last executing test programs:

3.0822585s ago: executing program 0 (id=3464):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001200576d101400000000000007000000", @ANYRES32=0x0, @ANYBLOB="000002000255000008001d14ca"], 0x3c}}, 0x0)

3.002345858s ago: executing program 0 (id=3466):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0}) (async)
r2 = socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @private=0xa010101}}) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (async)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = getpid() (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
write$cgroup_pid(r4, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4}, 0x50) (async)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080005000100"], 0x74}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x7c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_ARP_ALL_TARGETS={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_PRIMARY_RESELECT={0x5, 0xc, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x3c, 0xe, 0x2}, @IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0xb3e}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x5}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x7c}}, 0x0) (async)
sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0xf0, 0x1, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_QUOTA={0xc}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1000}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffff9}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xb20}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x75}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x44}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7ff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40810}, 0x41)

2.680088413s ago: executing program 0 (id=3474):
r0 = socket(0x2a, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00fffaffffff7110b9000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000000)={@mcast1}, 0x20)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x4c, 0x13, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x800)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_stats_latency\x00', r5, 0x0, 0x40000000}, 0x18)
sendmsg$netlink(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000180)=@base={0x19, 0x0, 0x7fffffff, 0x2000, 0x440}, 0x50)
r6 = socket$packet(0x11, 0x3, 0x300)
sendmmsg(r6, &(0x7f00000007c0)=[{{&(0x7f00000004c0)=@ieee802154={0x24, @long={0x3, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x20}}], 0x1, 0xc0d0)
getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x11e, 0x484, 0x0, &(0x7f0000000100))

2.611170724s ago: executing program 0 (id=3476):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r4, 0x84, 0x82, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0))
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4)
socket$inet6_udp(0xa, 0x2, 0x0)
close(r3)
socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, 0x0, 0x0)
ioctl$PPPIOCGMRU(r3, 0x80047453, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x80}}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r6, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x5c, r8, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3c, 0x62}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}]}, 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x20000080)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0xffffffff, 0x0, {0x2, 0x14, 0x20, 0x7, 0xff}, [@RTA_IP_PROTO={0x5, 0x1b, 0x6}, @RTA_IIF={0x8, 0x3, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x6048000}, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)="d800000019008111e00212ba0d8105040a600200ff0f040b067c55a1bc000900080006990300000015000500fe8081780d001500031101400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0)
r11 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r11, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-aesni\x00'}, 0x58)

817.02582ms ago: executing program 0 (id=3510):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001080)={<r0=>0xffffffffffffffff})
getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000040)=""/4096, &(0x7f0000001040)=0x1000)
socketpair(0x26, 0x4, 0x1, &(0x7f00000000c0)) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f00000011c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14, r2, 0x300, 0x70bd25, 0x24dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4040804}, 0x20000084) (async)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001200), r1)
sendmsg$IEEE802154_DISASSOCIATE_REQ(r1, &(0x7f0000001300)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x68, r3, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x5}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x3}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_REASON={0x5}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x9}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)

803.152261ms ago: executing program 0 (id=3512):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e00000002"], 0x8)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000028000180140004fff0000000000000000000ffffac1414aa060001000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)

288.702469ms ago: executing program 1 (id=3519):
socket$can_j1939(0x1d, 0x2, 0x7)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0xfffffffd, 0x0, 0x0, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x1a0}}, 0x800) (async, rerun: 32)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (rerun: 32)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="180000007800010600009de6e945b95cb58f0217470000000000000700000007000000"], 0x18}], 0x1}, 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000400)={0x38, r5, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff46}]}]}, 0x38}}, 0x200408d8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x80}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)

288.429802ms ago: executing program 2 (id=3520):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff9, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0xfff)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r7, 0xfffff3c6)
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000d081000418e00000004fcff", 0x58}], 0x1)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}, {0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0)

286.922034ms ago: executing program 2 (id=3521):
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000100)=0x68)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={{0x14}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000100)=0x68) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={{0x14}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}}, 0x0) (async)

202.150324ms ago: executing program 1 (id=3522):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet(r0, &(0x7f00000029c0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x24}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}], 0x20}}], 0x1, 0x2004c040)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYRESOCT=r0, @ANYBLOB="952d2a7b5b6ab9092bb11f77995899f7f7f7673a67970369dbec032062147d130257bfa48bfd1aceb1ed76761059f7bfc8a9e5302f5d9474d607b117b896f43fb1fbc6b0443662f2015aa6bb9aa924cc0b76d3612f3e953a5cbbeb1ceccb6f15f5c55efb3a5af739c6e1e13e313354eb6a1644da49c99dbbe5b1cdf3078756df6e9538bdf9267844618335b892b101c52b4a611db301bae483f0c257aabfbc7273f10ca5bb6d469d11d6b52b6b3ce7c26ef9973ff0b4c1d5cfcc28ff0aac2d6045c0b3cdf61cbbd89019346205", @ANYRES16=r0], 0x198}, 0x1, 0x0, 0x0, 0x20004800}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xf1c)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000030000000900010073797a300000000040000000030a01020000000000000000010000090900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a300000000028000480240001800a0001007175657565000000140002800600014000020000060003400001000014000000110001"], 0xd8}}, 0x4000040)

198.745391ms ago: executing program 2 (id=3523):
r0 = socket(0x2a, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00fffaffffff7110b9000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000000)={@mcast1}, 0x20)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x4c, 0x13, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x800)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r4, 0x11e, 0x484, 0x0, &(0x7f0000000100))

197.243774ms ago: executing program 1 (id=3524):
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = getpid()
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000000540)={<r5=>0x0, "bf01d2a75b8dcd447023b5d5f1552e46"})
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_pressure(r6, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r7, &(0x7f0000000340)={'some', 0x20, 0x1, 0x20, 0x6b2}, 0x2f)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, &(0x7f00000006c0)={0x0, 0x0, {0x0, @usage, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000ac0)={r8, "2092289e3c88fe2c0dec7e00f21dde66"})
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001540)={0x5, 0x2, {0x8, @usage=0x9, 0x0, 0x100, 0x8001, 0xf9, 0x7fffffffffffffff, 0xce99, 0x430, @usage, 0x6, 0x10001, [0x4, 0x6, 0x5, 0x8, 0x8]}, {0x9, @struct={0x400, 0x3}, r5, 0x6, 0x7fff, 0x5, 0x0, 0x5, 0xf6a6bfb61eeba050, @usage=0x1e, 0x200, 0x6, [0x13fa, 0x2, 0x1ff, 0x100000001, 0x7, 0xb598]}, {0xf, @struct={0x9, 0x3}, r8, 0x6, 0x3, 0x7fff, 0x8000000000000001, 0x4, 0x0, @usage=0x1ff, 0xd7, 0x7, [0x6, 0x8b, 0x8, 0x69, 0x8]}, {0x5, 0xfffffffffffffffe, 0x2}})
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100)={0x0, <r9=>0x0}, &(0x7f0000001b80)=0xc)
sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a000000000000000000000008001900", @ANYRES32=r9, @ANYBLOB="0600479da2c70c3d"], 0x2c}}, 0x0)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="af1c0000001400010000000000000000c9ff01000008000280"], 0x1c}, {&(0x7f0000000200)=ANY=[@ANYBLOB="58020000330000032dbd7000fcdbdf250800ca00", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="04004a801b03001246cbe66a0502d9fe1498c13b4900627dbbb1186b8656de24e7a97b6019b485530d4c1e3cc3e38f6c73fc88af5dd17c4393e955456887a0d2095c02b94a8fe83360dd6fa183b94e182a3b5e0f6775c00779ed1b0a2c383effb7e4c4277cd7b622a978c10b29a445960c4deafa5097853b6b4967b4a81de0f4666981c2633d876241d0e3250f0d85abe11f05ad2890ca514003e11203db19e4e9bb47897b5efffdd50b3e68b5079f2d5d0ddccfdfbaa2f85ef02b42bda68faf0cb12e1ced3864059f99d4e5cfc7d093e6615edfdfb1538627d0a6119067000000"], 0x258}, {&(0x7f0000001d00)=ANY=[@ANYBLOB="c0000000110000082bbd7000fbdbdf25a500cb006af7699e42112027781cb93011d9ec61bfdbf15f5e28555876c6b00b84dd318adaebc96d8bc9dbcec8cfa5cf2c9095cfdedd411b06c6b800d719dbc5a137a601ff241d0117c40060b7e3e0930ba52c81a75c7ab7e57257b50308a8c1381a3f3cc3bf70c50b9317b8816845564d238dacbe2a6ea4e4578a66f87232085b9cccf29adc10c3229b417ac921aa7b36e9f8ae153a428bfc9a93221ad3f4df7e9b9774de000000080003007f000001a23eafa2f826bcca53a3b81beb5935f60d49227eaa74b86f1771d5d841edecce4eae"], 0xc0}], 0x3}, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0)
r11 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r11, &(0x7f00000009c0)={0x2, 0x4e23, @multicast2}, 0x10)
r12 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r12, 0x114, 0x8, 0x0, 0x0)
connect$inet6(r12, &(0x7f0000000000)={0xa, 0x4e23, 0x400, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3f096d47}, 0x1c)
close(r0)
socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001b40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="340000005200000129bd7000fedbdf250a08000300ff0f00000800050001010000080003000200000008000300020000000000000c26065e6d03367f8483821dd6f7adb86c4447fb04c802d0d7a15260fcdc616ef9d17c7eaa570254a525a9608fa8ceb62d8f1e6f961af7cb8e08dd808576e3cdc51b79b8560c1b1af26bb69b437986caf66ee4150a1600956150dc4c9f85072ae1a5c990f377416609b15522f65cb748ff522347f6827eb70f63760679845414870d818c68c2491d3b074bfa877c75abefbd097bb688c3edd1d3ce3bad6b1da2dbb2b68158ae914bcc2b65f5ef8c240fbc9357866c089c12313329bc2d67254d3eb8f3f9b23f41e7c64bbcc59111678bc7279a84369c34b2116647ba2b680d18e52a23b65cddaf4ee07af6aeb994bc80ae3534a06c98962e611a"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x91)
r13 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="a0010000100013070000000000000000ac1414aa000000000000000000000000000000000000000000000000000000010000000000040000000000005e000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="e00000020000000000000000000000000000000032000000ac141400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000002000000960000000000000048000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004f43"], 0x1a0}, 0x1, 0x0, 0x0, 0x24004040}, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})

194.997006ms ago: executing program 2 (id=3525):
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000000070071123b000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5b471ae2}, 0x94)

101.776433ms ago: executing program 2 (id=3526):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', <r1=>0x0})
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x44)
sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wpan3\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, '+)j[*)@\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wpan3\x00'}]}, 0x58}}, 0x88c0)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0)
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r2, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}]}, 0x50}, 0x1, 0x0, 0x0, 0x40804}, 0x90)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r0)
sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r3, 0x100, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}}, 0xc011)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r4, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, 0x2c}}, 0x20004085)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f0000000940)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f0000000700)={0x1cc, r6, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x76}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf73}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4000854}, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000980), r7)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r7)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r9, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
writev(r5, &(0x7f00000020c0)=[{&(0x7f0000000b00)="2cc2868c9b54fb48e46fed033f28f9edb53044b88f87bc84f0b51a8322b369000ff874d69c0ca8452fcd70f03bb3ea9db41c397fc88278452a1d4f1f781a918b5aa6e0f92377679a2a7bc28d1dc496ee0440e81f397a76094b6b6d9353f51522b144a3fdd1328288706f0e6d620d08aa3bc59e10e836b977c99c690101bef0eba5935c6db3cc5a416ee6a36213477bd415e52ee1dbc066af6b95da496fb29d5ac0c280e92058b82a7454d30bd1fd9e891f79230e75b201b7a6f565c66a3987ccff4c0373336b511c07455e106b5dd9d70c99ef8eba20d04f3dfc6b8cf590a00afab3683d9180e3eefc2dfc1912952158890c13463458cf21", 0xf8}, {&(0x7f0000000c00)="351038af5e9a91794c8eb496426676d9265bf8a7d9744c63c144f5674fb0f5bf619aed51fd5ec96840090827475ef8014ae156c554f0769db1b74ea879309e3e565e4113b0938a81cf9b2f5009c9d685aca0f659f834b710dcaf03c471104bf8e99105889599d8594cdc96b431c0badee7a9dbb7d1e6cabec4", 0x79}, {&(0x7f0000000c80)="a504fbad7c309b74302f0a8547f5cf326e1b9e29d55f9d89c1defd19084392d71e9a84f5f644a63ed9c93d13529479f5e9f2f0244992dd444a97bf9f683e715597537016236b1e54dd28ebf7736c3dd3349d2bd72ac99934d00e01fe8c5f56a988c04b269faf49050f4fccc4ed0d7a656b2a7fa93ef8b152327a037c3f38f48bb542", 0x82}, {&(0x7f0000000d40)="844566ae4f4d9fea910755de8db23af34e24431648849016f47d5d8974f833730e09003575211c00a039a83595a107291123dbd79e501f1bb52dd8de3a23a6f1e6459df7dab0b5cf51d19f666e755c2e2a56180569721d785c963dde998993177567ef85babb43ac30ab4ba9e1fd4f38118bf23dc5de91e9d3991aa5e6da3e009a12dc", 0x83}, {&(0x7f0000000e00)="a15bd1e83bb27274ebe82f1b38284d68894dc96e145d8b6abda2eff029e367bff63d80ab2d019a5d1113bbda944219b25c4dcd0b8341555f84783ea800f58e3abc719ac0f9c60661de793074c990a3c6fce0a926b59cd1062dd8e9", 0x5b}, {&(0x7f0000000e80)="646b6fb258b997186f64ae39e72a1e1af47dada0ad7429d00104c918f0950c12f5fbed9c98f01e000915b58b8122ce8527735c149c93befcd3f379a42dd5f043624bf8c481459a65cfd3089fd0e8e00ccf64b0d6217088e632002dfcbab22dd68a078eb09c991bd50b363db887089d2703edf6ea2721f30ccde8aa6c66dab4b297e2bfab2df2d8a45473afef0f1d4063d21d7d88a197fafc9ea15fea25638851062d1e9af1fbe0799de8251f576066cd3d670c58a979616c50b1ca4a2943cbccb3ce38257c1a78de3311175e9848e95e9a789ba640451c3d4d", 0xd9}, {&(0x7f0000000f80)="19436f2d1b73fe39e4813d43fc34472d53f57ae6c04dfffc671d66fdc1b4dd0e14a5a4f99a280df1afdc94d03bfbdc8c75727c64d77d73b3442fd8319c655af2df2503e85708d04219a35d1cc1254e5cf534dfa3d294642c0dee877170203921aad6fff7711fe6c85270c75b27ab1e433e62a5fe4460d8571a2ace5ab0f572b7e8d5f72fd99352be5186dcb366db3f25ae0ce5a8d90647c6a4284e5e7ec6bac1fdedb6", 0xa3}, {&(0x7f0000001040)="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", 0x1000}, {&(0x7f0000002040)="5d57c60407035721ae334080028b55c5ca5c6e07ab", 0x15}, {&(0x7f0000002080)="15d78e05580bb3d129de98ff3de322a09e9679cecd8c9a4052d25a", 0x1b}], 0xa)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000021c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f00000022c0)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002280)={&(0x7f0000002200)={0x50, r4, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x9, 0x31}}}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x2}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x5b}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x7}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7f}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000002340), r5)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f0000002500)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002380)={0x120, r11, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0x120}, 0x1, 0x0, 0x0, 0x800}, 0x24000000)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000002600)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000025c0)={&(0x7f0000002580)={0x2c, r9, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000002640)={<r12=>r5})
sendmsg$NFQNL_MSG_VERDICT_BATCH(r12, &(0x7f0000002740)={&(0x7f0000002680), 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x28, 0x3, 0x3, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x16e18883d2fc417c, 0x400}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x8004)
bind$inet6(r12, &(0x7f0000002780)={0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x401}, 0x1c)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r13, &(0x7f0000002880)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002840)={&(0x7f0000002800)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x173}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40040c0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000002900)=<r14=>0x0)
sendmsg$NFC_CMD_ENABLE_SE(r7, &(0x7f0000002a00)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x34, r8, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041000}, 0x1)

101.469292ms ago: executing program 1 (id=3527):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1400000010000100000000000000fffffff5000a20000000010a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000090900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a300000000028000480240001800a0001007175657565000000140002800600014000020000060003400001000014000000110001"], 0xd8}}, 0x4000040)

100.111156ms ago: executing program 2 (id=3528):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="8000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$packet(0x11, 0x2, 0x300)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
close(r2)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@delchain={0x7c, 0x65, 0x200, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xffff, 0xd}, {0xb, 0xd}, {0x9, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x4c, 0x2, [@TCA_FLOW_RSHIFT={0x8}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_MASK={0x8, 0x6, 0x7}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0xffe2}}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0x7}}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xf}, @TCA_FLOW_KEYS={0x8, 0x1, 0x4b5b}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7}, @TCA_FLOW_MODE={0x8}]}}]}, 0x7c}}, 0x0)
sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="50000000130008002abd7000ffdbdf252606008e4e204e240300000007000000000000c048ea00009ccfffff03000000ffffff7f00010000", @ANYRES32=r6, @ANYBLOB="0500000006000000010000000100000004000100477b8a820a1e1e2ec2387247773648cfff3e74f6dd1fe6073f350394b042abd921076c3d758656fd151562a7e085101e840be1070320fb42ff3476bb28d80ded6d07358cbb254b4c86f7083499be"], 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x800)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='xprtrdma_prepsend_failed\x00', r7, 0x0, 0x100000001}, 0x18)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000020605000000000000000000000000050500010007000000090000050004000000000013000300686173683a6e65742c69666163650000"], 0x44}}, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
r8 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb)
bind$ax25(r8, &(0x7f0000000380)={{0x3, @null, 0x1}, [@null={0x40, 0x40, 0x40, 0x40, 0x40, 0x40, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x3c)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000007b243ce4b3daa7804f"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$alg(0x26, 0x5, 0x0)
accept4(r0, 0x0, 0x0, 0x800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r9}, 0x10)

99.499148ms ago: executing program 1 (id=3529):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)={0x2c, r2, 0x1, 0x800, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x2c}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4020000)
socket$packet(0x11, 0x2, 0x300)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000008000300090c10000000008003000000", 0x58}], 0x1)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'xfrm0\x00'})
r4 = socket$kcm(0x10, 0x2, 0x10)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x240048c4}, 0x24040890)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000740)={0xa00, r7, 0x1, 0x70bd25, 0x25dfdbff, {}, [@WGDEVICE_A_PEERS={0x9a4, 0x8, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x9}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x4, @loopback, 0x7ff}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "20134b4562eb2d94b0ddc4e0a293ee110a7fc20342ad83f4a4bea09a644e68d4"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1b748c321929042fd612d82cccb6a27ddd90b5ea5e99506f0d1a71c7044de4e5"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x401, @private2={0xfc, 0x2, '\x00', 0x1}, 0xb895}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}]}, {0x4a4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4a0, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xa}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}]}]}, {0x164, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @private=0xa010101}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eb60436b4be888868fdb5b53f831c282c485dcbc0ba44b2a86dae632558f2289"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xffff, @mcast2, 0x3607}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0xb0, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast2}}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "bd972de253771b866d25cb56f92bade64e6fac49f07b821aff419e1bf180f5b4"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @loopback}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x144, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xffff}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x101, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, @WGPEER_A_ALLOWEDIPS={0xbc, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x4, @loopback, 0x800}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "61aa27583501bd36b68fb509a230272c9e37306e38e3fefcb69ef1a4050867f2"}]}, {0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa63a}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b6e2de0fb8c00c3c4fb8ce6746143019d29024e2259ca7688e3d912137f27f10"}]}, {0x4}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0xa00}, 0x1, 0x0, 0x0, 0x4000004}, 0x40040)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x40)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000080)=0x5, 0x4)
sendmsg$kcm(r4, 0x0, 0x4)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
socket(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r8, 0x891c, 0x0)

0s ago: executing program 1 (id=3530):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a115ffff0000080026008d03000008009f"], 0x40}}, 0x0)
syz_genetlink_get_family_id$nl80211(0xfffffffffffffffc, 0xffffffffffffffff)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r5, 0x1, 0x28, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001400b59527bd7000ffdbdf250a1708ff", @ANYRES32=r6, @ANYBLOB="14000200000000000000000000bf54319d4a28ae7160d68e00000000000001"], 0x2c}}, 0x4004084)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1200, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_PHYS_PORT_ID={0x22, 0x22, "fcf740114d187633cc1f0827e6456b983b02f6bcab46df13540d0181a7e1"}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x64}}, 0x8000)

kernel console output (not intermixed with test programs):

T5859] block nbd0: shutting down sockets
[  112.902962][ T5859] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  112.907832][ T5859] Buffer I/O error on dev nbd0, logical block 0, async page read
[  112.911312][ T5859] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  112.915104][ T5859] Buffer I/O error on dev nbd0, logical block 0, async page read
[  112.918511][ T5859] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  112.927967][ T5859] Buffer I/O error on dev nbd0, logical block 0, async page read
[  112.935062][ T5859] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  112.947975][ T5859] Buffer I/O error on dev nbd0, logical block 0, async page read
[  112.952847][ T5859] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  112.957285][ T5859] Buffer I/O error on dev nbd0, logical block 0, async page read
[  112.960458][ T5859] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  112.964373][ T5859] Buffer I/O error on dev nbd0, logical block 0, async page read
[  112.968810][ T5859] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  112.972480][ T5859] Buffer I/O error on dev nbd0, logical block 0, async page read
[  112.974362][ T7949] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  112.978045][ T5859] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  112.982967][ T5859] Buffer I/O error on dev nbd0, logical block 0, async page read
[  112.986744][ T5859] ldm_validate_partition_table(): Disk read failed.
[  112.989504][ T5859] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  112.992173][ T5859] Buffer I/O error on dev nbd0, logical block 0, async page read
[  112.994872][ T5859] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  112.997617][ T5859] Buffer I/O error on dev nbd0, logical block 0, async page read
[  113.000304][ T5859] Dev nbd0: unable to read RDB block 0
[  113.002327][ T5859]  nbd0: unable to read partition table
[  113.012802][ T5859] ldm_validate_partition_table(): Disk read failed.
[  113.018801][ T5859] Dev nbd0: unable to read RDB block 0
[  113.022902][ T5859]  nbd0: unable to read partition table
[  113.342463][ T7961] netlink: 'syz.1.681': attribute type 1 has an invalid length.
[  113.348493][ T7961] netlink: 'syz.1.681': attribute type 2 has an invalid length.
[  113.428342][ T7965] batadv_slave_0: entered promiscuous mode
[  113.544798][   T65] wlan1: Trigger new scan to find an IBSS to join
[  113.589286][ T7964] batadv_slave_0: left promiscuous mode
[  113.666678][ T7975] IPv6: Can't replace route, no match found
[  113.704167][ T7980] syzkaller1: entered promiscuous mode
[  113.710863][ T7980] syzkaller1: entered allmulticast mode
[  114.082684][ T7996] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  114.303777][ T8014] syzkaller1: entered promiscuous mode
[  114.306699][ T8014] syzkaller1: entered allmulticast mode
[  114.652600][  T793] hid-generic 0005:16BF:5505.0008: unknown main item tag 0x0
[  114.659161][  T793] hid-generic 0005:16BF:5505.0008: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  114.670502][ T8031] openvswitch: netlink: Flow actions attr not present in new flow.
[  114.844223][ T8051] netlink: 'syz.2.716': attribute type 10 has an invalid length.
[  114.860387][ T8051] netlink: 'syz.2.716': attribute type 12 has an invalid length.
[  114.865835][ T8050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  114.891300][ T8058] syzkaller1: entered promiscuous mode
[  114.893426][ T8058] syzkaller1: entered allmulticast mode
[  115.101765][ T8064] NCSI netlink: No device for ifindex 246
[  115.549688][ T8094] IPv6: NLM_F_REPLACE set, but no existing node found!
[  115.753954][ T8106] syzkaller1: entered promiscuous mode
[  115.756536][ T8106] syzkaller1: entered allmulticast mode
[  116.040817][ T8116] __nla_validate_parse: 24 callbacks suppressed
[  116.040830][ T8116] netlink: 72 bytes leftover after parsing attributes in process `syz.2.742'.
[  116.106819][ T8116] vti1: left promiscuous mode
[  116.108813][ T8116] vti1: left allmulticast mode
[  116.123552][ T8116] tipc: Resetting bearer <eth:syzkaller0>
[  116.128434][ T8116] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  116.131273][ T8116] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  116.136083][ T8116] team1: left promiscuous mode
[  116.137964][ T8116] team1: left allmulticast mode
[  116.157251][ T5891] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  116.161435][ T5891] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  116.184782][ T5891] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  116.189231][ T5891] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  116.231017][ T8128] IPv6: Can't replace route, no match found
[  116.241208][ T8129] netlink: zone id is out of range
[  116.242912][ T8129] netlink: zone id is out of range
[  116.245022][ T8129] netlink: zone id is out of range
[  116.326886][ T8132] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  116.332358][ T8132] netlink: 36 bytes leftover after parsing attributes in process `syz.0.746'.
[  116.346166][ T8132] netlink: 144 bytes leftover after parsing attributes in process `syz.0.746'.
[  116.353549][ T8132] netlink: 132 bytes leftover after parsing attributes in process `syz.0.746'.
[  116.359826][ T8131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  116.444647][ T8138] validate_nla: 4 callbacks suppressed
[  116.444668][ T8138] netlink: 'syz.1.748': attribute type 9 has an invalid length.
[  116.450121][ T8138] netlink: 204732 bytes leftover after parsing attributes in process `syz.1.748'.
[  116.642861][ T8144] IPv6: NLM_F_REPLACE set, but no existing node found!
[  116.932416][ T8160] netlink: 84 bytes leftover after parsing attributes in process `syz.2.758'.
[  117.050220][ T8170] netlink: 56 bytes leftover after parsing attributes in process `syz.1.759'.
[  117.100566][ T8174] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.103362][ T8175] syzkaller0: entered promiscuous mode
[  117.106186][ T8175] syzkaller0: entered allmulticast mode
[  117.118904][ T8178] netlink: 20 bytes leftover after parsing attributes in process `syz.1.763'.
[  117.130674][ T8175] tipc: Resetting bearer <eth:syzkaller0>
[  117.148731][ T8175] tipc: Disabling bearer <eth:syzkaller0>
[  117.316612][ T8191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.768'.
[  117.320090][ T8191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.768'.
[  118.353361][ T8220] IPv6: NLM_F_REPLACE set, but no existing node found!
[  118.417136][ T8224] tap0: tun_chr_ioctl cmd 1074025678
[  118.419078][ T8224] tap0: group set to 0
[  118.504763][   T64] wlan1: Trigger new scan to find an IBSS to join
[  118.550999][ T8235] syzkaller1: entered promiscuous mode
[  118.553275][ T8235] syzkaller1: entered allmulticast mode
[  119.040646][ T8265] IPv6: Can't replace route, no match found
[  119.116494][ T8268] netlink: 'syz.0.792': attribute type 4 has an invalid length.
[  119.209857][ T8268] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.213333][ T8268] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.525039][ T5891] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.528397][ T5891] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  119.532764][ T5891] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.536975][ T5891] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  119.541193][ T5891] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.544512][ T5891] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  119.549170][ T5891] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.552413][ T5891] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  119.578290][   T10] hid-generic 0005:16BF:5505.0009: unknown main item tag 0x0
[  119.584176][   T10] hid-generic 0005:16BF:5505.0009: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  119.602862][ T8271] net_ratelimit: 30 callbacks suppressed
[  119.602888][ T8271] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  119.610192][ T8271] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.645623][ T8274] Unsupported ieee802154 address type: 0
[  119.660876][ T8278] IPv6: NLM_F_REPLACE set, but no existing node found!
[  119.805902][ T8291] netlink: 'syz.0.800': attribute type 1 has an invalid length.
[  119.845590][ T8291] 8021q: adding VLAN 0 to HW filter on device bond5
[  119.860696][ T8291] bond5: (slave ip6gretap1): making interface the new active one
[  119.866291][ T8291] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link
[  119.896255][ T8291] veth5: entered promiscuous mode
[  119.902953][ T8291] bond5: (slave veth5): Enslaving as an active interface with a down link
[  119.910707][ T8291] erspan0: left promiscuous mode
[  119.922971][ T8291] bond5: (slave erspan0): Enslaving as an active interface with an up link
[  119.997446][ T8307] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig
[  120.259503][ T8328] tipc: Enabling <ib:lo> not permitted
[  120.261709][ T8328] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  120.327068][   T24] hid-generic 0005:16BF:5505.000A: unknown main item tag 0x0
[  120.345349][   T24] hid-generic 0005:16BF:5505.000A: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  120.366667][ T8334] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  120.374374][ T8334] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  120.425971][ T8338] lo speed is unknown, defaulting to 1000
[  120.495696][ T8343] netlink: 'syz.0.820': attribute type 9 has an invalid length.
[  121.400363][ T8370] __nla_validate_parse: 9 callbacks suppressed
[  121.400382][ T8370] netlink: 168 bytes leftover after parsing attributes in process `syz.0.826'.
[  121.510805][ T8373] netlink: 724 bytes leftover after parsing attributes in process `syz.0.827'.
[  121.516347][ T8373] netlink: 83 bytes leftover after parsing attributes in process `syz.0.827'.
[  121.812313][ T8375] IPv6: NLM_F_REPLACE set, but no existing node found!
[  121.962384][ T8382] tap0: tun_chr_ioctl cmd 1074025677
[  121.964862][ T8382] tap0: linktype set to 0
[  122.110106][ T8362] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  122.230636][ T8390] netlink: 24 bytes leftover after parsing attributes in process `syz.0.835'.
[  122.294378][ T8396] netlink: 'syz.0.837': attribute type 3 has an invalid length.
[  122.294381][ T8397] netlink: 'syz.0.837': attribute type 3 has an invalid length.
[  122.369246][ T8406] netlink: 84 bytes leftover after parsing attributes in process `syz.0.840'.
[  122.486936][ T8421] IPv6: NLM_F_REPLACE set, but no existing node found!
[  122.613607][ T8430] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  122.618301][ T8430] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  122.712520][ T8438] netlink: 20 bytes leftover after parsing attributes in process `syz.2.850'.
[  122.845501][ T8449] netlink: 20 bytes leftover after parsing attributes in process `syz.2.852'.
[  124.834307][ T8546] IPv6: NLM_F_REPLACE set, but no existing node found!
[  124.918679][ T8558] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  125.078305][ T8569] lo speed is unknown, defaulting to 1000
[  125.097796][ T8571] syzkaller1: entered promiscuous mode
[  125.100258][ T8571] syzkaller1: entered allmulticast mode
[  125.109607][ T8571] netlink: 24 bytes leftover after parsing attributes in process `syz.0.875'.
[  125.117830][ T8574] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  125.141992][ T8574] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  125.145331][ T8574] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  125.155902][ T8575] netlink: 'syz.1.878': attribute type 1 has an invalid length.
[  125.158602][ T8575] netlink: 'syz.1.878': attribute type 2 has an invalid length.
[  125.161285][ T8575] netlink: 224 bytes leftover after parsing attributes in process `syz.1.878'.
[  125.173229][ T8574] tipc: Resetting bearer <eth:syzkaller0>
[  125.225220][ T8578] bridge_slave_0: left allmulticast mode
[  125.227593][ T8578] bridge_slave_0: left promiscuous mode
[  125.230030][ T8578] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.236134][ T8578] bridge_slave_1: left allmulticast mode
[  125.238975][ T8578] bridge_slave_1: left promiscuous mode
[  125.241575][ T8578] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.249223][ T8578] bond0: (slave bond_slave_0): Releasing backup interface
[  125.254413][ T8578] bond0: (slave bond_slave_1): Releasing backup interface
[  125.260651][ T8578] team0: Port device team_slave_0 removed
[  125.266358][ T8578] team0: Port device team_slave_1 removed
[  125.270334][ T8578] bond0: (slave wlan1): Releasing backup interface
[  125.283361][ T8578] netlink: 28 bytes leftover after parsing attributes in process `syz.1.879'.
[  125.489995][ T8592] syzkaller1: entered promiscuous mode
[  125.491847][ T8592] syzkaller1: entered allmulticast mode
[  125.645429][ T8597] IPv6: NLM_F_REPLACE set, but no existing node found!
[  126.012649][ T8612] openvswitch: netlink: Missing valid actions attribute.
[  126.019331][ T8612] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.021294][ T8611] lo speed is unknown, defaulting to 1000
[  126.566762][ T8625] syzkaller1: entered promiscuous mode
[  126.569052][ T8625] syzkaller1: entered allmulticast mode
[  126.993306][ T8649] __nla_validate_parse: 3 callbacks suppressed
[  126.993325][ T8649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.902'.
[  127.000236][ T8649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.902'.
[  127.003716][ T8649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.902'.
[  127.038015][ T8650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.904'.
[  127.047608][ T8650] batman_adv: batadv0: Removing interface: batadv_slave_0
[  127.057026][ T8650] batman_adv: batadv0: Removing interface: batadv_slave_1
[  127.901371][ T8660] netlink: 'syz.0.909': attribute type 10 has an invalid length.
[  127.911233][ T8660] netlink: 36 bytes leftover after parsing attributes in process `syz.0.909'.
[  127.945640][ T8661] 8021q: adding VLAN 0 to HW filter on device bond0
[  127.948120][ T8661] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address
[  127.951903][ T8661] bond0: (slave ip_vti0): Error -95 calling set_mac_address
[  127.962405][ T8670] netlink: 144 bytes leftover after parsing attributes in process `syz.0.909'.
[  127.978950][ T8660] netlink: 'syz.0.909': attribute type 12 has an invalid length.
[  127.981574][ T8660] netlink: 132 bytes leftover after parsing attributes in process `syz.0.909'.
[  128.002622][ T8659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  128.100015][ T8675] netlink: 'syz.2.911': attribute type 18 has an invalid length.
[  128.554869][ T5926] hid-generic 0005:16BF:5505.000B: unknown main item tag 0x0
[  128.563159][ T5926] hid-generic 0005:16BF:5505.000B: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  128.578996][ T8705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.917'.
[  128.586093][ T8705] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  128.635259][ T8708] netlink: 28 bytes leftover after parsing attributes in process `syz.0.918'.
[  128.638331][ T8708] netlink: 28 bytes leftover after parsing attributes in process `syz.0.918'.
[  128.776058][ T8712] netlink: 'syz.0.920': attribute type 1 has an invalid length.
[  128.834793][ T8712] netlink: 'syz.0.920': attribute type 2 has an invalid length.
[  129.042869][ T8718] netlink: 'syz.0.923': attribute type 21 has an invalid length.
[  129.433302][ T8737] IPv6: Can't replace route, no match found
[  129.705687][ T8749] netlink: 'syz.0.935': attribute type 10 has an invalid length.
[  129.728941][ T8749] netlink: 'syz.0.935': attribute type 12 has an invalid length.
[  129.735772][ T8748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  130.139819][ T8779] IPv6: NLM_F_REPLACE set, but no existing node found!
[  130.176930][ T8784] netlink: 'syz.2.949': attribute type 12 has an invalid length.
[  130.179671][ T8784] netlink: 'syz.2.949': attribute type 12 has an invalid length.
[  130.457519][ T8791] bridge0: left promiscuous mode
[  130.461491][ T8791] 8021q: adding VLAN 0 to HW filter on device bond0
[  130.467616][ T8791] 8021q: adding VLAN 0 to HW filter on device team0
[  130.478381][ T8791] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  131.276902][ T8817] lo speed is unknown, defaulting to 1000
[  131.341694][ T8830] syzkaller1: entered promiscuous mode
[  131.343478][ T8830] syzkaller1: entered allmulticast mode
[  131.490716][ T8841] veth0: entered promiscuous mode
[  131.510232][ T8841] veth0 (unregistering): left promiscuous mode
[  132.518118][ T1366] ieee802154 phy0 wpan0: encryption failed: -22
[  132.520178][ T1366] ieee802154 phy1 wpan1: encryption failed: -22
[  132.571351][ T8856] __nla_validate_parse: 14 callbacks suppressed
[  132.571363][ T8856] netlink: 24 bytes leftover after parsing attributes in process `syz.1.971'.
[  132.610998][ T8861] IPv6: NLM_F_REPLACE set, but no existing node found!
[  132.647666][ T8858] Illegal XDP return value 4294967274 on prog  (id 236) dev N/A, expect packet loss!
[  132.657936][ T8858] netlink: 248 bytes leftover after parsing attributes in process `syz.2.970'.
[  132.677106][ T8866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.973'.
[  132.809139][ T8873] netlink: 180 bytes leftover after parsing attributes in process `syz.0.977'.
[  132.821458][ T8877] IPv6: Can't replace route, no match found
[  132.889106][ T8879] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.979'.
[  132.982375][ T8888] netlink: 132 bytes leftover after parsing attributes in process `syz.0.984'.
[  132.987332][ T8888] validate_nla: 4 callbacks suppressed
[  132.987348][ T8888] netlink: 'syz.0.984': attribute type 1 has an invalid length.
[  132.992484][ T8888] netlink: 112 bytes leftover after parsing attributes in process `syz.0.984'.
[  133.168211][ T8909] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  133.173376][ T8909] syzkaller1: entered promiscuous mode
[  133.176445][ T8909] syzkaller1: entered allmulticast mode
[  133.238835][ T8911] netlink: ct family unspecified
[  133.240873][ T8911] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.321765][ T8916] netlink: 24 bytes leftover after parsing attributes in process `syz.0.994'.
[  133.326618][ T8917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.995'.
[  133.329696][ T8917] netlink: 16 bytes leftover after parsing attributes in process `syz.2.995'.
[  133.447203][ T8926] syzkaller1: entered promiscuous mode
[  133.448987][ T8926] syzkaller1: entered allmulticast mode
[  133.972178][ T8962] netlink: 'syz.2.1014': attribute type 1 has an invalid length.
[  134.033953][ T8969] netlink: 'syz.0.1016': attribute type 1 has an invalid length.
[  134.044788][ T8969] netlink: 'syz.0.1016': attribute type 2 has an invalid length.
[  134.163947][ T8980] tipc: Started in network mode
[  134.166929][ T8980] tipc: Node identity ac14140f, cluster identity 4711
[  134.174020][ T8980] tipc: New replicast peer: 255.255.255.255
[  134.177761][ T8980] tipc: Enabled bearer <udp:syz2>, priority 10
[  134.186218][ T8980] tipc: Disabling bearer <udp:syz2>
[  134.230587][ T8984] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.248451][ T8984] tipc: Disabling bearer <eth:syzkaller0>
[  134.539946][ T9006] syzkaller1: entered promiscuous mode
[  134.542504][ T9006] syzkaller1: entered allmulticast mode
[  134.745721][ T9014] netlink: 'syz.1.1030': attribute type 10 has an invalid length.
[  134.751063][ T9014] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  134.771372][ T9014] netlink: 'syz.1.1030': attribute type 12 has an invalid length.
[  134.777023][ T9013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  134.980966][ T9018] netlink: 'syz.0.1032': attribute type 1 has an invalid length.
[  135.019573][ T9021] IPv6: NLM_F_REPLACE set, but no existing node found!
[  135.319022][ T9039] dvmrp8: entered allmulticast mode
[  135.332197][ T9038] dvmrp8: left allmulticast mode
[  135.495192][ T9045] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.543979][ T9045] syzkaller0: entered promiscuous mode
[  135.549874][ T9045] syzkaller0: entered allmulticast mode
[  135.553470][ T9045] tipc: Resetting bearer <eth:syzkaller0>
[  135.563526][ T9044] tipc: Resetting bearer <eth:syzkaller0>
[  136.549158][ T5926] tipc: Node number set to 2886997007
[  136.952514][ T9044] tipc: Disabling bearer <eth:syzkaller0>
[  136.957589][ T9049] syzkaller1: entered promiscuous mode
[  136.959666][ T9049] syzkaller1: entered allmulticast mode
[  136.991239][ T9060] veth3: entered promiscuous mode
[  137.010490][ T9061] bond0: (slave bond_slave_0): Releasing backup interface
[  137.018762][ T9061] bond0: (slave bond_slave_1): Releasing backup interface
[  137.026822][ T9061] team0: Port device team_slave_0 removed
[  137.030038][ T9061] team0: Port device team_slave_1 removed
[  137.033108][ T9061] bond0: (slave wlan1): Releasing backup interface
[  137.053912][ T9063] netlink: 'syz.1.1044': attribute type 39 has an invalid length.
[  137.262047][ T9075] IPv6: NLM_F_REPLACE set, but no existing node found!
[  137.366073][ T9079] netlink: 'syz.1.1051': attribute type 3 has an invalid length.
[  137.369636][ T9079] netlink: 'syz.1.1051': attribute type 3 has an invalid length.
[  137.876879][ T9137] gre0: entered promiscuous mode
[  137.878600][ T9137] gre0: entered allmulticast mode
[  137.889968][ T9139] __nla_validate_parse: 15 callbacks suppressed
[  137.889989][ T9139] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1066'.
[  137.962595][ T9144] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  138.079724][ T9147] netlink: 'syz.1.1069': attribute type 16 has an invalid length.
[  138.082811][ T9147] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1069'.
[  138.252319][ T9167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1071'.
[  138.256298][ T9167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1071'.
[  138.260158][ T9167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1071'.
[  138.266466][ T9159] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1068'.
[  138.905837][ T9176] netlink: 'syz.0.1073': attribute type 10 has an invalid length.
[  138.910743][ T9176] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1073'.
[  138.922215][ T9176] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1073'.
[  138.932832][ T9176] netlink: 'syz.0.1073': attribute type 12 has an invalid length.
[  138.936473][ T9176] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1073'.
[  138.942098][ T9175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  139.046542][ T9184] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1077'.
[  139.491537][ T9199] netlink: 'syz.0.1082': attribute type 1 has an invalid length.
[  139.494962][ T9199] netlink: 'syz.0.1082': attribute type 2 has an invalid length.
[  140.078991][ T9220] netem: unknown loss type 0
[  140.080877][ T9220] netem: change failed
[  140.087958][ T9225] netem: unknown loss type 0
[  140.090127][ T9225] netem: change failed
[  140.820344][ T9267] IPv6: Can't replace route, no match found
[  141.297316][ T9298] IPv6: NLM_F_REPLACE set, but no existing node found!
[  142.108639][ T9312] netlink: 'syz.0.1124': attribute type 2 has an invalid length.
[  142.112359][ T9312] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  142.117826][ T9312] syzkaller0: entered promiscuous mode
[  142.120062][ T9312] syzkaller0: entered allmulticast mode
[  142.141630][ T9312] tipc: Resetting bearer <eth:syzkaller0>
[  142.154420][ T9311] tipc: Resetting bearer <eth:syzkaller0>
[  142.170824][ T9311] tipc: Disabling bearer <eth:syzkaller0>
[  142.403322][ T9330] lo speed is unknown, defaulting to 1000
[  142.496608][ T9340] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  142.505293][   T64] wlan1: Trigger new scan to find an IBSS to join
[  142.796654][ T9360] netlink: 'syz.0.1139': attribute type 10 has an invalid length.
[  142.901499][ T9360] netlink: 'syz.0.1139': attribute type 12 has an invalid length.
[  142.903971][ T9360] __nla_validate_parse: 44 callbacks suppressed
[  142.903986][ T9360] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1139'.
[  142.917449][ T9358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  142.928939][ T9363] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  143.463558][ T9385] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1150'.
[  143.886310][ T9419] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  144.050341][ T9436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1166'.
[  144.064912][ T9436] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.087532][ T9439] openvswitch: netlink: Key type 30 is not supported
[  144.095992][ T9441] netlink: 'syz.0.1168': attribute type 4 has an invalid length.
[  144.111293][ T9439] lo speed is unknown, defaulting to 1000
[  144.491085][ T9463] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1173'.
[  144.693278][ T9469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1175'.
[  144.697078][ T9469] netlink: 'syz.0.1175': attribute type 30 has an invalid length.
[  144.710312][ T9469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1175'.
[  144.710330][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  144.713912][ T9469] netlink: 'syz.0.1175': attribute type 30 has an invalid length.
[  144.720581][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  144.733517][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  144.737304][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  144.766726][ T9473] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1177'.
[  144.841143][ T9477] lo speed is unknown, defaulting to 1000
[  144.878367][ T9481] netlink: 'syz.0.1181': attribute type 1 has an invalid length.
[  144.899207][ T9481] bond6: entered promiscuous mode
[  144.901034][ T9481] 8021q: adding VLAN 0 to HW filter on device bond6
[  144.915354][ T9481] 8021q: adding VLAN 0 to HW filter on device bond6
[  144.917921][ T9481] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address
[  144.921279][ T9481] bond6: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  144.929911][ T9481] bond6: (slave wireguard0): making interface the new active one
[  144.932469][ T9481] wireguard0: entered promiscuous mode
[  144.935226][ T9481] bond6: (slave wireguard0): Enslaving as an active interface with an up link
[  144.948058][ T9482] bond6: (slave wireguard1): The slave device specified does not support setting the MAC address
[  144.956347][ T9481] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  144.958745][ T9481] IPv6: NLM_F_CREATE should be set when creating new route
[  144.961110][ T9481] IPv6: NLM_F_CREATE should be set when creating new route
[  144.965613][ T9481] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  144.967849][ T9489] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  144.970171][ T9489] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  144.973795][ T9482] bond6: (slave wireguard1): Enslaving as a backup interface with an up link
[  144.992708][ T9481] bond6: (slave wireguard2): The slave device specified does not support setting the MAC address
[  145.000768][ T9481] bond6: (slave wireguard2): Enslaving as a backup interface with an up link
[  145.011660][ T9489] bond6: (slave wireguard3): The slave device specified does not support setting the MAC address
[  145.019207][ T9489] bond6: (slave wireguard3): Enslaving as a backup interface with an up link
[  145.156887][ T9503] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1186'.
[  145.320521][ T9513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1189'.
[  145.323762][ T9513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1189'.
[  145.361085][ T9517] sctp: [Deprecated]: syz.1.1191 (pid 9517) Use of struct sctp_assoc_value in delayed_ack socket option.
[  145.361085][ T9517] Use struct sctp_sack_info instead
[  145.367299][ T9519] sctp: [Deprecated]: syz.1.1191 (pid 9519) Use of struct sctp_assoc_value in delayed_ack socket option.
[  145.367299][ T9519] Use struct sctp_sack_info instead
[  145.367773][ T9515] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  145.379793][ T9518] syzkaller0: entered promiscuous mode
[  145.381550][ T9518] syzkaller0: entered allmulticast mode
[  145.415133][ T9514] tipc: Resetting bearer <eth:syzkaller0>
[  145.434505][ T9514] tipc: Disabling bearer <eth:syzkaller0>
[  145.544776][   T64] wlan1: Trigger new scan to find an IBSS to join
[  145.650822][ T9537] netlink: 'syz.0.1197': attribute type 39 has an invalid length.
[  145.911142][ T9543] netlink: 'syz.0.1200': attribute type 1 has an invalid length.
[  145.913858][ T9543] netlink: 'syz.0.1200': attribute type 2 has an invalid length.
[  146.191787][ T9559] netlink: 'syz.0.1207': attribute type 2 has an invalid length.
[  146.456545][ T6255] wlan1: Creating new IBSS network, BSSID 92:1d:31:69:20:9f
[  146.529709][ T9579] netlink: 'syz.1.1215': attribute type 21 has an invalid length.
[  146.575021][ T1092] wlan1: Selected IBSS BSSID 92:1d:31:69:20:9f based on configured SSID
[  146.626057][ T9591] IPv6: NLM_F_REPLACE set, but no existing node found!
[  146.673858][ T9590] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  147.043713][ T9635] nftables ruleset with unbound chain
[  147.049494][ T9635] netlink: 'syz.2.1236': attribute type 3 has an invalid length.
[  147.124125][ T9639] openvswitch: netlink: IP tunnel dst address not specified
[  147.953686][ T9689] __nla_validate_parse: 21 callbacks suppressed
[  147.953705][ T9689] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1256'.
[  147.992848][ T9693] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1257'.
[  148.082611][   T24] hid-generic 0005:16BF:5505.000C: unknown main item tag 0x0
[  148.091742][   T24] hid-generic 0005:16BF:5505.000C: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  148.100918][ T9699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1262'.
[  148.104324][ T9699] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  148.109889][ T9699] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.176376][ T9713] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1264'.
[  148.215947][ T9718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1266'.
[  148.273169][ T9729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1268'.
[  148.277161][ T9729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1268'.
[  148.280663][ T9729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1268'.
[  148.319514][ T9732] IPv6: NLM_F_REPLACE set, but no existing node found!
[  148.564290][ T9741] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1275'.
[  148.568242][ T9741] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  148.678496][ T9749] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1279'.
[  148.757116][  T974] hid-generic 0005:16BF:5505.000D: unknown main item tag 0x0
[  148.762704][  T974] hid-generic 0005:16BF:5505.000D: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  148.779116][ T9754] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  148.781941][ T9754] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.897538][ T9760] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  148.932687][ T9760] syzkaller0: entered promiscuous mode
[  148.935139][ T9760] syzkaller0: entered allmulticast mode
[  148.943492][ T9759] tipc: Resetting bearer <eth:syzkaller0>
[  149.233827][ T9769] IPv6: NLM_F_REPLACE set, but no existing node found!
[  150.405889][ T9759] tipc: Disabling bearer <eth:syzkaller0>
[  150.549379][ T9793] IPVS: Error connecting to the multicast addr
[  150.585582][ T6255] wlan1: Trigger new scan to find an IBSS to join
[  150.587320][ T9801] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  150.590201][ T9801] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  150.595414][ T9801] validate_nla: 4 callbacks suppressed
[  150.595424][ T9801] netlink: 'syz.1.1298': attribute type 4 has an invalid length.
[  150.610528][ T9801] netlink: 'syz.1.1298': attribute type 4 has an invalid length.
[  150.690541][ T9808] netlink: 'syz.0.1300': attribute type 10 has an invalid length.
[  150.709111][ T9808] netlink: 'syz.0.1300': attribute type 12 has an invalid length.
[  150.713257][ T9807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  151.300986][ T9829] netlink: 'syz.0.1309': attribute type 39 has an invalid length.
[  151.357829][ T9832] IPv6: Can't replace route, no match found
[  152.382553][ T9865] IPv6: NLM_F_REPLACE set, but no existing node found!
[  152.593078][ T9872] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  152.868143][ T9903] IPv6: Can't replace route, no match found
[  152.936911][ T9909] netlink: 'syz.0.1338': attribute type 1 has an invalid length.
[  152.969735][ T9911] __nla_validate_parse: 23 callbacks suppressed
[  152.969750][ T9911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1339'.
[  152.984899][ T9911] bridge1: port 1(veth0_to_bond) entered blocking state
[  152.987335][ T9911] bridge1: port 1(veth0_to_bond) entered disabled state
[  152.989642][ T9911] veth0_to_bond: entered allmulticast mode
[  152.992563][ T9911] veth0_to_bond: entered promiscuous mode
[  153.128129][ T9923] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  153.360247][ T9943] IPv6: Can't replace route, no match found
[  153.412852][   T33] audit: type=1800 audit(1754851424.987:2): pid=9947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1353" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=2628 res=0 errno=0
[  153.475032][ T9951] netlink: 'syz.2.1355': attribute type 32 has an invalid length.
[  153.521265][ T9957] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1357'.
[  153.554993][  T714] wlan1: Trigger new scan to find an IBSS to join
[  153.643559][ T9974] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1363'.
[  153.799739][ T9995] IPv6: Can't replace route, no match found
[  153.838046][ T9999] IPv6: NLM_F_REPLACE set, but no existing node found!
[  153.907843][T10008] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1376'.
[  154.000109][T10012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1378'.
[  154.195577][T10029] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1383'.
[  154.199556][T10029] openvswitch: netlink: Flow key attr not present in new flow.
[  154.280932][T10033] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1385'.
[  154.314209][T10037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1386'.
[  154.366036][T10042] IPv6: Can't replace route, no match found
[  154.447372][T10045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1391'.
[  154.475106][ T6255] wlan1: Creating new IBSS network, BSSID ae:31:10:4e:aa:ea
[  154.484304][T10045] netlink: 'syz.2.1391': attribute type 1 has an invalid length.
[  154.487594][T10045] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1391'.
[  154.827789][ T6255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.831070][ T6255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.894100][T10076] IPv6: NLM_F_REPLACE set, but no existing node found!
[  155.454820][T10115] IPv6: Can't replace route, no match found
[  155.535477][T10120] IPv6: NLM_F_REPLACE set, but no existing node found!
[  155.537974][T10121] netlink: 'syz.0.1418': attribute type 3 has an invalid length.
[  155.728413][T10142] netlink: 'syz.2.1427': attribute type 10 has an invalid length.
[  155.734272][T10142] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  155.738768][T10139] netlink: 'syz.0.1425': attribute type 4 has an invalid length.
[  155.778015][   T13] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  155.781036][   T13] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  155.784027][   T13] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  155.789145][T10142] netlink: 'syz.2.1427': attribute type 12 has an invalid length.
[  155.792806][T10141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  155.798081][   T13] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  156.564829][T10174] IPv6: NLM_F_REPLACE set, but no existing node found!
[  156.583472][T10177] syzkaller0: entered promiscuous mode
[  156.587358][T10177] syzkaller0: entered allmulticast mode
[  156.729246][T10182] lo speed is unknown, defaulting to 1000
[  156.990205][T10190] lo speed is unknown, defaulting to 1000
[  157.506322][T10204] IPVS: length: 49 != 24
[  157.552197][T10207] IPv6: Can't replace route, no match found
[  157.786563][ T6255] wlan1: Trigger new scan to find an IBSS to join
[  158.014132][T10219] IPv6: NLM_F_REPLACE set, but no existing node found!
[  158.172733][T10225] __nla_validate_parse: 10 callbacks suppressed
[  158.172747][T10225] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1458'.
[  158.178400][T10225] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1458'.
[  158.673495][T10243] IPv6: NLM_F_REPLACE set, but no existing node found!
[  158.742616][T10245] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1467'.
[  158.884926][T10248] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  159.167440][T10255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1470'.
[  159.729312][T10239] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1464'.
[  159.743554][T10255] ip6gretap0: entered promiscuous mode
[  159.762094][T10255] ip6gretap0: left promiscuous mode
[  159.787693][T10254] lo speed is unknown, defaulting to 1000
[  159.901291][T10267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1473'.
[  159.904206][T10267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1473'.
[  159.909792][T10267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1473'.
[  159.947972][T10269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1476'.
[  160.576484][T10294] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1483'.
[  160.755704][  T714] wlan1: Trigger new scan to find an IBSS to join
[  161.052819][T10285] netlink: 'syz.2.1480': attribute type 1 has an invalid length.
[  161.312318][T10321] netlink: 'syz.0.1495': attribute type 1 has an invalid length.
[  161.484897][T10352] syzkaller1: entered allmulticast mode
[  161.504271][T10352] syzkaller1: left allmulticast mode
[  161.516249][T10352] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  161.535408][T10352] syzkaller0: entered promiscuous mode
[  161.537546][T10352] syzkaller0: entered allmulticast mode
[  161.558144][T10350] tipc: Resetting bearer <eth:syzkaller0>
[  161.575540][T10350] tipc: Disabling bearer <eth:syzkaller0>
[  161.703172][T10369] openvswitch: netlink: EtherType 0 is less than min 600
[  161.932142][T10384] IPv6: NLM_F_REPLACE set, but no existing node found!
[  162.067744][T10395] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  162.807753][ T6255] wlan1: Creating new IBSS network, BSSID 16:3b:41:c0:2a:da
[  163.119350][T10453] IPv6: Can't replace route, no match found
[  163.329822][T10465] lo speed is unknown, defaulting to 1000
[  163.476465][T10472] __nla_validate_parse: 19 callbacks suppressed
[  163.476478][T10472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1539'.
[  163.509622][T10471] lo speed is unknown, defaulting to 1000
[  163.767697][T10480] veth1_vlan: entered allmulticast mode
[  163.770142][T10480] macvlan1: left allmulticast mode
[  163.772306][T10480] veth1_vlan: left allmulticast mode
[  163.949139][T10484] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  164.068600][T10495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1546'.
[  164.148634][T10497] netlink: 'syz.1.1547': attribute type 10 has an invalid length.
[  164.178796][T10497] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1547'.
[  164.212505][T10497] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1547'.
[  164.227088][T10497] netlink: 'syz.1.1547': attribute type 12 has an invalid length.
[  164.229676][T10497] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1547'.
[  164.235598][T10496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  164.942150][T10539] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1561'.
[  164.945141][T10539] netem: unknown loss type 0
[  164.946921][T10539] netem: change failed
[  164.982768][T10542] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1562'.
[  165.161741][T10553] IPv6: NLM_F_REPLACE set, but no existing node found!
[  165.470433][T10572] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1574'.
[  165.676622][T10582] bond0: option xmit_hash_policy: invalid value (8)
[  165.677773][T10580] netlink: 'syz.2.1577': attribute type 4 has an invalid length.
[  165.681854][T10580] netlink: 14345 bytes leftover after parsing attributes in process `syz.2.1577'.
[  165.752198][T10589] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1582'.
[  165.787396][T10594] IPv6: NLM_F_REPLACE set, but no existing node found!
[  165.821658][T10590] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  166.091402][T10597] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  166.097765][T10597] syzkaller0: MTU too low for tipc bearer
[  166.099821][T10597] tipc: Disabling bearer <eth:syzkaller0>
[  166.263380][T10621] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  166.410568][T10632] netlink: 'syz.2.1597': attribute type 16 has an invalid length.
[  166.413715][T10632] netlink: 'syz.2.1597': attribute type 17 has an invalid length.
[  166.446692][T10632] tipc: Resetting bearer <eth:syzkaller0>
[  166.480968][T10632] IPv6: NLM_F_REPLACE set, but no existing node found!
[  167.553072][T10699] gretap1: entered promiscuous mode
[  167.748554][T10704] IPv6: NLM_F_REPLACE set, but no existing node found!
[  168.022156][T10718] netem: unknown loss type 0
[  168.024138][T10718] netem: change failed
[  168.224338][ T5869] Bluetooth: hci2: link tx timeout
[  168.229494][ T5869] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  168.233998][ T5869] Bluetooth: hci2: link tx timeout
[  168.236199][ T5869] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  168.454597][T10743] nbd1: detected capacity change from 0 to 127
[  168.507798][T10750] netlink: 'syz.0.1638': attribute type 12 has an invalid length.
[  168.774933][T10755] __nla_validate_parse: 46 callbacks suppressed
[  168.774955][T10755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1640'.
[  168.859466][T10763] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  168.862111][T10763] IPv6: NLM_F_CREATE should be set when creating new route
[  168.897699][T10765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1643'.
[  168.909964][T10767] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1645'.
[  169.055789][   T56] block nbd1: Receive control failed (result -104)
[  169.211307][T10786] netlink: 'syz.0.1651': attribute type 2 has an invalid length.
[  169.214184][T10786] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1651'.
[  169.220919][T10786] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1651'.
[  169.334507][T10797] macvlan0: entered allmulticast mode
[  169.336971][T10797] veth1_vlan: entered allmulticast mode
[  169.340091][T10797] team0: Port device macvlan0 added
[  169.342671][T10799] veth1_vlan: left allmulticast mode
[  169.412369][T10807] netlink: 'syz.0.1661': attribute type 29 has an invalid length.
[  169.419288][T10807] netlink: 'syz.0.1661': attribute type 29 has an invalid length.
[  169.423362][T10807] netlink: 488 bytes leftover after parsing attributes in process `syz.0.1661'.
[  169.693363][T10824] IPv6: NLM_F_REPLACE set, but no existing node found!
[  170.212090][T10856] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1679'.
[  170.264698][ T5869] Bluetooth: hci2: command 0x0406 tx timeout
[  170.338935][T10864] netlink: 'syz.2.1683': attribute type 13 has an invalid length.
[  170.578755][T10831] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  170.635924][T10876] netlink: 'syz.1.1687': attribute type 23 has an invalid length.
[  170.663723][T10876] syz.1.1687: vmalloc error: size 4722688, failed to allocated page array size 9224, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  170.673256][T10876] CPU: 1 UID: 0 PID: 10876 Comm: syz.1.1687 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  170.673271][T10876] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  170.673278][T10876] Call Trace:
[  170.673282][T10876]  <TASK>
[  170.673288][T10876]  dump_stack_lvl+0x189/0x250
[  170.673305][T10876]  ? __pfx_dump_stack_lvl+0x10/0x10
[  170.673314][T10876]  ? __pfx__printk+0x10/0x10
[  170.673326][T10876]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  170.673337][T10876]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  170.673347][T10876]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  170.673357][T10876]  warn_alloc+0x214/0x310
[  170.673372][T10876]  ? __pfx_warn_alloc+0x10/0x10
[  170.673387][T10876]  ? __get_vm_area_node+0x28f/0x300
[  170.673398][T10876]  ? bpf_prog_alloc_no_stats+0x4a/0x4b0
[  170.673411][T10876]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  170.673431][T10876]  ? futex_unqueue+0x22/0x240
[  170.673440][T10876]  ? futex_unqueue+0x22/0x240
[  170.673450][T10876]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  170.673466][T10876]  ? __futex_wait+0x1d1/0x3e0
[  170.673482][T10876]  ? __futex_wait+0x34f/0x3e0
[  170.673502][T10876]  ? bpf_prog_alloc_no_stats+0x4a/0x4b0
[  170.673517][T10876]  __vmalloc_noprof+0xb1/0xf0
[  170.673536][T10876]  ? bpf_prog_alloc_no_stats+0x4a/0x4b0
[  170.673556][T10876]  bpf_prog_alloc_no_stats+0x4a/0x4b0
[  170.673576][T10876]  bpf_prog_alloc+0x3c/0x1a0
[  170.673594][T10876]  bpf_prog_load+0x735/0x1930
[  170.673620][T10876]  ? __pfx_bpf_prog_load+0x10/0x10
[  170.673654][T10876]  ? bpf_lsm_bpf+0x9/0x20
[  170.673674][T10876]  ? security_bpf+0x7e/0x300
[  170.673685][T10876]  __sys_bpf+0x528/0x870
[  170.673696][T10876]  ? __pfx___sys_bpf+0x10/0x10
[  170.673712][T10876]  ? __pfx___se_sys_futex+0x10/0x10
[  170.673727][T10876]  __x64_sys_bpf+0x7c/0x90
[  170.673736][T10876]  do_syscall_64+0xfa/0x3b0
[  170.673748][T10876]  ? lockdep_hardirqs_on+0x9c/0x150
[  170.673757][T10876]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.673765][T10876]  ? exc_page_fault+0x9f/0xf0
[  170.673774][T10876]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.673782][T10876] RIP: 0033:0x7fb000b8ebe9
[  170.673802][T10876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  170.673809][T10876] RSP: 002b:00007fb001ad9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  170.673819][T10876] RAX: ffffffffffffffda RBX: 00007fb000db5fa0 RCX: 00007fb000b8ebe9
[  170.673824][T10876] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005
[  170.673830][T10876] RBP: 00007fb000c11e19 R08: 0000000000000000 R09: 0000000000000000
[  170.673834][T10876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  170.673839][T10876] R13: 00007fb000db6038 R14: 00007fb000db5fa0 R15: 00007ffca4b12c78
[  170.673851][T10876]  </TASK>
[  170.673855][T10876] Mem-Info:
[  170.721830][T10883] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1689'.
[  170.723403][T10876] active_anon:4847 inactive_anon:0 isolated_anon:0
[  170.723403][T10876]  active_file:1497 inactive_file:38255 isolated_file:0
[  170.723403][T10876]  unevictable:1768 dirty:65 writeback:0
[  170.723403][T10876]  slab_reclaimable:10037 slab_unreclaimable:89065
[  170.723403][T10876]  mapped:19523 shmem:2416 pagetables:1212
[  170.723403][T10876]  sec_pagetables:0 bounce:0
[  170.723403][T10876]  kernel_misc_reclaimable:0
[  170.723403][T10876]  free:257560 free_pcp:20486 free_cma:0
[  170.783370][T10876] Node 0 active_anon:11240kB inactive_anon:0kB active_file:3952kB inactive_file:135780kB unevictable:3536kB isolated(anon):0kB isolated(file):68kB mapped:36676kB dirty:104kB writeback:0kB shmem:4852kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5324kB pagetables:2412kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  170.807757][T10876] Node 1 active_anon:8148kB inactive_anon:0kB active_file:1968kB inactive_file:17172kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:41348kB dirty:156kB writeback:0kB shmem:4812kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6820kB pagetables:2368kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  170.818199][T10876] Node 0 DMA free:14964kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:372kB local_pcp:0kB free_cma:0kB
[  170.827028][T10876] lowmem_reserve[]: 0 811 811 811 811
[  170.829069][T10876] Node 0 DMA32 free:227944kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11172kB inactive_anon:0kB active_file:3952kB inactive_file:135168kB unevictable:3536kB writepending:104kB present:1556484kB managed:831000kB mlocked:0kB bounce:0kB free_pcp:36776kB local_pcp:16104kB free_cma:0kB
[  170.839232][T10876] lowmem_reserve[]: 0 0 0 0 0
[  170.840776][T10876] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  170.850889][T10876] lowmem_reserve[]: 0 0 854 854 854
[  170.852611][T10876] Node 1 Normal free:326348kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8148kB inactive_anon:0kB active_file:1968kB inactive_file:17172kB unevictable:3536kB writepending:156kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:46068kB local_pcp:28480kB free_cma:0kB
[  170.862501][T10876] lowmem_reserve[]: 0 0 0 0 0
[  170.864009][T10876] Node 0 DMA: 7*4kB (U) 7*8kB (U) 6*16kB (U) 6*32kB (U) 6*64kB (U) 7*128kB (U) 6*256kB (U) 7*512kB (U) 6*1024kB (U) 1*2048kB (M) 0*4096kB = 14964kB
[  170.869201][T10876] Node 0 DMA32: 1025*4kB (UM) 746*8kB (UME) 429*16kB (UME) 799*32kB (UM) 426*64kB (UM) 227*128kB (UME) 99*256kB (UME) 82*512kB (UME) 53*1024kB (UM) 4*2048kB (U) 0*4096kB = 228612kB
[  170.875182][T10876] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  170.880603][T10876] Node 1 Normal: 1305*4kB (UME) 787*8kB (UME) 435*16kB (UME) 639*32kB (UME) 378*64kB (UME) 105*128kB (UM) 134*256kB (UME) 149*512kB (UM) 120*1024kB (UM) 2*2048kB (UM) 3*4096kB (UM) = 326412kB
[  170.887629][T10876] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  170.890891][T10876] Node 1 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB
[  170.894147][T10876] 42168 total pagecache pages
[  170.895756][T10876] 0 pages in swap cache
[  170.897114][T10876] Free swap  = 124996kB
[  170.898401][T10876] Total swap = 124996kB
[  170.899736][T10876] 786301 pages RAM
[  170.900946][T10876] 0 pages HighMem/MovableOnly
[  170.902483][T10876] 241319 pages reserved
[  170.903895][T10876] 0 pages cma reserved
[  170.975541][T10888] IPv6: NLM_F_REPLACE set, but no existing node found!
[  171.102179][T10900] openvswitch: netlink: ufid size 18 bytes exceeds the range (1, 16)
[  171.108008][T10900] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  171.220133][T10910] IPv6: NLM_F_REPLACE set, but no existing node found!
[  171.301135][T10917] bond0: (slave rose0): Enslaving as an active interface with an up link
[  171.417737][T10932] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1712'.
[  171.455437][T10936] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  171.458964][T10935] IPVS: stopping backup sync thread 10936 ...
[  171.619665][T10947] gre0: left promiscuous mode
[  171.621732][T10947] gre0: left allmulticast mode
[  171.644640][T10947] 8021q: adding VLAN 0 to HW filter on device bond0
[  171.647992][T10947] 8021q: adding VLAN 0 to HW filter on device team0
[  171.653215][T10947] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  171.667538][T10947] veth0_to_team: entered promiscuous mode
[  171.670014][T10947] veth0_to_team: entered allmulticast mode
[  171.710078][T10949] netlink: 'syz.2.1718': attribute type 1 has an invalid length.
[  171.713309][T10949] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1718'.
[  171.789005][   T60] block nbd1: Connection timed out, retrying (0/1 alive)
[  171.792536][   T60] block nbd1: Connection timed out, retrying (0/1 alive)
[  171.796555][   T60] block nbd1: Connection timed out, retrying (0/1 alive)
[  171.799398][   T60] block nbd1: Connection timed out, retrying (0/1 alive)
[  171.808988][   T60] block nbd1: Dead connection, failed to find a fallback
[  171.813131][   T60] block nbd1: shutting down sockets
[  171.815143][   T60] blk_print_req_error: 27 callbacks suppressed
[  171.815154][   T60] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  171.822671][   T60] buffer_io_error: 27 callbacks suppressed
[  171.822682][   T60] Buffer I/O error on dev nbd1, logical block 3, async page read
[  171.828725][   T60] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  171.832549][   T60] Buffer I/O error on dev nbd1, logical block 2, async page read
[  171.836187][   T60] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  171.839696][   T60] Buffer I/O error on dev nbd1, logical block 1, async page read
[  171.842665][   T60] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  171.846499][   T60] Buffer I/O error on dev nbd1, logical block 0, async page read
[  171.851684][T10227] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  171.856269][T10227] Buffer I/O error on dev nbd1, logical block 0, async page read
[  171.859581][T10227] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  171.863173][T10227] Buffer I/O error on dev nbd1, logical block 1, async page read
[  171.866550][T10227] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  171.870427][T10227] Buffer I/O error on dev nbd1, logical block 2, async page read
[  171.873589][T10227] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  171.878242][T10227] Buffer I/O error on dev nbd1, logical block 3, async page read
[  171.881577][T10227] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  171.889735][T10227] Buffer I/O error on dev nbd1, logical block 0, async page read
[  171.893074][T10227] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  171.897482][T10227] Buffer I/O error on dev nbd1, logical block 1, async page read
[  171.903819][T10227] ldm_validate_partition_table(): Disk read failed.
[  171.911545][T10227] Dev nbd1: unable to read RDB block 0
[  171.917033][T10227]  nbd1: unable to read partition table
[  171.926286][T10227] ldm_validate_partition_table(): Disk read failed.
[  171.930456][T10227] Dev nbd1: unable to read RDB block 0
[  171.933822][T10227]  nbd1: unable to read partition table
[  171.938694][T10955] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  172.093349][T10963] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  172.097008][T10963] syzkaller0: entered promiscuous mode
[  172.098752][T10963] syzkaller0: entered allmulticast mode
[  172.101731][T10965] netlink: 'syz.2.1725': attribute type 3 has an invalid length.
[  172.105675][T10966] netlink: 'syz.2.1725': attribute type 3 has an invalid length.
[  172.121111][T10963] tipc: Resetting bearer <eth:syzkaller0>
[  172.123820][T10965] syz_tun: entered allmulticast mode
[  172.128783][T10962] tipc: Resetting bearer <eth:syzkaller0>
[  172.140793][T10962] tipc: Disabling bearer <eth:syzkaller0>
[  172.151103][T10965] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  172.165664][T10964] syz_tun: left allmulticast mode
[  172.345689][ T5869] Bluetooth: hci2: command 0x0406 tx timeout
[  172.371014][T10980] lo speed is unknown, defaulting to 1000
[  172.473048][T10991] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  172.477177][T10991] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  173.267022][T11005] IPv6: Can't replace route, no match found
[  173.396196][T11015] netlink: 'syz.2.1743': attribute type 5 has an invalid length.
[  173.613610][T11019] netlink: 'syz.0.1745': attribute type 10 has an invalid length.
[  173.625507][T11019] team0: Port device geneve0 added
[  173.628114][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  173.631461][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  173.636460][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  173.640303][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  173.957570][T11041] IPv6: sit1: Disabled Multicast RS
[  174.397684][T11047] netlink: 'syz.1.1755': attribute type 1 has an invalid length.
[  174.415048][T11047] 8021q: adding VLAN 0 to HW filter on device bond3
[  174.421163][T11047] __nla_validate_parse: 7 callbacks suppressed
[  174.421172][T11047] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1755'.
[  174.470256][T11053] IPv6: Can't replace route, no match found
[  174.499254][T11055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1757'.
[  174.502014][T11055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1757'.
[  174.504989][T11055] netlink: 38 bytes leftover after parsing attributes in process `syz.2.1757'.
[  174.548077][T11059] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1759'.
[  174.551037][T11059] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1759'.
[  174.856825][T11079] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1768'.
[  174.945157][T11087] bridge0: port 3(veth0_to_team) entered blocking state
[  174.948684][T11087] bridge0: port 3(veth0_to_team) entered disabled state
[  174.951370][T11087] veth0_to_team: entered allmulticast mode
[  174.953402][T11092] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1771'.
[  174.958132][T11087] veth0_to_team: entered promiscuous mode
[  175.010393][T11100] netlink: 'syz.0.1774': attribute type 29 has an invalid length.
[  175.307955][T11117] IPv6: sit2: Disabled Multicast RS
[  175.335316][T11119] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1778'.
[  175.407320][T11123] netlink: 'syz.1.1780': attribute type 10 has an invalid length.
[  175.413886][T11123] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1780'.
[  175.429726][T11123] netlink: 'syz.1.1780': attribute type 12 has an invalid length.
[  175.434027][T11122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  175.507391][T11132] netlink: 'syz.0.1783': attribute type 1 has an invalid length.
[  175.568603][T11136] vlan2: entered promiscuous mode
[  175.570902][T11136] vlan2: entered allmulticast mode
[  176.132555][T11184] Bluetooth: MGMT ver 1.23
[  176.142895][T11186] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  176.200441][T11196] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  176.210296][T11196] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  176.484385][T11213] IPv6: Can't replace route, no match found
[  176.717313][T11230] macvlan2: entered promiscuous mode
[  176.719533][T11230] hsr0: entered promiscuous mode
[  176.721681][T11230] macvlan2: entered allmulticast mode
[  176.723775][T11230] hsr0: entered allmulticast mode
[  176.727448][T11230] hsr_slave_0: entered allmulticast mode
[  176.729759][T11230] hsr_slave_1: entered allmulticast mode
[  176.769424][T11236] trusted_key: syz.2.1830 sent an empty control message without MSG_MORE.
[  177.042005][T11261] erspan0: entered promiscuous mode
[  177.044942][T11261] erspan0: entered allmulticast mode
[  177.893985][T11332] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  177.903232][T11332] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  179.016102][T11396] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  179.018363][T11398] IPv6: Can't replace route, no match found
[  179.165034][T11409] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  179.168676][T11409] syzkaller0: entered promiscuous mode
[  179.171418][T11409] syzkaller0: entered allmulticast mode
[  179.197449][T11409] tipc: Resetting bearer <eth:syzkaller0>
[  179.203845][T11407] tipc: Resetting bearer <eth:syzkaller0>
[  179.217336][T11407] tipc: Disabling bearer <eth:syzkaller0>
[  179.461621][T11427] __nla_validate_parse: 29 callbacks suppressed
[  179.461752][T11427] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1904'.
[  179.541164][T11436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1908'.
[  179.546519][T11436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1908'.
[  179.577861][T11437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1907'.
[  179.581514][T11437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1907'.
[  179.586119][T11437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1907'.
[  179.711102][T11448] validate_nla: 5 callbacks suppressed
[  179.711118][T11448] netlink: 'syz.0.1912': attribute type 1 has an invalid length.
[  179.718423][T11448] netlink: 'syz.0.1912': attribute type 2 has an invalid length.
[  179.722677][T11448] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1912'.
[  179.777006][T11453] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1915'.
[  179.819101][T11456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1916'.
[  180.089754][T11470] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  180.235838][T11479] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1926'.
[  180.330251][T11483] netlink: 'syz.0.1928': attribute type 10 has an invalid length.
[  180.350519][T11483] netlink: 'syz.0.1928': attribute type 12 has an invalid length.
[  180.358171][T11482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  180.746689][T11496] IPv6: NLM_F_REPLACE set, but no existing node found!
[  181.369251][T11539] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  181.676792][T11566] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  181.679054][T11566] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  181.758114][T11577] netlink: 'syz.0.1964': attribute type 16 has an invalid length.
[  181.760899][T11577] netlink: 'syz.0.1964': attribute type 17 has an invalid length.
[  181.790556][T11577] 8021q: adding VLAN 0 to HW filter on device bond0
[  181.795667][T11577] 8021q: adding VLAN 0 to HW filter on device team0
[  181.799864][T11577] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  181.806021][  T974] lo speed is unknown, defaulting to 1000
[  181.807328][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  181.808293][  T974] syz0: Port: 1 Link ACTIVE
[  181.813939][  T974] lo speed is unknown, defaulting to 1000
[  182.652908][T11588] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  182.657215][T11588] syzkaller0: entered promiscuous mode
[  182.659483][T11588] syzkaller0: entered allmulticast mode
[  182.690487][T11587] tipc: Resetting bearer <eth:syzkaller0>
[  182.709869][T11587] tipc: Disabling bearer <eth:syzkaller0>
[  182.912770][T11610] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  183.179507][T11636] netlink: 'syz.0.1984': attribute type 1 has an invalid length.
[  183.182555][T11636] netlink: 'syz.0.1984': attribute type 2 has an invalid length.
[  183.469449][T11660] IPv6: Can't replace route, no match found
[  183.532901][T11663] netlink: 'syz.1.1996': attribute type 9 has an invalid length.
[  183.718507][T11687] IPv6: Can't replace route, no match found
[  183.918881][T11700] netlink: 'syz.2.2011': attribute type 10 has an invalid length.
[  183.938782][T11698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  184.476630][T11710] IPv6: NLM_F_REPLACE set, but no existing node found!
[  184.536820][T11720] __nla_validate_parse: 29 callbacks suppressed
[  184.536838][T11720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2016'.
[  184.556778][T11720] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  184.559982][T11720] team0: Device ipvlan3 is already an upper device of the team interface
[  184.589088][T11723] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2016'.
[  184.771347][T11738] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2023'.
[  184.812301][T11742] IPv6: NLM_F_REPLACE set, but no existing node found!
[  184.861219][T11747] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2027'.
[  184.861242][T11748] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2027'.
[  184.910644][T11745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2026'.
[  185.015427][T11757] syz_tun: entered allmulticast mode
[  185.019264][T11757] syz_tun: left allmulticast mode
[  185.114465][T11763] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2032'.
[  185.197425][T11767] validate_nla: 1 callbacks suppressed
[  185.197442][T11767] netlink: 'syz.0.2035': attribute type 1 has an invalid length.
[  185.202763][T11767] netlink: 'syz.0.2035': attribute type 2 has an invalid length.
[  185.216259][T11767] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2035'.
[  185.300956][T11773] netlink: 'syz.0.2036': attribute type 21 has an invalid length.
[  185.303949][T11773] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2036'.
[  185.307820][T11773] netlink: 'syz.0.2036': attribute type 4 has an invalid length.
[  185.310662][T11773] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2036'.
[  185.446190][T11791] netlink: 'syz.0.2042': attribute type 1 has an invalid length.
[  185.449718][T11791] netlink: 'syz.0.2042': attribute type 2 has an invalid length.
[  185.545471][   T64] wlan0: Trigger new scan to find an IBSS to join
[  185.822198][   T33] audit: type=1800 audit(1754851457.397:3): pid=11834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2055" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=2782 res=0 errno=0
[  185.940751][T11842] netlink: 'syz.1.2059': attribute type 10 has an invalid length.
[  185.959774][T11842] netlink: 'syz.1.2059': attribute type 12 has an invalid length.
[  185.966978][T11841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  187.504203][T11884] IPv6: Can't replace route, no match found
[  187.589840][T11894] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  187.611719][T11897] openvswitch: netlink: Flow actions attr not present in new flow.
[  187.781623][T11913] netlink: 'syz.0.2085': attribute type 10 has an invalid length.
[  187.796669][T11913] netlink: 'syz.0.2085': attribute type 12 has an invalid length.
[  187.801200][T11911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  187.976452][T11927] IPv6: NLM_F_REPLACE set, but no existing node found!
[  188.404258][T11969] IPv6: NLM_F_REPLACE set, but no existing node found!
[  188.504971][T11816] wlan0: Trigger new scan to find an IBSS to join
[  188.651826][T11991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  188.657786][T11996] sctp: [Deprecated]: syz.2.2112 (pid 11996) Use of int in max_burst socket option.
[  188.657786][T11996] Use struct sctp_assoc_value instead
[  188.667653][T11996] hsr_slave_0: left promiscuous mode
[  188.670327][T11996] hsr_slave_1: left promiscuous mode
[  188.808915][T12009] netlink: 'syz.0.2118': attribute type 11 has an invalid length.
[  188.816502][T12011] IPv6: NLM_F_REPLACE set, but no existing node found!
[  188.960535][T12024] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  188.978374][T12024] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  189.196332][T12049] tipc: Can't bind to reserved service type 2
[  189.198367][T12048] IPv6: Can't replace route, no match found
[  189.399944][T11816] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  189.609271][T12087] syzkaller0: entered promiscuous mode
[  189.611147][T12087] syzkaller0: entered allmulticast mode
[  189.712702][T12091] lo speed is unknown, defaulting to 1000
[  189.852988][T12101] IPv6: NLM_F_REPLACE set, but no existing node found!
[  190.069071][   T33] audit: type=1800 audit(1754851461.647:4): pid=12106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2156" name="memory.events" dev="tmpfs" ino=2963 res=0 errno=0
[  190.078190][   T33] audit: type=1804 audit(1754851461.657:5): pid=12106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2156" name="/newroot/582/memory.events" dev="tmpfs" ino=2963 res=1 errno=0
[  190.087493][   T33] audit: type=1804 audit(1754851461.667:6): pid=12106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2156" name="/newroot/582/memory.events" dev="tmpfs" ino=2963 res=1 errno=0
[  190.095699][   T33] audit: type=1800 audit(1754851461.667:7): pid=12106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2156" name="memory.events" dev="tmpfs" ino=2963 res=0 errno=0
[  190.146059][T12109] IPv6: Can't replace route, no match found
[  190.463494][T12131] __nla_validate_parse: 38 callbacks suppressed
[  190.463509][T12131] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2165'.
[  190.611291][T12151] IPv6: NLM_F_REPLACE set, but no existing node found!
[  190.760052][T12160] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2175'.
[  190.908977][   T54] Bluetooth: hci0: command 0x0406 tx timeout
[  190.910678][ T5864] Bluetooth: hci1: command 0x0406 tx timeout
[  191.942949][T12174] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2181'.
[  192.024797][T12180] validate_nla: 5 callbacks suppressed
[  192.024808][T12180] netlink: 'syz.0.2183': attribute type 10 has an invalid length.
[  192.030317][T12180] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2183'.
[  192.051755][T12180] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2183'.
[  192.068669][T12180] netlink: 'syz.0.2183': attribute type 12 has an invalid length.
[  192.085301][T12180] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2183'.
[  192.097936][T12178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  192.887928][T12193] : entered promiscuous mode
[  193.123133][T12198] netlink: 'syz.1.2190': attribute type 13 has an invalid length.
[  193.127197][T12198] netlink: 'syz.1.2190': attribute type 17 has an invalid length.
[  193.138576][T12198] erspan0: left promiscuous mode
[  193.140524][T12198] erspan0: left allmulticast mode
[  193.148130][T12202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2191'.
[  193.151506][T12202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2191'.
[  193.155554][T12198] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  193.174713][T12202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2191'.
[  193.231196][T12198] lo speed is unknown, defaulting to 1000
[  193.437898][T12208] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2193'.
[  193.741197][T12220] : entered promiscuous mode
[  193.796235][T12222] IPv6: Can't replace route, no match found
[  193.949426][ T1366] ieee802154 phy1 wpan1: encryption failed: -22
[  194.818387][T12284] netlink: 'syz.2.2221': attribute type 1 has an invalid length.
[  194.826638][T12284] bridge3: the hash_elasticity option has been deprecated and is always 16
[  194.937063][T12286] netlink: 'syz.0.2222': attribute type 1 has an invalid length.
[  194.939750][T12286] netlink: 'syz.0.2222': attribute type 2 has an invalid length.
[  194.981253][T12289] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  194.987370][T12289] syzkaller0: entered promiscuous mode
[  194.989758][T12289] syzkaller0: entered allmulticast mode
[  195.008028][T12289] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.013712][T12289] tipc: Resetting bearer <eth:syzkaller0>
[  195.022227][T12288] tipc: Resetting bearer <eth:syzkaller0>
[  195.033431][T12288] tipc: Disabling bearer <eth:syzkaller0>
[  195.105118][T12291] IPv6: NLM_F_REPLACE set, but no existing node found!
[  195.284303][T12304] IPv6: Can't replace route, no match found
[  195.285780][T12302] syzkaller0: entered promiscuous mode
[  195.288581][T12302] syzkaller0: entered allmulticast mode
[  197.028525][T12348] pim6reg: entered allmulticast mode
[  197.032901][T12348] pim6reg: left allmulticast mode
[  197.494325][T12353] ip6gretap0: entered promiscuous mode
[  197.497607][T12353] macsec1: entered allmulticast mode
[  197.499343][T12353] ip6gretap0: entered allmulticast mode
[  197.502723][T12353] ip6gretap0: left allmulticast mode
[  197.504339][T12353] ip6gretap0: left promiscuous mode
[  197.607738][T12357] __nla_validate_parse: 11 callbacks suppressed
[  197.607758][T12357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2246'.
[  197.613601][T12357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2246'.
[  197.620045][T12357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2246'.
[  197.628179][T12359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2247'.
[  197.665808][T12366] IPv6: Can't replace route, no match found
[  197.700541][T12368] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2250'.
[  197.744391][T12372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2252'.
[  197.749890][T12373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2252'.
[  197.974473][T12385] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2257'.
[  197.980145][T12387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  198.171002][T12395] netlink: 'syz.0.2261': attribute type 10 has an invalid length.
[  198.176280][T12395] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2261'.
[  198.183263][T12395] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2261'.
[  198.191455][T12395] netlink: 'syz.0.2261': attribute type 12 has an invalid length.
[  198.198345][T12394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  198.623509][T12402] IPv6: NLM_F_REPLACE set, but no existing node found!
[  199.162117][T12429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  199.172419][T12429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  199.178949][T12429] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  199.183603][T12429] bond0 (unregistering): Released all slaves
[  199.399563][T12449] IPv6: Can't replace route, no match found
[  199.584057][T12465] netlink: 'syz.0.2285': attribute type 10 has an invalid length.
[  199.603056][T12465] netlink: 'syz.0.2285': attribute type 12 has an invalid length.
[  199.609124][T12464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  200.274480][T12483] C: renamed from lo
[  200.279196][T12483] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  200.352355][T12483] lo speed is unknown, defaulting to 1000
[  200.792425][T12520] netlink: 'syz.0.2307': attribute type 1 has an invalid length.
[  200.797418][T12520] netlink: 'syz.0.2307': attribute type 2 has an invalid length.
[  201.081562][T12542] geneve2: entered promiscuous mode
[  201.083604][ T5892] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  201.091222][ T5892] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  201.093692][ T5892] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  201.096739][ T5892] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  201.603439][T12563] netlink: 'syz.1.2323': attribute type 12 has an invalid length.
[  201.725813][T12571] IPv6: NLM_F_REPLACE set, but no existing node found!
[  201.767733][T12573] netlink: 'syz.1.2327': attribute type 1 has an invalid length.
[  201.836776][T12577] syzkaller0: entered promiscuous mode
[  201.838945][T12577] syzkaller0: entered allmulticast mode
[  202.015464][T12592] netlink: 'syz.1.2334': attribute type 10 has an invalid length.
[  202.042928][T12592] netlink: 'syz.1.2334': attribute type 12 has an invalid length.
[  202.048157][T12591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  202.176008][T12609] IPv6: Can't replace route, no match found
[  202.360625][T12619] IPv6: NLM_F_REPLACE set, but no existing node found!
[  202.558959][T12633] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  202.755677][T12644] hsr0: left allmulticast mode
[  202.757705][T12644] hsr_slave_0: left allmulticast mode
[  202.759996][T12644] hsr_slave_1: left allmulticast mode
[  202.762169][T12644] hsr0: left promiscuous mode
[  202.768792][T12644] macvlan2: left promiscuous mode
[  202.770971][T12644] macvlan2: left allmulticast mode
[  202.922970][T12657] IPv6: Can't replace route, no match found
[  203.198574][T12666] __nla_validate_parse: 29 callbacks suppressed
[  203.198595][T12666] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2363'.
[  203.321042][T12672] syz.1.2366 uses old SIOCAX25GETINFO
[  203.436270][T12681] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2369'.
[  203.439701][T12682] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2369'.
[  203.509942][T12688] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2371'.
[  203.554062][T12692] IPv6: NLM_F_REPLACE set, but no existing node found!
[  203.781102][T12702] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2379'.
[  203.879728][T12704] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  204.109477][T12709] IPv6: Can't replace route, no match found
[  204.378940][T12732] netlink: 'syz.0.2387': attribute type 17 has an invalid length.
[  204.381441][T12732] netlink: 'syz.0.2387': attribute type 27 has an invalid length.
[  204.405230][T12726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  204.407354][T12734] IPv6: NLM_F_REPLACE set, but no existing node found!
[  204.410544][T12726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  204.585291][T12742] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2394'.
[  205.015808][T12755] netlink: 'syz.0.2400': attribute type 10 has an invalid length.
[  205.021027][T12755] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2400'.
[  205.037040][T12755] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2400'.
[  205.044466][T12755] netlink: 'syz.0.2400': attribute type 12 has an invalid length.
[  205.048230][T12755] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2400'.
[  205.053999][T12754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  205.152806][T12762] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2403'.
[  205.159214][T12762] netlink: 'syz.1.2403': attribute type 1 has an invalid length.
[  205.526467][T12794] bridge_slave_0: entered allmulticast mode
[  205.772319][T12830] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  205.776944][T12829] syzkaller0: entered promiscuous mode
[  205.779193][T12829] syzkaller0: entered allmulticast mode
[  205.815336][T12830] tipc: Resetting bearer <eth:syzkaller0>
[  205.822787][T12828] tipc: Resetting bearer <eth:syzkaller0>
[  205.839118][T12828] tipc: Disabling bearer <eth:syzkaller0>
[  206.040484][T12851] netlink: 'syz.1.2432': attribute type 10 has an invalid length.
[  206.050741][T12851] netlink: 'syz.1.2432': attribute type 12 has an invalid length.
[  206.054256][T12850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  206.649381][T12886] IPv6: NLM_F_REPLACE set, but no existing node found!
[  206.695582][T12888] netlink: 'syz.1.2442': attribute type 1 has an invalid length.
[  206.726168][T12888] bond4: entered promiscuous mode
[  206.728799][T12888] 8021q: adding VLAN 0 to HW filter on device bond4
[  206.748045][T12888] bond4: (slave bridge3): making interface the new active one
[  206.751254][T12888] bridge3: entered promiscuous mode
[  206.756076][T12888] bond4: (slave bridge3): Enslaving as an active interface with an up link
[  206.990889][T12911] lo speed is unknown, defaulting to 1000
[  207.050046][T12918] netlink: 'syz.2.2451': attribute type 1 has an invalid length.
[  207.053430][T12918] netlink: 'syz.2.2451': attribute type 4 has an invalid length.
[  207.076541][T12918] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  207.206268][T12930] IPv6: Can't replace route, no match found
[  207.416362][T12945] IPv6: NLM_F_REPLACE set, but no existing node found!
[  207.894714][T12975] IPv6: Can't replace route, no match found
[  209.673973][T13010] netdevsim netdevsim0: Direct firmware load for .. failed with error -2
[  209.678566][T13010] netdevsim netdevsim0: Falling back to sysfs fallback for: ..
[  209.711305][T13013] netlink: 'syz.2.2482': attribute type 1 has an invalid length.
[  209.714352][T13013] __nla_validate_parse: 20 callbacks suppressed
[  209.714364][T13013] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2482'.
[  209.791508][T13021] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2485'.
[  210.101710][T13049] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2492'.
[  210.105343][T13049] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  210.409464][T13064] netlink: 'syz.1.2500': attribute type 10 has an invalid length.
[  210.413545][T13064] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2500'.
[  210.426938][T13064] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2500'.
[  210.432959][T13064] netlink: 'syz.1.2500': attribute type 12 has an invalid length.
[  210.436891][T13064] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2500'.
[  210.442010][T13063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  210.616448][T13070] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2503'.
[  211.032794][T13096] IPv6: Can't replace route, no match found
[  211.325270][T13117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2522'.
[  211.328548][T13117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2522'.
[  211.331876][T13117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2522'.
[  211.944068][T13148] IPv6: Can't replace route, no match found
[  212.417437][T13188] dummy0: entered promiscuous mode
[  212.420745][T13188] batadv_slave_1: entered promiscuous mode
[  212.423588][T13188] debugfs: 'hsr1' already exists in 'hsr'
[  212.426002][T13188] Cannot create hsr debugfs directory
[  212.428121][T13188] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network
[  212.431756][T13188] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network
[  212.540639][T13192] veth1: entered allmulticast mode
[  212.938865][T13220] IPv6: Can't replace route, no match found
[  213.068844][T13229] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  213.075412][T13229] syzkaller0: entered promiscuous mode
[  213.077712][T13229] syzkaller0: entered allmulticast mode
[  213.112105][T13229] tipc: Resetting bearer <eth:syzkaller0>
[  213.117354][T13226] tipc: Resetting bearer <eth:syzkaller0>
[  213.134480][T13226] tipc: Disabling bearer <eth:syzkaller0>
[  213.204306][T13237] batadv0: entered promiscuous mode
[  213.207414][T13237] batadv0: entered allmulticast mode
[  213.506930][T13265] IPv6: Can't replace route, no match found
[  213.639894][T13278] netlink: 'syz.1.2580': attribute type 10 has an invalid length.
[  213.657524][T13278] netlink: 'syz.1.2580': attribute type 12 has an invalid length.
[  213.662606][T13277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  214.832657][T13321] veth0_to_bond: left allmulticast mode
[  214.834483][T13321] veth0_to_bond: left promiscuous mode
[  214.838065][T13321] bridge1: port 1(veth0_to_bond) entered disabled state
[  214.849709][T13321] bond0: (slave wlan1): Releasing backup interface
[  214.853874][T13321] bond4: (slave bridge3): Releasing backup interface
[  214.855590][T13326] netlink: 'syz.2.2599': attribute type 10 has an invalid length.
[  214.856385][T13321] bridge3: left promiscuous mode
[  214.875054][T13326] __nla_validate_parse: 28 callbacks suppressed
[  214.875067][T13326] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2599'.
[  214.885674][T13326] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2599'.
[  214.891667][T13326] netlink: 'syz.2.2599': attribute type 12 has an invalid length.
[  214.901231][T13326] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2599'.
[  214.907538][T13323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  214.975493][T13330] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2602'.
[  215.144159][T13340] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2606'.
[  215.329872][T13356] IPv6: Can't replace route, no match found
[  215.523113][T13372] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  215.526644][T13372] syzkaller0: entered promiscuous mode
[  215.528621][T13372] syzkaller0: entered allmulticast mode
[  215.543637][T13372] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  215.645419][T13371] tipc: Resetting bearer <eth:syzkaller0>
[  215.666100][T13371] tipc: Disabling bearer <eth:syzkaller0>
[  215.694173][T13381] sctp: [Deprecated]: syz.2.2620 (pid 13381) Use of int in max_burst socket option.
[  215.694173][T13381] Use struct sctp_assoc_value instead
[  216.379149][T13393] netlink: 'syz.0.2623': attribute type 1 has an invalid length.
[  216.382293][T13393] netlink: 'syz.0.2623': attribute type 2 has an invalid length.
[  216.386372][T13393] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2623'.
[  216.527133][T13381] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  216.564897][T13403] netlink: 'syz.2.2628': attribute type 58 has an invalid length.
[  216.570610][T13403] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2628'.
[  216.589503][T13405] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  216.605341][T13407] netlink: 'syz.0.2629': attribute type 10 has an invalid length.
[  216.611804][T13407] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2629'.
[  216.620362][T13407] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2629'.
[  216.628986][T13407] netlink: 'syz.0.2629': attribute type 12 has an invalid length.
[  216.631802][T13407] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2629'.
[  216.635964][T13406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  216.686127][T13412] netlink: 'syz.2.2630': attribute type 4 has an invalid length.
[  217.323443][T13485] IPVS: Unknown mcast interface: vcan0
[  217.635380][T13520] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  217.637710][T13520] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  217.714785][ T5869] Bluetooth: hci2: command 0x0406 tx timeout
[  218.256445][T13536] netlink: ct family unspecified
[  218.258515][T13536] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  218.264092][T13536] netlink: 'syz.2.2677': attribute type 14 has an invalid length.
[  218.267453][T13536] netlink: 'syz.2.2677': attribute type 13 has an invalid length.
[  218.410802][T13550] tipc: New replicast peer: 0.0.0.0
[  218.413301][T13550] tipc: Enabled bearer <udp:syz2>, priority 10
[  218.416166][T13551] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  218.419441][T13550] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[  218.540483][T13564] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  218.543355][T13564] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  218.603318][T13568] netlink: 'syz.2.2689': attribute type 11 has an invalid length.
[  218.857705][T13592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  219.205104][T13608] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  219.209580][T13606] IPVS: stopping backup sync thread 13608 ...
[  219.675533][T13650] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  219.689991][T13652] IPv6: Can't replace route, no match found
[  219.816586][T13671] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  219.853771][T13670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  219.887409][T13669] __nla_validate_parse: 37 callbacks suppressed
[  219.887420][T13669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2729'.
[  219.925209][T13678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2733'.
[  220.049000][T13686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2736'.
[  220.052794][T13686] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2736'.
[  220.177327][T13696] validate_nla: 8 callbacks suppressed
[  220.177337][T13696] netlink: 'syz.2.2740': attribute type 15 has an invalid length.
[  220.212877][T13700] openvswitch: netlink: Key 6 has unexpected len 16 expected 2
[  220.243497][T13702] IPv6: Can't replace route, no match found
[  220.287967][T13708] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2744'.
[  220.328048][T13712] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2746'.
[  220.342944][T13714] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  220.541274][T13737] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  220.742331][T13756] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2761'.
[  221.201039][T13803] netlink: 'syz.0.2775': attribute type 1 has an invalid length.
[  221.204647][T13803] netlink: 'syz.0.2775': attribute type 1 has an invalid length.
[  221.207445][T13803] netlink: 'syz.0.2775': attribute type 1 has an invalid length.
[  221.211604][T13803] netlink: 'syz.0.2775': attribute type 1 has an invalid length.
[  221.220821][T13803] netlink: 'syz.0.2775': attribute type 1 has an invalid length.
[  221.223285][T13803] netlink: 'syz.0.2775': attribute type 1 has an invalid length.
[  221.230296][T13803] netlink: 'syz.0.2775': attribute type 1 has an invalid length.
[  221.232881][T13803] netlink: 'syz.0.2775': attribute type 1 has an invalid length.
[  221.236819][T13803] netlink: 'syz.0.2775': attribute type 1 has an invalid length.
[  221.367720][T13820] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2781'.
[  221.502655][T13825] lo speed is unknown, defaulting to 1000
[  221.608175][T13829] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2784'.
[  221.774867][T13843] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2789'.
[  222.106412][T11816] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  222.264362][T13875] NCSI netlink: No device for ifindex 0
[  222.339273][T13880] IPv6: Can't replace route, no match found
[  222.514848][T11816] wlan1: Trigger new scan to find an IBSS to join
[  222.672184][T13905] netlink: zone id is out of range
[  222.674299][T13905] netlink: zone id is out of range
[  222.684723][T13905] netlink: zone id is out of range
[  222.686614][T13905] netlink: zone id is out of range
[  222.688462][T13905] netlink: zone id is out of range
[  222.690067][T13905] netlink: zone id is out of range
[  222.691684][T13905] netlink: zone id is out of range
[  222.693849][T13905] netlink: zone id is out of range
[  222.696660][T13905] netlink: zone id is out of range
[  222.698680][T13905] netlink: zone id is out of range
[  223.265863][T13918] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  223.269089][T13918] bond0 (unregistering): Released all slaves
[  223.449338][T13924] IPv6: Can't replace route, no match found
[  223.642734][T13914] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  223.754185][T13943] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  223.759525][T13943] syzkaller0: entered promiscuous mode
[  223.761705][T13943] syzkaller0: entered allmulticast mode
[  223.799963][T13943] tipc: Resetting bearer <eth:syzkaller0>
[  223.805566][T13942] tipc: Resetting bearer <eth:syzkaller0>
[  223.823748][T13942] tipc: Disabling bearer <eth:syzkaller0>
[  224.127485][T13967] hsr_slave_1 (unregistering): left promiscuous mode
[  224.271514][T13989] IPv6: Can't replace route, no match found
[  224.341174][T13988] syzkaller0: entered promiscuous mode
[  224.342908][T13988] syzkaller0: entered allmulticast mode
[  224.826262][ T5861] Bluetooth: hci0: command 0x0406 tx timeout
[  225.531769][T14008] __nla_validate_parse: 11 callbacks suppressed
[  225.531786][T14008] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2852'.
[  225.549185][T11816] wlan1: Trigger new scan to find an IBSS to join
[  225.560158][T14012] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2853'.
[  225.801487][T14036] validate_nla: 61 callbacks suppressed
[  225.801503][T14036] netlink: 'syz.0.2862': attribute type 1 has an invalid length.
[  225.806523][T14036] netlink: 'syz.0.2862': attribute type 2 has an invalid length.
[  225.809142][T14036] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2862'.
[  225.820824][T14037] syzkaller1: entered allmulticast mode
[  225.855826][T14040] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  225.859120][T14040] CPU: 0 UID: 0 PID: 14040 Comm: syz.0.2863 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  225.859142][T14040] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  225.859153][T14040] Call Trace:
[  225.859159][T14040]  <TASK>
[  225.859167][T14040]  dump_stack_lvl+0x189/0x250
[  225.859197][T14040]  ? __pfx_dump_stack_lvl+0x10/0x10
[  225.859216][T14040]  ? __pfx__printk+0x10/0x10
[  225.859245][T14040]  ? kernfs_path_from_node+0x2f/0x290
[  225.859261][T14040]  ? kernfs_path_from_node+0x250/0x290
[  225.859276][T14040]  ? kernfs_path_from_node+0x2f/0x290
[  225.859293][T14040]  sysfs_warn_dup+0x8e/0xa0
[  225.859308][T14040]  sysfs_do_create_link_sd+0xc0/0x110
[  225.859330][T14040]  device_add_class_symlinks+0x1cf/0x240
[  225.859356][T14040]  device_add+0x475/0xb50
[  225.859381][T14040]  wiphy_register+0x1ba6/0x28d0
[  225.859414][T14040]  ? __pfx_wiphy_register+0x10/0x10
[  225.859431][T14040]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  225.859457][T14040]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  225.859482][T14040]  ieee80211_register_hw+0x3425/0x4080
[  225.859515][T14040]  ? ieee80211_register_hw+0x14a1/0x4080
[  225.859544][T14040]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  225.859567][T14040]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  225.859586][T14040]  ? __hrtimer_setup+0x187/0x210
[  225.859600][T14040]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  225.859621][T14040]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  225.859690][T14040]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  225.859707][T14040]  ? trace_kmalloc+0x1f/0xd0
[  225.859725][T14040]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  225.859745][T14040]  ? kstrndup+0xbf/0x160
[  225.859770][T14040]  hwsim_new_radio_nl+0xea4/0x1b10
[  225.859790][T14040]  ? __pfx___nla_validate_parse+0x10/0x10
[  225.859821][T14040]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  225.859849][T14040]  ? __nla_parse+0x40/0x60
[  225.859871][T14040]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  225.859893][T14040]  genl_family_rcv_msg_doit+0x215/0x300
[  225.859922][T14040]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  225.859955][T14040]  ? bpf_lsm_capable+0x9/0x20
[  225.859981][T14040]  ? security_capable+0x7e/0x2e0
[  225.860011][T14040]  genl_rcv_msg+0x60e/0x790
[  225.860046][T14040]  ? __pfx_genl_rcv_msg+0x10/0x10
[  225.860068][T14040]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  225.860097][T14040]  netlink_rcv_skb+0x208/0x470
[  225.860113][T14040]  ? __lock_acquire+0xab9/0xd20
[  225.860135][T14040]  ? __pfx_genl_rcv_msg+0x10/0x10
[  225.860158][T14040]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  225.860193][T14040]  ? down_read+0x1ad/0x2e0
[  225.860216][T14040]  genl_rcv+0x28/0x40
[  225.860236][T14040]  netlink_unicast+0x82f/0x9e0
[  225.860260][T14040]  ? __pfx_netlink_unicast+0x10/0x10
[  225.860276][T14040]  ? netlink_sendmsg+0x642/0xb30
[  225.860291][T14040]  ? skb_put+0x11b/0x210
[  225.860312][T14040]  netlink_sendmsg+0x805/0xb30
[  225.860338][T14040]  ? __pfx_netlink_sendmsg+0x10/0x10
[  225.860359][T14040]  ? aa_sock_msg_perm+0xf1/0x1d0
[  225.860379][T14040]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  225.860395][T14040]  ? __pfx_netlink_sendmsg+0x10/0x10
[  225.860414][T14040]  __sock_sendmsg+0x21c/0x270
[  225.860433][T14040]  ____sys_sendmsg+0x505/0x830
[  225.860458][T14040]  ? __pfx_____sys_sendmsg+0x10/0x10
[  225.860485][T14040]  ? import_iovec+0x74/0xa0
[  225.860502][T14040]  ___sys_sendmsg+0x21f/0x2a0
[  225.860523][T14040]  ? __pfx____sys_sendmsg+0x10/0x10
[  225.860568][T14040]  ? __fget_files+0x2a/0x420
[  225.860589][T14040]  ? __fget_files+0x3a0/0x420
[  225.860618][T14040]  __x64_sys_sendmsg+0x19b/0x260
[  225.860641][T14040]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  225.860700][T14040]  ? rcu_is_watching+0x15/0xb0
[  225.860721][T14040]  ? do_syscall_64+0xbe/0x3b0
[  225.860746][T14040]  do_syscall_64+0xfa/0x3b0
[  225.860763][T14040]  ? lockdep_hardirqs_on+0x9c/0x150
[  225.860781][T14040]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.860796][T14040]  ? exc_page_fault+0x9f/0xf0
[  225.860815][T14040]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.860829][T14040] RIP: 0033:0x7f87f898ebe9
[  225.860843][T14040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  225.860857][T14040] RSP: 002b:00007f87f9841038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  225.860874][T14040] RAX: ffffffffffffffda RBX: 00007f87f8bb5fa0 RCX: 00007f87f898ebe9
[  225.860885][T14040] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  225.860895][T14040] RBP: 00007f87f8a11e19 R08: 0000000000000000 R09: 0000000000000000
[  225.860904][T14040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  225.860913][T14040] R13: 00007f87f8bb6038 R14: 00007f87f8bb5fa0 R15: 00007ffdb4784f58
[  225.860936][T14040]  </TASK>
[  226.042870][T14042] vlan2: entered promiscuous mode
[  226.046605][T14042] bond0: entered promiscuous mode
[  226.048690][T14042] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  226.052798][T14042] vlan2: entered allmulticast mode
[  226.060589][T14042] bond0: entered allmulticast mode
[  226.062745][T14042] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  226.133874][T14048] netlink: 155800 bytes leftover after parsing attributes in process `syz.0.2865'.
[  226.191685][T14051] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2866'.
[  226.345771][T14068] IPv6: Can't replace route, no match found
[  226.509249][T14085] netlink: 'syz.1.2879': attribute type 4 has an invalid length.
[  226.512655][T14084] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2879'.
[  226.563061][T14088] syzkaller1: entered promiscuous mode
[  226.568351][T14088] syzkaller1: entered allmulticast mode
[  226.770748][T14111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2891'.
[  226.781061][T14111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2891'.
[  226.781804][T14113] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2889'.
[  226.829601][T14111] netlink: 'syz.1.2891': attribute type 3 has an invalid length.
[  226.832197][T14111] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2891'.
[  227.835309][T14168] vti2: entered promiscuous mode
[  228.011402][T14189] netlink: 'syz.0.2919': attribute type 10 has an invalid length.
[  228.019282][T14191] netlink: 'syz.2.2918': attribute type 21 has an invalid length.
[  228.025958][T14191] netlink: 'syz.2.2918': attribute type 4 has an invalid length.
[  228.029519][T14191] netlink: 'syz.2.2918': attribute type 5 has an invalid length.
[  228.043927][T14189] netlink: 'syz.0.2919': attribute type 12 has an invalid length.
[  228.050957][T14188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  228.106639][T14195] IPv6: Can't replace route, no match found
[  228.586364][ T6261] wlan1: Creating new IBSS network, BSSID ae:f5:64:e0:14:1e
[  229.568176][T14265] netlink: 'syz.1.2944': attribute type 13 has an invalid length.
[  230.097449][T14311] net_ratelimit: 77 callbacks suppressed
[  230.097466][T14311] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  230.221718][T14325] sctp: [Deprecated]: syz.1.2964 (pid 14325) Use of struct sctp_assoc_value in delayed_ack socket option.
[  230.221718][T14325] Use struct sctp_sack_info instead
[  230.335331][T14332] IPv6: Can't replace route, no match found
[  230.488088][T14349] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  230.657122][T14366] __nla_validate_parse: 20 callbacks suppressed
[  230.657137][T14366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2979'.
[  230.718528][T14373] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2982'.
[  230.799727][T14381] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2986'.
[  230.803113][T14381] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2986'.
[  230.907810][T14389] netlink: 'syz.2.2989': attribute type 10 has an invalid length.
[  230.918380][T14389] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2989'.
[  230.928086][T14389] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2989'.
[  230.935853][T14389] netlink: 'syz.2.2989': attribute type 12 has an invalid length.
[  230.939077][T14389] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2989'.
[  230.944963][T14388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  231.233677][T14410] IPv6: Can't replace route, no match found
[  231.289697][T14412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2997'.
[  231.592870][T14431] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3006'.
[  231.892524][T14464] IPv6: Can't replace route, no match found
[  231.919492][T14468] netlink: 6040 bytes leftover after parsing attributes in process `syz.1.3020'.
[  232.020192][T14479] netlink: 'syz.1.3023': attribute type 10 has an invalid length.
[  232.026221][T14479] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  232.093001][T14489] netlink: 'syz.1.3026': attribute type 10 has an invalid length.
[  232.143286][T14489] netlink: 'syz.1.3026': attribute type 12 has an invalid length.
[  232.147950][T14488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  233.528306][T14592] netlink: 'syz.1.3064': attribute type 10 has an invalid length.
[  233.549014][T14592] netlink: 'syz.1.3064': attribute type 12 has an invalid length.
[  233.552641][T14591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  233.738517][T14605] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  233.789181][T14605] syzkaller0: entered promiscuous mode
[  233.791537][T14605] syzkaller0: entered allmulticast mode
[  233.795952][T14605] tipc: Resetting bearer <eth:syzkaller0>
[  233.809043][T14604] tipc: Resetting bearer <eth:syzkaller0>
[  234.786708][   T24] tipc: Node number set to 380532603
[  235.073406][T14604] tipc: Disabling bearer <eth:syzkaller0>
[  235.117713][T14619] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  235.548674][ T6255] wlan0: Trigger new scan to find an IBSS to join
[  235.698288][T14672] netlink: 'syz.1.3093': attribute type 10 has an invalid length.
[  235.703449][T14672] __nla_validate_parse: 23 callbacks suppressed
[  235.703466][T14672] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3093'.
[  235.721979][T14672] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3093'.
[  235.723627][T14666] syzkaller1: entered promiscuous mode
[  235.728372][T14666] syzkaller1: entered allmulticast mode
[  235.728472][T14674] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3092'.
[  235.734957][T14672] netlink: 'syz.1.3093': attribute type 12 has an invalid length.
[  235.740878][T14672] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3093'.
[  235.752786][T14670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  236.044012][T14700] IPv6: Can't replace route, no match found
[  236.119368][T14705] netlink: 'syz.2.3104': attribute type 9 has an invalid length.
[  236.310083][T14724] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (141)
[  237.341055][T14795] bond0: option mode: unable to set because the bond device has slaves
[  237.526734][T14807] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3141'.
[  237.530598][T14807] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3141'.
[  237.805197][T14816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3145'.
[  237.908674][T14827] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3149'.
[  237.955650][T14831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3151'.
[  238.333220][T14848] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3156'.
[  238.359713][T14850] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  238.504668][ T2997] wlan0: Trigger new scan to find an IBSS to join
[  238.845504][T14876] ip6gretap0: entered promiscuous mode
[  238.848040][T14876] macvtap0: entered promiscuous mode
[  238.850521][T14876] macvtap0: entered allmulticast mode
[  238.852805][T14876] ip6gretap0: entered allmulticast mode
[  239.061128][T14895] IPv6: NLM_F_CREATE should be specified when creating new route
[  239.064208][T14895] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  239.067102][T14895] IPv6: NLM_F_CREATE should be set when creating new route
[  239.070032][T14895] IPv6: NLM_F_CREATE should be set when creating new route
[  239.072850][T14895] IPv6: NLM_F_CREATE should be set when creating new route
[  239.165813][T14908] netlink: 'syz.1.3176': attribute type 2 has an invalid length.
[  239.177038][T14908] : entered promiscuous mode
[  239.334181][T14922] netlink: 'syz.1.3181': attribute type 10 has an invalid length.
[  239.350453][T14922] netlink: 'syz.1.3181': attribute type 12 has an invalid length.
[  239.362820][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  239.396627][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  239.947696][T14941] netlink: 'syz.2.3187': attribute type 21 has an invalid length.
[  241.108418][T15006] __nla_validate_parse: 9 callbacks suppressed
[  241.108434][T15006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3198'.
[  241.114329][T15006] netlink: 'syz.1.3198': attribute type 30 has an invalid length.
[  241.127662][ T5891] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  241.127732][T15006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3198'.
[  241.132429][ T5891] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  241.134416][T15006] netlink: 'syz.1.3198': attribute type 30 has an invalid length.
[  241.140941][ T5891] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  241.140977][ T5891] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  241.237471][T15015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3201'.
[  241.240840][T15015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3201'.
[  241.526470][T15038] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3211'.
[  241.674828][T15049] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3214'.
[  241.736443][T15051] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3215'.
[  241.801478][T15060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3218'.
[  241.828077][T15054] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3216'.
[  241.833187][T15060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3218'.
[  241.840048][T15061] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  241.843914][T15061] syzkaller0: entered promiscuous mode
[  241.846630][T15061] syzkaller0: entered allmulticast mode
[  241.864460][T15061] tipc: Resetting bearer <eth:syzkaller0>
[  241.881386][T15061] tipc: Disabling bearer <eth:syzkaller0>
[  242.407554][T15097] IPv6: Can't replace route, no match found
[  242.536890][T15106] delete_channel: no stack
[  242.590686][T15111] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  242.706352][T15118] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  242.791622][T15123] macsec1: entered promiscuous mode
[  242.793904][T15123] macvlan1: entered promiscuous mode
[  242.799219][T15123] macvlan1: left promiscuous mode
[  242.919659][T15131] netlink: 'syz.1.3241': attribute type 10 has an invalid length.
[  242.935759][T15131] netlink: 'syz.1.3241': attribute type 12 has an invalid length.
[  242.940652][T15129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  243.135652][T15144] netlink: 'syz.2.3245': attribute type 29 has an invalid length.
[  244.046094][T15222] netlink: 'syz.0.3274': attribute type 2 has an invalid length.
[  244.122050][T15229] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  244.124768][T15229] syzkaller0: entered promiscuous mode
[  244.127622][T15229] syzkaller0: entered allmulticast mode
[  244.143239][T15229] tipc: Resetting bearer <eth:syzkaller0>
[  244.146758][T15228] tipc: Resetting bearer <eth:syzkaller0>
[  244.158438][T15228] tipc: Disabling bearer <eth:syzkaller0>
[  244.200755][T15234] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20004
[  244.229274][T15236] netlink: 'syz.1.3280': attribute type 2 has an invalid length.
[  244.459684][T15252] netlink: 'syz.2.3286': attribute type 10 has an invalid length.
[  244.487848][T15252] netlink: 'syz.2.3286': attribute type 12 has an invalid length.
[  244.499699][T15251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  244.611163][   T33] audit: type=1800 audit(1754851516.187:8): pid=15261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3289" name="memory.events" dev="tmpfs" ino=5214 res=0 errno=0
[  244.735765][T15267] netlink: 'syz.1.3292': attribute type 11 has an invalid length.
[  245.056529][T15286] IPv6: Can't replace route, no match found
[  245.352004][T15304] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  245.365006][T15304] CPU: 1 UID: 0 PID: 15304 Comm: syz.0.3306 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  245.365025][T15304] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  245.365032][T15304] Call Trace:
[  245.365036][T15304]  <TASK>
[  245.365042][T15304]  dump_stack_lvl+0x189/0x250
[  245.365063][T15304]  ? __pfx_dump_stack_lvl+0x10/0x10
[  245.365074][T15304]  ? __pfx__printk+0x10/0x10
[  245.365090][T15304]  ? kernfs_path_from_node+0x2f/0x290
[  245.365100][T15304]  ? kernfs_path_from_node+0x250/0x290
[  245.365109][T15304]  ? kernfs_path_from_node+0x2f/0x290
[  245.365120][T15304]  sysfs_warn_dup+0x8e/0xa0
[  245.365132][T15304]  sysfs_do_create_link_sd+0xc0/0x110
[  245.365142][T15304]  device_add_class_symlinks+0x1cf/0x240
[  245.365156][T15304]  device_add+0x475/0xb50
[  245.365172][T15304]  wiphy_register+0x1ba6/0x28d0
[  245.365191][T15304]  ? __pfx_wiphy_register+0x10/0x10
[  245.365200][T15304]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  245.365217][T15304]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  245.365234][T15304]  ieee80211_register_hw+0x3425/0x4080
[  245.365257][T15304]  ? ieee80211_register_hw+0x14a1/0x4080
[  245.365291][T15304]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  245.365311][T15304]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  245.365327][T15304]  ? __hrtimer_setup+0x187/0x210
[  245.365336][T15304]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  245.365351][T15304]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  245.365377][T15304]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  245.365386][T15304]  ? trace_kmalloc+0x1f/0xd0
[  245.365397][T15304]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  245.365409][T15304]  ? kstrndup+0xbf/0x160
[  245.365423][T15304]  hwsim_new_radio_nl+0xea4/0x1b10
[  245.365434][T15304]  ? __pfx___nla_validate_parse+0x10/0x10
[  245.365452][T15304]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  245.365467][T15304]  ? __nla_parse+0x40/0x60
[  245.365479][T15304]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  245.365493][T15304]  genl_family_rcv_msg_doit+0x215/0x300
[  245.365512][T15304]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  245.365531][T15304]  ? bpf_lsm_capable+0x9/0x20
[  245.365543][T15304]  ? security_capable+0x7e/0x2e0
[  245.365557][T15304]  genl_rcv_msg+0x60e/0x790
[  245.365572][T15304]  ? __pfx_genl_rcv_msg+0x10/0x10
[  245.365584][T15304]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  245.365600][T15304]  netlink_rcv_skb+0x208/0x470
[  245.365609][T15304]  ? __lock_acquire+0xab9/0xd20
[  245.365621][T15304]  ? __pfx_genl_rcv_msg+0x10/0x10
[  245.365634][T15304]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  245.365653][T15304]  ? down_read+0x1ad/0x2e0
[  245.365665][T15304]  genl_rcv+0x28/0x40
[  245.365676][T15304]  netlink_unicast+0x82f/0x9e0
[  245.365690][T15304]  ? __pfx_netlink_unicast+0x10/0x10
[  245.365699][T15304]  ? netlink_sendmsg+0x642/0xb30
[  245.365708][T15304]  ? skb_put+0x11b/0x210
[  245.365721][T15304]  netlink_sendmsg+0x805/0xb30
[  245.365736][T15304]  ? __pfx_netlink_sendmsg+0x10/0x10
[  245.365773][T15304]  ? aa_sock_msg_perm+0xf1/0x1d0
[  245.365787][T15304]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  245.365797][T15304]  ? __pfx_netlink_sendmsg+0x10/0x10
[  245.365809][T15304]  __sock_sendmsg+0x21c/0x270
[  245.365822][T15304]  ____sys_sendmsg+0x505/0x830
[  245.365836][T15304]  ? __pfx_____sys_sendmsg+0x10/0x10
[  245.365852][T15304]  ? import_iovec+0x74/0xa0
[  245.365862][T15304]  ___sys_sendmsg+0x21f/0x2a0
[  245.365875][T15304]  ? __pfx____sys_sendmsg+0x10/0x10
[  245.365905][T15304]  ? __fget_files+0x2a/0x420
[  245.365917][T15304]  ? __fget_files+0x3a0/0x420
[  245.365949][T15304]  __x64_sys_sendmsg+0x19b/0x260
[  245.365965][T15304]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  245.365983][T15304]  ? rcu_is_watching+0x15/0xb0
[  245.365995][T15304]  ? do_syscall_64+0xbe/0x3b0
[  245.366009][T15304]  do_syscall_64+0xfa/0x3b0
[  245.366020][T15304]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.366028][T15304]  ? asm_sysvec_call_function_single+0x1a/0x20
[  245.366039][T15304]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.366047][T15304] RIP: 0033:0x7f87f898ebe9
[  245.366057][T15304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  245.366066][T15304] RSP: 002b:00007f87f9841038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  245.366077][T15304] RAX: ffffffffffffffda RBX: 00007f87f8bb5fa0 RCX: 00007f87f898ebe9
[  245.366084][T15304] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000009
[  245.366091][T15304] RBP: 00007f87f8a11e19 R08: 0000000000000000 R09: 0000000000000000
[  245.366096][T15304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  245.366102][T15304] R13: 00007f87f8bb6038 R14: 00007f87f8bb5fa0 R15: 00007ffdb4784f58
[  245.366117][T15304]  </TASK>
[  245.687567][T15331] netlink: 'syz.2.3314': attribute type 21 has an invalid length.
[  246.229063][T15378] validate_nla: 1 callbacks suppressed
[  246.229076][T15378] netlink: 'syz.1.3330': attribute type 10 has an invalid length.
[  246.234342][T15378] __nla_validate_parse: 34 callbacks suppressed
[  246.234410][T15378] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3330'.
[  246.244063][T15378] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3330'.
[  246.251135][T15378] netlink: 'syz.1.3330': attribute type 12 has an invalid length.
[  246.253566][T15378] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3330'.
[  246.257799][T15377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  246.259647][T15380] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  246.297425][T15380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3331'.
[  246.331525][T15382] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3332'.
[  246.374899][T15384] IPv6: Can't replace route, no match found
[  246.502063][T15386] netlink: 'syz.0.3334': attribute type 4 has an invalid length.
[  246.662928][T15397] netlink: 'syz.0.3338': attribute type 10 has an invalid length.
[  246.678973][T15397] team0: Port device dummy0 added
[  246.682535][T15397] netlink: 'syz.0.3338': attribute type 10 has an invalid length.
[  246.714388][T15397] team0: Port device dummy0 removed
[  246.969373][T15412] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  246.979364][T15412] syzkaller0: entered promiscuous mode
[  246.981382][T15412] syzkaller0: entered allmulticast mode
[  246.994986][T15414] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3342'.
[  247.000305][T15409] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3342'.
[  247.028487][T15412] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.3344'.
[  247.057000][T15409] netlink: 392 bytes leftover after parsing attributes in process `syz.0.3342'.
[  247.061725][T15409] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3342'.
[  247.070199][T15412] tipc: Resetting bearer <eth:syzkaller0>
[  247.080399][T15411] tipc: Resetting bearer <eth:syzkaller0>
[  247.102925][T15411] tipc: Disabling bearer <eth:syzkaller0>
[  247.553592][T15456] netlink: 'syz.1.3361': attribute type 13 has an invalid length.
[  247.553663][T15455] netlink: 'syz.1.3361': attribute type 13 has an invalid length.
[  247.563760][T15456] netlink: 'syz.1.3361': attribute type 17 has an invalid length.
[  247.566219][T15455] netlink: 'syz.1.3361': attribute type 17 has an invalid length.
[  247.624213][T15456] 8021q: adding VLAN 0 to HW filter on device bond0
[  247.631010][T15456] 8021q: adding VLAN 0 to HW filter on device team0
[  247.641264][T15456] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  247.652150][T15456] syz.1.3361 (15456) used greatest stack depth: 19616 bytes left
[  247.661806][T15455] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  247.683779][T15459] gretap0: entered promiscuous mode
[  247.689572][T15459] gretap0: left promiscuous mode
[  247.812261][T15467] delete_channel: no stack
[  248.051926][T15486] IPv6: sit3: Disabled Multicast RS
[  248.849595][T15520] sctp: [Deprecated]: syz.1.3380 (pid 15520) Use of int in max_burst socket option.
[  248.849595][T15520] Use struct sctp_assoc_value instead
[  249.595275][T15565] netlink: 'syz.1.3396': attribute type 1 has an invalid length.
[  250.030128][T15577] lo speed is unknown, defaulting to 1000
[  250.628909][T15621] IPv6: Can't replace route, no match found
[  250.673075][T15625] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  250.848463][T15649] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  251.405102][T15709] __nla_validate_parse: 24 callbacks suppressed
[  251.405113][T15709] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3448'.
[  251.426528][T15710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3447'.
[  251.431204][T15710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3447'.
[  251.433219][T15712] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3449'.
[  251.434667][T15710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3447'.
[  251.772416][T15734] lo speed is unknown, defaulting to 1000
[  252.287789][T15752] validate_nla: 1 callbacks suppressed
[  252.287804][T15752] netlink: 'syz.2.3461': attribute type 23 has an invalid length.
[  252.312270][T15754] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3464'.
[  252.358807][T15759] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.416632][T15759] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.488290][T15759] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.547933][T15759] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.606332][T15775] netlink: 312 bytes leftover after parsing attributes in process `syz.1.3471'.
[  252.623570][ T5891] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  252.642313][ T5891] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  252.652838][ T5891] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  252.670911][ T5891] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  252.844422][T15798] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3479'.
[  252.999252][T15809] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3484'.
[  253.076869][T15817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3485'.
[  253.079862][T15817] smc: net device bond0 applied user defined pnetid SYZ
[  253.220361][T15828] netlink: 'syz.2.3489': attribute type 10 has an invalid length.
[  253.230539][T15828] netlink: 'syz.2.3489': attribute type 12 has an invalid length.
[  253.234271][T15827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  254.105178][ T6259] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  255.368596][T15950] unknown channel width for channel at 909000KHz?
[  255.394835][    C1] ==================================================================
[  255.398043][    C1] BUG: KASAN: use-after-free in rose_timer_expiry+0x471/0x4b0
[  255.400924][    C1] Read of size 2 at addr ffff88810f4b402a by task modprobe/15951
[  255.404582][    C1] 
[  255.405959][    C1] CPU: 1 UID: 0 PID: 15951 Comm: modprobe Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  255.405982][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  255.405991][    C1] Call Trace:
[  255.405998][    C1]  <IRQ>
[  255.406006][    C1]  dump_stack_lvl+0x189/0x250
[  255.406029][    C1]  ? rcu_is_watching+0x15/0xb0
[  255.406046][    C1]  ? __kasan_check_byte+0x12/0x40
[  255.406067][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  255.406083][    C1]  ? rcu_is_watching+0x15/0xb0
[  255.406096][    C1]  ? lock_release+0x4b/0x3e0
[  255.406121][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  255.406139][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  255.406156][    C1]  print_report+0xca/0x240
[  255.406169][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  255.406183][    C1]  kasan_report+0x118/0x150
[  255.406202][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  255.406219][    C1]  rose_timer_expiry+0x471/0x4b0
[  255.406235][    C1]  call_timer_fn+0x17e/0x5f0
[  255.406256][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  255.406271][    C1]  ? call_timer_fn+0xbe/0x5f0
[  255.406290][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  255.406312][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  255.406328][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  255.406345][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  255.406360][    C1]  __run_timer_base+0x61a/0x860
[  255.406378][    C1]  ? ktime_get+0x3e/0x1f0
[  255.406398][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  255.406414][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  255.406443][    C1]  run_timer_softirq+0xb7/0x180
[  255.406461][    C1]  handle_softirqs+0x286/0x870
[  255.406477][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  255.406492][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  255.406509][    C1]  __irq_exit_rcu+0xca/0x1f0
[  255.406523][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  255.406538][    C1]  irq_exit_rcu+0x9/0x30
[  255.406551][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  255.406566][    C1]  </IRQ>
[  255.406572][    C1]  <TASK>
[  255.406577][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  255.406594][    C1] RIP: 0010:filemap_fault+0xf5/0x1200
[  255.406611][    C1] Code: 3c 20 00 74 08 48 89 df e8 a8 e1 2b 00 4c 8b 2b 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 8f e1 2b 00 49 8b 5d 00 <4d> 8d 77 10 4c 89 f0 48 c1 e8 03 48 89 44 24 20 42 80 3c 20 00 74
[  255.406625][    C1] RSP: 0000:ffffc9000d15fa80 EFLAGS: 00000246
[  255.406639][    C1] RAX: 1ffff11003b96dbd RBX: ffff88801dcb6bc8 RCX: ffff88801fa18000
[  255.406650][    C1] RDX: 0000000000000000 RSI: 00000001063e3007 RDI: ffffc9000d15fce0
[  255.406660][    C1] RBP: ffffc9000d15fbb8 R08: ffffffff99c79027 R09: 1ffffffff338f204
[  255.406670][    C1] R10: dffffc0000000000 R11: ffffffff81f733d0 R12: dffffc0000000000
[  255.406680][    C1] R13: ffff88801dcb6de8 R14: ffffffff8b9e53a8 R15: ffffc9000d15fce0
[  255.406694][    C1]  ? __pfx_filemap_fault+0x10/0x10
[  255.406714][    C1]  ? blk_cgroup_congested+0x1d/0x210
[  255.406734][    C1]  ? __pfx_filemap_fault+0x10/0x10
[  255.406749][    C1]  ? blk_cgroup_congested+0x1d/0x210
[  255.406796][    C1]  ? blk_cgroup_congested+0x1d/0x210
[  255.406812][    C1]  ? blk_cgroup_congested+0x1d/0x210
[  255.406833][    C1]  __do_fault+0x138/0x390
[  255.406856][    C1]  __handle_mm_fault+0x1719/0x5440
[  255.406874][    C1]  ? __lock_acquire+0xab9/0xd20
[  255.406899][    C1]  ? __pfx___handle_mm_fault+0x10/0x10
[  255.406922][    C1]  ? lock_vma_under_rcu+0xdf/0x3d0
[  255.406941][    C1]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  255.406964][    C1]  handle_mm_fault+0x40a/0x8e0
[  255.406985][    C1]  do_user_addr_fault+0xa81/0x1390
[  255.407010][    C1]  ? rcu_is_watching+0x15/0xb0
[  255.407023][    C1]  ? trace_page_fault_user+0x84/0x1e0
[  255.407044][    C1]  exc_page_fault+0x76/0xf0
[  255.407061][    C1]  asm_exc_page_fault+0x26/0x30
[  255.407074][    C1] RIP: 0033:0x7ff260efe105
[  255.407087][    C1] Code: 47 d6 4d 89 d7 4d 39 d0 73 7f 44 89 d8 83 e0 02 89 85 f4 fe ff ff 74 3e 4c 89 f9 31 c0 4c 89 c7 4c 29 c1 83 bd f4 fe ff ff 00 <f3> aa 75 5b 48 8b 35 88 79 02 00 44 89 da 44 89 9d f4 fe ff ff 48
[  255.407100][    C1] RSP: 002b:00007ffe1e465450 EFLAGS: 00010202
[  255.407111][    C1] RAX: 0000000000000000 RBX: 00007ffe1e4654f8 RCX: 0000000000000958
[  255.407121][    C1] RDX: 0000000000000003 RSI: 0000000000001000 RDI: 00007ff260e1c6a8
[  255.407130][    C1] RBP: 00007ffe1e465be0 R08: 00007ff260e1c6a8 R09: 000000000019d000
[  255.407140][    C1] R10: 00007ff260e1d000 R11: 0000000000000003 R12: 00007ff260eed500
[  255.407150][    C1] R13: 00007ffe1e465c68 R14: 00007ff260e29dd0 R15: 00007ff260e1d000
[  255.407166][    C1]  </TASK>
[  255.407170][    C1] 
[  255.577814][    C1] The buggy address belongs to the physical page:
[  255.580343][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88810f4b7c00 pfn:0x10f4b4
[  255.584365][    C1] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff)
[  255.587224][    C1] raw: 057ff00000000000 0000000000000000 dead000000000122 0000000000000000
[  255.590588][    C1] raw: ffff88810f4b7c00 0000000000000000 00000000ffffffff 0000000000000000
[  255.593993][    C1] page dumped because: kasan: bad access detected
[  255.596506][    C1] page_owner tracks the page as freed
[  255.598602][    C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5862, tgid 5862 (syz-executor), ts 244793142424, free_ts 248830949462
[  255.606631][    C1]  post_alloc_hook+0x240/0x2a0
[  255.608568][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  255.610770][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  255.613020][    C1]  alloc_pages_mpol+0x232/0x4a0
[  255.614960][    C1]  allocate_slab+0x8a/0x370
[  255.616795][    C1]  ___slab_alloc+0xbeb/0x1410
[  255.618677][    C1]  __kmalloc_noprof+0x305/0x4f0
[  255.620633][    C1]  tomoyo_realpath_from_path+0xe3/0x5d0
[  255.622896][    C1]  tomoyo_path_perm+0x213/0x4b0
[  255.624783][    C1]  security_inode_getattr+0x12f/0x330
[  255.626903][    C1]  vfs_statx+0x18e/0x550
[  255.628557][    C1]  vfs_fstatat+0x118/0x170
[  255.630303][    C1]  __x64_sys_newfstatat+0x116/0x190
[  255.632312][    C1]  do_syscall_64+0xfa/0x3b0
[  255.634144][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.636432][    C1] page last free pid 5862 tgid 5862 stack trace:
[  255.638810][    C1]  __free_frozen_pages+0xbc4/0xd30
[  255.640840][    C1]  __put_partials+0x156/0x1a0
[  255.642765][    C1]  put_cpu_partial+0x17c/0x250
[  255.644664][    C1]  __slab_free+0x2d5/0x3c0
[  255.646498][    C1]  qlist_free_all+0x97/0x140
[  255.648381][    C1]  kasan_quarantine_reduce+0x148/0x160
[  255.650560][    C1]  __kasan_slab_alloc+0x22/0x80
[  255.652535][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  255.654714][    C1]  getname_flags+0xb8/0x540
[  255.656526][    C1]  user_path_at+0x24/0x60
[  255.658270][    C1]  __x64_sys_umount+0xee/0x160
[  255.660193][    C1]  do_syscall_64+0xfa/0x3b0
[  255.662037][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.664399][    C1] 
[  255.665357][    C1] Memory state around the buggy address:
[  255.667611][    C1]  ffff88810f4b3f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  255.670817][    C1]  ffff88810f4b3f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  255.674022][    C1] >ffff88810f4b4000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  255.677210][    C1]                                   ^
[  255.679357][    C1]  ffff88810f4b4080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  255.682617][    C1]  ffff88810f4b4100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  255.685782][    C1] ==================================================================
[  255.689512][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  255.692373][    C1] CPU: 1 UID: 0 PID: 15951 Comm: modprobe Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  255.697106][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  255.701116][    C1] Call Trace:
[  255.702466][    C1]  <IRQ>
[  255.703640][    C1]  dump_stack_lvl+0x99/0x250
[  255.705521][    C1]  ? __asan_memcpy+0x40/0x70
[  255.707409][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  255.709508][    C1]  ? __pfx__printk+0x10/0x10
[  255.711327][    C1]  vpanic+0x281/0x750
[  255.712960][    C1]  ? __pfx_vpanic+0x10/0x10
[  255.714800][    C1]  ? irqentry_exit+0x74/0x90
[  255.716658][    C1]  panic+0xb9/0xc0
[  255.718190][    C1]  ? __pfx_panic+0x10/0x10
[  255.720000][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  255.722357][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  255.724752][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  255.726718][    C1]  check_panic_on_warn+0x89/0xb0
[  255.728751][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  255.730780][    C1]  end_report+0x78/0x160
[  255.732454][    C1]  kasan_report+0x129/0x150
[  255.734306][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  255.736354][    C1]  rose_timer_expiry+0x471/0x4b0
[  255.738390][    C1]  call_timer_fn+0x17e/0x5f0
[  255.740251][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  255.742415][    C1]  ? call_timer_fn+0xbe/0x5f0
[  255.744270][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  255.746341][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  255.748441][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  255.750542][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  255.752689][    C1]  __run_timer_base+0x61a/0x860
[  255.754628][    C1]  ? ktime_get+0x3e/0x1f0
[  255.756360][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  255.758502][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  255.760996][    C1]  run_timer_softirq+0xb7/0x180
[  255.762975][    C1]  handle_softirqs+0x286/0x870
[  255.764888][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  255.766757][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  255.768853][    C1]  __irq_exit_rcu+0xca/0x1f0
[  255.770690][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  255.772771][    C1]  irq_exit_rcu+0x9/0x30
[  255.774462][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  255.776623][    C1]  </IRQ>
[  255.777799][    C1]  <TASK>
[  255.778995][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  255.781391][    C1] RIP: 0010:filemap_fault+0xf5/0x1200
[  255.783526][    C1] Code: 3c 20 00 74 08 48 89 df e8 a8 e1 2b 00 4c 8b 2b 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 8f e1 2b 00 49 8b 5d 00 <4d> 8d 77 10 4c 89 f0 48 c1 e8 03 48 89 44 24 20 42 80 3c 20 00 74
[  255.791042][    C1] RSP: 0000:ffffc9000d15fa80 EFLAGS: 00000246
[  255.793417][    C1] RAX: 1ffff11003b96dbd RBX: ffff88801dcb6bc8 RCX: ffff88801fa18000
[  255.796548][    C1] RDX: 0000000000000000 RSI: 00000001063e3007 RDI: ffffc9000d15fce0
[  255.799656][    C1] RBP: ffffc9000d15fbb8 R08: ffffffff99c79027 R09: 1ffffffff338f204
[  255.802818][    C1] R10: dffffc0000000000 R11: ffffffff81f733d0 R12: dffffc0000000000
[  255.805947][    C1] R13: ffff88801dcb6de8 R14: ffffffff8b9e53a8 R15: ffffc9000d15fce0
[  255.809094][    C1]  ? __pfx_filemap_fault+0x10/0x10
[  255.811158][    C1]  ? blk_cgroup_congested+0x1d/0x210
[  255.813285][    C1]  ? __pfx_filemap_fault+0x10/0x10
[  255.815344][    C1]  ? blk_cgroup_congested+0x1d/0x210
[  255.817463][    C1]  ? blk_cgroup_congested+0x1d/0x210
[  255.819582][    C1]  ? blk_cgroup_congested+0x1d/0x210
[  255.821770][    C1]  __do_fault+0x138/0x390
[  255.823510][    C1]  __handle_mm_fault+0x1719/0x5440
[  255.825530][    C1]  ? __lock_acquire+0xab9/0xd20
[  255.827431][    C1]  ? __pfx___handle_mm_fault+0x10/0x10
[  255.829654][    C1]  ? lock_vma_under_rcu+0xdf/0x3d0
[  255.831698][    C1]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  255.833916][    C1]  handle_mm_fault+0x40a/0x8e0
[  255.835850][    C1]  do_user_addr_fault+0xa81/0x1390
[  255.837901][    C1]  ? rcu_is_watching+0x15/0xb0
[  255.839769][    C1]  ? trace_page_fault_user+0x84/0x1e0
[  255.841882][    C1]  exc_page_fault+0x76/0xf0
[  255.843735][    C1]  asm_exc_page_fault+0x26/0x30
[  255.845674][    C1] RIP: 0033:0x7ff260efe105
[  255.847475][    C1] Code: 47 d6 4d 89 d7 4d 39 d0 73 7f 44 89 d8 83 e0 02 89 85 f4 fe ff ff 74 3e 4c 89 f9 31 c0 4c 89 c7 4c 29 c1 83 bd f4 fe ff ff 00 <f3> aa 75 5b 48 8b 35 88 79 02 00 44 89 da 44 89 9d f4 fe ff ff 48
[  255.855028][    C1] RSP: 002b:00007ffe1e465450 EFLAGS: 00010202
[  255.857459][    C1] RAX: 0000000000000000 RBX: 00007ffe1e4654f8 RCX: 0000000000000958
[  255.860592][    C1] RDX: 0000000000000003 RSI: 0000000000001000 RDI: 00007ff260e1c6a8
[  255.863769][    C1] RBP: 00007ffe1e465be0 R08: 00007ff260e1c6a8 R09: 000000000019d000
[  255.866906][    C1] R10: 00007ff260e1d000 R11: 0000000000000003 R12: 00007ff260eed500
[  255.870065][    C1] R13: 00007ffe1e465c68 R14: 00007ff260e29dd0 R15: 00007ff260e1d000
[  255.873208][    C1]  </TASK>
[  255.875153][    C1] Kernel Offset: disabled
[  255.876918][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:45:27  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000017 RBX=0000000000000003 RCX=0000000000000000 RDX=0000000000000000
RSI=ffff88802299a828 RDI=ffff888022999cc0 RBP=0000000000000000 RSP=ffffc9000417f5b8
R8 =0000000000000000 R9 =ffffffff82231e67 R10=dffffc0000000000 R11=ffffffff82231e40
R12=0000000000000000 R13=ffff88802299a7b0 R14=ffff88802299a828 R15=7f477a6f11415ad3
RIP=ffffffff819d66cc RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fbda2c55fc8 CR3=00000001122b6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fbda1f87498 00007fbda1f87470 XMM03=00007fbda1f874a8 00007fbda1f874a0
XMM04=00007fbda2aed100 00007fbda1f87460 XMM05=00007fbda1f87478 00007fbda1f874c0
XMM06=00007fbda1f874b8 00007fbda1f874b0 XMM07=00007fbda1f874a8 00007fbda1f874a0
XMM08=0000000000000000 00007fbda1e12ee7 XMM09=0000000000000000 00007fbda1e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000034 RBX=0000000000000034 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001e0470
R8 =ffff888020108237 R9 =1ffff11004021046 R10=dffffc0000000000 R11=ffffffff854e72a0
R12=dffffc0000000000 R13=ffffffff99af28ca R14=ffffffff99de74e0 R15=0000000000000000
RIP=ffffffff854e731c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff260e1c6a8 CR3=0000000109726000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffff000000000000 ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
