10/0x10
[  469.405541][T26335]  ? aa_sock_msg_perm+0xf1/0x1b0
[  469.405553][T26335]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  469.405566][T26335]  ____sys_sendmsg+0x972/0x9f0
[  469.405581][T26335]  ? __might_fault+0xaf/0x130
[  469.405593][T26335]  ? __pfx_____sys_sendmsg+0x10/0x10
[  469.405611][T26335]  ? import_iovec+0x73/0xa0
[  469.405626][T26335]  ___sys_sendmsg+0x2a5/0x360
[  469.405635][T26335]  ? __lock_acquire+0x6b5/0x2cf0
[  469.405651][T26335]  ? __pfx____sys_sendmsg+0x10/0x10
[  469.405663][T26335]  ? futex_wake+0x4ac/0x580
[  469.405683][T26335]  ? __fget_files+0x2a/0x420
[  469.405691][T26335]  ? __fget_files+0x3a0/0x420
[  469.405703][T26335]  __x64_sys_sendmsg+0x1bd/0x2a0
[  469.405742][T26335]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  469.405758][T26335]  ? rcu_is_watching+0x15/0xb0
[  469.405772][T26335]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.405781][T26335]  do_syscall_64+0x15f/0xf80
[  469.405794][T26335]  ? trace_irq_disable+0x3b/0x140
[  469.405809][T26335]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.405818][T26335] RIP: 0033:0x7f97ff79c819
[  469.405827][T26335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  469.405835][T26335] RSP: 002b:00007f980068b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  469.405845][T26335] RAX: ffffffffffffffda RBX: 00007f97ffa15fa0 RCX: 00007f97ff79c819
[  469.405851][T26335] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  469.405856][T26335] RBP: 00007f97ff832c91 R08: 0000000000000000 R09: 0000000000000000
[  469.405860][T26335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  469.405865][T26335] R13: 00007f97ffa16038 R14: 00007f97ffa15fa0 R15: 00007ffec3aca778
[  469.405878][T26335]  </TASK>
[  469.675766][T26340] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  469.684181][T26340] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  469.934665][T26355] netlink: 'syz.1.8277': attribute type 4 has an invalid length.
[  469.976536][T26359] openvswitch: netlink: Missing valid actions attribute.
[  469.978810][T26359] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  470.147051][T26376] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8284'.
[  470.636295][T26401] netlink: 'syz.0.8291': attribute type 2 has an invalid length.
[  470.639453][T26401] netlink: 'syz.0.8291': attribute type 2 has an invalid length.
[  470.684823][T26409] syzkaller1: entered promiscuous mode
[  470.687813][T26409] syzkaller1: entered allmulticast mode
[  470.712918][T26411] openvswitch: netlink: Missing valid actions attribute.
[  470.715469][T26411] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  470.746874][T26412] netlink: 'syz.2.8294': attribute type 1 has an invalid length.
[  472.218126][T26462] lo speed is unknown, defaulting to 1000
[  473.017217][T26490] __nla_validate_parse: 8 callbacks suppressed
[  473.017232][T26490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8319'.
[  473.545615][T26499] lo speed is unknown, defaulting to 1000
[  473.564222][T26477] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  473.959789][T26527] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8332'.
[  474.079574][T26539] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  474.341570][T26548] lo speed is unknown, defaulting to 1000
[  474.740080][    T9] page_pool_release_retry() stalled pool shutdown: id 135, 1 inflight 60 sec
[  474.740346][ T5214] Bluetooth: hci0: command 0x0c1a tx timeout
[  477.070937][T26537] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  477.167347][T26567] dummy0: mtu less than device minimum
[  477.239188][T26582] bridge0: port 3(erspan0) entered blocking state
[  477.255875][T26582] bridge0: port 3(erspan0) entered disabled state
[  477.259114][T26582] erspan0: entered allmulticast mode
[  477.262775][T26582] erspan0: entered promiscuous mode
[  477.266487][T26582] erspan0: left allmulticast mode
[  477.268345][T26582] erspan0: left promiscuous mode
[  477.273615][T26582] bridge0: port 3(erspan0) entered disabled state
[  477.293106][T26584] dvmrp6: entered allmulticast mode
[  477.315101][T26588] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8350'.
[  477.329474][T26590] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  477.335713][T26590] CPU: 1 UID: 0 PID: 26590 Comm: syz.2.8351 Not tainted syzkaller #0 PREEMPT(full) 
[  477.335731][T26590] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  477.335739][T26590] Call Trace:
[  477.335743][T26590]  <TASK>
[  477.335749][T26590]  dump_stack_lvl+0xe8/0x150
[  477.335772][T26590]  sysfs_warn_dup+0x8e/0xa0
[  477.335785][T26590]  sysfs_do_create_link_sd+0xc0/0x110
[  477.335797][T26590]  device_add_class_symlinks+0x1cf/0x240
[  477.335816][T26590]  device_add+0x475/0xbb0
[  477.335830][T26590]  wiphy_register+0x1dc5/0x2dc0
[  477.335853][T26590]  ? __pfx_wiphy_register+0x10/0x10
[  477.335867][T26590]  ? __pfx_netdev_run_todo+0x10/0x10
[  477.335903][T26590]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  477.335950][T26590]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  477.335974][T26590]  ieee80211_register_hw+0x3d82/0x4a70
[  477.336001][T26590]  ? ieee80211_register_hw+0x18e1/0x4a70
[  477.336034][T26590]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  477.336050][T26590]  ? __asan_memset+0x22/0x50
[  477.336060][T26590]  ? __hrtimer_setup+0x1b7/0x260
[  477.336069][T26590]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  477.336082][T26590]  mac80211_hwsim_new_radio+0x3334/0x5ba0
[  477.336107][T26590]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  477.336118][T26590]  ? kstrndup+0xbf/0x160
[  477.336136][T26590]  hwsim_new_radio_nl+0xf6a/0x1c00
[  477.336159][T26590]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  477.336177][T26590]  ? rcu_is_watching+0x15/0xb0
[  477.336187][T26590]  ? trace_kmalloc+0x2a/0xf0
[  477.336201][T26590]  ? __nla_parse+0x40/0x60
[  477.336212][T26590]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  477.336223][T26590]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  477.336235][T26590]  genl_family_rcv_msg_doit+0x22a/0x330
[  477.336246][T26590]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  477.336260][T26590]  ? bpf_lsm_capable+0x9/0x20
[  477.336271][T26590]  ? security_capable+0x7e/0x2c0
[  477.336294][T26590]  genl_rcv_msg+0x61c/0x7a0
[  477.336307][T26590]  ? __pfx_genl_rcv_msg+0x10/0x10
[  477.336314][T26590]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  477.336332][T26590]  netlink_rcv_skb+0x232/0x4b0
[  477.336349][T26590]  ? __pfx_genl_rcv_msg+0x10/0x10
[  477.336358][T26590]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  477.336377][T26590]  ? down_read+0x270/0x2e0
[  477.336389][T26590]  ? genl_rcv+0xd/0x40
[  477.336399][T26590]  genl_rcv+0x28/0x40
[  477.336408][T26590]  netlink_unicast+0x75c/0x8e0
[  477.336424][T26590]  netlink_sendmsg+0x813/0xb40
[  477.336439][T26590]  ? __pfx_netlink_sendmsg+0x10/0x10
[  477.336452][T26590]  ? aa_sock_msg_perm+0xf1/0x1b0
[  477.336461][T26590]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  477.336472][T26590]  ____sys_sendmsg+0x972/0x9f0
[  477.336485][T26590]  ? __might_fault+0xaf/0x130
[  477.336497][T26590]  ? __pfx_____sys_sendmsg+0x10/0x10
[  477.336512][T26590]  ? import_iovec+0x73/0xa0
[  477.336524][T26590]  ___sys_sendmsg+0x2a5/0x360
[  477.336531][T26590]  ? __lock_acquire+0x6b5/0x2cf0
[  477.336546][T26590]  ? __pfx____sys_sendmsg+0x10/0x10
[  477.336556][T26590]  ? futex_wait+0x2a2/0x390
[  477.336577][T26590]  ? __fget_files+0x2a/0x420
[  477.336586][T26590]  ? __fget_files+0x3a0/0x420
[  477.336598][T26590]  __x64_sys_sendmsg+0x1bd/0x2a0
[  477.336607][T26590]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  477.336618][T26590]  ? rcu_is_watching+0x15/0xb0
[  477.336630][T26590]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  477.336639][T26590]  do_syscall_64+0x15f/0xf80
[  477.336649][T26590]  ? trace_irq_disable+0x3b/0x140
[  477.336722][T26590]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  477.336731][T26590] RIP: 0033:0x7f3d5ad9c819
[  477.336743][T26590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  477.336752][T26590] RSP: 002b:00007f3d5bbd4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  477.336764][T26590] RAX: ffffffffffffffda RBX: 00007f3d5b015fa0 RCX: 00007f3d5ad9c819
[  477.336770][T26590] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  477.336777][T26590] RBP: 00007f3d5ae32c91 R08: 0000000000000000 R09: 0000000000000000
[  477.336782][T26590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  477.336787][T26590] R13: 00007f3d5b016038 R14: 00007f3d5b015fa0 R15: 00007ffedf89fe18
[  477.336802][T26590]  </TASK>
[  477.357328][T26592] veth0_virt_wifi: entered allmulticast mode
[  477.515248][T26586] pim6reg: entered allmulticast mode
[  477.528090][T26585] pim6reg: left allmulticast mode
[  477.649135][T26607] netlink: 'syz.1.8357': attribute type 2 has an invalid length.
[  477.659298][T26608] xt_hashlimit: size too large, truncated to 1048576
[  477.664178][ T7943] lo speed is unknown, defaulting to 1000
[  477.668403][ T7943] syz2: Port: 1 Link ACTIVE
[  477.733796][T26620] netlink: 'syz.2.8360': attribute type 2 has an invalid length.
[  477.743569][T26620] netlink: 'syz.2.8360': attribute type 2 has an invalid length.
[  477.816287][T26630] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8363'.
[  478.025797][T26653] netlink: 'syz.2.8369': attribute type 1 has an invalid length.
[  478.028505][T26653] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8369'.
[  478.121536][  T620] block nbd1: Possible stuck request ffff88810aff8000: control (read@0,1024B). Runtime 240 seconds
[  478.125125][  T620] block nbd1: Possible stuck request ffff88810aff8200: control (read@1024,1024B). Runtime 240 seconds
[  478.128713][  T620] block nbd1: Possible stuck request ffff88810aff8400: control (read@2048,1024B). Runtime 240 seconds
[  478.133054][  T620] block nbd1: Possible stuck request ffff88810aff8600: control (read@3072,1024B). Runtime 240 seconds
[  478.143411][T26656] netlink: 'syz.1.8371': attribute type 89 has an invalid length.
[  478.764830][T26665] syzkaller0: entered promiscuous mode
[  478.770091][T26665] syzkaller0: entered allmulticast mode
[  478.782906][T26665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  478.841073][T26665] sock: sock_timestamping_bind_phc: sock not bind to device
[  479.626755][T26689] pim6reg: entered allmulticast mode
[  479.633139][T26688] pim6reg: left allmulticast mode
[  479.760737][T26694] netlink: 'syz.2.8383': attribute type 3 has an invalid length.
[  479.768411][T26694] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8383'.
[  479.837623][T26708] netlink: 'syz.2.8388': attribute type 1 has an invalid length.
[  479.845512][T26708] netlink: 'syz.2.8388': attribute type 3 has an invalid length.
[  479.848214][T26708] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8388'.
[  479.861696][T26702] erspan0: left promiscuous mode
[  479.874912][T26702] 8021q: adding VLAN 0 to HW filter on device bond0
[  479.880784][T26702] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  479.981825][T26716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8390'.
[  480.131987][T26732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8396'.
[  480.149032][T26732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8396'.
[  480.188050][T26740] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  480.264701][T26750] netlink: 'syz.2.8401': attribute type 21 has an invalid length.
[  480.326035][T26756] netlink: 'syz.0.8402': attribute type 4 has an invalid length.
[  480.328781][T26756] netlink: 15506 bytes leftover after parsing attributes in process `syz.0.8402'.
[  480.982249][T26764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8404'.
[  481.309769][T26797] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8414'.
[  481.313244][T26798] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  481.315591][T26798] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  481.318608][T26798] tipc: Resetting bearer <eth:syzkaller0>
[  481.426256][T26809] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8418'.
[  481.484177][T26813] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  481.487248][T26813] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  481.491896][T26813] tipc: Resetting bearer <eth:syzkaller0>
[  481.518860][T26797] lo speed is unknown, defaulting to 1000
[  481.738491][T26826] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  482.650950][T26890] syzkaller0: entered promiscuous mode
[  482.653133][T26890] syzkaller0: entered allmulticast mode
[  482.812127][T26892] xt_hashlimit: size too large, truncated to 1048576
[  483.464868][T26907] __nla_validate_parse: 14 callbacks suppressed
[  483.464927][T26907] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8453'.
[  486.267653][T26915] openvswitch: netlink: Missing valid actions attribute.
[  486.272036][T26915] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  486.312314][T26919] netlink: 548 bytes leftover after parsing attributes in process `syz.1.8457'.
[  486.429734][T26937] validate_nla: 6 callbacks suppressed
[  486.429747][T26937] netlink: 'syz.0.8462': attribute type 1 has an invalid length.
[  486.441046][T26937] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8462'.
[  486.453864][T26941] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8464'.
[  486.466443][T26941] 8021q: VLANs not supported on ip6_vti0
[  486.502414][T26941] bond8: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  486.511392][T26941] bond8 (unregistering): Released all slaves
[  486.546099][T26952] netlink: 'syz.1.8464': attribute type 1 has an invalid length.
[  486.555073][T26952] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8464'.
[  486.627231][T26958] xt_policy: neither incoming nor outgoing policy selected
[  486.632434][T26958] openvswitch: netlink: Missing valid actions attribute.
[  486.635286][T26958] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  486.649639][T26962] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8471'.
[  486.669212][T26965] netlink: 'syz.1.8472': attribute type 3 has an invalid length.
[  486.673392][T26965] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8472'.
[  486.765219][T26975] xt_hashlimit: size too large, truncated to 1048576
[  486.981747][T26996] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8483'.
[  487.002222][T26996] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8483'.
[  487.005318][T26996] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8483'.
[  487.010881][T26996] netlink: 'syz.0.8483': attribute type 2 has an invalid length.
[  487.013046][T26995] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  487.013876][T26996] netlink: 'syz.0.8483': attribute type 2 has an invalid length.
[  487.055762][T26998] netlink: 'syz.1.8485': attribute type 3 has an invalid length.
[  487.282946][T27021] openvswitch: netlink: Missing valid actions attribute.
[  487.285394][T27021] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  487.457936][T27028] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  487.596868][T27034] xt_hashlimit: size too large, truncated to 1048576
[  487.959165][T27047] lo speed is unknown, defaulting to 1000
[  488.374674][T27070] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  488.506658][T27082] __nla_validate_parse: 2 callbacks suppressed
[  488.506678][T27082] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8513'.
[  488.556309][T27088] xt_hashlimit: size too large, truncated to 1048576
[  488.683123][T27096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8518'.
[  488.713341][T27100] netlink: 140 bytes leftover after parsing attributes in process `syz.0.8519'.
[  488.882237][T27113] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8525'.
[  488.983124][T27115] pim6reg1: entered promiscuous mode
[  488.990018][T27115] pim6reg1: entered allmulticast mode
[  489.236955][T27136] xt_CT: You must specify a L4 protocol and not use inversions on it
[  489.873599][T27142] netlink: 184 bytes leftover after parsing attributes in process `syz.2.8533'.
[  489.879540][T27142] netlink: 'syz.2.8533': attribute type 1 has an invalid length.
[  489.883762][T27142] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8533'.
[  490.251288][T27179] netlink: 260 bytes leftover after parsing attributes in process `syz.1.8548'.
[  490.345595][T27187] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  490.348227][T27187] CPU: 1 UID: 0 PID: 27187 Comm: syz.1.8553 Not tainted syzkaller #0 PREEMPT(full) 
[  490.348239][T27187] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  490.348245][T27187] Call Trace:
[  490.348250][T27187]  <TASK>
[  490.348256][T27187]  dump_stack_lvl+0xe8/0x150
[  490.348275][T27187]  sysfs_warn_dup+0x8e/0xa0
[  490.348287][T27187]  sysfs_do_create_link_sd+0xc0/0x110
[  490.348297][T27187]  device_add_class_symlinks+0x1cf/0x240
[  490.348314][T27187]  device_add+0x475/0xbb0
[  490.348327][T27187]  wiphy_register+0x1dc5/0x2dc0
[  490.348347][T27187]  ? __pfx_wiphy_register+0x10/0x10
[  490.348357][T27187]  ? __pfx_netdev_run_todo+0x10/0x10
[  490.348367][T27187]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  490.348383][T27187]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  490.348394][T27187]  ieee80211_register_hw+0x3d82/0x4a70
[  490.348410][T27187]  ? ieee80211_register_hw+0x18e1/0x4a70
[  490.348428][T27187]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  490.348439][T27187]  ? __asan_memset+0x22/0x50
[  490.348448][T27187]  ? __hrtimer_setup+0x1b7/0x260
[  490.348458][T27187]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  490.348469][T27187]  mac80211_hwsim_new_radio+0x3334/0x5ba0
[  490.348491][T27187]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  490.348502][T27187]  ? kstrndup+0xbf/0x160
[  490.348517][T27187]  hwsim_new_radio_nl+0xf6a/0x1c00
[  490.348537][T27187]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  490.348582][T27187]  ? rcu_is_watching+0x15/0xb0
[  490.348594][T27187]  ? trace_kmalloc+0x2a/0xf0
[  490.348606][T27187]  ? __nla_parse+0x40/0x60
[  490.348618][T27187]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  490.348628][T27187]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  490.348641][T27187]  genl_family_rcv_msg_doit+0x22a/0x330
[  490.348653][T27187]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  490.348667][T27187]  ? bpf_lsm_capable+0x9/0x20
[  490.348679][T27187]  ? security_capable+0x7e/0x2c0
[  490.348694][T27187]  genl_rcv_msg+0x61c/0x7a0
[  490.348704][T27187]  ? __pfx_genl_rcv_msg+0x10/0x10
[  490.348712][T27187]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  490.348729][T27187]  netlink_rcv_skb+0x232/0x4b0
[  490.348740][T27187]  ? __pfx_genl_rcv_msg+0x10/0x10
[  490.348749][T27187]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  490.348766][T27187]  ? down_read+0x270/0x2e0
[  490.348775][T27187]  ? genl_rcv+0xd/0x40
[  490.348784][T27187]  genl_rcv+0x28/0x40
[  490.348791][T27187]  netlink_unicast+0x75c/0x8e0
[  490.348805][T27187]  netlink_sendmsg+0x813/0xb40
[  490.348819][T27187]  ? __pfx_netlink_sendmsg+0x10/0x10
[  490.348831][T27187]  ? aa_sock_msg_perm+0xf1/0x1b0
[  490.348840][T27187]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  490.348850][T27187]  ____sys_sendmsg+0x972/0x9f0
[  490.348862][T27187]  ? __might_fault+0xaf/0x130
[  490.348873][T27187]  ? __pfx_____sys_sendmsg+0x10/0x10
[  490.348888][T27187]  ? import_iovec+0x73/0xa0
[  490.348898][T27187]  ___sys_sendmsg+0x2a5/0x360
[  490.348905][T27187]  ? __lock_acquire+0x6b5/0x2cf0
[  490.348918][T27187]  ? __pfx____sys_sendmsg+0x10/0x10
[  490.348928][T27187]  ? futex_wake+0x4ac/0x580
[  490.348948][T27187]  ? __fget_files+0x2a/0x420
[  490.348956][T27187]  ? __fget_files+0x3a0/0x420
[  490.348967][T27187]  __x64_sys_sendmsg+0x1bd/0x2a0
[  490.348975][T27187]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  490.348986][T27187]  ? rcu_is_watching+0x15/0xb0
[  490.348998][T27187]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  490.349006][T27187]  do_syscall_64+0x15f/0xf80
[  490.349015][T27187]  ? trace_irq_disable+0x3b/0x140
[  490.349027][T27187]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  490.349035][T27187] RIP: 0033:0x7f97ff79c819
[  490.349044][T27187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  490.349050][T27187] RSP: 002b:00007f980068b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  490.349061][T27187] RAX: ffffffffffffffda RBX: 00007f97ffa15fa0 RCX: 00007f97ff79c819
[  490.349066][T27187] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  490.349071][T27187] RBP: 00007f97ff832c91 R08: 0000000000000000 R09: 0000000000000000
[  490.349076][T27187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  490.349080][T27187] R13: 00007f97ffa16038 R14: 00007f97ffa15fa0 R15: 00007ffec3aca778
[  490.349092][T27187]  </TASK>
[  490.573731][T27195] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8552'.
[  490.611207][T27191] netlink: 'syz.0.8552': attribute type 1 has an invalid length.
[  490.614493][T27191] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8552'.
[  490.623001][T27196] netlink: 'syz.2.8555': attribute type 29 has an invalid length.
[  490.858102][T27218] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  490.860721][T27218] CPU: 1 UID: 0 PID: 27218 Comm: syz.2.8560 Not tainted syzkaller #0 PREEMPT(full) 
[  490.860735][T27218] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  490.860741][T27218] Call Trace:
[  490.860746][T27218]  <TASK>
[  490.860751][T27218]  dump_stack_lvl+0xe8/0x150
[  490.860771][T27218]  sysfs_warn_dup+0x8e/0xa0
[  490.860781][T27218]  sysfs_do_create_link_sd+0xc0/0x110
[  490.860791][T27218]  device_add_class_symlinks+0x1cf/0x240
[  490.860808][T27218]  device_add+0x475/0xbb0
[  490.860820][T27218]  wiphy_register+0x1dc5/0x2dc0
[  490.860839][T27218]  ? __pfx_wiphy_register+0x10/0x10
[  490.860853][T27218]  ? __pfx_netdev_run_todo+0x10/0x10
[  490.860866][T27218]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  490.860888][T27218]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  490.860905][T27218]  ieee80211_register_hw+0x3d82/0x4a70
[  490.860924][T27218]  ? ieee80211_register_hw+0x18e1/0x4a70
[  490.860942][T27218]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  490.860953][T27218]  ? __asan_memset+0x22/0x50
[  490.860962][T27218]  ? __hrtimer_setup+0x1b7/0x260
[  490.860971][T27218]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  490.860982][T27218]  mac80211_hwsim_new_radio+0x3334/0x5ba0
[  490.861005][T27218]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  490.861016][T27218]  ? kstrndup+0xbf/0x160
[  490.861031][T27218]  hwsim_new_radio_nl+0xf6a/0x1c00
[  490.861051][T27218]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  490.861067][T27218]  ? rcu_is_watching+0x15/0xb0
[  490.861077][T27218]  ? trace_kmalloc+0x2a/0xf0
[  490.861090][T27218]  ? __nla_parse+0x40/0x60
[  490.861101][T27218]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  490.861110][T27218]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  490.861122][T27218]  genl_family_rcv_msg_doit+0x22a/0x330
[  490.861133][T27218]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  490.861147][T27218]  ? bpf_lsm_capable+0x9/0x20
[  490.861158][T27218]  ? security_capable+0x7e/0x2c0
[  490.861172][T27218]  genl_rcv_msg+0x61c/0x7a0
[  490.861183][T27218]  ? __pfx_genl_rcv_msg+0x10/0x10
[  490.861191][T27218]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  490.861208][T27218]  netlink_rcv_skb+0x232/0x4b0
[  490.861220][T27218]  ? __pfx_genl_rcv_msg+0x10/0x10
[  490.861229][T27218]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  490.861245][T27218]  ? down_read+0x270/0x2e0
[  490.861254][T27218]  ? genl_rcv+0xd/0x40
[  490.861263][T27218]  genl_rcv+0x28/0x40
[  490.861269][T27218]  netlink_unicast+0x75c/0x8e0
[  490.861284][T27218]  netlink_sendmsg+0x813/0xb40
[  490.861298][T27218]  ? __pfx_netlink_sendmsg+0x10/0x10
[  490.861310][T27218]  ? aa_sock_msg_perm+0xf1/0x1b0
[  490.861320][T27218]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  490.861330][T27218]  ____sys_sendmsg+0x972/0x9f0
[  490.861344][T27218]  ? __might_fault+0xaf/0x130
[  490.861355][T27218]  ? __pfx_____sys_sendmsg+0x10/0x10
[  490.861370][T27218]  ? import_iovec+0x73/0xa0
[  490.861381][T27218]  ___sys_sendmsg+0x2a5/0x360
[  490.861388][T27218]  ? __lock_acquire+0x6b5/0x2cf0
[  490.861402][T27218]  ? __pfx____sys_sendmsg+0x10/0x10
[  490.861412][T27218]  ? futex_wait+0x2a2/0x390
[  490.861432][T27218]  ? __fget_files+0x2a/0x420
[  490.861441][T27218]  ? __fget_files+0x3a0/0x420
[  490.861452][T27218]  __x64_sys_sendmsg+0x1bd/0x2a0
[  490.861461][T27218]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  490.861472][T27218]  ? rcu_is_watching+0x15/0xb0
[  490.861483][T27218]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  490.861492][T27218]  do_syscall_64+0x15f/0xf80
[  490.861501][T27218]  ? trace_irq_disable+0x3b/0x140
[  490.861514][T27218]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  490.861522][T27218] RIP: 0033:0x7f3d5ad9c819
[  490.861531][T27218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  490.861538][T27218] RSP: 002b:00007f3d5bbd4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  490.861549][T27218] RAX: ffffffffffffffda RBX: 00007f3d5b015fa0 RCX: 00007f3d5ad9c819
[  490.861579][T27218] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  490.861590][T27218] RBP: 00007f3d5ae32c91 R08: 0000000000000000 R09: 0000000000000000
[  490.861595][T27218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  490.861600][T27218] R13: 00007f3d5b016038 R14: 00007f3d5b015fa0 R15: 00007ffedf89fe18
[  490.861614][T27218]  </TASK>
[  491.337288][T27245] tunl0: Caught tx_queue_len zero misconfig
[  491.339343][T27245] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8568'.
[  491.433587][T27255] openvswitch: netlink: Missing valid actions attribute.
[  491.436457][T27255] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  491.613804][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  491.617074][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  491.634746][T27265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  491.639705][T27265] netlink: 'syz.1.8576': attribute type 1 has an invalid length.
[  491.663214][T27265] bond8: entered promiscuous mode
[  491.665498][T27265] 8021q: adding VLAN 0 to HW filter on device bond8
[  495.573984][T27325] wireguard0: entered promiscuous mode
[  495.751121][T27345] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  495.829688][T27347] syzkaller0: entered promiscuous mode
[  495.834511][T27347] syzkaller0: entered allmulticast mode
[  496.126566][T27380] __nla_validate_parse: 5 callbacks suppressed
[  496.126587][T27380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8611'.
[  496.344457][T27386] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8614'.
[  496.519249][T27393] openvswitch: netlink: Missing valid actions attribute.
[  496.523645][T27393] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  496.991397][ T7933] lo speed is unknown, defaulting to 1000
[  496.993313][ T7933] syz2: Port: 1 Link DOWN
[  497.018156][T27417] vlan0: entered allmulticast mode
[  497.030895][T27417] macvlan0: entered allmulticast mode
[  497.040593][T27417] bridge0: port 4(vlan0) entered blocking state
[  497.047698][T27417] bridge0: port 4(vlan0) entered disabled state
[  497.065075][T27417] vlan0: entered promiscuous mode
[  497.070851][T27417] macvlan0: entered promiscuous mode
[  497.627228][T27465] xt_hashlimit: size too large, truncated to 1048576
[  497.692331][T27476] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8642'.
[  497.998250][T27503] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8650'.
[  498.435819][T27516] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  498.514682][T27523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8655'.
[  498.671462][T27529] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8657'.
[  498.775817][T27539] netlink: 'syz.1.8660': attribute type 10 has an invalid length.
[  498.781288][T27539] netlink: 16154 bytes leftover after parsing attributes in process `syz.1.8660'.
[  498.836799][T27544] xt_hashlimit: size too large, truncated to 1048576
[  498.853627][T27548] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8664'.
[  498.868219][T27548] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8664'.
[  498.871218][T27548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8664'.
[  498.978524][T27560] netlink: 'syz.2.8668': attribute type 18 has an invalid length.
[  498.979630][T27559] netlink: 'syz.2.8668': attribute type 18 has an invalid length.
[  498.981978][T27560] netlink: 'syz.2.8668': attribute type 18 has an invalid length.
[  498.989116][T27559] netlink: 'syz.2.8668': attribute type 18 has an invalid length.
[  498.989201][T27562] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  499.354845][T27585] xt_hashlimit: size too large, truncated to 1048576
[  499.629802][T27605] bond0: Unable to set down delay as MII monitoring is disabled
[  499.799092][T27615] xt_hashlimit: size too large, truncated to 1048576
[  499.962080][T27630] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  500.136074][T27646] xt_hashlimit: size too large, truncated to 1048576
[  500.965689][T27703] netem: unknown loss type 0
[  500.975718][T27703] netem: change failed
[  501.004314][T27703] bond9: entered allmulticast mode
[  501.006763][T27703] 8021q: adding VLAN 0 to HW filter on device bond9
[  501.268245][T27724] __nla_validate_parse: 14 callbacks suppressed
[  501.268267][T27724] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8723'.
[  501.311726][T27726] x_tables: duplicate underflow at hook 2
[  501.323171][T27726] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  501.687176][T27748] netlink: 'syz.2.8733': attribute type 1 has an invalid length.
[  501.693876][T27748] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8733'.
[  501.965975][T27762] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  501.968614][T27762] CPU: 1 UID: 0 PID: 27762 Comm: syz.2.8738 Not tainted syzkaller #0 PREEMPT(full) 
[  501.968627][T27762] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  501.968632][T27762] Call Trace:
[  501.968637][T27762]  <TASK>
[  501.968642][T27762]  dump_stack_lvl+0xe8/0x150
[  501.968663][T27762]  sysfs_warn_dup+0x8e/0xa0
[  501.968675][T27762]  sysfs_do_create_link_sd+0xc0/0x110
[  501.968685][T27762]  device_add_class_symlinks+0x1cf/0x240
[  501.968699][T27762]  device_add+0x475/0xbb0
[  501.968713][T27762]  wiphy_register+0x1dc5/0x2dc0
[  501.968731][T27762]  ? __pfx_wiphy_register+0x10/0x10
[  501.968740][T27762]  ? __pfx_netdev_run_todo+0x10/0x10
[  501.968751][T27762]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  501.968765][T27762]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  501.968776][T27762]  ieee80211_register_hw+0x3d82/0x4a70
[  501.968793][T27762]  ? ieee80211_register_hw+0x18e1/0x4a70
[  501.968812][T27762]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  501.968823][T27762]  ? __asan_memset+0x22/0x50
[  501.968832][T27762]  ? __hrtimer_setup+0x1b7/0x260
[  501.968841][T27762]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  501.968852][T27762]  mac80211_hwsim_new_radio+0x3334/0x5ba0
[  501.968875][T27762]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  501.968886][T27762]  ? kstrndup+0xbf/0x160
[  501.968900][T27762]  hwsim_new_radio_nl+0xf6a/0x1c00
[  501.968920][T27762]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  501.968935][T27762]  ? rcu_is_watching+0x15/0xb0
[  501.968943][T27762]  ? trace_kmalloc+0x2a/0xf0
[  501.968955][T27762]  ? __nla_parse+0x40/0x60
[  501.968965][T27762]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  501.968974][T27762]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  501.968986][T27762]  genl_family_rcv_msg_doit+0x22a/0x330
[  501.968997][T27762]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  501.969011][T27762]  ? bpf_lsm_capable+0x9/0x20
[  501.969021][T27762]  ? security_capable+0x7e/0x2c0
[  501.969035][T27762]  genl_rcv_msg+0x61c/0x7a0
[  501.969046][T27762]  ? __pfx_genl_rcv_msg+0x10/0x10
[  501.969054][T27762]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  501.969070][T27762]  netlink_rcv_skb+0x232/0x4b0
[  501.969082][T27762]  ? __pfx_genl_rcv_msg+0x10/0x10
[  501.969091][T27762]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  501.969108][T27762]  ? down_read+0x270/0x2e0
[  501.969118][T27762]  ? genl_rcv+0xd/0x40
[  501.969126][T27762]  genl_rcv+0x28/0x40
[  501.969133][T27762]  netlink_unicast+0x75c/0x8e0
[  501.969147][T27762]  netlink_sendmsg+0x813/0xb40
[  501.969161][T27762]  ? __pfx_netlink_sendmsg+0x10/0x10
[  501.969173][T27762]  ? aa_sock_msg_perm+0xf1/0x1b0
[  501.969182][T27762]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  501.969192][T27762]  ____sys_sendmsg+0x972/0x9f0
[  501.969203][T27762]  ? __might_fault+0xaf/0x130
[  501.969214][T27762]  ? __pfx_____sys_sendmsg+0x10/0x10
[  501.969237][T27762]  ? import_iovec+0x73/0xa0
[  501.969248][T27762]  ___sys_sendmsg+0x2a5/0x360
[  501.969255][T27762]  ? __lock_acquire+0x6b5/0x2cf0
[  501.969271][T27762]  ? __pfx____sys_sendmsg+0x10/0x10
[  501.969282][T27762]  ? futex_wait+0x2a2/0x390
[  501.969304][T27762]  ? __fget_files+0x2a/0x420
[  501.969313][T27762]  ? __fget_files+0x3a0/0x420
[  501.969325][T27762]  __x64_sys_sendmsg+0x1bd/0x2a0
[  501.969334][T27762]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  501.969345][T27762]  ? rcu_is_watching+0x15/0xb0
[  501.969358][T27762]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  501.969367][T27762]  do_syscall_64+0x15f/0xf80
[  501.969376][T27762]  ? trace_irq_disable+0x3b/0x140
[  501.969389][T27762]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  501.969397][T27762] RIP: 0033:0x7f3d5ad9c819
[  501.969406][T27762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  501.969412][T27762] RSP: 002b:00007f3d5bbd4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  501.969422][T27762] RAX: ffffffffffffffda RBX: 00007f3d5b015fa0 RCX: 00007f3d5ad9c819
[  501.969428][T27762] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  501.969433][T27762] RBP: 00007f3d5ae32c91 R08: 0000000000000000 R09: 0000000000000000
[  501.969437][T27762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  501.969442][T27762] R13: 00007f3d5b016038 R14: 00007f3d5b015fa0 R15: 00007ffedf89fe18
[  501.969454][T27762]  </TASK>
[  502.460921][T27766] syzkaller0: entered promiscuous mode
[  502.464419][T27766] syzkaller0: entered allmulticast mode
[  502.513944][T27766] lo: entered allmulticast mode
[  502.516498][T27766] lo: left allmulticast mode
[  502.665905][T27770] openvswitch: netlink: Missing valid actions attribute.
[  502.671965][T27770] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  502.697450][T27772] netlink: 844 bytes leftover after parsing attributes in process `syz.2.8743'.
[  502.728180][T27773] veth17: entered promiscuous mode
[  503.003020][T27795] netlink: 'syz.2.8749': attribute type 4 has an invalid length.
[  503.009619][T27795] netlink: 'syz.2.8749': attribute type 4 has an invalid length.
[  503.016631][ T5890] lo speed is unknown, defaulting to 1000
[  503.018916][ T5890] syz2: Port: 1 Link ACTIVE
[  503.082204][T27797] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8750'.
[  503.187324][T27799] netlink: 428 bytes leftover after parsing attributes in process `syz.2.8751'.
[  503.198777][T27799] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8751'.
[  503.438938][ T5830] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  503.445969][ T5830] CPU: 1 UID: 0 PID: 5830 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  503.445985][ T5830] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  503.445990][ T5830] Call Trace:
[  503.445994][ T5830]  <TASK>
[  503.445998][ T5830]  dump_stack_lvl+0xe8/0x150
[  503.446017][ T5830]  dump_header+0xd3/0x4c0
[  503.446028][ T5830]  oom_kill_process+0x3ab/0x970
[  503.446040][ T5830]  out_of_memory+0x106c/0x1410
[  503.446048][ T5830]  ? try_charge_memcg+0xbb9/0x1570
[  503.446059][ T5830]  ? __pfx___mutex_lock+0x10/0x10
[  503.446073][ T5830]  ? __pfx_out_of_memory+0x10/0x10
[  503.446080][ T5830]  ? do_raw_spin_unlock+0x4d/0x210
[  503.446093][ T5830]  try_charge_memcg+0xc77/0x1570
[  503.446109][ T5830]  ? __pfx_try_charge_memcg+0x10/0x10
[  503.446118][ T5830]  ? percpu_ref_tryget+0x15/0x180
[  503.446135][ T5830]  ? charge_memcg+0x23/0x2b0
[  503.446145][ T5830]  charge_memcg+0x1a2/0x2b0
[  503.446155][ T5830]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  503.446163][ T5830]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  503.446174][ T5830]  __swap_cache_prepare_and_add+0xdc/0x700
[  503.446185][ T5830]  ? page_rmappable_folio+0x9a/0x170
[  503.446198][ T5830]  swap_cache_alloc_folio+0xf1/0x240
[  503.446207][ T5830]  swap_cluster_readahead+0x355/0x670
[  503.446218][ T5830]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  503.446230][ T5830]  ? get_vma_policy+0x27b/0x3c0
[  503.446241][ T5830]  swapin_readahead+0x196/0xc50
[  503.446250][ T5830]  ? swap_table_get+0x1e/0x260
[  503.446263][ T5830]  ? __pfx_swapin_readahead+0x10/0x10
[  503.446271][ T5830]  ? swap_table_get+0x1e/0x260
[  503.446281][ T5830]  ? swap_table_get+0x1e/0x260
[  503.446291][ T5830]  ? swap_table_get+0x1e/0x260
[  503.446307][ T5830]  ? swap_table_get+0x216/0x260
[  503.446318][ T5830]  ? swap_cache_get_folio+0x2e4/0x2f0
[  503.446332][ T5830]  do_swap_page+0x555/0x5120
[  503.446346][ T5830]  ? __pte_offset_map+0x29/0x240
[  503.446354][ T5830]  ? __pte_offset_map+0x29/0x240
[  503.446365][ T5830]  ? do_swap_page+0x128/0x5120
[  503.446375][ T5830]  ? __pfx_do_swap_page+0x10/0x10
[  503.446386][ T5830]  ? __pte_offset_map+0x1ae/0x240
[  503.446394][ T5830]  ? pte_offset_map_rw_nolock+0xea/0x160
[  503.446403][ T5830]  handle_mm_fault+0x12d2/0x3170
[  503.446417][ T5830]  ? handle_mm_fault+0xee/0x3170
[  503.446427][ T5830]  ? __pfx_handle_mm_fault+0x10/0x10
[  503.446434][ T5830]  ? lock_vma_under_rcu+0x45a/0x500
[  503.446452][ T5830]  do_user_addr_fault+0xa73/0x1340
[  503.446498][ T5830]  ? rcu_is_watching+0x15/0xb0
[  503.446507][ T5830]  ? trace_page_fault_user+0x84/0x1e0
[  503.446519][ T5830]  exc_page_fault+0x6a/0xc0
[  503.446529][ T5830]  asm_exc_page_fault+0x26/0x30
[  503.446537][ T5830] RIP: 0033:0x7f97ff66a837
[  503.446546][ T5830] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 80 af ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d 79 ae ed 00 48 01 d1 39 7c 24
[  503.446554][ T5830] RSP: 002b:00007ffec3acaae0 EFLAGS: 00010206
[  503.446563][ T5830] RAX: 0000001b30b24000 RBX: 000000000000196e RCX: 000000000007a8f0
[  503.446568][ T5830] RDX: 0000000004c90638 RSI: 00007ffec3acab70 RDI: 000000000000000d
[  503.446573][ T5830] RBP: 00007ffec3acab1c R08: 00000000124118ca R09: 3fffffffffffffff
[  503.446578][ T5830] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000001388
[  503.446583][ T5830] R13: 00000000000927c0 R14: 000000000007a5e7 R15: 00007ffec3acab70
[  503.446595][ T5830]  </TASK>
[  503.446598][ T5830] memory: usage 307200kB, limit 307200kB, failcnt 4076
[  503.527117][T27801] lo speed is unknown, defaulting to 1000
[  503.694828][ T5830] memory+swap: usage 307356kB, limit 9007199254740988kB, failcnt 0
[  503.713796][ T5830] kmem: usage 298748kB, limit 9007199254740988kB, failcnt 0
[  503.727059][ T5830] Memory cgroup stats for /syz1:
[  503.727148][ T5830] cache 4096
[  503.746200][ T5830] rss 0
[  503.753380][ T5830] rss_huge 0
[  503.761600][ T5830] shmem 0
[  503.770174][ T5830] mapped_file 0
[  503.780612][ T5830] dirty 0
[  503.790976][ T5830] writeback 0
[  503.800139][ T5830] workingset_refault_anon 37
[  503.806370][ T5830] workingset_refault_file 1
[  503.819218][ T5830] swap 159744
[  503.828562][ T5830] swapcached 397312
[  503.840838][ T5830] pgpgin 292174
[  503.842040][ T5830] pgpgout 290061
[  503.852349][ T5830] pgfault 602660
[  503.867039][ T5830] pgmajfault 28
[  503.875584][ T5830] inactive_anon 6291456
[  503.885751][ T5830] active_anon 2097152
[  503.893303][ T5830] inactive_file 0
[  503.894715][ T5830] active_file 4096
[  503.914818][ T5830] unevictable 0
[  503.916115][ T5830] hierarchical_memory_limit 314572800
[  503.917965][ T5830] hierarchical_memsw_limit 9223372036854771712
[  503.921523][ T5830] total_cache 4096
[  503.922795][ T5830] total_rss 0
[  503.928739][ T5830] total_rss_huge 0
[  503.935745][ T5830] total_shmem 0
[  503.938748][ T5830] total_mapped_file 0
[  503.942358][ T5830] total_dirty 0
[  503.944656][ T5830] total_writeback 0
[  503.945911][ T5830] total_workingset_refault_anon 37
[  503.953182][ T5830] total_workingset_refault_file 1
[  503.958673][ T5830] total_swap 159744
[  503.963611][ T5830] total_swapcached 397312
[  503.968511][ T5830] total_pgpgin 292174
[  503.969746][ T5830] total_pgpgout 290061
[  503.990202][ T5830] total_pgfault 602664
[  504.004643][ T5830] total_pgmajfault 28
[  504.017754][ T5830] total_inactive_anon 6291456
[  504.031657][ T5830] total_active_anon 2097152
[  504.036154][T27815] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8756'.
[  504.043293][ T5830] total_inactive_file 0
[  504.049236][ T5830] total_active_file 4096
[  504.055050][ T5830] total_unevictable 0
[  504.060441][ T5830] anon_cost 0
[  504.064441][ T5830] file_cost 0
[  504.065862][ T5830] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.8722,pid=27721,uid=0
[  504.082293][ T5830] Memory cgroup out of memory: Killed process 27721 (syz.1.8722) total-vm:102360kB, anon-rss:1272kB, file-rss:22992kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[  504.294517][T27824] siw: device registration error -23
[  505.093322][T27847] netlink: 'syz.2.8764': attribute type 1 has an invalid length.
[  505.098814][T27847] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8764'.
[  505.125109][T27854] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8768'.
[  505.345263][T27863] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8772'.
[  505.982520][T27888] xt_hashlimit: size too large, truncated to 1048576
[  506.159473][T27904] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  506.268961][T27917] netlink: 'syz.2.8791': attribute type 3 has an invalid length.
[  506.272284][T27917] __nla_validate_parse: 6 callbacks suppressed
[  506.272293][T27917] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8791'.
[  506.286187][T27917] netlink: 6 bytes leftover after parsing attributes in process `syz.2.8791'.
[  506.333600][T27922] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8792'.
[  506.356537][T27924] openvswitch: netlink: Missing valid actions attribute.
[  506.360531][T27924] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  506.375988][T27922] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8792'.
[  506.383421][T27922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8792'.
[  506.394143][T27922] netlink: 'syz.0.8792': attribute type 2 has an invalid length.
[  506.397659][T27922] netlink: 'syz.0.8792': attribute type 2 has an invalid length.
[  506.591906][T27944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8801'.
[  506.663644][T27948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8803'.
[  507.255024][T27955] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8806'.
[  507.323383][T27959] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8808'.
[  507.349307][T27961] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8809'.
[  507.426230][T27970] xt_hashlimit: size too large, truncated to 1048576
[  507.786417][T27987] netlink: 'syz.1.8815': attribute type 3 has an invalid length.
[  508.129001][T28027] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  508.181358][  T620] block nbd1: Possible stuck request ffff88810aff8000: control (read@0,1024B). Runtime 270 seconds
[  508.184787][  T620] block nbd1: Possible stuck request ffff88810aff8200: control (read@1024,1024B). Runtime 270 seconds
[  508.188160][  T620] block nbd1: Possible stuck request ffff88810aff8400: control (read@2048,1024B). Runtime 270 seconds
[  508.191884][  T620] block nbd1: Possible stuck request ffff88810aff8600: control (read@3072,1024B). Runtime 270 seconds
[  508.374114][T28051] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  508.539264][T28067] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  508.550644][T28067] syzkaller0: entered promiscuous mode
[  508.552488][T28067] syzkaller0: entered allmulticast mode
[  508.559512][T28069] netlink: 'syz.1.8846': attribute type 1 has an invalid length.
[  508.586677][T28066] tipc: Resetting bearer <eth:syzkaller0>
[  508.610205][T28066] tipc: Disabling bearer <eth:syzkaller0>
[  508.699089][T28081] batadv_slave_1: entered promiscuous mode
[  508.716332][T28081] openvswitch: netlink: Missing key (keys=40, expected=100)
[  508.728909][T28077] batadv_slave_1: left promiscuous mode
[  508.877633][T28079] lo speed is unknown, defaulting to 1000
[  508.989799][T28105] netlink: 'syz.2.8856': attribute type 1 has an invalid length.
[  509.007912][T28105] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR
[  509.502362][T28130] pim6reg1: entered allmulticast mode
[  509.962811][T28144] lo speed is unknown, defaulting to 1000
[  510.389057][ T7943] lo speed is unknown, defaulting to 1000
[  510.395794][ T7943] syz2: Port: 1 Link DOWN
[  510.534394][T28180] netlink: 'syz.1.8875': attribute type 1 has an invalid length.
[  510.559716][T28183] netlink: 'syz.2.8878': attribute type 12 has an invalid length.
[  510.574952][T28187] netlink: 'syz.0.8879': attribute type 10 has an invalid length.
[  510.577821][T28187] netlink: 'syz.0.8879': attribute type 10 has an invalid length.
[  511.038670][T28216] lo speed is unknown, defaulting to 1000
[  511.246213][T28222] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  511.382272][T28225] __nla_validate_parse: 13 callbacks suppressed
[  511.382285][T28225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8890'.
[  511.384271][T28226] netlink: 844 bytes leftover after parsing attributes in process `syz.2.8891'.
[  511.606075][T28236] netlink: 192 bytes leftover after parsing attributes in process `syz.1.8893'.
[  511.667459][T28240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8897'.
[  511.818523][T28232] lo speed is unknown, defaulting to 1000
[  512.453363][T28293] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8911'.
[  512.549113][T28301] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  512.584270][T28303] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8915'.
[  513.612041][T28327] netlink: 27 bytes leftover after parsing attributes in process `syz.2.8923'.
[  514.944526][T28368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8937'.
[  514.955350][T28368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8937'.
[  515.169227][T28403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8948'.
[  515.243396][T28410] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:20000
[  515.291696][T28400] lo speed is unknown, defaulting to 1000
[  515.608881][T28423] netlink: 'syz.1.8955': attribute type 3 has an invalid length.
[  515.679326][T28425] tipc: Resetting bearer <eth:syzkaller0>
[  516.196265][T28440] lo speed is unknown, defaulting to 1000
[  516.209117][T28456] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  516.882464][T28496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8968'.
[  516.961865][T28501] netlink: 'syz.0.8970': attribute type 12 has an invalid length.
[  517.338647][T28528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8980'.
[  517.342675][T28528] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  517.653585][T28559] openvswitch: netlink: Missing valid actions attribute.
[  517.656029][T28559] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  518.617729][T28583] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  518.673883][T28585] vlan0 (unregistering): left promiscuous mode
[  518.676602][T28585] macvlan0: left promiscuous mode
[  518.678939][T28585] bridge0: port 4(vlan0) entered disabled state
[  518.766824][T28588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8998'.
[  518.767276][T28597] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  518.792656][T28588] netlink: 'syz.0.8998': attribute type 1 has an invalid length.
[  518.798465][T28588] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8998'.
[  518.814310][T28599] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  518.817550][T28599] CPU: 0 UID: 0 PID: 28599 Comm: syz.2.9002 Not tainted syzkaller #0 PREEMPT(full) 
[  518.817568][T28599] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  518.817576][T28599] Call Trace:
[  518.817585][T28599]  <TASK>
[  518.817591][T28599]  dump_stack_lvl+0xe8/0x150
[  518.817620][T28599]  sysfs_warn_dup+0x8e/0xa0
[  518.817638][T28599]  sysfs_do_create_link_sd+0xc0/0x110
[  518.817655][T28599]  device_add_class_symlinks+0x1cf/0x240
[  518.817679][T28599]  device_add+0x475/0xbb0
[  518.817709][T28599]  wiphy_register+0x1dc5/0x2dc0
[  518.817738][T28599]  ? __pfx_wiphy_register+0x10/0x10
[  518.817753][T28599]  ? __pfx_netdev_run_todo+0x10/0x10
[  518.817769][T28599]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  518.817796][T28599]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  518.817816][T28599]  ieee80211_register_hw+0x3d82/0x4a70
[  518.817847][T28599]  ? ieee80211_register_hw+0x18e1/0x4a70
[  518.817884][T28599]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  518.817903][T28599]  ? __asan_memset+0x22/0x50
[  518.817918][T28599]  ? __hrtimer_setup+0x1b7/0x260
[  518.817935][T28599]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  518.817954][T28599]  mac80211_hwsim_new_radio+0x3334/0x5ba0
[  518.817997][T28599]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  518.818016][T28599]  ? kstrndup+0xbf/0x160
[  518.818042][T28599]  hwsim_new_radio_nl+0xf6a/0x1c00
[  518.818080][T28599]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  518.818107][T28599]  ? rcu_is_watching+0x15/0xb0
[  518.818121][T28599]  ? trace_kmalloc+0x2a/0xf0
[  518.818142][T28599]  ? __nla_parse+0x40/0x60
[  518.818160][T28599]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  518.818174][T28599]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  518.818196][T28599]  genl_family_rcv_msg_doit+0x22a/0x330
[  518.818216][T28599]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  518.818241][T28599]  ? bpf_lsm_capable+0x9/0x20
[  518.818259][T28599]  ? security_capable+0x7e/0x2c0
[  518.818285][T28599]  genl_rcv_msg+0x61c/0x7a0
[  518.818305][T28599]  ? __pfx_genl_rcv_msg+0x10/0x10
[  518.818318][T28599]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  518.818376][T28599]  netlink_rcv_skb+0x232/0x4b0
[  518.818401][T28599]  ? __pfx_genl_rcv_msg+0x10/0x10
[  518.818424][T28599]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  518.818476][T28599]  ? down_read+0x270/0x2e0
[  518.818495][T28599]  ? genl_rcv+0xd/0x40
[  518.818510][T28599]  genl_rcv+0x28/0x40
[  518.818523][T28599]  netlink_unicast+0x75c/0x8e0
[  518.818549][T28599]  netlink_sendmsg+0x813/0xb40
[  518.818577][T28599]  ? __pfx_netlink_sendmsg+0x10/0x10
[  518.818600][T28599]  ? aa_sock_msg_perm+0xf1/0x1b0
[  518.818616][T28599]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  518.818635][T28599]  ____sys_sendmsg+0x972/0x9f0
[  518.818655][T28599]  ? __might_fault+0xaf/0x130
[  518.818676][T28599]  ? __pfx_____sys_sendmsg+0x10/0x10
[  518.818703][T28599]  ? import_iovec+0x73/0xa0
[  518.818721][T28599]  ___sys_sendmsg+0x2a5/0x360
[  518.818733][T28599]  ? __lock_acquire+0x6b5/0x2cf0
[  518.818757][T28599]  ? __pfx____sys_sendmsg+0x10/0x10
[  518.818775][T28599]  ? futex_wait+0x2a2/0x390
[  518.818812][T28599]  ? __fget_files+0x2a/0x420
[  518.818845][T28599]  ? __fget_files+0x3a0/0x420
[  518.818870][T28599]  __x64_sys_sendmsg+0x1bd/0x2a0
[  518.818887][T28599]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  518.818910][T28599]  ? rcu_is_watching+0x15/0xb0
[  518.818935][T28599]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  518.818950][T28599]  do_syscall_64+0x15f/0xf80
[  518.818967][T28599]  ? trace_irq_disable+0x3b/0x140
[  518.818992][T28599]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  518.819006][T28599] RIP: 0033:0x7f3d5ad9c819
[  518.819021][T28599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  518.819032][T28599] RSP: 002b:00007f3d5bbd4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  518.819047][T28599] RAX: ffffffffffffffda RBX: 00007f3d5b015fa0 RCX: 00007f3d5ad9c819
[  518.819057][T28599] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  518.819065][T28599] RBP: 00007f3d5ae32c91 R08: 0000000000000000 R09: 0000000000000000
[  518.819073][T28599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  518.819080][T28599] R13: 00007f3d5b016038 R14: 00007f3d5b015fa0 R15: 00007ffedf89fe18
[  518.819104][T28599]  </TASK>
[  519.193829][T28616] batadv_slave_1: entered promiscuous mode
[  519.198034][T28614] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9008'.
[  519.210034][T28615] batadv_slave_1: left promiscuous mode
[  519.271681][T28620] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  519.422094][T28627] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9012'.
[  519.500629][T28637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9014'.
[  519.584124][T28642] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9016'.
[  519.637946][T28647] dvmrp0: entered allmulticast mode
[  519.749042][T28654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9019'.
[  519.757123][T28654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9019'.
[  519.796589][T28658] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  519.799662][T28658] CPU: 0 UID: 0 PID: 28658 Comm: syz.0.9021 Not tainted syzkaller #0 PREEMPT(full) 
[  519.799676][T28658] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  519.799682][T28658] Call Trace:
[  519.799688][T28658]  <TASK>
[  519.799692][T28658]  dump_stack_lvl+0xe8/0x150
[  519.799712][T28658]  sysfs_warn_dup+0x8e/0xa0
[  519.799723][T28658]  sysfs_do_create_link_sd+0xc0/0x110
[  519.799733][T28658]  device_add_class_symlinks+0x1cf/0x240
[  519.799748][T28658]  device_add+0x475/0xbb0
[  519.799762][T28658]  wiphy_register+0x1dc5/0x2dc0
[  519.799781][T28658]  ? __pfx_wiphy_register+0x10/0x10
[  519.799791][T28658]  ? __pfx_netdev_run_todo+0x10/0x10
[  519.799801][T28658]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  519.799817][T28658]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  519.799831][T28658]  ieee80211_register_hw+0x3d82/0x4a70
[  519.799864][T28658]  ? ieee80211_register_hw+0x18e1/0x4a70
[  519.799884][T28658]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  519.799894][T28658]  ? __asan_memset+0x22/0x50
[  519.799903][T28658]  ? __hrtimer_setup+0x1b7/0x260
[  519.799914][T28658]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  519.799944][T28658]  mac80211_hwsim_new_radio+0x3334/0x5ba0
[  519.799968][T28658]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  519.799979][T28658]  ? kstrndup+0xbf/0x160
[  519.799995][T28658]  hwsim_new_radio_nl+0xf6a/0x1c00
[  519.800019][T28658]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  519.800035][T28658]  ? rcu_is_watching+0x15/0xb0
[  519.800043][T28658]  ? trace_kmalloc+0x2a/0xf0
[  519.800055][T28658]  ? __nla_parse+0x40/0x60
[  519.800065][T28658]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  519.800075][T28658]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  519.800086][T28658]  genl_family_rcv_msg_doit+0x22a/0x330
[  519.800098][T28658]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  519.800111][T28658]  ? bpf_lsm_capable+0x9/0x20
[  519.800122][T28658]  ? security_capable+0x7e/0x2c0
[  519.800137][T28658]  genl_rcv_msg+0x61c/0x7a0
[  519.800147][T28658]  ? __pfx_genl_rcv_msg+0x10/0x10
[  519.800155][T28658]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  519.800172][T28658]  netlink_rcv_skb+0x232/0x4b0
[  519.800183][T28658]  ? __pfx_genl_rcv_msg+0x10/0x10
[  519.800193][T28658]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  519.800218][T28658]  ? down_read+0x270/0x2e0
[  519.800227][T28658]  ? genl_rcv+0xd/0x40
[  519.800236][T28658]  genl_rcv+0x28/0x40
[  519.800243][T28658]  netlink_unicast+0x75c/0x8e0
[  519.800259][T28658]  netlink_sendmsg+0x813/0xb40
[  519.800276][T28658]  ? __pfx_netlink_sendmsg+0x10/0x10
[  519.800290][T28658]  ? aa_sock_msg_perm+0xf1/0x1b0
[  519.800302][T28658]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  519.800316][T28658]  ____sys_sendmsg+0x972/0x9f0
[  519.800331][T28658]  ? __might_fault+0xaf/0x130
[  519.800374][T28658]  ? __pfx_____sys_sendmsg+0x10/0x10
[  519.800392][T28658]  ? import_iovec+0x73/0xa0
[  519.800402][T28658]  ___sys_sendmsg+0x2a5/0x360
[  519.800409][T28658]  ? __lock_acquire+0x6b5/0x2cf0
[  519.800424][T28658]  ? __pfx____sys_sendmsg+0x10/0x10
[  519.800434][T28658]  ? futex_wake+0x4ac/0x580
[  519.800456][T28658]  ? __fget_files+0x2a/0x420
[  519.800464][T28658]  ? __fget_files+0x3a0/0x420
[  519.800477][T28658]  __x64_sys_sendmsg+0x1bd/0x2a0
[  519.800485][T28658]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  519.800496][T28658]  ? rcu_is_watching+0x15/0xb0
[  519.800508][T28658]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.800516][T28658]  do_syscall_64+0x15f/0xf80
[  519.800525][T28658]  ? trace_irq_disable+0x3b/0x140
[  519.800537][T28658]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.800545][T28658] RIP: 0033:0x7f543b99c819
[  519.800554][T28658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  519.800561][T28658] RSP: 002b:00007f5439bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  519.800571][T28658] RAX: ffffffffffffffda RBX: 00007f543bc15fa0 RCX: 00007f543b99c819
[  519.800577][T28658] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  519.800582][T28658] RBP: 00007f543ba32c91 R08: 0000000000000000 R09: 0000000000000000
[  519.800586][T28658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  519.800591][T28658] R13: 00007f543bc16038 R14: 00007f543bc15fa0 R15: 00007ffe21a29418
[  519.800604][T28658]  </TASK>
[  520.046538][T28668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  520.156728][T28678] netlink: 'syz.0.9028': attribute type 1 has an invalid length.
[  520.407449][T28700] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma?
[  520.414867][T28698] netlink: 'syz.2.9035': attribute type 2 has an invalid length.
[  520.417417][T28698] netlink: 'syz.2.9035': attribute type 2 has an invalid length.
[  520.499246][T28707] openvswitch: netlink: Message has 8 unknown bytes.
[  521.270974][T28781] netlink: 'syz.2.9065': attribute type 2 has an invalid length.
[  521.274064][T28781] netlink: 'syz.2.9065': attribute type 2 has an invalid length.
[  521.644636][T28816] netlink: zone id is out of range
[  521.647696][T28816] netlink: zone id is out of range
[  521.651719][T28816] netlink: zone id is out of range
[  521.655070][T28816] netlink: zone id is out of range
[  521.659113][T28816] netlink: zone id is out of range
[  521.662006][T28816] netlink: zone id is out of range
[  521.870069][T28832] wg2: Caught tx_queue_len zero misconfig
[  521.896299][T28837] __nla_validate_parse: 13 callbacks suppressed
[  521.896315][T28837] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9086'.
[  521.915533][T28832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9085'.
[  522.047081][T28856] netlink: 'syz.1.9090': attribute type 1 has an invalid length.
[  522.081714][T28858] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9092'.
[  522.084418][T28860] netlink: 884 bytes leftover after parsing attributes in process `syz.1.9093'.
[  522.107281][T28858] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.9092'.
[  522.783689][T28845] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  522.887939][T28885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9102'.
[  522.915710][T28885] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  522.968958][T28895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9102'.
[  522.978122][T28895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9102'.
[  523.064840][T28905] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9108'.
[  523.087054][T28905] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9108'.
[  523.097958][T28905] netlink: 'syz.2.9108': attribute type 2 has an invalid length.
[  523.102763][T28905] netlink: 'syz.2.9108': attribute type 2 has an invalid length.
[  523.156982][T28908] net_ratelimit: 341 callbacks suppressed
[  523.157000][T28908] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  523.205397][T28909] netlink: 'syz.2.9110': attribute type 15 has an invalid length.
[  523.794814][T28960] openvswitch: netlink: Flow actions attr not present in new flow.
[  523.913454][T28971] netlink: 'syz.1.9132': attribute type 2 has an invalid length.
[  526.938775][T28974] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  527.025511][T29001] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  527.031316][T29001] __nla_validate_parse: 12 callbacks suppressed
[  527.031341][T29001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9139'.
[  527.456431][T29025] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  527.459584][T29025] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  527.489763][T29026] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9143'.
[  530.223240][T29015] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  530.305714][T29032] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9146'.
[  530.313977][T29036] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  530.318603][T29036] CPU: 1 UID: 0 PID: 29036 Comm: syz.1.9148 Not tainted syzkaller #0 PREEMPT(full) 
[  530.318618][T29036] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  530.318623][T29036] Call Trace:
[  530.318628][T29036]  <TASK>
[  530.318633][T29036]  dump_stack_lvl+0xe8/0x150
[  530.318652][T29036]  sysfs_warn_dup+0x8e/0xa0
[  530.318663][T29036]  sysfs_do_create_link_sd+0xc0/0x110
[  530.318674][T29036]  device_add_class_symlinks+0x1cf/0x240
[  530.318688][T29036]  device_add+0x475/0xbb0
[  530.318702][T29036]  wiphy_register+0x1dc5/0x2dc0
[  530.318720][T29036]  ? __pfx_wiphy_register+0x10/0x10
[  530.318729][T29036]  ? __pfx_netdev_run_todo+0x10/0x10
[  530.318737][T29036]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  530.318751][T29036]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  530.318762][T29036]  ieee80211_register_hw+0x3d82/0x4a70
[  530.318778][T29036]  ? ieee80211_register_hw+0x18e1/0x4a70
[  530.318799][T29036]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  530.318810][T29036]  ? __asan_memset+0x22/0x50
[  530.318819][T29036]  ? __hrtimer_setup+0x1b7/0x260
[  530.318828][T29036]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  530.318839][T29036]  mac80211_hwsim_new_radio+0x3334/0x5ba0
[  530.318861][T29036]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  530.318872][T29036]  ? kstrndup+0xbf/0x160
[  530.318886][T29036]  hwsim_new_radio_nl+0xf6a/0x1c00
[  530.318906][T29036]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  530.318921][T29036]  ? rcu_is_watching+0x15/0xb0
[  530.318929][T29036]  ? trace_kmalloc+0x2a/0xf0
[  530.318941][T29036]  ? __nla_parse+0x40/0x60
[  530.318951][T29036]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  530.318961][T29036]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  530.318972][T29036]  genl_family_rcv_msg_doit+0x22a/0x330
[  530.318983][T29036]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  530.318997][T29036]  ? bpf_lsm_capable+0x9/0x20
[  530.319008][T29036]  ? security_capable+0x7e/0x2c0
[  530.319022][T29036]  genl_rcv_msg+0x61c/0x7a0
[  530.319033][T29036]  ? __pfx_genl_rcv_msg+0x10/0x10
[  530.319041][T29036]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  530.319058][T29036]  netlink_rcv_skb+0x232/0x4b0
[  530.319069][T29036]  ? __pfx_genl_rcv_msg+0x10/0x10
[  530.319078][T29036]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  530.319098][T29036]  ? down_read+0x270/0x2e0
[  530.319107][T29036]  ? genl_rcv+0xd/0x40
[  530.319115][T29036]  genl_rcv+0x28/0x40
[  530.319123][T29036]  netlink_unicast+0x75c/0x8e0
[  530.319138][T29036]  netlink_sendmsg+0x813/0xb40
[  530.319153][T29036]  ? __pfx_netlink_sendmsg+0x10/0x10
[  530.319165][T29036]  ? aa_sock_msg_perm+0xf1/0x1b0
[  530.319173][T29036]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  530.319183][T29036]  ____sys_sendmsg+0x972/0x9f0
[  530.319195][T29036]  ? __might_fault+0xaf/0x130
[  530.319206][T29036]  ? __pfx_____sys_sendmsg+0x10/0x10
[  530.319221][T29036]  ? import_iovec+0x73/0xa0
[  530.319232][T29036]  ___sys_sendmsg+0x2a5/0x360
[  530.319238][T29036]  ? __lock_acquire+0x6b5/0x2cf0
[  530.319251][T29036]  ? __pfx____sys_sendmsg+0x10/0x10
[  530.319285][T29036]  ? futex_wake+0x4ac/0x580
[  530.319308][T29036]  ? __fget_files+0x2a/0x420
[  530.319317][T29036]  ? __fget_files+0x3a0/0x420
[  530.319331][T29036]  __x64_sys_sendmsg+0x1bd/0x2a0
[  530.319346][T29036]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  530.319357][T29036]  ? rcu_is_watching+0x15/0xb0
[  530.319368][T29036]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.319379][T29036]  do_syscall_64+0x15f/0xf80
[  530.319389][T29036]  ? trace_irq_disable+0x3b/0x140
[  530.319404][T29036]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.319413][T29036] RIP: 0033:0x7f97ff79c819
[  530.319423][T29036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  530.319430][T29036] RSP: 002b:00007f980068b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  530.319439][T29036] RAX: ffffffffffffffda RBX: 00007f97ffa15fa0 RCX: 00007f97ff79c819
[  530.319446][T29036] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  530.319452][T29036] RBP: 00007f97ff832c91 R08: 0000000000000000 R09: 0000000000000000
[  530.319457][T29036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  530.319462][T29036] R13: 00007f97ffa16038 R14: 00007f97ffa15fa0 R15: 00007ffec3aca778
[  530.319476][T29036]  </TASK>
[  530.653762][T29055] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  530.761022][T29062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9156'.
[  530.765477][T29062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9156'.
[  530.909110][T29071] openvswitch: netlink: Missing valid actions attribute.
[  530.919383][T29071] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  531.201839][T29083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9164'.
[  531.274855][T29089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9166'.
[  531.297896][T29083] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9164'.
[  531.407891][T29099] syzkaller0: entered promiscuous mode
[  531.410582][T29099] syzkaller0: entered allmulticast mode
[  531.413763][T29101] openvswitch: netlink: Missing valid actions attribute.
[  531.416368][T29101] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  531.421986][T29099] tcf_pedit_act: 22 callbacks suppressed
[  531.422002][T29099] tc action pedit offset must be on 32 bit boundaries
[  531.429182][T29099] tc action pedit offset must be on 32 bit boundaries
[  531.432076][T29099] tc action pedit offset must be on 32 bit boundaries
[  531.434908][T29099] tc action pedit offset must be on 32 bit boundaries
[  531.437705][T29099] tc action pedit offset must be on 32 bit boundaries
[  531.440885][T29099] tc action pedit offset must be on 32 bit boundaries
[  531.443785][T29099] tc action pedit offset must be on 32 bit boundaries
[  531.446490][T29099] tc action pedit offset must be on 32 bit boundaries
[  531.449075][T29099] tc action pedit offset must be on 32 bit boundaries
[  531.451510][T29099] tc action pedit offset must be on 32 bit boundaries
[  531.453649][T29099] TC_ACT_REPEAT abuse ?
[  531.534567][T29106] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  531.538950][T29106] CPU: 0 UID: 0 PID: 29106 Comm: syz.1.9173 Not tainted syzkaller #0 PREEMPT(full) 
[  531.538965][T29106] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  531.538970][T29106] Call Trace:
[  531.538975][T29106]  <TASK>
[  531.538980][T29106]  dump_stack_lvl+0xe8/0x150
[  531.538998][T29106]  sysfs_warn_dup+0x8e/0xa0
[  531.539009][T29106]  sysfs_do_create_link_sd+0xc0/0x110
[  531.539020][T29106]  device_add_class_symlinks+0x1cf/0x240
[  531.539033][T29106]  device_add+0x475/0xbb0
[  531.539047][T29106]  wiphy_register+0x1dc5/0x2dc0
[  531.539065][T29106]  ? __pfx_wiphy_register+0x10/0x10
[  531.539076][T29106]  ? __pfx_netdev_run_todo+0x10/0x10
[  531.539086][T29106]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  531.539103][T29106]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  531.539115][T29106]  ieee80211_register_hw+0x3d82/0x4a70
[  531.539132][T29106]  ? ieee80211_register_hw+0x18e1/0x4a70
[  531.539150][T29106]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  531.539161][T29106]  ? __asan_memset+0x22/0x50
[  531.539171][T29106]  ? __hrtimer_setup+0x1b7/0x260
[  531.539180][T29106]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  531.539191][T29106]  mac80211_hwsim_new_radio+0x3334/0x5ba0
[  531.539214][T29106]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  531.539225][T29106]  ? kstrndup+0xbf/0x160
[  531.539240][T29106]  hwsim_new_radio_nl+0xf6a/0x1c00
[  531.539281][T29106]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  531.539299][T29106]  ? rcu_is_watching+0x15/0xb0
[  531.539308][T29106]  ? trace_kmalloc+0x2a/0xf0
[  531.539320][T29106]  ? __nla_parse+0x40/0x60
[  531.539338][T29106]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  531.539348][T29106]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  531.539360][T29106]  genl_family_rcv_msg_doit+0x22a/0x330
[  531.539372][T29106]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  531.539387][T29106]  ? bpf_lsm_capable+0x9/0x20
[  531.539400][T29106]  ? security_capable+0x7e/0x2c0
[  531.539419][T29106]  genl_rcv_msg+0x61c/0x7a0
[  531.539432][T29106]  ? __pfx_genl_rcv_msg+0x10/0x10
[  531.539442][T29106]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  531.539461][T29106]  netlink_rcv_skb+0x232/0x4b0
[  531.539472][T29106]  ? __pfx_genl_rcv_msg+0x10/0x10
[  531.539481][T29106]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  531.539498][T29106]  ? down_read+0x270/0x2e0
[  531.539507][T29106]  ? genl_rcv+0xd/0x40
[  531.539516][T29106]  genl_rcv+0x28/0x40
[  531.539523][T29106]  netlink_unicast+0x75c/0x8e0
[  531.539538][T29106]  netlink_sendmsg+0x813/0xb40
[  531.539552][T29106]  ? __pfx_netlink_sendmsg+0x10/0x10
[  531.539564][T29106]  ? aa_sock_msg_perm+0xf1/0x1b0
[  531.539573][T29106]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  531.539583][T29106]  ____sys_sendmsg+0x972/0x9f0
[  531.539595][T29106]  ? __might_fault+0xaf/0x130
[  531.539606][T29106]  ? __pfx_____sys_sendmsg+0x10/0x10
[  531.539621][T29106]  ? import_iovec+0x73/0xa0
[  531.539631][T29106]  ___sys_sendmsg+0x2a5/0x360
[  531.539639][T29106]  ? __lock_acquire+0x6b5/0x2cf0
[  531.539652][T29106]  ? __pfx____sys_sendmsg+0x10/0x10
[  531.539662][T29106]  ? futex_wake+0x4ac/0x580
[  531.539683][T29106]  ? __fget_files+0x2a/0x420
[  531.539691][T29106]  ? __fget_files+0x3a0/0x420
[  531.539703][T29106]  __x64_sys_sendmsg+0x1bd/0x2a0
[  531.539712][T29106]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  531.539723][T29106]  ? rcu_is_watching+0x15/0xb0
[  531.539734][T29106]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  531.539743][T29106]  do_syscall_64+0x15f/0xf80
[  531.539752][T29106]  ? trace_irq_disable+0x3b/0x140
[  531.539764][T29106]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  531.539772][T29106] RIP: 0033:0x7f97ff79c819
[  531.539781][T29106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  531.539788][T29106] RSP: 002b:00007f980068b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  531.539798][T29106] RAX: ffffffffffffffda RBX: 00007f97ffa15fa0 RCX: 00007f97ff79c819
[  531.539804][T29106] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  531.539809][T29106] RBP: 00007f97ff832c91 R08: 0000000000000000 R09: 0000000000000000
[  531.539813][T29106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  531.539818][T29106] R13: 00007f97ffa16038 R14: 00007f97ffa15fa0 R15: 00007ffec3aca778
[  531.539862][T29106]  </TASK>
[  531.839496][T29126] syz_tun: entered allmulticast mode
[  531.845059][T29126] team0: Port device syz_tun added
[  531.891911][T29130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9181'.
[  532.050222][T29148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9187'.
[  532.106563][T29154] openvswitch: netlink: Missing valid actions attribute.
[  532.119352][T29154] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  532.166590][T29156] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  532.407493][T29160] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  532.412496][T29160] CPU: 0 UID: 0 PID: 29160 Comm: syz.2.9191 Not tainted syzkaller #0 PREEMPT(full) 
[  532.412525][T29160] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  532.412535][T29160] Call Trace:
[  532.412541][T29160]  <TASK>
[  532.412548][T29160]  dump_stack_lvl+0xe8/0x150
[  532.412576][T29160]  sysfs_warn_dup+0x8e/0xa0
[  532.412590][T29160]  sysfs_do_create_link_sd+0xc0/0x110
[  532.412606][T29160]  device_add_class_symlinks+0x1cf/0x240
[  532.412629][T29160]  device_add+0x475/0xbb0
[  532.412651][T29160]  wiphy_register+0x1dc5/0x2dc0
[  532.412678][T29160]  ? __pfx_wiphy_register+0x10/0x10
[  532.412691][T29160]  ? __pfx_netdev_run_todo+0x10/0x10
[  532.412701][T29160]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  532.412718][T29160]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  532.412729][T29160]  ieee80211_register_hw+0x3d82/0x4a70
[  532.412747][T29160]  ? ieee80211_register_hw+0x18e1/0x4a70
[  532.412768][T29160]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  532.412779][T29160]  ? __asan_memset+0x22/0x50
[  532.412789][T29160]  ? __hrtimer_setup+0x1b7/0x260
[  532.412799][T29160]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  532.412810][T29160]  mac80211_hwsim_new_radio+0x3334/0x5ba0
[  532.412833][T29160]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  532.412844][T29160]  ? kstrndup+0xbf/0x160
[  532.412858][T29160]  hwsim_new_radio_nl+0xf6a/0x1c00
[  532.412879][T29160]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  532.412894][T29160]  ? rcu_is_watching+0x15/0xb0
[  532.412903][T29160]  ? trace_kmalloc+0x2a/0xf0
[  532.412916][T29160]  ? __nla_parse+0x40/0x60
[  532.412927][T29160]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  532.412936][T29160]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  532.412948][T29160]  genl_family_rcv_msg_doit+0x22a/0x330
[  532.412960][T29160]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  532.412973][T29160]  ? bpf_lsm_capable+0x9/0x20
[  532.412984][T29160]  ? security_capable+0x7e/0x2c0
[  532.412999][T29160]  genl_rcv_msg+0x61c/0x7a0
[  532.413010][T29160]  ? __pfx_genl_rcv_msg+0x10/0x10
[  532.413018][T29160]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  532.413035][T29160]  netlink_rcv_skb+0x232/0x4b0
[  532.413047][T29160]  ? __pfx_genl_rcv_msg+0x10/0x10
[  532.413056][T29160]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  532.413073][T29160]  ? down_read+0x270/0x2e0
[  532.413081][T29160]  ? genl_rcv+0xd/0x40
[  532.413090][T29160]  genl_rcv+0x28/0x40
[  532.413097][T29160]  netlink_unicast+0x75c/0x8e0
[  532.413114][T29160]  netlink_sendmsg+0x813/0xb40
[  532.413128][T29160]  ? __pfx_netlink_sendmsg+0x10/0x10
[  532.413141][T29160]  ? aa_sock_msg_perm+0xf1/0x1b0
[  532.413149][T29160]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  532.413160][T29160]  ____sys_sendmsg+0x972/0x9f0
[  532.413172][T29160]  ? __might_fault+0xaf/0x130
[  532.413183][T29160]  ? __pfx_____sys_sendmsg+0x10/0x10
[  532.413199][T29160]  ? import_iovec+0x73/0xa0
[  532.413209][T29160]  ___sys_sendmsg+0x2a5/0x360
[  532.413216][T29160]  ? __lock_acquire+0x6b5/0x2cf0
[  532.413229][T29160]  ? __pfx____sys_sendmsg+0x10/0x10
[  532.413239][T29160]  ? futex_wait+0x2a2/0x390
[  532.413311][T29160]  ? __fget_files+0x2a/0x420
[  532.413321][T29160]  ? __fget_files+0x3a0/0x420
[  532.413334][T29160]  __x64_sys_sendmsg+0x1bd/0x2a0
[  532.413346][T29160]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  532.413363][T29160]  ? rcu_is_watching+0x15/0xb0
[  532.413375][T29160]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  532.413384][T29160]  do_syscall_64+0x15f/0xf80
[  532.413395][T29160]  ? trace_irq_disable+0x3b/0x140
[  532.413410][T29160]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  532.413419][T29160] RIP: 0033:0x7f3d5ad9c819
[  532.413429][T29160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  532.413436][T29160] RSP: 002b:00007f3d5bbd4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  532.413446][T29160] RAX: ffffffffffffffda RBX: 00007f3d5b015fa0 RCX: 00007f3d5ad9c819
[  532.413452][T29160] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  532.413457][T29160] RBP: 00007f3d5ae32c91 R08: 0000000000000000 R09: 0000000000000000
[  532.413462][T29160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  532.413467][T29160] R13: 00007f3d5b016038 R14: 00007f3d5b015fa0 R15: 00007ffedf89fe18
[  532.413482][T29160]  </TASK>
[  532.597985][T29162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9192'.
[  535.676510][T29168] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  535.976358][T29203] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9206'.
[  536.073710][T29225] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9214'.
[  536.131808][T29234] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9217'.
[  536.815308][T29285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9233'.
[  536.922668][T29289] netlink: 'syz.1.9234': attribute type 1 has an invalid length.
[  536.925528][T29289] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9234'.
[  536.975157][T29295] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  536.977689][T29295] CPU: 0 UID: 0 PID: 29295 Comm: syz.1.9236 Not tainted syzkaller #0 PREEMPT(full) 
[  536.977724][T29295] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  536.977733][T29295] Call Trace:
[  536.977739][T29295]  <TASK>
[  536.977745][T29295]  dump_stack_lvl+0xe8/0x150
[  536.977776][T29295]  sysfs_warn_dup+0x8e/0xa0
[  536.977792][T29295]  sysfs_do_create_link_sd+0xc0/0x110
[  536.977806][T29295]  device_add_class_symlinks+0x1cf/0x240
[  536.977830][T29295]  device_add+0x475/0xbb0
[  536.977849][T29295]  wiphy_register+0x1dc5/0x2dc0
[  536.977868][T29295]  ? __pfx_wiphy_register+0x10/0x10
[  536.977876][T29295]  ? __pfx_netdev_run_todo+0x10/0x10
[  536.977885][T29295]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  536.977902][T29295]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  536.977913][T29295]  ieee80211_register_hw+0x3d82/0x4a70
[  536.977928][T29295]  ? ieee80211_register_hw+0x18e1/0x4a70
[  536.977952][T29295]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  536.977963][T29295]  ? __asan_memset+0x22/0x50
[  536.977972][T29295]  ? __hrtimer_setup+0x1b7/0x260
[  536.977982][T29295]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  536.977994][T29295]  mac80211_hwsim_new_radio+0x3334/0x5ba0
[  536.978020][T29295]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  536.978031][T29295]  ? kstrndup+0xbf/0x160
[  536.978047][T29295]  hwsim_new_radio_nl+0xf6a/0x1c00
[  536.978068][T29295]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  536.978083][T29295]  ? rcu_is_watching+0x15/0xb0
[  536.978092][T29295]  ? trace_kmalloc+0x2a/0xf0
[  536.978104][T29295]  ? __nla_parse+0x40/0x60
[  536.978115][T29295]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  536.978124][T29295]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  536.978136][T29295]  genl_family_rcv_msg_doit+0x22a/0x330
[  536.978147][T29295]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  536.978160][T29295]  ? bpf_lsm_capable+0x9/0x20
[  536.978171][T29295]  ? security_capable+0x7e/0x2c0
[  536.978185][T29295]  genl_rcv_msg+0x61c/0x7a0
[  536.978198][T29295]  ? __pfx_genl_rcv_msg+0x10/0x10
[  536.978207][T29295]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  536.978248][T29295]  netlink_rcv_skb+0x232/0x4b0
[  536.978260][T29295]  ? __pfx_genl_rcv_msg+0x10/0x10
[  536.978269][T29295]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  536.978286][T29295]  ? down_read+0x270/0x2e0
[  536.978297][T29295]  ? genl_rcv+0xd/0x40
[  536.978306][T29295]  genl_rcv+0x28/0x40
[  536.978314][T29295]  netlink_unicast+0x75c/0x8e0
[  536.978329][T29295]  netlink_sendmsg+0x813/0xb40
[  536.978344][T29295]  ? __pfx_netlink_sendmsg+0x10/0x10
[  536.978356][T29295]  ? aa_sock_msg_perm+0xf1/0x1b0
[  536.978367][T29295]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  536.978380][T29295]  ____sys_sendmsg+0x972/0x9f0
[  536.978392][T29295]  ? __might_fault+0xaf/0x130
[  536.978403][T29295]  ? __pfx_____sys_sendmsg+0x10/0x10
[  536.978418][T29295]  ? import_iovec+0x73/0xa0
[  536.978429][T29295]  ___sys_sendmsg+0x2a5/0x360
[  536.978435][T29295]  ? __lock_acquire+0x6b5/0x2cf0
[  536.978449][T29295]  ? __pfx____sys_sendmsg+0x10/0x10
[  536.978459][T29295]  ? futex_wake+0x4ac/0x580
[  536.978479][T29295]  ? __fget_files+0x2a/0x420
[  536.978487][T29295]  ? __fget_files+0x3a0/0x420
[  536.978499][T29295]  __x64_sys_sendmsg+0x1bd/0x2a0
[  536.978507][T29295]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  536.978518][T29295]  ? rcu_is_watching+0x15/0xb0
[  536.978529][T29295]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  536.978537][T29295]  do_syscall_64+0x15f/0xf80
[  536.978547][T29295]  ? trace_irq_disable+0x3b/0x140
[  536.978559][T29295]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  536.978567][T29295] RIP: 0033:0x7f97ff79c819
[  536.978576][T29295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  536.978582][T29295] RSP: 002b:00007f980068b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  536.978592][T29295] RAX: ffffffffffffffda RBX: 00007f97ffa15fa0 RCX: 00007f97ff79c819
[  536.978598][T29295] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  536.978602][T29295] RBP: 00007f97ff832c91 R08: 0000000000000000 R09: 0000000000000000
[  536.978607][T29295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  536.978611][T29295] R13: 00007f97ffa16038 R14: 00007f97ffa15fa0 R15: 00007ffec3aca778
[  536.978624][T29295]  </TASK>
[  537.210886][T29303] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  537.325866][T29313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9243'.
[  537.347775][T29315] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  537.364962][T29317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9245'.
[  537.421583][T29328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9246'.
[  537.444767][T29333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9248'.
[  538.165506][T29341] netlink: 220 bytes leftover after parsing attributes in process `syz.1.9250'.
[  538.168663][T29341] tc_dump_action: action bad kind
[  538.170960][T29341] batadv_slave_0: entered promiscuous mode
[  538.202786][T29343] batadv_slave_0: left promiscuous mode
[  538.263608][  T620] block nbd1: Possible stuck request ffff88810aff8000: control (read@0,1024B). Runtime 300 seconds
[  538.268146][  T620] block nbd1: Possible stuck request ffff88810aff8200: control (read@1024,1024B). Runtime 300 seconds
[  538.273193][  T620] block nbd1: Possible stuck request ffff88810aff8400: control (read@2048,1024B). Runtime 300 seconds
[  538.277180][  T620] block nbd1: Possible stuck request ffff88810aff8600: control (read@3072,1024B). Runtime 300 seconds
[  538.363375][T29356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9255'.
[  538.489229][T29363] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  538.500525][T29363] CPU: 0 UID: 0 PID: 29363 Comm: syz.2.9258 Not tainted syzkaller #0 PREEMPT(full) 
[  538.500546][T29363] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  538.500554][T29363] Call Trace:
[  538.500559][T29363]  <TASK>
[  538.500565][T29363]  dump_stack_lvl+0xe8/0x150
[  538.500593][T29363]  sysfs_warn_dup+0x8e/0xa0
[  538.500612][T29363]  sysfs_do_create_link_sd+0xc0/0x110
[  538.500629][T29363]  device_add_class_symlinks+0x1cf/0x240
[  538.500653][T29363]  device_add+0x475/0xbb0
[  538.500674][T29363]  wiphy_register+0x1dc5/0x2dc0
[  538.500701][T29363]  ? __pfx_wiphy_register+0x10/0x10
[  538.500716][T29363]  ? __pfx_netdev_run_todo+0x10/0x10
[  538.500732][T29363]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  538.500756][T29363]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  538.500775][T29363]  ieee80211_register_hw+0x3d82/0x4a70
[  538.500800][T29363]  ? ieee80211_register_hw+0x18e1/0x4a70
[  538.500834][T29363]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  538.500852][T29363]  ? __asan_memset+0x22/0x50
[  538.500866][T29363]  ? __hrtimer_setup+0x1b7/0x260
[  538.500880][T29363]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  538.500899][T29363]  mac80211_hwsim_new_radio+0x3334/0x5ba0
[  538.500973][T29363]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  538.500992][T29363]  ? kstrndup+0xbf/0x160
[  538.501019][T29363]  hwsim_new_radio_nl+0xf6a/0x1c00
[  538.501056][T29363]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  538.501082][T29363]  ? rcu_is_watching+0x15/0xb0
[  538.501097][T29363]  ? trace_kmalloc+0x2a/0xf0
[  538.501119][T29363]  ? __nla_parse+0x40/0x60
[  538.501139][T29363]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  538.501154][T29363]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  538.501173][T29363]  genl_family_rcv_msg_doit+0x22a/0x330
[  538.501191][T29363]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  538.501244][T29363]  ? bpf_lsm_capable+0x9/0x20
[  538.501264][T29363]  ? security_capable+0x7e/0x2c0
[  538.501292][T29363]  genl_rcv_msg+0x61c/0x7a0
[  538.501312][T29363]  ? __pfx_genl_rcv_msg+0x10/0x10
[  538.501327][T29363]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  538.501359][T29363]  netlink_rcv_skb+0x232/0x4b0
[  538.501380][T29363]  ? __pfx_genl_rcv_msg+0x10/0x10
[  538.501396][T29363]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  538.501427][T29363]  ? down_read+0x270/0x2e0
[  538.501444][T29363]  ? genl_rcv+0xd/0x40
[  538.501459][T29363]  genl_rcv+0x28/0x40
[  538.501471][T29363]  netlink_unicast+0x75c/0x8e0
[  538.501496][T29363]  netlink_sendmsg+0x813/0xb40
[  538.501522][T29363]  ? __pfx_netlink_sendmsg+0x10/0x10
[  538.501543][T29363]  ? aa_sock_msg_perm+0xf1/0x1b0
[  538.501559][T29363]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  538.501577][T29363]  ____sys_sendmsg+0x972/0x9f0
[  538.501599][T29363]  ? __might_fault+0xaf/0x130
[  538.501619][T29363]  ? __pfx_____sys_sendmsg+0x10/0x10
[  538.501646][T29363]  ? import_iovec+0x73/0xa0
[  538.501665][T29363]  ___sys_sendmsg+0x2a5/0x360
[  538.501677][T29363]  ? __lock_acquire+0x6b5/0x2cf0
[  538.501724][T29363]  ? __pfx____sys_sendmsg+0x10/0x10
[  538.501743][T29363]  ? futex_wait+0x2a2/0x390
[  538.501782][T29363]  ? __fget_files+0x2a/0x420
[  538.501796][T29363]  ? __fget_files+0x3a0/0x420
[  538.501818][T29363]  __x64_sys_sendmsg+0x1bd/0x2a0
[  538.501834][T29363]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  538.501856][T29363]  ? rcu_is_watching+0x15/0xb0
[  538.501878][T29363]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  538.501894][T29363]  do_syscall_64+0x15f/0xf80
[  538.501932][T29363]  ? trace_irq_disable+0x3b/0x140
[  538.501956][T29363]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  538.501968][T29363] RIP: 0033:0x7f3d5ad9c819
[  538.501983][T29363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  538.501995][T29363] RSP: 002b:00007f3d5bbd4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  538.502011][T29363] RAX: ffffffffffffffda RBX: 00007f3d5b015fa0 RCX: 00007f3d5ad9c819
[  538.502022][T29363] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  538.502030][T29363] RBP: 00007f3d5ae32c91 R08: 0000000000000000 R09: 0000000000000000
[  538.502038][T29363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  538.502046][T29363] R13: 00007f3d5b016038 R14: 00007f3d5b015fa0 R15: 00007ffedf89fe18
[  538.502069][T29363]  </TASK>
[  538.737580][T29373] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9260'.
[  538.819007][T29385] netlink: 220 bytes leftover after parsing attributes in process `syz.2.9266'.
[  538.823904][T29385] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9266'.
[  538.842808][T29386] xt_hashlimit: size too large, truncated to 1048576
[  539.123079][T29417] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9275'.
[  539.135056][T29417] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  542.344472][T29446] bond0: (slave wlan1): Releasing backup interface
[  542.347739][T29446] mac80211_hwsim hwsim5 wlan1 (unregistering): left promiscuous mode
[  542.360475][T29449] __nla_validate_parse: 7 callbacks suppressed
[  542.360479][T29450] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9288'.
[  542.360493][T29449] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9288'.
[  542.378864][T29450] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9288'.
[  542.382791][T29450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9288'.
[  542.387215][T29449] netlink: 'syz.0.9288': attribute type 2 has an invalid length.
[  542.394655][T29449] netlink: 'syz.0.9288': attribute type 2 has an invalid length.
[  542.405805][T29449] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9288'.
[  542.690488][T29477] syzkaller1: entered promiscuous mode
[  542.695276][T29477] syzkaller1: entered allmulticast mode
[  542.704430][T29477] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  542.796376][T29498] --map-set only usable from mangle table
[  543.061707][T29517] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9312'.
[  543.065094][T29517] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  543.069042][T29517] netlink: 'syz.0.9312': attribute type 1 has an invalid length.
[  543.073546][T29517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9312'.
[  543.091751][T29517] netlink: 'syz.0.9312': attribute type 1 has an invalid length.
[  543.099513][T29517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9312'.
[  543.099551][T29518] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  543.106160][T29517] netlink: 'syz.0.9312': attribute type 1 has an invalid length.
[  543.130086][T29517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9312'.
[  543.134122][T29517] netlink: 'syz.0.9312': attribute type 1 has an invalid length.
[  543.137430][T29517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9312'.
[  543.142166][T29517] netlink: 'syz.0.9312': attribute type 1 has an invalid length.
[  543.296829][T29527] netlink: del zone limit has 8 unknown bytes
[  543.361399][T29533] openvswitch: netlink: Missing valid actions attribute.
[  543.364736][T29533] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  543.502828][   T12] bond0: (slave bond_slave_0): interface is now down
[  543.508929][   T12] bond0: (slave bond_slave_1): interface is now down
[  543.512001][T29539] 8021q: adding VLAN 0 to HW filter on device bond0
[  543.519388][T29539] 8021q: adding VLAN 0 to HW filter on device team0
[  543.523760][T29539] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  543.528556][ T5291] lo speed is unknown, defaulting to 1000
[  543.531325][ T5291] syz2: Port: 1 Link ACTIVE
[  543.540645][T25642] bond0: (slave bond_slave_0): interface is now down
[  543.545198][T25642] bond0: (slave bond_slave_1): interface is now down
[  543.554782][T25642] bond0: now running without any active interface!
[  543.705923][ T7933] lo speed is unknown, defaulting to 1000
[  543.709003][ T7933] syz2: Port: 1 Link DOWN
[  543.932292][T29559] 8021q: adding VLAN 0 to HW filter on device bond0
[  543.937333][T29559] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  544.073814][T29570] netlink: 'syz.2.9332': attribute type 10 has an invalid length.
[  544.076837][T29570] netlink: 'syz.2.9332': attribute type 10 has an invalid length.
[  544.080996][T29570] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  544.845829][T29574] syzkaller1: entered promiscuous mode
[  544.847645][T29574] syzkaller1: entered allmulticast mode
[  545.076301][T29585] netlink: 'syz.1.9337': attribute type 2 has an invalid length.
[  545.224316][T29611] xt_hashlimit: size too large, truncated to 1048576
[  545.418475][T29628] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  545.637175][T29647] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  545.705498][T29657] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  545.781872][T29664] dummy0: mtu less than device minimum
[  548.526739][T29642] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  548.761087][T29692] syzkaller1: entered promiscuous mode
[  548.763694][T29692] syzkaller1: entered allmulticast mode
[  549.001428][T29713] __nla_validate_parse: 12 callbacks suppressed
[  549.001441][T29713] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9374'.
[  549.006950][T29713] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9374'.
[  549.011021][T29713] validate_nla: 1 callbacks suppressed
[  549.011032][T29713] netlink: 'syz.1.9374': attribute type 1 has an invalid length.
[  549.164321][T29719] netlink: 248 bytes leftover after parsing attributes in process `syz.1.9375'.
[  549.167577][T29719] netlink: 248 bytes leftover after parsing attributes in process `syz.1.9375'.
[  549.195376][T29724] xt_hashlimit: size too large, truncated to 1048576
[  549.244151][T29728] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9378'.
[  549.336346][T29736] openvswitch: netlink: IPv4 tun info is not correct
[  549.755187][T29765] netlink: 'syz.0.9393': attribute type 9 has an invalid length.
[  549.789966][T29771] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9395'.
[  549.864154][T29775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9396'.
[  549.874337][T29775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9396'.
[  549.933195][T29785] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9402'.
[  550.093223][T29808] dummy0: mtu less than device minimum
[  550.095217][T29808] dummy0: mtu less than device minimum
[  550.097035][T29808] dummy0: mtu less than device minimum
[  550.098790][T29808] dummy0: mtu less than device minimum
[  550.100828][T29808] dummy0: mtu less than device minimum
[  550.103225][T29808] dummy0: mtu less than device minimum
[  550.106950][T29808] dummy0: mtu less than device minimum
[  550.110590][T29808] dummy0: mtu less than device minimum
[  550.113504][T29808] dummy0: mtu less than device minimum
[  550.304519][T29820] ip6tnl5: entered promiscuous mode
[  550.419367][T29834] syzkaller0: entered promiscuous mode
[  550.431155][T29834] syzkaller0: entered allmulticast mode
[  550.499407][T29838] netlink: 'syz.0.9417': attribute type 58 has an invalid length.
[  550.502558][T29838] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9417'.
[  550.957592][T29871] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  551.822673][T29920] netlink: 'syz.0.9440': attribute type 10 has an invalid length.
[  551.822673][T29921] netlink: 'syz.0.9440': attribute type 10 has an invalid length.
[  552.365463][T29944] netlink: 'syz.0.9446': attribute type 2 has an invalid length.
[  552.375882][T29944] netlink: 'syz.0.9446': attribute type 2 has an invalid length.
[  552.473901][T29947] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  553.296373][T29970] batadv_slave_1: entered promiscuous mode
[  553.316532][T29973] batadv_slave_1: left promiscuous mode
[  553.359708][T29987] netlink: 'syz.0.9460': attribute type 3 has an invalid length.
[  553.950865][T30014] syzkaller0: entered promiscuous mode
[  553.953513][T30014] syzkaller0: entered allmulticast mode
[  554.480018][T30022] xt_hashlimit: size too large, truncated to 1048576
[  554.589135][T30028] __nla_validate_parse: 10 callbacks suppressed
[  554.589155][T30028] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9472'.
[  554.859464][T30044] sctp: [Deprecated]: syz.0.9476 (pid 30044) Use of int in max_burst socket option deprecated.
[  554.859464][T30044] Use struct sctp_assoc_value instead
[  555.107005][T30052] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9479'.
[  555.114924][T30052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9479'.
[  555.347837][T30063] net_ratelimit: 61 callbacks suppressed
[  555.347857][T30063] openvswitch: netlink: Missing valid actions attribute.
[  555.354253][T30063] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  555.575762][T30086] openvswitch: netlink: Missing valid actions attribute.
[  555.578412][T30086] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  555.681435][T30094] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9494'.
[  555.684766][T30094] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9494'.
[  555.825620][T30109] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9501'.
[  555.895289][T30118] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9503'.
[  555.898573][T30118] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9503'.
[  555.937215][T30122] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9505'.
[  555.950685][T30122] netlink: 92 bytes leftover after parsing attributes in process `syz.2.9505'.
[  555.994447][T30128] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  556.024855][T30128] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  556.089779][T30130] vlan0: entered allmulticast mode
[  556.091723][T30130] batadv_slave_1: entered allmulticast mode
[  556.093831][T30130] bridge0: port 4(vlan0) entered blocking state
[  556.095943][T30130] bridge0: port 4(vlan0) entered disabled state
[  556.099102][T30130] vlan0: entered promiscuous mode
[  556.101127][T30130] batadv_slave_1: entered promiscuous mode
[  556.347830][T30145] openvswitch: netlink: Missing valid actions attribute.
[  556.351927][T30145] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  556.499837][T30151] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  556.851707][T30161] sctp: [Deprecated]: syz.0.9518 (pid 30161) Use of struct sctp_assoc_value in delayed_ack socket option.
[  556.851707][T30161] Use struct sctp_sack_info instead
[  557.254181][T30197] netlink: 'syz.1.9526': attribute type 1 has an invalid length.
[  558.057663][T30203] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  558.368748][T30220] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  559.160499][T30223] openvswitch: netlink: IP tunnel dst address not specified
[  559.214955][T30225] netlink: 'syz.2.9537': attribute type 13 has an invalid length.
[  559.218279][T30225] netlink: 'syz.2.9537': attribute type 17 has an invalid length.
[  559.271993][T30225] 8021q: adding VLAN 0 to HW filter on device bond0
[  559.276703][T30225] 8021q: adding VLAN 0 to HW filter on device team0
[  559.283195][T30225] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  559.287701][T30229] netlink: 'syz.1.9538': attribute type 1 has an invalid length.
[  559.289256][ T5890] lo speed is unknown, defaulting to 1000
[  559.307172][ T5890] syz2: Port: 1 Link ACTIVE
[  560.106554][T30238] syzkaller0: entered promiscuous mode
[  560.108618][T30238] syzkaller0: entered allmulticast mode
[  560.136887][T30238] dvmrp6: left allmulticast mode
[  560.376536][T30259] __nla_validate_parse: 9 callbacks suppressed
[  560.376554][T30259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9546'.
[  560.435341][T30262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9547'.
[  561.318142][T30308] netlink: 34 bytes leftover after parsing attributes in process `syz.0.9559'.
[  561.328809][T30308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9559'.
[  561.332239][T30308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9559'.
[  561.375888][T30310] openvswitch: netlink: Missing valid actions attribute.
[  561.381636][T30310] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  561.595920][T30334] netlink: 'syz.1.9567': attribute type 1 has an invalid length.
[  561.598493][T30334] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9567'.
[  561.903095][T30360] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  561.948306][T30362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9576'.
[  561.964304][T30364] netlink: 'syz.2.9575': attribute type 1 has an invalid length.
[  561.967425][T30364] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9575'.
[  562.254149][T30384] netlink: 'syz.2.9581': attribute type 1 has an invalid length.
[  562.369357][T30388] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  563.024261][T30424] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9591'.
[  563.046662][T30424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9591'.
[  563.254552][T30429] netlink: 'syz.0.9592': attribute type 1 has an invalid length.
[  563.537246][T30442] netlink: 'syz.2.9596': attribute type 89 has an invalid length.
[  563.795135][T30448] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  563.976400][T30427] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  563.979679][T30427] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  563.990320][T30427] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  563.993374][T30427] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  564.120823][T30451] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  564.370119][T30463] x_tables: duplicate underflow at hook 2
[  564.426432][T30468] openvswitch: netlink: IPv4 tunnel dst address is zero
[  564.511307][T30472] netlink: Unknown conntrack attr (0)
[  564.706778][T30471] lo speed is unknown, defaulting to 1000
[  564.956774][T30504] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  565.004850][T30511] netlink: 'syz.1.9616': attribute type 1 has an invalid length.
[  565.352310][T30543] xt_hashlimit: size too large, truncated to 1048576
[  565.396795][T30546] __nla_validate_parse: 10 callbacks suppressed
[  565.396807][T30546] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9627'.
[  565.427644][T30548] openvswitch: netlink: Missing valid actions attribute.
[  565.434637][T30548] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  565.524450][T30554] syzkaller1: entered promiscuous mode
[  565.526317][T30554] syzkaller1: entered allmulticast mode
[  565.604891][T30563] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9633'.
[  565.622357][T30563] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9633'.
[  565.625881][T30563] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9633'.
[  565.633502][T30563] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9633'.
[  565.638588][T30563] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9633'.
[  565.646505][T30563] netlink: 'syz.1.9633': attribute type 2 has an invalid length.
[  565.664688][T30563] netlink: 'syz.1.9633': attribute type 2 has an invalid length.
[  565.671406][T30563] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9633'.
[  565.723253][T30566] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  565.730069][T30566] CPU: 1 UID: 0 PID: 30566 Comm: syz.1.9634 Not tainted syzkaller #0 PREEMPT(full) 
[  565.730085][T30566] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  565.730091][T30566] Call Trace:
[  565.730097][T30566]  <TASK>
[  565.730104][T30566]  dump_stack_lvl+0xe8/0x150
[  565.730131][T30566]  sysfs_warn_dup+0x8e/0xa0
[  565.730141][T30566]  sysfs_do_create_link_sd+0xc0/0x110
[  565.730153][T30566]  device_add_class_symlinks+0x1cf/0x240
[  565.730169][T30566]  device_add+0x475/0xbb0
[  565.730182][T30566]  wiphy_register+0x1dc5/0x2dc0
[  565.730201][T30566]  ? __pfx_wiphy_register+0x10/0x10
[  565.730211][T30566]  ? __pfx_netdev_run_todo+0x10/0x10
[  565.730220][T30566]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  565.730234][T30566]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  565.730244][T30566]  ieee80211_register_hw+0x3d82/0x4a70
[  565.730260][T30566]  ? ieee80211_register_hw+0x18e1/0x4a70
[  565.730280][T30566]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  565.730296][T30566]  ? __asan_memset+0x22/0x50
[  565.730309][T30566]  ? __hrtimer_setup+0x1b7/0x260
[  565.730323][T30566]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  565.730342][T30566]  mac80211_hwsim_new_radio+0x3334/0x5ba0
[  565.730381][T30566]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  565.730400][T30566]  ? kstrndup+0xbf/0x160
[  565.730418][T30566]  hwsim_new_radio_nl+0xf6a/0x1c00
[  565.730439][T30566]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  565.730454][T30566]  ? rcu_is_watching+0x15/0xb0
[  565.730462][T30566]  ? trace_kmalloc+0x2a/0xf0
[  565.730474][T30566]  ? __nla_parse+0x40/0x60
[  565.730485][T30566]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  565.730494][T30566]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  565.730506][T30566]  genl_family_rcv_msg_doit+0x22a/0x330
[  565.730517][T30566]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  565.730530][T30566]  ? bpf_lsm_capable+0x9/0x20
[  565.730540][T30566]  ? security_capable+0x7e/0x2c0
[  565.730555][T30566]  genl_rcv_msg+0x61c/0x7a0
[  565.730566][T30566]  ? __pfx_genl_rcv_msg+0x10/0x10
[  565.730573][T30566]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  565.730590][T30566]  netlink_rcv_skb+0x232/0x4b0
[  565.730602][T30566]  ? __pfx_genl_rcv_msg+0x10/0x10
[  565.730611][T30566]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  565.730628][T30566]  ? down_read+0x270/0x2e0
[  565.730637][T30566]  ? genl_rcv+0xd/0x40
[  565.730650][T30566]  genl_rcv+0x28/0x40
[  565.730661][T30566]  netlink_unicast+0x75c/0x8e0
[  565.730682][T30566]  netlink_sendmsg+0x813/0xb40
[  565.730707][T30566]  ? __pfx_netlink_sendmsg+0x10/0x10
[  565.730726][T30566]  ? aa_sock_msg_perm+0xf1/0x1b0
[  565.730739][T30566]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  565.730757][T30566]  ____sys_sendmsg+0x972/0x9f0
[  565.730777][T30566]  ? __might_fault+0xaf/0x130
[  565.730795][T30566]  ? __pfx_____sys_sendmsg+0x10/0x10
[  565.730821][T30566]  ? import_iovec+0x73/0xa0
[  565.730838][T30566]  ___sys_sendmsg+0x2a5/0x360
[  565.730849][T30566]  ? __lock_acquire+0x6b5/0x2cf0
[  565.730871][T30566]  ? __pfx____sys_sendmsg+0x10/0x10
[  565.730887][T30566]  ? futex_wait+0x2a2/0x390
[  565.730921][T30566]  ? __fget_files+0x2a/0x420
[  565.730934][T30566]  ? __fget_files+0x3a0/0x420
[  565.730954][T30566]  __x64_sys_sendmsg+0x1bd/0x2a0
[  565.730967][T30566]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  565.730985][T30566]  ? rcu_is_watching+0x15/0xb0
[  565.731040][T30566]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  565.731057][T30566]  do_syscall_64+0x15f/0xf80
[  565.731074][T30566]  ? trace_irq_disable+0x3b/0x140
[  565.731096][T30566]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  565.731109][T30566] RIP: 0033:0x7f97ff79c819
[  565.731122][T30566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  565.731140][T30566] RSP: 002b:00007f980068b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  565.731156][T30566] RAX: ffffffffffffffda RBX: 00007f97ffa15fa0 RCX: 00007f97ff79c819
[  565.731165][T30566] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  565.731174][T30566] RBP: 00007f97ff832c91 R08: 0000000000000000 R09: 0000000000000000
[  565.731182][T30566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  565.731190][T30566] R13: 00007f97ffa16038 R14: 00007f97ffa15fa0 R15: 00007ffec3aca778
[  565.731213][T30566]  </TASK>
[  566.017578][T30582] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9639'.
[  566.044546][T30584] openvswitch: netlink: Missing valid actions attribute.
[  566.046838][T30584] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  566.156980][T30588] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9641'.
[  566.215107][   T10] lo speed is unknown, defaulting to 1000
[  566.217126][   T10] syz2: Port: 1 Link DOWN
[  566.279393][T30595] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9643'.
[  567.093812][T30614] netlink: 'syz.1.9649': attribute type 1 has an invalid length.
[  568.279146][T30645] xt_hashlimit: size too large, truncated to 1048576
[  568.343776][T30650] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20003
[  568.372281][  T620] block nbd1: Possible stuck request ffff88810aff8000: control (read@0,1024B). Runtime 330 seconds
[  568.376540][  T620] block nbd1: Possible stuck request ffff88810aff8200: control (read@1024,1024B). Runtime 330 seconds
[  568.381353][  T620] block nbd1: Possible stuck request ffff88810aff8400: control (read@2048,1024B). Runtime 330 seconds
[  568.385840][  T620] block nbd1: Possible stuck request ffff88810aff8600: control (read@3072,1024B). Runtime 330 seconds
[  568.588226][T30676] netlink: 'syz.0.9670': attribute type 12 has an invalid length.
[  568.599678][T30676] syzkaller0: entered promiscuous mode
[  568.601740][T30676] syzkaller0: entered allmulticast mode
[  568.768264][T30695] vlan0 (unregistering): left promiscuous mode
[  568.770551][T30695] batadv_slave_1: left promiscuous mode
[  568.772530][T30695] bridge0: port 4(vlan0) entered disabled state
[  569.038549][T30723] netlink: 'syz.0.9684': attribute type 3 has an invalid length.
[  569.620172][   T34] INFO: task udevd:14794 blocked in I/O wait for more than 143 seconds.
[  569.624811][   T34]       Not tainted syzkaller #0
[  569.627675][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  569.632221][   T34] task:udevd           state:D stack:22424 pid:14794 tgid:14794 ppid:5273   task_flags:0x400140 flags:0x00080002
[  569.636999][   T34] Call Trace:
[  569.638397][   T34]  <TASK>
[  569.639630][   T34]  __schedule+0x17b4/0x5680
[  569.642090][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  569.644684][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  569.646890][   T34]  ? __pfx___schedule+0x10/0x10
[  569.649078][   T34]  ? schedule+0x90/0x360
[  569.652205][   T34]  schedule+0x164/0x360
[  569.654351][   T34]  io_schedule+0x7f/0xd0
[  569.656225][   T34]  folio_wait_bit_common+0x6d8/0xbc0
[  569.658510][   T34]  ? filemap_get_entry+0xcd/0x3f0
[  569.661757][   T34]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  569.664317][   T34]  ? filemap_read_folio+0x23e/0x3b0
[  569.666561][   T34]  ? __pfx_wake_page_function+0x10/0x10
[  569.668948][   T34]  ? __filemap_get_folio_mpol+0x7a9/0xb00
[  569.672562][   T34]  do_read_cache_folio+0x1ad/0x590
[  569.674505][   T34]  ? __pfx_blkdev_read_folio+0x10/0x10
[  569.676504][   T34]  read_part_sector+0xb6/0x2b0
[  569.678307][   T34]  adfspart_check_POWERTEC+0x9a/0x7a0
[  569.680713][   T34]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  569.682964][   T34]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  569.685185][   T34]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  569.687386][   T34]  bdev_disk_changed+0x817/0x1770
[  569.689073][   T34]  ? __pfx_bdev_disk_changed+0x10/0x10
[  569.691723][   T34]  blkdev_get_whole+0x380/0x510
[  569.693510][   T34]  bdev_open+0x31e/0xd30
[  569.695240][   T34]  blkdev_open+0x470/0x610
[  569.696807][   T34]  ? __pfx_blkdev_open+0x10/0x10
[  569.698791][   T34]  do_dentry_open+0x785/0x14e0
[  569.701185][   T34]  vfs_open+0x3b/0x340
[  569.702672][   T34]  ? path_openat+0x2df0/0x3860
[  569.704498][   T34]  path_openat+0x2e08/0x3860
[  569.706158][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[  569.708029][   T34]  ? stack_depot_save_flags+0x33/0x810
[  569.710463][   T34]  ? __pfx_path_openat+0x10/0x10
[  569.712265][   T34]  ? __x64_sys_openat+0x138/0x170
[  569.714224][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  569.716166][   T34]  do_file_open+0x23e/0x4a0
[  569.717784][   T34]  ? __pfx_do_file_open+0x10/0x10
[  569.719552][   T34]  ? _raw_spin_unlock+0x28/0x50
[  569.721757][   T34]  ? alloc_fd+0x64b/0x6c0
[  569.723250][   T34]  do_sys_openat2+0x113/0x200
[  569.724788][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  569.726602][   T34]  ? exc_page_fault+0x6a/0xc0
[  569.728157][   T34]  ? do_user_addr_fault+0xc6f/0x1340
[  569.730670][   T34]  __x64_sys_openat+0x138/0x170
[  569.732595][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.734623][   T34]  do_syscall_64+0x15f/0xf80
[  569.736148][   T34]  ? trace_irq_disable+0x3b/0x140
[  569.737964][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.740802][   T34] RIP: 0033:0x7fef79d169a4
[  569.742720][   T34] RSP: 002b:00007ffe659894b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  569.746050][   T34] RAX: ffffffffffffffda RBX: 0000557c17f3a330 RCX: 00007fef79d169a4
[  569.749517][   T34] RDX: 00000000000a0800 RSI: 0000557c17f174c0 RDI: 00000000ffffff9c
[  569.753474][   T34] RBP: 0000557c17f174c0 R08: 0000000000000001 R09: 3fffffffffffffff
[  569.756766][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800
[  569.760229][   T34] R13: 0000557c17f27aa0 R14: 0000000000000001 R15: 0000557c17f16910
[  569.763813][   T34]  </TASK>
[  569.765302][   T34] 
[  569.765302][   T34] Showing all locks held in the system:
[  569.768563][   T34] 1 lock held by khungtaskd/34:
[  569.770858][   T34]  #0: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  569.774648][   T34] 2 locks held by getty/5651:
[  569.776228][   T34]  #0: ffff88816bb1a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  569.779721][   T34]  #1: ffffc9000346b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0
[  569.784594][   T34] 1 lock held by udevd/14794:
[  569.786652][   T34]  #0: ffff88810af8b350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  569.790777][   T34] 1 lock held by syz.1.9657/30636:
[  569.792905][   T34]  #0: ffff8881093b5060 (&pipe->mutex){+.+.}-{4:4}, at: pipe_release+0x48/0x330
[  569.796549][   T34] 1 lock held by syz.1.9657/30637:
[  569.798636][   T34]  #0: ffff8881093b5060 (&pipe->mutex){+.+.}-{4:4}, at: splice_file_to_pipe+0x40/0x6b0
[  569.803014][   T34] 
[  569.803958][   T34] =============================================
[  569.803958][   T34] 
[  569.807426][   T34] NMI backtrace for cpu 0
[  569.807439][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  569.807453][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  569.807461][   T34] Call Trace:
[  569.807470][   T34]  <TASK>
[  569.807477][   T34]  dump_stack_lvl+0xe8/0x150
[  569.807504][   T34]  nmi_cpu_backtrace+0x274/0x2d0
[  569.807525][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  569.807545][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  569.807564][   T34]  sys_info+0x135/0x170
[  569.807580][   T34]  watchdog+0xfd3/0x1030
[  569.807601][   T34]  ? watchdog+0x1c9/0x1030
[  569.807620][   T34]  kthread+0x388/0x470
[  569.807636][   T34]  ? __pfx_watchdog+0x10/0x10
[  569.807650][   T34]  ? __pfx_kthread+0x10/0x10
[  569.807664][   T34]  ret_from_fork+0x514/0xb70
[  569.807685][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  569.807710][   T34]  ? __switch_to+0xc79/0x1410
[  569.807728][   T34]  ? __pfx_kthread+0x10/0x10
[  569.807743][   T34]  ret_from_fork_asm+0x1a/0x30
[  569.807766][   T34]  </TASK>
[  569.807771][   T34] Sending NMI from CPU 0 to CPUs 1:
[  569.852490][    C1] NMI backtrace for cpu 1
[  569.852503][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  569.852511][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  569.852516][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  569.852532][    C1] Code: 3b 71 02 e9 53 f4 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 13 01 11 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  569.852538][    C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000206
[  569.852547][    C1] RAX: 000000000031c6f9 RBX: ffffffff819aae9a RCX: 0000000080000001
[  569.852552][    C1] RDX: 0000000000000001 RSI: ffffffff8dfd6ff6 RDI: ffffffff8c289ce0
[  569.852573][    C1] RBP: ffffc90000197f10 R08: ffff88823c6339db R09: 1ffff110478c673b
[  569.852579][    C1] R10: dffffc0000000000 R11: ffffed10478c673c R12: 0000000000000001
[  569.852584][    C1] R13: 1ffff1102c09e000 R14: 0000000000000001 R15: 1ffff1102c09e000
[  569.852589][    C1] FS:  0000000000000000(0000) GS:ffff8882a9217000(0000) knlGS:0000000000000000
[  569.852594][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  569.852598][    C1] CR2: 00007f3d5ade9f00 CR3: 00000001152ee000 CR4: 00000000000006f0
[  569.852627][    C1] Call Trace:
[  569.852633][    C1]  <TASK>
[  569.852636][    C1]  default_idle+0x9/0x20
[  569.852647][    C1]  default_idle_call+0x72/0xb0
[  569.852658][    C1]  do_idle+0x36a/0x5f0
[  569.852668][    C1]  ? __pfx_do_idle+0x10/0x10
[  569.852676][    C1]  cpu_startup_entry+0x43/0x60
[  569.852682][    C1]  start_secondary+0x101/0x110
[  569.852693][    C1]  common_startup_64+0x13e/0x147
[  569.852705][    C1]  </TASK>
[  569.912476][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  569.915203][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  569.918651][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  569.922552][   T34] Call Trace:
[  569.923954][   T34]  <TASK>
[  569.925216][   T34]  vpanic+0x56c/0xa60
[  569.926848][   T34]  ? __pfx___schedule+0x10/0x10
[  569.928790][   T34]  ? __pfx_vpanic+0x10/0x10
[  569.930611][   T34]  ? nmi_trigger_cpumask_backtrace+0x1f4/0x300
[  569.932872][   T34]  panic+0xc5/0xd0
[  569.934060][   T34]  ? __pfx_panic+0x10/0x10
[  569.935461][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  569.937182][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  569.939129][   T34]  watchdog+0x102c/0x1030
[  569.940488][   T34]  ? watchdog+0x1c9/0x1030
[  569.941929][   T34]  kthread+0x388/0x470
[  569.943223][   T34]  ? __pfx_watchdog+0x10/0x10
[  569.944685][   T34]  ? __pfx_kthread+0x10/0x10
[  569.946145][   T34]  ret_from_fork+0x514/0xb70
[  569.947643][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  569.949635][   T34]  ? __switch_to+0xc79/0x1410
[  569.951469][   T34]  ? __pfx_kthread+0x10/0x10
[  569.953269][   T34]  ret_from_fork_asm+0x1a/0x30
[  569.955113][   T34]  </TASK>
[  569.957033][   T34] Kernel Offset: disabled
[  569.958680][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:45:47  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000aa7810
R8 =ffff888109bd8237 R9 =1ffff1102137b046 R10=dffffc0000000000 R11=ffffffff85445d70
R12=dffffc0000000000 R13=ffffffff9a4ff9bb R14=ffffffff9a818700 R15=0000000000000000
RIP=ffffffff85445dec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88818dc17000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000559b5ce48000 CR3=0000000171724000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffff88823c623e40 RCX=0000000000000838 RDX=0000000000000000
RSI=0000000000000000 RDI=0000000000000000 RBP=ffffc90007e1fb40 RSP=ffffc90007e1fa78
R8 =ffffffff81b2fc75 R9 =ffffffff9a503588 R10=0000000000000003 R11=ffffffff817466c0
R12=000000000000ffe9 R13=dffffc0000000000 R14=0000000010000bbe R15=0000000000000000
RIP=ffffffff81c5d530 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555558792500 ffffffff 00c00000
GS =0000 ffff8882a9217000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3d5ade9f00 CR3=00000000216ee000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0003000600080000 0002000100068001
XMM02=0000000300060008 0000000200010006 XMM03=8001001400000001 000000000070bd2c
XMM04=b4c8041c01d42772 d081cc727ab8990f XMM05=62e8a734b4c8041c 01d42772d081cc72
XMM06=7ab8990ff6b4cf8e 7b8405c175ee0b99 XMM07=c808339a5e739b1f 29ee7550ec784089
XMM08=44dd9029a89e30c2 e0bec74f73183fb3 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
