last executing test programs:

1.092237391s ago: executing program 1 (id=1646):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb001480080007"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="a00000002100390d000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000300000a000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="03001e4f6cbd0000500011"], 0xa0}}, 0x10)

952.760845ms ago: executing program 1 (id=1650):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x9f8}, 0x1, 0x0, 0xf800, 0x4008010}, 0x0)

882.582518ms ago: executing program 1 (id=1652):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c0000000001010400008400141a000002000000240001801400018008000100e000000108000200e00000010c000280050001000000e2ff2b0002800c000280050001000520000014000180080001000000000008000200ac1e000106000340000200000800074000000001"], 0x6c}}, 0x0)

809.603722ms ago: executing program 1 (id=1653):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="00000000080000006c00128009000100766c616e000000005c0002800400038006000100000000004c0004800c00010248f90adcaff898f10c00010003000000018000000c080100220b0000010000000c00010004000000010000000c00010000000000040000000c000100800000000000000008000500", @ANYRES32=r1], 0x9c}, 0x1, 0xba01}, 0x20000810)

806.932927ms ago: executing program 1 (id=1654):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x24000800, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @local}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00'})
r2 = accept4(r0, &(0x7f0000000380)=@phonet, &(0x7f0000000400)=0x80, 0x800)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0xfffffffc, {0x60, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840)
r5 = accept4(r0, &(0x7f0000000440)=@alg, &(0x7f00000004c0)=0x80, 0x80000)
r6 = accept4(r1, &(0x7f0000000500), &(0x7f0000000580)=0x80, 0x80000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)={<r7=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r8=>0xffffffffffffffff})
close(r8)
write$cgroup_subtree(r8, 0x0, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
getpeername$packet(r9, 0x0, &(0x7f0000000040))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={<r11=>0xffffffffffffffff})
r12 = socket(0x10, 0x4, 0x0)
sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001900010000000000000000001c14"], 0x30}}, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f0000000a40)=ANY=[@ANYBLOB="5c010000", @ANYRES16=0x0, @ANYBLOB="100026bd7000fcdbdf250300000007000a007d5b3a00640007800c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32=r0, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32=r12, @ANYBLOB="100007800c00018008000100", @ANYRES32, @ANYBLOB="0c00020007000000000000000c000600020000000000000006000a002c290000a00007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00018008000100", @ANYRES32=r3, @ANYBLOB="0c00018008000100", @ANYRES32=r5, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00019e08000100", @ANYRES32=r6, @ANYBLOB="0c00018008000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES32=r8, @ANYBLOB="0c00018008000100", @ANYRES32=r9, @ANYBLOB="0c00018008000100", @ANYRES32=r11, @ANYBLOB="0c00018008000100", @ANYRES32=r12, @ANYBLOB="0c00018008000100", @ANYRES32=r3, @ANYBLOB="0c00018008000100", @ANYRES32=r9, @ANYBLOB="0c00018008000100", @ANYRES32=r10, @ANYBLOB="0c0006000200000000000000"], 0x15c}, 0x1, 0x0, 0x0, 0x41}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r13 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_rfcomm_RFCOMM_LM(r13, 0x12, 0x3, &(0x7f0000004ac0)=0x2c, 0x4)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=ANY=[@ANYBLOB="f800000016000100000000000000000064010100000000000000000000000000000000000000000000000000000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000010000000033000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffffffffffff1ffffffffffffff07000000000000000000000000000000000000000000000000000000000000000200000100000000feffffffffffffff000000000000000096070000000000000000000000000002be0000000000000000000000b1a00100c604863b068cb5f3f8fe89075a361a9ee61cbe9af859ffa7f64c31d8d073228f8b43b07882f6bcfb1e8dfd4927eeb1ba7cf5a5baf2e796c562f22642115ffc4d28cafbf8c97c401731c7329022e377a72772820993a9072449e4b9dd1015997bfe5769"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r14 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
r16 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r16, @ANYBLOB="01002cbd7000fc6bd970c4fcf3f63ff8eda15148464cd049b968be7f153b3495abdf250500000008000200050000008f96f9da86b7e687aa414082f58997725ede8355529c0e525ab5735036f09e7a3b1e579c70"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000090)

742.177869ms ago: executing program 1 (id=1655):
unshare(0x22020600)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x3, 0x7)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x46}, 0x8)
bind$bt_hci(r4, &(0x7f0000000200)={0x1f, 0xffffffffffffffff}, 0x6)
recvmsg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20)
write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6)
syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r1)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r5 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4, 0x0, @dev, 0x9}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x300, 0xffffffff, 0xffffffff, 0x300, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, [], [], 'wg1\x00', 'gre0\x00', {0xff}}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x83, 0x2, 0x6, 0x201}, 0x58}, 0x1, 0x0, 0x0, 0x44011}, 0x4000)
sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="120000000800000004000000b4"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r4, @ANYRES16=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

457.700697ms ago: executing program 2 (id=1667):
unshare(0x22020400)
socket(0x10, 0x803, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
close(r0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x1, 0xffffffffffffffff}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x440c0}, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480006005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000000c0)={@broadcast, @dev, <r2=>0x0}, &(0x7f0000000180)=0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@newtclass={0x3c, 0x28, 0x400, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xc, 0x1}, {0xd, 0xfff2}, {0x0, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x3}}, @TCA_RATE={0x6, 0x5, {0xd, 0x10}}, @TCA_RATE={0x6, 0x5, {0x6, 0xe}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8810}, 0x20000858)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000005}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffe2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x400c000)

455.054196ms ago: executing program 2 (id=1668):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1)
sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DURATION={0x5}, @IEEE802154_ATTR_SCAN_TYPE={0x5}, @IEEE802154_ATTR_CHANNELS={0x8}]}, 0x2c}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x7, 0x4, 0xb, 0x2, 0x0, 0x70bd2b, 0x25dfdbfc}, 0x10}}, 0x80)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r6], 0x50}, 0x1, 0xba01}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000820}, 0x0)
r8 = accept(r3, &(0x7f00000000c0)=@hci, &(0x7f0000000040)=0x80)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8982, &(0x7f00000002c0)={0x7, 'bridge_slave_0\x00', {0x5}, 0x7})
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)={<r9=>0x0, 0x1, 0x8, [0x2, 0xd, 0xc1d0, 0x9, 0x4, 0x7, 0x8, 0x7]}, &(0x7f0000000180)=0x18)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f00000001c0)={r9, 0x7}, &(0x7f0000000240)=0x8)

312.518889ms ago: executing program 0 (id=1669):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r1, 0x0, 0x1}, 0x18)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000202500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x40004880}, 0x20004000)

310.528256ms ago: executing program 0 (id=1670):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}}}})
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0193a2e89a00000000001fffffff04000180080002"], 0x20}}, 0x0)

202.538387ms ago: executing program 0 (id=1671):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x9f8}, 0x1, 0x0, 0xfff0, 0x4008010}, 0x0)

202.079326ms ago: executing program 2 (id=1672):
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff0180c200000308060001080006"], 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0)
r1 = accept4(r0, &(0x7f0000000500)=@qipcrtr, &(0x7f0000000580)=0x80, 0x800)
write$bt_hci(r1, &(0x7f00000005c0)={0x1, @delete_stored_link_key={{0xc12, 0x7}, {@none, 0x6}}}, 0xb)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x17, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x68}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
connect$rxrpc(r2, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x24)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffe49}, 0x42)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)={0x2, 0x3, 0x0, 0x2, 0xd, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e1c}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @empty}}, @sadb_x_sa2={0x2, 0x13, 0x0, 0x0, 0x0, 0x70bd27, 0x3507}]}, 0x68}, 0x1, 0x7}, 0x20040080)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x1f8, 0x940c, 0x3002, 0x1f8, 0x2c0, 0x2e8, 0x3d8, 0x3d8, 0x2e8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x1f8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@inet=@recent0={{0xf8}, {0x0, 0xc58, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x2800000, 0xffffff05, 0x1}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x1410, 0x4, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x6}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004)
sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff)
r6 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1f, {[0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xe3, 0x3]}}, 0x5c)
socketpair(0xf, 0xa, 0x0, &(0x7f00000002c0))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r9=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1e, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711209000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x11}, @TCA_FQ_PLIMIT={0x8}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x1000}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x13}]}}]}, 0x50}}, 0x0)

141.51387ms ago: executing program 0 (id=1673):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fccbdf250900000005000700000000000800010001000000050008"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20010)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48)

88.031237ms ago: executing program 0 (id=1674):
syz_emit_ethernet(0x8a, &(0x7f0000000000)={@broadcast, @multicast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x2, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0)

87.565577ms ago: executing program 0 (id=1675):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x10, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x4, 0x1, 0xe, 0x7, 0xa, 0xfffffffffffffffc, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc2, &(0x7f000000cf3d)=""/194, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="b80000000201050000000000000000000300000a14001980080002005100000008000200480a000008000c400000000234000e800c000280050001003a0000001400018008000100c21414aa080002000a01010106000340000300000600034000000000080008400000ffff0c000f8008000340000000070800034000000081080002400000ee340800034000000ff208000140000000060800084000000006100016400000000b0000000100000009060012"], 0xb8}, 0x1, 0x0, 0x0, 0x4000800}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0)
sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0)
recvmmsg(r3, &(0x7f0000008180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000080)=@srh={0x2f, 0x10, 0x4, 0x8, 0x9, 0x40, 0x51ef, [@ipv4={'\x00', '\xff\xff', @broadcast}, @private1, @private1, @dev={0xfe, 0x80, '\x00', 0x1f}, @remote, @ipv4={'\x00', '\xff\xff', @local}, @remote, @private0]}, 0x88)

69.681447ms ago: executing program 2 (id=1676):
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd27, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x200080c0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000c55}, 0x80)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x40d, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x920, 0x40}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0)

922.448µs ago: executing program 2 (id=1677):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000008900000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100}, 0x94)

0s ago: executing program 2 (id=1678):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200088d0}, 0x40088000)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan3\x00', <r4=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x128, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0x64, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x4c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x800}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x80000001}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x401}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0x6c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x68, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7bd}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xf}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x100000001}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}]}]}]}, 0x128}}, 0x40004)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x8048)
pipe(&(0x7f00000004c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000700)={'gre0\x00', &(0x7f00000005c0)={'gretap0\x00', <r8=>0x0, 0x80, 0x700, 0x1000, 0x3, {{0x47, 0x4, 0x1, 0x4, 0x11c, 0x64, 0x0, 0x6, 0x2f, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0x44, 0xd6, 0x3, 0x8, [{@local, 0x7}, {@remote, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000001}, {@multicast2, 0x790}, {@loopback, 0x4}, {@empty}, {@multicast1, 0x8}, {@loopback, 0xfffffff7}]}, @timestamp_addr={0x44, 0x1c, 0x99, 0x1, 0xe, [{@dev={0xac, 0x14, 0x14, 0x30}, 0xc8}, {@broadcast, 0x4}, {@private=0xa010102}]}, @lsrr={0x83, 0xf, 0x7a, [@private=0xa010101, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x4c, 0x9e, 0x1, 0x0, [{@multicast2, 0x3}, {@multicast1, 0x80}, {@rand_addr=0x64010102, 0x8}, {@multicast1, 0x1}, {@local, 0x400}, {@private=0xa010100, 0xfffffffd}, {@rand_addr=0x64010102, 0x7}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x7f24}, {@multicast1, 0x3}]}, @lsrr={0x83, 0x1f, 0x34, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x28}, @multicast2, @remote, @remote, @empty, @local]}, @lsrr={0x83, 0x27, 0x15, [@remote, @multicast1, @dev={0xac, 0x14, 0x14, 0x2d}, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x3a}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast1]}, @lsrr={0x83, 0x7, 0xd8, [@dev={0xac, 0x14, 0x14, 0x21}]}]}}}}})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001840)={0xffffffffffffffff, 0x20, &(0x7f0000001800)={&(0x7f00000007c0)=""/45, 0x2d, <r9=>0x0, &(0x7f0000000800)=""/4096, 0x1000}}, 0x10)
r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001880), 0x4)
r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001900)=@o_path={&(0x7f00000018c0)='./file0\x00', 0x0, 0x8, r5}, 0x18)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000001940)=@base={0x11, 0x2, 0x2, 0x1, 0x0, 0x1, 0xda, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001a40)={{0xffffffffffffffff, <r13=>0xffffffffffffffff}, &(0x7f00000019c0), &(0x7f0000001a00)='%pK    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001a80)={r2, <r14=>0xffffffffffffffff}, 0x4)
r15 = bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x14, 0x9, &(0x7f0000000500)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @exit, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}], &(0x7f0000000580)='GPL\x00', 0x40, 0x0, 0x0, 0x40f00, 0x7, '\x00', r8, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0x3, 0x4, 0x9}, 0x10, r9, r10, 0x0, &(0x7f0000001ac0)=[r11, r12, r13, r14], 0x0, 0x10, 0x3}, 0x94)
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x6c, r1, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x801}, 0x40054)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000001d00)={0x3, <r16=>0x0}, 0x8)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001d40)={r16, 0x9, 0x10}, 0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001e00)={{r6, <r17=>0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001dc0)=r15}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0x18, &(0x7f0000001e40)=@raw=[@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x5}, @exit, @ldst={0x0, 0x1, 0x6, 0xa, 0xa, 0x50, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r17}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, @ldst={0x3, 0x3, 0x2, 0x0, 0x2, 0x20, 0x8}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}], &(0x7f0000001f00)='GPL\x00', 0x8000, 0x0, 0x0, 0x40f00, 0x22, '\x00', r8, 0x0, r10, 0x8, &(0x7f0000001f40)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001f80)={0x5, 0x3, 0x0, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=[r6, r6]}, 0x94)
r18 = socket$nl_generic(0x10, 0x3, 0x10)
r19 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002100), r7)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000002140)={'wlan1\x00', <r20=>0x0})
sendmsg$NL80211_CMD_FRAME(r18, &(0x7f0000002240)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002200)={&(0x7f0000002180)={0x7c, r19, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r20}, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x108d}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14c8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1ff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x800}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ce}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002280)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x1, '\x00', r8, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x50)
sendmsg$SMC_PNETID_DEL(r18, &(0x7f0000002480)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002440)={&(0x7f0000002380)={0x88, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'tunl0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x88}}, 0x0)

kernel console output (not intermixed with test programs):

][ T6114]  netlink_sendmsg+0x805/0xb30
[   62.633636][ T6114]  ? __pfx_netlink_sendmsg+0x10/0x10
[   62.633646][ T6114]  ? aa_sock_msg_perm+0x94/0x160
[   62.633658][ T6114]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   62.633664][ T6114]  ? __pfx_netlink_sendmsg+0x10/0x10
[   62.633673][ T6114]  __sock_sendmsg+0x21c/0x270
[   62.633682][ T6114]  ____sys_sendmsg+0x505/0x830
[   62.633694][ T6114]  ? __pfx_____sys_sendmsg+0x10/0x10
[   62.633708][ T6114]  ? import_iovec+0x74/0xa0
[   62.633719][ T6114]  ___sys_sendmsg+0x21f/0x2a0
[   62.633729][ T6114]  ? __pfx____sys_sendmsg+0x10/0x10
[   62.633753][ T6114]  ? __fget_files+0x2a/0x420
[   62.633763][ T6114]  ? __fget_files+0x3a0/0x420
[   62.633777][ T6114]  __x64_sys_sendmsg+0x19b/0x260
[   62.633796][ T6114]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   62.633811][ T6114]  ? rcu_is_watching+0x15/0xb0
[   62.633823][ T6114]  ? do_syscall_64+0xbe/0x3b0
[   62.633834][ T6114]  do_syscall_64+0xfa/0x3b0
[   62.633841][ T6114]  ? lockdep_hardirqs_on+0x9c/0x150
[   62.633849][ T6114]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.633857][ T6114]  ? exc_page_fault+0x9f/0xf0
[   62.633870][ T6114]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.633879][ T6114] RIP: 0033:0x7fab0078e929
[   62.633888][ T6114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   62.633895][ T6114] RSP: 002b:00007fab015a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   62.633903][ T6114] RAX: ffffffffffffffda RBX: 00007fab009b5fa0 RCX: 00007fab0078e929
[   62.633908][ T6114] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[   62.633938][ T6114] RBP: 00007fab00810b39 R08: 0000000000000000 R09: 0000000000000000
[   62.633943][ T6114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   62.633948][ T6114] R13: 0000000000000000 R14: 00007fab009b5fa0 R15: 00007ffc5d1632a8
[   62.633961][ T6114]  </TASK>
[   62.694663][ T6104] Driver unsupported XDP return value 0 on prog  (id 26) dev N/A, expect packet loss!
[   62.704409][ T6116] tap0: tun_chr_ioctl cmd 1074025677
[   62.796646][ T6116] tap0: linktype set to 776
[   62.812395][ T6118] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   62.929325][ T6128] netlink: 'syz.2.81': attribute type 1 has an invalid length.
[   63.025524][ T6138] __nla_validate_parse: 10 callbacks suppressed
[   63.025535][ T6138] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.86'.
[   63.050733][ T6137] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[   63.053254][ T6137] CPU: 1 UID: 0 PID: 6137 Comm: syz.0.87 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   63.053265][ T6137] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   63.053270][ T6137] Call Trace:
[   63.053275][ T6137]  <TASK>
[   63.053279][ T6137]  dump_stack_lvl+0x189/0x250
[   63.053296][ T6137]  ? __pfx_dump_stack_lvl+0x10/0x10
[   63.053307][ T6137]  ? __pfx__printk+0x10/0x10
[   63.053320][ T6137]  ? kernfs_path_from_node+0x2c/0x260
[   63.053333][ T6137]  ? kernfs_path_from_node+0x2c/0x260
[   63.053343][ T6137]  ? kernfs_path_from_node+0x2c/0x260
[   63.053355][ T6137]  ? kernfs_path_from_node+0x22c/0x260
[   63.053366][ T6137]  ? kernfs_path_from_node+0x2c/0x260
[   63.053380][ T6137]  sysfs_warn_dup+0x8e/0xa0
[   63.053391][ T6137]  sysfs_do_create_link_sd+0xc0/0x110
[   63.053403][ T6137]  device_add_class_symlinks+0x1cf/0x240
[   63.053417][ T6137]  device_add+0x475/0xb50
[   63.053427][ T6137]  wiphy_register+0x199a/0x26b0
[   63.053443][ T6137]  ? __pfx_wiphy_register+0x10/0x10
[   63.053451][ T6137]  ? minstrel_ht_alloc+0x6dd/0x7e0
[   63.053466][ T6137]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[   63.053480][ T6137]  ieee80211_register_hw+0x33e1/0x4120
[   63.053497][ T6137]  ? ieee80211_register_hw+0x14a1/0x4120
[   63.053510][ T6137]  ? __pfx_ieee80211_register_hw+0x10/0x10
[   63.053522][ T6137]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   63.053536][ T6137]  ? __hrtimer_setup+0x187/0x210
[   63.053545][ T6137]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[   63.053557][ T6137]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[   63.053577][ T6137]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[   63.053586][ T6137]  ? trace_kmalloc+0x1f/0xd0
[   63.053595][ T6137]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[   63.053605][ T6137]  ? kstrndup+0xbf/0x160
[   63.053622][ T6137]  hwsim_new_radio_nl+0xea4/0x1b10
[   63.053634][ T6137]  ? __pfx___nla_validate_parse+0x10/0x10
[   63.053647][ T6137]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   63.053658][ T6137]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[   63.053669][ T6137]  ? __nla_parse+0x40/0x60
[   63.053678][ T6137]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[   63.053688][ T6137]  genl_family_rcv_msg_doit+0x215/0x300
[   63.053702][ T6137]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   63.053718][ T6137]  ? bpf_lsm_capable+0x9/0x20
[   63.053727][ T6137]  ? security_capable+0x7e/0x2e0
[   63.053741][ T6137]  genl_rcv_msg+0x60e/0x790
[   63.053754][ T6137]  ? __pfx_genl_rcv_msg+0x10/0x10
[   63.053765][ T6137]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   63.053780][ T6137]  netlink_rcv_skb+0x208/0x470
[   63.053791][ T6137]  ? __pfx_genl_rcv_msg+0x10/0x10
[   63.053804][ T6137]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   63.053821][ T6137]  ? down_read+0x1ad/0x2e0
[   63.053830][ T6137]  genl_rcv+0x28/0x40
[   63.053840][ T6137]  netlink_unicast+0x75b/0x8d0
[   63.053852][ T6137]  netlink_sendmsg+0x805/0xb30
[   63.053865][ T6137]  ? __pfx_netlink_sendmsg+0x10/0x10
[   63.053876][ T6137]  ? aa_sock_msg_perm+0x94/0x160
[   63.053888][ T6137]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   63.053894][ T6137]  ? __pfx_netlink_sendmsg+0x10/0x10
[   63.053932][ T6137]  __sock_sendmsg+0x21c/0x270
[   63.053945][ T6137]  ____sys_sendmsg+0x505/0x830
[   63.053960][ T6137]  ? __pfx_____sys_sendmsg+0x10/0x10
[   63.053974][ T6137]  ? import_iovec+0x74/0xa0
[   63.053988][ T6137]  ___sys_sendmsg+0x21f/0x2a0
[   63.053999][ T6137]  ? __pfx____sys_sendmsg+0x10/0x10
[   63.054026][ T6137]  ? __fget_files+0x2a/0x420
[   63.054036][ T6137]  ? __fget_files+0x3a0/0x420
[   63.054059][ T6137]  __x64_sys_sendmsg+0x19b/0x260
[   63.054071][ T6137]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   63.054090][ T6137]  ? do_syscall_64+0xbe/0x3b0
[   63.054102][ T6137]  do_syscall_64+0xfa/0x3b0
[   63.054110][ T6137]  ? lockdep_hardirqs_on+0x9c/0x150
[   63.054117][ T6137]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.054126][ T6137]  ? exc_page_fault+0x9f/0xf0
[   63.054140][ T6137]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.054147][ T6137] RIP: 0033:0x7f0ac138e929
[   63.054156][ T6137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   63.054162][ T6137] RSP: 002b:00007f0ac22a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   63.054172][ T6137] RAX: ffffffffffffffda RBX: 00007f0ac15b5fa0 RCX: 00007f0ac138e929
[   63.054177][ T6137] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[   63.054181][ T6137] RBP: 00007f0ac1410b39 R08: 0000000000000000 R09: 0000000000000000
[   63.054186][ T6137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   63.054190][ T6137] R13: 0000000000000000 R14: 00007f0ac15b5fa0 R15: 00007ffd81aca0e8
[   63.054201][ T6137]  </TASK>
[   63.278255][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.88'.
[   63.281426][ T6143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.88'.
[   63.284155][ T6143] netlink: 'syz.2.88': attribute type 6 has an invalid length.
[   63.485333][ T6157] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20002
[   63.553234][ T6164] netlink: 1 bytes leftover after parsing attributes in process `syz.2.97'.
[   63.557834][ T6166] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[   63.561097][ T6166] CPU: 1 UID: 0 PID: 6166 Comm: syz.0.96 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   63.561109][ T6166] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   63.561115][ T6166] Call Trace:
[   63.561120][ T6166]  <TASK>
[   63.561123][ T6166]  dump_stack_lvl+0x189/0x250
[   63.561142][ T6166]  ? __pfx_dump_stack_lvl+0x10/0x10
[   63.561153][ T6166]  ? __pfx__printk+0x10/0x10
[   63.561166][ T6166]  ? kernfs_path_from_node+0x2c/0x260
[   63.561180][ T6166]  ? kernfs_path_from_node+0x2c/0x260
[   63.561190][ T6166]  ? kernfs_path_from_node+0x2c/0x260
[   63.561202][ T6166]  ? kernfs_path_from_node+0x22c/0x260
[   63.561213][ T6166]  ? kernfs_path_from_node+0x2c/0x260
[   63.561226][ T6166]  sysfs_warn_dup+0x8e/0xa0
[   63.561238][ T6166]  sysfs_do_create_link_sd+0xc0/0x110
[   63.561252][ T6166]  device_add_class_symlinks+0x1cf/0x240
[   63.561265][ T6166]  device_add+0x475/0xb50
[   63.561276][ T6166]  wiphy_register+0x199a/0x26b0
[   63.561292][ T6166]  ? __pfx_wiphy_register+0x10/0x10
[   63.561301][ T6166]  ? minstrel_ht_alloc+0x6dd/0x7e0
[   63.561315][ T6166]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[   63.561330][ T6166]  ieee80211_register_hw+0x33e1/0x4120
[   63.561349][ T6166]  ? ieee80211_register_hw+0x14a1/0x4120
[   63.561362][ T6166]  ? __pfx_ieee80211_register_hw+0x10/0x10
[   63.561374][ T6166]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   63.561391][ T6166]  ? __hrtimer_setup+0x187/0x210
[   63.561401][ T6166]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[   63.561413][ T6166]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[   63.561434][ T6166]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[   63.561443][ T6166]  ? trace_kmalloc+0x1f/0xd0
[   63.561452][ T6166]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[   63.561461][ T6166]  ? kstrndup+0xbf/0x160
[   63.561477][ T6166]  hwsim_new_radio_nl+0xea4/0x1b10
[   63.561488][ T6166]  ? __pfx___nla_validate_parse+0x10/0x10
[   63.561505][ T6166]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   63.561520][ T6166]  ? __nla_parse+0x40/0x60
[   63.561529][ T6166]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[   63.561541][ T6166]  genl_family_rcv_msg_doit+0x215/0x300
[   63.561555][ T6166]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   63.561592][ T6166]  ? bpf_lsm_capable+0x9/0x20
[   63.561604][ T6166]  ? security_capable+0x7e/0x2e0
[   63.561620][ T6166]  genl_rcv_msg+0x60e/0x790
[   63.561635][ T6166]  ? __pfx_genl_rcv_msg+0x10/0x10
[   63.561648][ T6166]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   63.561664][ T6166]  netlink_rcv_skb+0x208/0x470
[   63.561674][ T6166]  ? __pfx_genl_rcv_msg+0x10/0x10
[   63.561687][ T6166]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   63.561705][ T6166]  ? down_read+0x1ad/0x2e0
[   63.561715][ T6166]  genl_rcv+0x28/0x40
[   63.561725][ T6166]  netlink_unicast+0x75b/0x8d0
[   63.561738][ T6166]  netlink_sendmsg+0x805/0xb30
[   63.561751][ T6166]  ? __pfx_netlink_sendmsg+0x10/0x10
[   63.561762][ T6166]  ? aa_sock_msg_perm+0x94/0x160
[   63.561774][ T6166]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   63.561781][ T6166]  ? __pfx_netlink_sendmsg+0x10/0x10
[   63.561790][ T6166]  __sock_sendmsg+0x21c/0x270
[   63.561800][ T6166]  ____sys_sendmsg+0x505/0x830
[   63.561812][ T6166]  ? __pfx_____sys_sendmsg+0x10/0x10
[   63.561826][ T6166]  ? import_iovec+0x74/0xa0
[   63.561837][ T6166]  ___sys_sendmsg+0x21f/0x2a0
[   63.561848][ T6166]  ? __pfx____sys_sendmsg+0x10/0x10
[   63.561878][ T6166]  ? __fget_files+0x2a/0x420
[   63.561888][ T6166]  ? __fget_files+0x3a0/0x420
[   63.561924][ T6166]  __x64_sys_sendmsg+0x19b/0x260
[   63.561937][ T6166]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   63.561953][ T6166]  ? rcu_is_watching+0x15/0xb0
[   63.561968][ T6166]  ? do_syscall_64+0xbe/0x3b0
[   63.561981][ T6166]  do_syscall_64+0xfa/0x3b0
[   63.561989][ T6166]  ? lockdep_hardirqs_on+0x9c/0x150
[   63.561997][ T6166]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.562005][ T6166]  ? exc_page_fault+0x9f/0xf0
[   63.562018][ T6166]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.562026][ T6166] RIP: 0033:0x7f0ac138e929
[   63.562035][ T6166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   63.562042][ T6166] RSP: 002b:00007f0ac22a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   63.562051][ T6166] RAX: ffffffffffffffda RBX: 00007f0ac15b5fa0 RCX: 00007f0ac138e929
[   63.562056][ T6166] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[   63.562061][ T6166] RBP: 00007f0ac1410b39 R08: 0000000000000000 R09: 0000000000000000
[   63.562065][ T6166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   63.562069][ T6166] R13: 0000000000000000 R14: 00007f0ac15b5fa0 R15: 00007ffd81aca0e8
[   63.562082][ T6166]  </TASK>
[   63.579589][ T6164] netlink: 1 bytes leftover after parsing attributes in process `syz.2.97'.
[   63.738365][   T54] Bluetooth: hci0: command tx timeout
[   63.751794][ T6164] netlink: 56 bytes leftover after parsing attributes in process `syz.2.97'.
[   63.819635][   T54] Bluetooth: hci1: command tx timeout
[   63.819660][ T5829] Bluetooth: hci2: command tx timeout
[   64.757022][ T6198] geneve0: entered promiscuous mode
[   64.759410][ T6198] geneve0: entered allmulticast mode
[   65.056271][ T6222] syz.1.113 uses obsolete (PF_INET,SOCK_PACKET)
[   65.159973][ T6229] netlink: 'syz.2.115': attribute type 1 has an invalid length.
[   65.163311][ T6229] netlink: 244 bytes leftover after parsing attributes in process `syz.2.115'.
[   65.209855][ T6233] netlink: 52 bytes leftover after parsing attributes in process `syz.2.117'.
[   65.232239][ T6235] netlink: 72 bytes leftover after parsing attributes in process `syz.1.118'.
[   65.447243][ T6254] netlink: 52 bytes leftover after parsing attributes in process `syz.1.125'.
[   65.496554][ T6250] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   65.546803][ T6261] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[   65.552950][ T6261] CPU: 0 UID: 0 PID: 6261 Comm: syz.1.126 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   65.552963][ T6261] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   65.552968][ T6261] Call Trace:
[   65.552972][ T6261]  <TASK>
[   65.552976][ T6261]  dump_stack_lvl+0x189/0x250
[   65.552993][ T6261]  ? __pfx_dump_stack_lvl+0x10/0x10
[   65.553003][ T6261]  ? __pfx__printk+0x10/0x10
[   65.553014][ T6261]  ? kernfs_path_from_node+0x2c/0x260
[   65.553034][ T6261]  ? kernfs_path_from_node+0x2c/0x260
[   65.553046][ T6261]  ? kernfs_path_from_node+0x2c/0x260
[   65.553057][ T6261]  ? kernfs_path_from_node+0x22c/0x260
[   65.553067][ T6261]  ? kernfs_path_from_node+0x2c/0x260
[   65.553079][ T6261]  sysfs_warn_dup+0x8e/0xa0
[   65.553091][ T6261]  sysfs_do_create_link_sd+0xc0/0x110
[   65.553103][ T6261]  device_add_class_symlinks+0x1cf/0x240
[   65.553116][ T6261]  device_add+0x475/0xb50
[   65.553127][ T6261]  wiphy_register+0x199a/0x26b0
[   65.553143][ T6261]  ? __pfx_wiphy_register+0x10/0x10
[   65.553151][ T6261]  ? minstrel_ht_alloc+0x6dd/0x7e0
[   65.553165][ T6261]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[   65.553178][ T6261]  ieee80211_register_hw+0x33e1/0x4120
[   65.553195][ T6261]  ? ieee80211_register_hw+0x14a1/0x4120
[   65.553209][ T6261]  ? __pfx_ieee80211_register_hw+0x10/0x10
[   65.553221][ T6261]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   65.553235][ T6261]  ? __hrtimer_setup+0x187/0x210
[   65.553244][ T6261]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[   65.553256][ T6261]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[   65.553277][ T6261]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[   65.553285][ T6261]  ? trace_kmalloc+0x1f/0xd0
[   65.553293][ T6261]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[   65.553303][ T6261]  ? kstrndup+0xbf/0x160
[   65.553318][ T6261]  hwsim_new_radio_nl+0xea4/0x1b10
[   65.553328][ T6261]  ? __pfx___nla_validate_parse+0x10/0x10
[   65.553344][ T6261]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   65.553359][ T6261]  ? __nla_parse+0x40/0x60
[   65.553369][ T6261]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[   65.553400][ T6261]  genl_family_rcv_msg_doit+0x215/0x300
[   65.553415][ T6261]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   65.553433][ T6261]  ? bpf_lsm_capable+0x9/0x20
[   65.553444][ T6261]  ? security_capable+0x7e/0x2e0
[   65.553460][ T6261]  genl_rcv_msg+0x60e/0x790
[   65.553475][ T6261]  ? __pfx_genl_rcv_msg+0x10/0x10
[   65.553487][ T6261]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   65.553504][ T6261]  netlink_rcv_skb+0x208/0x470
[   65.553514][ T6261]  ? __pfx_genl_rcv_msg+0x10/0x10
[   65.553527][ T6261]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   65.553543][ T6261]  ? down_read+0x1ad/0x2e0
[   65.553552][ T6261]  genl_rcv+0x28/0x40
[   65.553562][ T6261]  netlink_unicast+0x75b/0x8d0
[   65.553575][ T6261]  netlink_sendmsg+0x805/0xb30
[   65.553588][ T6261]  ? __pfx_netlink_sendmsg+0x10/0x10
[   65.553599][ T6261]  ? aa_sock_msg_perm+0x94/0x160
[   65.553610][ T6261]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   65.553617][ T6261]  ? __pfx_netlink_sendmsg+0x10/0x10
[   65.553626][ T6261]  __sock_sendmsg+0x21c/0x270
[   65.553636][ T6261]  ____sys_sendmsg+0x505/0x830
[   65.553648][ T6261]  ? __pfx_____sys_sendmsg+0x10/0x10
[   65.553661][ T6261]  ? import_iovec+0x74/0xa0
[   65.553672][ T6261]  ___sys_sendmsg+0x21f/0x2a0
[   65.553683][ T6261]  ? __pfx____sys_sendmsg+0x10/0x10
[   65.553708][ T6261]  ? __fget_files+0x2a/0x420
[   65.553718][ T6261]  ? __fget_files+0x3a0/0x420
[   65.553731][ T6261]  __x64_sys_sendmsg+0x19b/0x260
[   65.553742][ T6261]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   65.553756][ T6261]  ? rcu_is_watching+0x15/0xb0
[   65.553768][ T6261]  ? do_syscall_64+0xbe/0x3b0
[   65.553777][ T6261]  do_syscall_64+0xfa/0x3b0
[   65.553784][ T6261]  ? lockdep_hardirqs_on+0x9c/0x150
[   65.553791][ T6261]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.553798][ T6261]  ? exc_page_fault+0x9f/0xf0
[   65.553810][ T6261]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.553817][ T6261] RIP: 0033:0x7fab0078e929
[   65.553825][ T6261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   65.553831][ T6261] RSP: 002b:00007fab015a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   65.553840][ T6261] RAX: ffffffffffffffda RBX: 00007fab009b5fa0 RCX: 00007fab0078e929
[   65.553845][ T6261] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[   65.553850][ T6261] RBP: 00007fab00810b39 R08: 0000000000000000 R09: 0000000000000000
[   65.553854][ T6261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   65.553858][ T6261] R13: 0000000000000000 R14: 00007fab009b5fa0 R15: 00007ffc5d1632a8
[   65.553892][ T6261]  </TASK>
[   65.806500][ T6267] netlink: 'syz.1.131': attribute type 46 has an invalid length.
[   65.870983][ T6272] geneve0: entered promiscuous mode
[   65.873018][ T6272] geneve0: entered allmulticast mode
[   66.109257][ T6288] veth1_to_bridge: entered promiscuous mode
[   66.111505][ T6288] vlan0: entered promiscuous mode
[   66.365752][ T6309] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.524076][ T6316] syz.1.149 (6316) used greatest stack depth: 17848 bytes left
[   66.758549][ T6343] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[   66.762233][ T6343] CPU: 1 UID: 0 PID: 6343 Comm: syz.0.159 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   66.762247][ T6343] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   66.762252][ T6343] Call Trace:
[   66.762256][ T6343]  <TASK>
[   66.762260][ T6343]  dump_stack_lvl+0x189/0x250
[   66.762277][ T6343]  ? __pfx_dump_stack_lvl+0x10/0x10
[   66.762287][ T6343]  ? __pfx__printk+0x10/0x10
[   66.762299][ T6343]  ? kernfs_path_from_node+0x2c/0x260
[   66.762313][ T6343]  ? kernfs_path_from_node+0x2c/0x260
[   66.762324][ T6343]  ? kernfs_path_from_node+0x2c/0x260
[   66.762336][ T6343]  ? kernfs_path_from_node+0x22c/0x260
[   66.762347][ T6343]  ? kernfs_path_from_node+0x2c/0x260
[   66.762359][ T6343]  sysfs_warn_dup+0x8e/0xa0
[   66.762369][ T6343]  sysfs_do_create_link_sd+0xc0/0x110
[   66.762382][ T6343]  device_add_class_symlinks+0x1cf/0x240
[   66.762394][ T6343]  device_add+0x475/0xb50
[   66.762405][ T6343]  wiphy_register+0x199a/0x26b0
[   66.762433][ T6343]  ? __pfx_wiphy_register+0x10/0x10
[   66.762441][ T6343]  ? minstrel_ht_alloc+0x6dd/0x7e0
[   66.762457][ T6343]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[   66.762470][ T6343]  ieee80211_register_hw+0x33e1/0x4120
[   66.762491][ T6343]  ? ieee80211_register_hw+0x14a1/0x4120
[   66.762506][ T6343]  ? __pfx_ieee80211_register_hw+0x10/0x10
[   66.762518][ T6343]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   66.762533][ T6343]  ? __hrtimer_setup+0x187/0x210
[   66.762543][ T6343]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[   66.762554][ T6343]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[   66.762576][ T6343]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[   66.762585][ T6343]  ? trace_kmalloc+0x1f/0xd0
[   66.762594][ T6343]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[   66.762604][ T6343]  ? kstrndup+0xbf/0x160
[   66.762620][ T6343]  hwsim_new_radio_nl+0xea4/0x1b10
[   66.762630][ T6343]  ? __pfx___nla_validate_parse+0x10/0x10
[   66.762644][ T6343]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   66.762654][ T6343]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[   66.762665][ T6343]  ? __nla_parse+0x40/0x60
[   66.762674][ T6343]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[   66.762684][ T6343]  genl_family_rcv_msg_doit+0x215/0x300
[   66.762699][ T6343]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   66.762721][ T6343]  ? bpf_lsm_capable+0x9/0x20
[   66.762730][ T6343]  ? security_capable+0x7e/0x2e0
[   66.762745][ T6343]  genl_rcv_msg+0x60e/0x790
[   66.762760][ T6343]  ? __pfx_genl_rcv_msg+0x10/0x10
[   66.762772][ T6343]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   66.762788][ T6343]  netlink_rcv_skb+0x208/0x470
[   66.762798][ T6343]  ? __pfx_genl_rcv_msg+0x10/0x10
[   66.762810][ T6343]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   66.762828][ T6343]  ? down_read+0x1ad/0x2e0
[   66.762838][ T6343]  genl_rcv+0x28/0x40
[   66.762880][ T6343]  netlink_unicast+0x75b/0x8d0
[   66.762902][ T6343]  netlink_sendmsg+0x805/0xb30
[   66.762917][ T6343]  ? __pfx_netlink_sendmsg+0x10/0x10
[   66.762928][ T6343]  ? aa_sock_msg_perm+0x94/0x160
[   66.762940][ T6343]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   66.762947][ T6343]  ? __pfx_netlink_sendmsg+0x10/0x10
[   66.762956][ T6343]  __sock_sendmsg+0x21c/0x270
[   66.762966][ T6343]  ____sys_sendmsg+0x505/0x830
[   66.762980][ T6343]  ? __pfx_____sys_sendmsg+0x10/0x10
[   66.762995][ T6343]  ? import_iovec+0x74/0xa0
[   66.763006][ T6343]  ___sys_sendmsg+0x21f/0x2a0
[   66.763017][ T6343]  ? __pfx____sys_sendmsg+0x10/0x10
[   66.763041][ T6343]  ? __fget_files+0x2a/0x420
[   66.763051][ T6343]  ? __fget_files+0x3a0/0x420
[   66.763065][ T6343]  __x64_sys_sendmsg+0x19b/0x260
[   66.763076][ T6343]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   66.763090][ T6343]  ? rcu_is_watching+0x15/0xb0
[   66.763101][ T6343]  ? do_syscall_64+0xbe/0x3b0
[   66.763111][ T6343]  do_syscall_64+0xfa/0x3b0
[   66.763117][ T6343]  ? lockdep_hardirqs_on+0x9c/0x150
[   66.763124][ T6343]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   66.763131][ T6343]  ? exc_page_fault+0x9f/0xf0
[   66.763143][ T6343]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   66.763150][ T6343] RIP: 0033:0x7f0ac138e929
[   66.763159][ T6343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   66.763165][ T6343] RSP: 002b:00007f0ac22a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   66.763174][ T6343] RAX: ffffffffffffffda RBX: 00007f0ac15b5fa0 RCX: 00007f0ac138e929
[   66.763179][ T6343] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[   66.763184][ T6343] RBP: 00007f0ac1410b39 R08: 0000000000000000 R09: 0000000000000000
[   66.763188][ T6343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   66.763192][ T6343] R13: 0000000000000000 R14: 00007f0ac15b5fa0 R15: 00007ffd81aca0e8
[   66.763204][ T6343]  </TASK>
[   67.333645][ T6368] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   67.336141][ T6368] IPv6: NLM_F_CREATE should be set when creating new route
[   67.650874][ T6392] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[   67.653274][ T6392] CPU: 0 UID: 0 PID: 6392 Comm: syz.1.177 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   67.653285][ T6392] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   67.653291][ T6392] Call Trace:
[   67.653295][ T6392]  <TASK>
[   67.653299][ T6392]  dump_stack_lvl+0x189/0x250
[   67.653315][ T6392]  ? __pfx_dump_stack_lvl+0x10/0x10
[   67.653325][ T6392]  ? __pfx__printk+0x10/0x10
[   67.653336][ T6392]  ? kernfs_path_from_node+0x2c/0x260
[   67.653350][ T6392]  ? kernfs_path_from_node+0x2c/0x260
[   67.653360][ T6392]  ? kernfs_path_from_node+0x2c/0x260
[   67.653371][ T6392]  ? kernfs_path_from_node+0x22c/0x260
[   67.653382][ T6392]  ? kernfs_path_from_node+0x2c/0x260
[   67.653394][ T6392]  sysfs_warn_dup+0x8e/0xa0
[   67.653405][ T6392]  sysfs_do_create_link_sd+0xc0/0x110
[   67.653416][ T6392]  device_add_class_symlinks+0x1cf/0x240
[   67.653428][ T6392]  device_add+0x475/0xb50
[   67.653440][ T6392]  wiphy_register+0x199a/0x26b0
[   67.653456][ T6392]  ? __pfx_wiphy_register+0x10/0x10
[   67.653463][ T6392]  ? minstrel_ht_alloc+0x6dd/0x7e0
[   67.653476][ T6392]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[   67.653488][ T6392]  ieee80211_register_hw+0x33e1/0x4120
[   67.653507][ T6392]  ? ieee80211_register_hw+0x14a1/0x4120
[   67.653520][ T6392]  ? __pfx_ieee80211_register_hw+0x10/0x10
[   67.653532][ T6392]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   67.653547][ T6392]  ? __hrtimer_setup+0x187/0x210
[   67.653556][ T6392]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[   67.653569][ T6392]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[   67.653588][ T6392]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[   67.653596][ T6392]  ? trace_kmalloc+0x1f/0xd0
[   67.653605][ T6392]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[   67.653615][ T6392]  ? kstrndup+0xbf/0x160
[   67.653630][ T6392]  hwsim_new_radio_nl+0xea4/0x1b10
[   67.653640][ T6392]  ? __pfx___nla_validate_parse+0x10/0x10
[   67.653655][ T6392]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   67.653671][ T6392]  ? __nla_parse+0x40/0x60
[   67.653682][ T6392]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[   67.653694][ T6392]  genl_family_rcv_msg_doit+0x215/0x300
[   67.653708][ T6392]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   67.653724][ T6392]  ? bpf_lsm_capable+0x9/0x20
[   67.653733][ T6392]  ? security_capable+0x7e/0x2e0
[   67.653748][ T6392]  genl_rcv_msg+0x60e/0x790
[   67.653761][ T6392]  ? __pfx_genl_rcv_msg+0x10/0x10
[   67.653772][ T6392]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   67.653788][ T6392]  netlink_rcv_skb+0x208/0x470
[   67.653798][ T6392]  ? __pfx_genl_rcv_msg+0x10/0x10
[   67.653811][ T6392]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   67.653827][ T6392]  ? down_read+0x1ad/0x2e0
[   67.653861][ T6392]  genl_rcv+0x28/0x40
[   67.653874][ T6392]  netlink_unicast+0x75b/0x8d0
[   67.653887][ T6392]  netlink_sendmsg+0x805/0xb30
[   67.653902][ T6392]  ? __pfx_netlink_sendmsg+0x10/0x10
[   67.653913][ T6392]  ? aa_sock_msg_perm+0x94/0x160
[   67.653927][ T6392]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   67.653935][ T6392]  ? __pfx_netlink_sendmsg+0x10/0x10
[   67.653944][ T6392]  __sock_sendmsg+0x21c/0x270
[   67.653954][ T6392]  ____sys_sendmsg+0x505/0x830
[   67.653966][ T6392]  ? __pfx_____sys_sendmsg+0x10/0x10
[   67.653981][ T6392]  ? import_iovec+0x74/0xa0
[   67.653999][ T6392]  ___sys_sendmsg+0x21f/0x2a0
[   67.654011][ T6392]  ? __pfx____sys_sendmsg+0x10/0x10
[   67.654036][ T6392]  ? __fget_files+0x2a/0x420
[   67.654047][ T6392]  ? __fget_files+0x3a0/0x420
[   67.654062][ T6392]  __x64_sys_sendmsg+0x19b/0x260
[   67.654073][ T6392]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   67.654087][ T6392]  ? rcu_is_watching+0x15/0xb0
[   67.654100][ T6392]  ? do_syscall_64+0xbe/0x3b0
[   67.654111][ T6392]  do_syscall_64+0xfa/0x3b0
[   67.654118][ T6392]  ? lockdep_hardirqs_on+0x9c/0x150
[   67.654124][ T6392]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.654132][ T6392]  ? exc_page_fault+0x9f/0xf0
[   67.654144][ T6392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.654151][ T6392] RIP: 0033:0x7fab0078e929
[   67.654160][ T6392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   67.654166][ T6392] RSP: 002b:00007fab015a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   67.654175][ T6392] RAX: ffffffffffffffda RBX: 00007fab009b5fa0 RCX: 00007fab0078e929
[   67.654180][ T6392] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[   67.654185][ T6392] RBP: 00007fab00810b39 R08: 0000000000000000 R09: 0000000000000000
[   67.654189][ T6392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   67.654193][ T6392] R13: 0000000000000000 R14: 00007fab009b5fa0 R15: 00007ffc5d1632a8
[   67.654204][ T6392]  </TASK>
[   67.893777][ T6398] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   67.900744][ T6398] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   68.003103][ T6409] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[   68.169573][ T6427] __nla_validate_parse: 10 callbacks suppressed
[   68.169584][ T6427] netlink: 24 bytes leftover after parsing attributes in process `syz.2.190'.
[   68.181535][ T6427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.190'.
[   68.370253][ T6440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.194'.
[   68.386874][ T6435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.194'.
[   68.440759][ T6444] netlink: 'syz.0.196': attribute type 1 has an invalid length.
[   68.538540][ T5829] Bluetooth: hci2: command tx timeout
[   68.634190][ T6457] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[   68.636604][ T6457] CPU: 1 UID: 0 PID: 6457 Comm: syz.2.202 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   68.636616][ T6457] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   68.636621][ T6457] Call Trace:
[   68.636625][ T6457]  <TASK>
[   68.636629][ T6457]  dump_stack_lvl+0x189/0x250
[   68.636645][ T6457]  ? __pfx_dump_stack_lvl+0x10/0x10
[   68.636655][ T6457]  ? __pfx__printk+0x10/0x10
[   68.636667][ T6457]  ? kernfs_path_from_node+0x2c/0x260
[   68.636681][ T6457]  ? kernfs_path_from_node+0x2c/0x260
[   68.636691][ T6457]  ? kernfs_path_from_node+0x2c/0x260
[   68.636707][ T6457]  ? kernfs_path_from_node+0x22c/0x260
[   68.636717][ T6457]  ? kernfs_path_from_node+0x2c/0x260
[   68.636729][ T6457]  sysfs_warn_dup+0x8e/0xa0
[   68.636741][ T6457]  sysfs_do_create_link_sd+0xc0/0x110
[   68.636753][ T6457]  device_add_class_symlinks+0x1cf/0x240
[   68.636766][ T6457]  device_add+0x475/0xb50
[   68.636778][ T6457]  wiphy_register+0x199a/0x26b0
[   68.636796][ T6457]  ? __pfx_wiphy_register+0x10/0x10
[   68.636805][ T6457]  ? minstrel_ht_alloc+0x6dd/0x7e0
[   68.636818][ T6457]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[   68.636855][ T6457]  ieee80211_register_hw+0x33e1/0x4120
[   68.636872][ T6457]  ? ieee80211_register_hw+0x14a1/0x4120
[   68.636886][ T6457]  ? __pfx_ieee80211_register_hw+0x10/0x10
[   68.636898][ T6457]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   68.636915][ T6457]  ? __hrtimer_setup+0x187/0x210
[   68.636925][ T6457]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[   68.636938][ T6457]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[   68.636959][ T6457]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[   68.636967][ T6457]  ? trace_kmalloc+0x1f/0xd0
[   68.636976][ T6457]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[   68.636985][ T6457]  ? kstrndup+0xbf/0x160
[   68.637000][ T6457]  hwsim_new_radio_nl+0xea4/0x1b10
[   68.637011][ T6457]  ? __pfx___nla_validate_parse+0x10/0x10
[   68.637027][ T6457]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   68.637042][ T6457]  ? __nla_parse+0x40/0x60
[   68.637052][ T6457]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[   68.637064][ T6457]  genl_family_rcv_msg_doit+0x215/0x300
[   68.637078][ T6457]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   68.637094][ T6457]  ? bpf_lsm_capable+0x9/0x20
[   68.637103][ T6457]  ? security_capable+0x7e/0x2e0
[   68.637119][ T6457]  genl_rcv_msg+0x60e/0x790
[   68.637133][ T6457]  ? __pfx_genl_rcv_msg+0x10/0x10
[   68.637145][ T6457]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   68.637161][ T6457]  netlink_rcv_skb+0x208/0x470
[   68.637171][ T6457]  ? __pfx_genl_rcv_msg+0x10/0x10
[   68.637183][ T6457]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   68.637199][ T6457]  ? down_read+0x1ad/0x2e0
[   68.637208][ T6457]  genl_rcv+0x28/0x40
[   68.637218][ T6457]  netlink_unicast+0x75b/0x8d0
[   68.637230][ T6457]  netlink_sendmsg+0x805/0xb30
[   68.637243][ T6457]  ? __pfx_netlink_sendmsg+0x10/0x10
[   68.637253][ T6457]  ? aa_sock_msg_perm+0x94/0x160
[   68.637265][ T6457]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   68.637271][ T6457]  ? __pfx_netlink_sendmsg+0x10/0x10
[   68.637280][ T6457]  __sock_sendmsg+0x21c/0x270
[   68.637289][ T6457]  ____sys_sendmsg+0x505/0x830
[   68.637301][ T6457]  ? __pfx_____sys_sendmsg+0x10/0x10
[   68.637315][ T6457]  ? import_iovec+0x74/0xa0
[   68.637325][ T6457]  ___sys_sendmsg+0x21f/0x2a0
[   68.637336][ T6457]  ? __pfx____sys_sendmsg+0x10/0x10
[   68.637359][ T6457]  ? __fget_files+0x2a/0x420
[   68.637369][ T6457]  ? __fget_files+0x3a0/0x420
[   68.637383][ T6457]  __x64_sys_sendmsg+0x19b/0x260
[   68.637393][ T6457]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   68.637407][ T6457]  ? rcu_is_watching+0x15/0xb0
[   68.637418][ T6457]  ? do_syscall_64+0xbe/0x3b0
[   68.637428][ T6457]  do_syscall_64+0xfa/0x3b0
[   68.637435][ T6457]  ? lockdep_hardirqs_on+0x9c/0x150
[   68.637441][ T6457]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.637449][ T6457]  ? exc_page_fault+0x9f/0xf0
[   68.637460][ T6457]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.637467][ T6457] RIP: 0033:0x7f43df58e929
[   68.637475][ T6457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   68.637481][ T6457] RSP: 002b:00007f43e0365038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   68.637490][ T6457] RAX: ffffffffffffffda RBX: 00007f43df7b5fa0 RCX: 00007f43df58e929
[   68.637496][ T6457] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[   68.637500][ T6457] RBP: 00007f43df610b39 R08: 0000000000000000 R09: 0000000000000000
[   68.637504][ T6457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   68.637508][ T6457] R13: 0000000000000000 R14: 00007f43df7b5fa0 R15: 00007ffd661ba2b8
[   68.637520][ T6457]  </TASK>
[   69.001942][ T6467] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   69.233367][ T6505] netlink: 968 bytes leftover after parsing attributes in process `syz.2.215'.
[   69.346717][ T6510] geneve2: entered promiscuous mode
[   69.370934][ T6513] netlink: 32 bytes leftover after parsing attributes in process `syz.0.219'.
[   69.454683][ T6520] netlink: 'syz.0.222': attribute type 29 has an invalid length.
[   69.458933][ T6517] netlink: 14212 bytes leftover after parsing attributes in process `syz.1.221'.
[   69.471902][ T6520] netlink: 'syz.0.222': attribute type 29 has an invalid length.
[   69.489769][ T6520] netlink: 500 bytes leftover after parsing attributes in process `syz.0.222'.
[   69.553367][ T6525] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   70.415256][ T5874] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   70.462850][ T6546] netlink: 'syz.1.229': attribute type 10 has an invalid length.
[   70.503503][ T6548] netlink: 'syz.2.230': attribute type 1 has an invalid length.
[   70.683682][    C0] vcan0: j1939_tp_rxtimer: 0xffff888028176000: rx timeout, send abort
[   70.776246][ T6565] tipc: Started in network mode
[   70.781134][ T6565] tipc: Node identity 2aaad6fb2f7c, cluster identity 4711
[   70.783670][ T6565] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.814993][ T6565] syzkaller0: entered promiscuous mode
[   70.816779][ T6565] syzkaller0: entered allmulticast mode
[   70.819677][ T6565] tipc: Resetting bearer <eth:syzkaller0>
[   70.825618][ T6564] tipc: Resetting bearer <eth:syzkaller0>
[   70.861438][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   70.871824][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.188214][    C0] vcan0: j1939_tp_rxtimer: 0xffff888028176000: abort rx timeout. Force session deactivation
[   71.631303][ T6564] tipc: Disabling bearer <eth:syzkaller0>
[   71.635652][ T6581] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.642743][ T6581] batadv_slave_0: entered promiscuous mode
[   71.648983][ T6581] batadv_slave_0: entered allmulticast mode
[   71.721253][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.244'.
[   71.725043][ T6584] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[   71.734198][ T6584] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.760616][ T6585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.245'.
[   71.876216][ T6594] IPVS: Error joining to the multicast group
[   72.261537][ T6615] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   72.325400][ T6615] bond1: entered promiscuous mode
[   72.337290][ T6615] bond1: entered allmulticast mode
[   72.347530][ T6615] 8021q: adding VLAN 0 to HW filter on device bond1
[   72.393568][ T6619] netlink: 'syz.2.256': attribute type 1 has an invalid length.
[   72.466035][ T6619] veth3: entered promiscuous mode
[   72.521208][ T6625] erspan0: entered allmulticast mode
[   72.565562][ T6644] ieee802154 phy0 wpan0: encryption failed: -22
[   72.801103][ T6670] netlink: 'syz.0.271': attribute type 1 has an invalid length.
[   72.823328][ T6674] bond2 (unregistering): Released all slaves
[   72.876108][ T6676] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[   72.884897][ T6676] CPU: 1 UID: 0 PID: 6676 Comm: syz.2.270 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   72.884911][ T6676] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   72.884917][ T6676] Call Trace:
[   72.884921][ T6676]  <TASK>
[   72.884925][ T6676]  dump_stack_lvl+0x189/0x250
[   72.884942][ T6676]  ? __pfx_dump_stack_lvl+0x10/0x10
[   72.884952][ T6676]  ? __pfx__printk+0x10/0x10
[   72.884964][ T6676]  ? kernfs_path_from_node+0x2c/0x260
[   72.884978][ T6676]  ? kernfs_path_from_node+0x2c/0x260
[   72.884988][ T6676]  ? kernfs_path_from_node+0x2c/0x260
[   72.885000][ T6676]  ? kernfs_path_from_node+0x22c/0x260
[   72.885010][ T6676]  ? kernfs_path_from_node+0x2c/0x260
[   72.885022][ T6676]  sysfs_warn_dup+0x8e/0xa0
[   72.885034][ T6676]  sysfs_do_create_link_sd+0xc0/0x110
[   72.885046][ T6676]  device_add_class_symlinks+0x1cf/0x240
[   72.885060][ T6676]  device_add+0x475/0xb50
[   72.885072][ T6676]  wiphy_register+0x199a/0x26b0
[   72.885088][ T6676]  ? __pfx_wiphy_register+0x10/0x10
[   72.885096][ T6676]  ? minstrel_ht_alloc+0x6dd/0x7e0
[   72.885110][ T6676]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[   72.885122][ T6676]  ieee80211_register_hw+0x33e1/0x4120
[   72.885140][ T6676]  ? ieee80211_register_hw+0x14a1/0x4120
[   72.885154][ T6676]  ? __pfx_ieee80211_register_hw+0x10/0x10
[   72.885165][ T6676]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   72.885181][ T6676]  ? __hrtimer_setup+0x187/0x210
[   72.885189][ T6676]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[   72.885201][ T6676]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[   72.885221][ T6676]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[   72.885230][ T6676]  ? trace_kmalloc+0x1f/0xd0
[   72.885239][ T6676]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[   72.885249][ T6676]  ? kstrndup+0xbf/0x160
[   72.885264][ T6676]  hwsim_new_radio_nl+0xea4/0x1b10
[   72.885275][ T6676]  ? __pfx___nla_validate_parse+0x10/0x10
[   72.885289][ T6676]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   72.885305][ T6676]  ? __nla_parse+0x40/0x60
[   72.885315][ T6676]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[   72.885326][ T6676]  genl_family_rcv_msg_doit+0x215/0x300
[   72.885340][ T6676]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   72.885356][ T6676]  ? bpf_lsm_capable+0x9/0x20
[   72.885365][ T6676]  ? security_capable+0x7e/0x2e0
[   72.885379][ T6676]  genl_rcv_msg+0x60e/0x790
[   72.885393][ T6676]  ? __pfx_genl_rcv_msg+0x10/0x10
[   72.885403][ T6676]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   72.885417][ T6676]  netlink_rcv_skb+0x208/0x470
[   72.885427][ T6676]  ? __pfx_genl_rcv_msg+0x10/0x10
[   72.885438][ T6676]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   72.885453][ T6676]  ? down_read+0x1ad/0x2e0
[   72.885462][ T6676]  genl_rcv+0x28/0x40
[   72.885472][ T6676]  netlink_unicast+0x75b/0x8d0
[   72.885485][ T6676]  netlink_sendmsg+0x805/0xb30
[   72.885498][ T6676]  ? __pfx_netlink_sendmsg+0x10/0x10
[   72.885508][ T6676]  ? aa_sock_msg_perm+0x94/0x160
[   72.885520][ T6676]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   72.885526][ T6676]  ? __pfx_netlink_sendmsg+0x10/0x10
[   72.885536][ T6676]  __sock_sendmsg+0x21c/0x270
[   72.885545][ T6676]  ____sys_sendmsg+0x505/0x830
[   72.885557][ T6676]  ? __pfx_____sys_sendmsg+0x10/0x10
[   72.885570][ T6676]  ? import_iovec+0x74/0xa0
[   72.885581][ T6676]  ___sys_sendmsg+0x21f/0x2a0
[   72.885592][ T6676]  ? __pfx____sys_sendmsg+0x10/0x10
[   72.885615][ T6676]  ? __fget_files+0x2a/0x420
[   72.885625][ T6676]  ? __fget_files+0x3a0/0x420
[   72.885645][ T6676]  __x64_sys_sendmsg+0x19b/0x260
[   72.885657][ T6676]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   72.885672][ T6676]  ? rcu_is_watching+0x15/0xb0
[   72.885684][ T6676]  ? do_syscall_64+0xbe/0x3b0
[   72.885696][ T6676]  do_syscall_64+0xfa/0x3b0
[   72.885703][ T6676]  ? lockdep_hardirqs_on+0x9c/0x150
[   72.885711][ T6676]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.885718][ T6676]  ? exc_page_fault+0x9f/0xf0
[   72.885731][ T6676]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.885739][ T6676] RIP: 0033:0x7f43df58e929
[   72.885747][ T6676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   72.885753][ T6676] RSP: 002b:00007f43e0365038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   72.885790][ T6676] RAX: ffffffffffffffda RBX: 00007f43df7b5fa0 RCX: 00007f43df58e929
[   72.885796][ T6676] RDX: 00000000000003e4 RSI: 0000200000000040 RDI: 0000000000000004
[   72.885802][ T6676] RBP: 00007f43df610b39 R08: 0000000000000000 R09: 0000000000000000
[   72.885807][ T6676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   72.885812][ T6676] R13: 0000000000000000 R14: 00007f43df7b5fa0 R15: 00007ffd661ba2b8
[   72.885825][ T6676]  </TASK>
[   73.368924][ T6702] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.372402][ T6702] syzkaller0: entered promiscuous mode
[   73.374175][ T6702] syzkaller0: entered allmulticast mode
[   73.380221][ T6702] tipc: Resetting bearer <eth:syzkaller0>
[   73.384616][ T6702] tipc: Resetting bearer <eth:syzkaller0>
[   73.394523][ T6702] tipc: Disabling bearer <eth:syzkaller0>
[   73.402266][ T6700] __nla_validate_parse: 3 callbacks suppressed
[   73.402280][ T6700] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.276'.
[   73.428523][ T6700] tap0: tun_chr_ioctl cmd 1074025677
[   73.431206][ T6700] tap0: linktype set to 823
[   73.434054][ T6700] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[   73.436237][ T6696] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.276'.
[   73.437888][  T792] IPVS: starting estimator thread 0...
[   73.517134][ T6713] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[   73.523412][ T6713] CPU: 1 UID: 0 PID: 6713 Comm: syz.1.280 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   73.523425][ T6713] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   73.523431][ T6713] Call Trace:
[   73.523435][ T6713]  <TASK>
[   73.523439][ T6713]  dump_stack_lvl+0x189/0x250
[   73.523455][ T6713]  ? __pfx_dump_stack_lvl+0x10/0x10
[   73.523464][ T6713]  ? __pfx__printk+0x10/0x10
[   73.523495][ T6713]  ? kernfs_path_from_node+0x2c/0x260
[   73.523509][ T6713]  ? kernfs_path_from_node+0x2c/0x260
[   73.523518][ T6713]  ? kernfs_path_from_node+0x2c/0x260
[   73.523529][ T6713]  ? kernfs_path_from_node+0x22c/0x260
[   73.523538][ T6713]  ? kernfs_path_from_node+0x2c/0x260
[   73.523549][ T6713]  sysfs_warn_dup+0x8e/0xa0
[   73.523560][ T6713]  sysfs_do_create_link_sd+0xc0/0x110
[   73.523572][ T6713]  device_add_class_symlinks+0x1cf/0x240
[   73.523585][ T6713]  device_add+0x475/0xb50
[   73.523596][ T6713]  wiphy_register+0x199a/0x26b0
[   73.523619][ T6713]  ? __pfx_wiphy_register+0x10/0x10
[   73.523628][ T6713]  ? minstrel_ht_alloc+0x6dd/0x7e0
[   73.523641][ T6713]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[   73.523655][ T6713]  ieee80211_register_hw+0x33e1/0x4120
[   73.523673][ T6713]  ? ieee80211_register_hw+0x14a1/0x4120
[   73.523687][ T6713]  ? __pfx_ieee80211_register_hw+0x10/0x10
[   73.523700][ T6713]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   73.523718][ T6713]  ? __hrtimer_setup+0x187/0x210
[   73.523726][ T6713]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[   73.523739][ T6713]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[   73.523789][ T6713]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[   73.523800][ T6713]  ? trace_kmalloc+0x1f/0xd0
[   73.523810][ T6713]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[   73.523819][ T6713]  ? kstrndup+0xbf/0x160
[   73.523835][ T6713]  hwsim_new_radio_nl+0xea4/0x1b10
[   73.523847][ T6713]  ? __pfx___nla_validate_parse+0x10/0x10
[   73.523862][ T6713]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   73.523878][ T6713]  ? __nla_parse+0x40/0x60
[   73.523889][ T6713]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[   73.523901][ T6713]  genl_family_rcv_msg_doit+0x215/0x300
[   73.523915][ T6713]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   73.523934][ T6713]  ? bpf_lsm_capable+0x9/0x20
[   73.523942][ T6713]  ? security_capable+0x7e/0x2e0
[   73.523956][ T6713]  genl_rcv_msg+0x60e/0x790
[   73.523973][ T6713]  ? __pfx_genl_rcv_msg+0x10/0x10
[   73.523985][ T6713]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   73.524001][ T6713]  netlink_rcv_skb+0x208/0x470
[   73.524011][ T6713]  ? __pfx_genl_rcv_msg+0x10/0x10
[   73.524022][ T6713]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   73.524038][ T6713]  ? down_read+0x1ad/0x2e0
[   73.524047][ T6713]  genl_rcv+0x28/0x40
[   73.524057][ T6713]  netlink_unicast+0x75b/0x8d0
[   73.524070][ T6713]  netlink_sendmsg+0x805/0xb30
[   73.524083][ T6713]  ? __pfx_netlink_sendmsg+0x10/0x10
[   73.524093][ T6713]  ? aa_sock_msg_perm+0x94/0x160
[   73.524105][ T6713]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   73.524112][ T6713]  ? __pfx_netlink_sendmsg+0x10/0x10
[   73.524121][ T6713]  __sock_sendmsg+0x21c/0x270
[   73.524130][ T6713]  ____sys_sendmsg+0x505/0x830
[   73.524142][ T6713]  ? __pfx_____sys_sendmsg+0x10/0x10
[   73.524155][ T6713]  ? import_iovec+0x74/0xa0
[   73.524166][ T6713]  ___sys_sendmsg+0x21f/0x2a0
[   73.524176][ T6713]  ? __pfx____sys_sendmsg+0x10/0x10
[   73.524201][ T6713]  ? __fget_files+0x2a/0x420
[   73.524211][ T6713]  ? __fget_files+0x3a0/0x420
[   73.524225][ T6713]  __x64_sys_sendmsg+0x19b/0x260
[   73.524235][ T6713]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   73.524249][ T6713]  ? rcu_is_watching+0x15/0xb0
[   73.524260][ T6713]  ? do_syscall_64+0xbe/0x3b0
[   73.524270][ T6713]  do_syscall_64+0xfa/0x3b0
[   73.524276][ T6713]  ? lockdep_hardirqs_on+0x9c/0x150
[   73.524283][ T6713]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   73.524290][ T6713]  ? exc_page_fault+0x9f/0xf0
[   73.524302][ T6713]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   73.524309][ T6713] RIP: 0033:0x7fab0078e929
[   73.524317][ T6713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   73.524323][ T6713] RSP: 002b:00007fab015a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   73.524332][ T6713] RAX: ffffffffffffffda RBX: 00007fab009b5fa0 RCX: 00007fab0078e929
[   73.524337][ T6713] RDX: 0000000000000700 RSI: 0000200000000040 RDI: 0000000000000004
[   73.524342][ T6713] RBP: 00007fab00810b39 R08: 0000000000000000 R09: 0000000000000000
[   73.524346][ T6713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   73.524350][ T6713] R13: 0000000000000000 R14: 00007fab009b5fa0 R15: 00007ffc5d1632a8
[   73.524361][ T6713]  </TASK>
[   73.680225][ T6711] IPVS: using max 81 ests per chain, 194400 per kthread
[   73.752468][ T6721] xt_CT: You must specify a L4 protocol and not use inversions on it
[   73.792089][ T5830] udevd[5830]: failed to send result of seq 11488 to main daemon: Connection refused
[   73.946916][ T6736] netlink: 12 bytes leftover after parsing attributes in process `syz.2.289'.
[   74.007000][ T6743] netlink: 32 bytes leftover after parsing attributes in process `syz.1.288'.
[   74.032657][ T6734] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma?
[   74.032987][ T6742] x_tables: duplicate underflow at hook 1
[   74.070206][ T6742] x_tables: duplicate underflow at hook 2
[   74.192731][ T6760] netlink: 172 bytes leftover after parsing attributes in process `syz.2.298'.
[   74.202790][ T6766] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   74.208317][ T6760] netlink: 28 bytes leftover after parsing attributes in process `syz.2.298'.
[   74.211238][ T6760] netlink: 28 bytes leftover after parsing attributes in process `syz.2.298'.
[   74.219086][ T6766] syzkaller1: entered promiscuous mode
[   74.220832][ T6766] syzkaller1: entered allmulticast mode
[   74.225921][ T6760] gretap0: entered promiscuous mode
[   74.233160][ T6760] gretap0: left promiscuous mode
[   74.300809][ T6771] xt_CT: No such helper "snmp"
[   74.532862][ T6789] xt_CT: No such helper "syz0"
[   75.005403][ T6788] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[   75.008831][ T6788] CPU: 1 UID: 0 PID: 6788 Comm: syz.0.305 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   75.008851][ T6788] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   75.008859][ T6788] Call Trace:
[   75.008866][ T6788]  <TASK>
[   75.008871][ T6788]  dump_stack_lvl+0x189/0x250
[   75.008896][ T6788]  ? __pfx_dump_stack_lvl+0x10/0x10
[   75.008914][ T6788]  ? __pfx__printk+0x10/0x10
[   75.008931][ T6788]  ? kernfs_path_from_node+0x2c/0x260
[   75.008949][ T6788]  ? kernfs_path_from_node+0x2c/0x260
[   75.008964][ T6788]  ? kernfs_path_from_node+0x2c/0x260
[   75.008986][ T6788]  ? kernfs_path_from_node+0x22c/0x260
[   75.009001][ T6788]  ? kernfs_path_from_node+0x2c/0x260
[   75.009021][ T6788]  sysfs_warn_dup+0x8e/0xa0
[   75.009037][ T6788]  sysfs_do_create_link_sd+0xc0/0x110
[   75.009055][ T6788]  device_add_class_symlinks+0x1cf/0x240
[   75.009076][ T6788]  device_add+0x475/0xb50
[   75.009094][ T6788]  wiphy_register+0x199a/0x26b0
[   75.009125][ T6788]  ? __pfx_wiphy_register+0x10/0x10
[   75.009140][ T6788]  ? minstrel_ht_alloc+0x6dd/0x7e0
[   75.009163][ T6788]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[   75.009184][ T6788]  ieee80211_register_hw+0x33e1/0x4120
[   75.009214][ T6788]  ? ieee80211_register_hw+0x14a1/0x4120
[   75.009239][ T6788]  ? __pfx_ieee80211_register_hw+0x10/0x10
[   75.009259][ T6788]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   75.009285][ T6788]  ? __hrtimer_setup+0x187/0x210
[   75.009297][ T6788]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[   75.009317][ T6788]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[   75.009351][ T6788]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[   75.009366][ T6788]  ? trace_kmalloc+0x1f/0xd0
[   75.009379][ T6788]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[   75.009393][ T6788]  ? kstrndup+0xbf/0x160
[   75.009418][ T6788]  hwsim_new_radio_nl+0xea4/0x1b10
[   75.009435][ T6788]  ? __pfx___nla_validate_parse+0x10/0x10
[   75.009458][ T6788]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   75.009483][ T6788]  ? __nla_parse+0x40/0x60
[   75.009498][ T6788]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[   75.009515][ T6788]  genl_family_rcv_msg_doit+0x215/0x300
[   75.009538][ T6788]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   75.009562][ T6788]  ? bpf_lsm_capable+0x9/0x20
[   75.009576][ T6788]  ? security_capable+0x7e/0x2e0
[   75.009599][ T6788]  genl_rcv_msg+0x60e/0x790
[   75.009620][ T6788]  ? __pfx_genl_rcv_msg+0x10/0x10
[   75.009646][ T6788]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   75.009673][ T6788]  netlink_rcv_skb+0x208/0x470
[   75.009690][ T6788]  ? __pfx_genl_rcv_msg+0x10/0x10
[   75.009709][ T6788]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   75.009767][ T6788]  ? down_read+0x1ad/0x2e0
[   75.009785][ T6788]  genl_rcv+0x28/0x40
[   75.009803][ T6788]  netlink_unicast+0x75b/0x8d0
[   75.009828][ T6788]  netlink_sendmsg+0x805/0xb30
[   75.009852][ T6788]  ? __pfx_netlink_sendmsg+0x10/0x10
[   75.009871][ T6788]  ? aa_sock_msg_perm+0x94/0x160
[   75.009891][ T6788]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   75.009902][ T6788]  ? __pfx_netlink_sendmsg+0x10/0x10
[   75.009919][ T6788]  __sock_sendmsg+0x21c/0x270
[   75.009937][ T6788]  ____sys_sendmsg+0x505/0x830
[   75.009958][ T6788]  ? __pfx_____sys_sendmsg+0x10/0x10
[   75.009983][ T6788]  ? import_iovec+0x74/0xa0
[   75.010002][ T6788]  ___sys_sendmsg+0x21f/0x2a0
[   75.010021][ T6788]  ? __pfx____sys_sendmsg+0x10/0x10
[   75.010068][ T6788]  ? __fget_files+0x2a/0x420
[   75.010086][ T6788]  ? __fget_files+0x3a0/0x420
[   75.010111][ T6788]  __x64_sys_sendmsg+0x19b/0x260
[   75.010136][ T6788]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   75.010162][ T6788]  ? rcu_is_watching+0x15/0xb0
[   75.010182][ T6788]  ? do_syscall_64+0xbe/0x3b0
[   75.010199][ T6788]  do_syscall_64+0xfa/0x3b0
[   75.010211][ T6788]  ? lockdep_hardirqs_on+0x9c/0x150
[   75.010223][ T6788]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.010235][ T6788]  ? exc_page_fault+0x9f/0xf0
[   75.010256][ T6788]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.010268][ T6788] RIP: 0033:0x7f0ac138e929
[   75.010281][ T6788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   75.010292][ T6788] RSP: 002b:00007f0ac22a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   75.010307][ T6788] RAX: ffffffffffffffda RBX: 00007f0ac15b5fa0 RCX: 00007f0ac138e929
[   75.010316][ T6788] RDX: 0000000000003f00 RSI: 0000200000000040 RDI: 0000000000000004
[   75.010324][ T6788] RBP: 00007f0ac1410b39 R08: 0000000000000000 R09: 0000000000000000
[   75.010331][ T6788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   75.010338][ T6788] R13: 0000000000000000 R14: 00007f0ac15b5fa0 R15: 00007ffd81aca0e8
[   75.010360][ T6788]  </TASK>
[   75.395374][ T6819] batadv_slave_1: entered promiscuous mode
[   75.400148][ T6818] syzkaller1: entered promiscuous mode
[   75.402079][ T6818] syzkaller1: entered allmulticast mode
[   75.406718][ T6817] batadv_slave_1: left promiscuous mode
[   75.505849][ T6823] netlink: 32 bytes leftover after parsing attributes in process `syz.1.314'.
[   76.116442][ T6839] syzkaller1: entered allmulticast mode
[   76.137237][ T6842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.319'.
[   76.141131][ T6842] netlink: 40 bytes leftover after parsing attributes in process `syz.0.319'.
[   76.206241][ T6846] netlink: 'syz.0.322': attribute type 1 has an invalid length.
[   76.215329][ T6846] netlink: 'syz.0.322': attribute type 2 has an invalid length.
[   76.341412][ T6857] xt_NFQUEUE: number of total queues is 0
[   76.347164][ T6857] IPv6: NLM_F_CREATE should be specified when creating new route
[   76.535004][ T6864] bridge_slave_0: left allmulticast mode
[   76.536958][ T6864] bridge_slave_0: left promiscuous mode
[   76.539757][ T6864] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.546050][ T6864] bridge_slave_1: left allmulticast mode
[   76.547965][ T6864] bridge_slave_1: left promiscuous mode
[   76.550791][ T6864] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.565497][ T6864] team0: Port device team_slave_0 removed
[   76.572838][ T6864] team0: Port device team_slave_1 removed
[   76.575295][ T6864] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.577906][ T6864] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.581617][ T6864] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.582004][ T6865] netlink: 'syz.1.328': attribute type 10 has an invalid length.
[   76.584070][ T6864] batman_adv: batadv0: Removing interface: batadv_slave_1
[   77.146766][ T6873] batadv_slave_1: entered promiscuous mode
[   77.358974][ T6872] batadv_slave_1: left promiscuous mode
[   77.383335][ T6883] xt_ecn: cannot match TCP bits for non-tcp packets
[   77.429199][ T6883] can: request_module (can-proto-0) failed.
[   77.626080][ T6901] netlink: 'syz.2.341': attribute type 10 has an invalid length.
[   77.644968][ T6904] : renamed from bridge_slave_0 (while UP)
[   77.647096][ T6905] xt_hashlimit: size too large, truncated to 1048576
[   77.674800][ T6905] syz.1.342: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[   77.682818][ T6905] CPU: 0 UID: 0 PID: 6905 Comm: syz.1.342 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   77.682846][ T6905] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   77.682854][ T6905] Call Trace:
[   77.682859][ T6905]  <TASK>
[   77.682865][ T6905]  dump_stack_lvl+0x189/0x250
[   77.682888][ T6905]  ? __pfx_dump_stack_lvl+0x10/0x10
[   77.682910][ T6905]  ? __pfx__printk+0x10/0x10
[   77.682927][ T6905]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   77.682944][ T6905]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   77.682962][ T6905]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   77.682979][ T6905]  warn_alloc+0x214/0x310
[   77.683023][ T6905]  ? __pfx_warn_alloc+0x10/0x10
[   77.683047][ T6905]  ? __get_vm_area_node+0x28f/0x300
[   77.683062][ T6905]  ? htable_create+0xfc/0x7a0
[   77.683083][ T6905]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   77.683120][ T6905]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   77.683141][ T6905]  ? rcu_is_watching+0x15/0xb0
[   77.683157][ T6905]  ? htable_create+0xfc/0x7a0
[   77.683172][ T6905]  ? htable_create+0xfc/0x7a0
[   77.683186][ T6905]  __kvmalloc_node_noprof+0x3b8/0x5f0
[   77.683202][ T6905]  ? htable_create+0xfc/0x7a0
[   77.683216][ T6905]  ? hashlimit_pernet+0x23/0x240
[   77.683238][ T6905]  htable_create+0xfc/0x7a0
[   77.683260][ T6905]  hashlimit_mt_check_common+0x719/0xa10
[   77.683285][ T6905]  xt_check_match+0x3d1/0xab0
[   77.683302][ T6905]  ? __pfx___mutex_lock+0x10/0x10
[   77.683319][ T6905]  ? __pfx_xt_check_match+0x10/0x10
[   77.683336][ T6905]  ? pcpu_alloc_noprof+0xfdd/0x16b0
[   77.683356][ T6905]  ? xt_find_match+0x1f7/0x250
[   77.683376][ T6905]  translate_table+0x1553/0x2040
[   77.683406][ T6905]  ? __pfx_translate_table+0x10/0x10
[   77.683439][ T6905]  ? __might_fault+0xb0/0x130
[   77.683463][ T6905]  ? _copy_from_user+0x94/0xb0
[   77.683482][ T6905]  do_ip6t_set_ctl+0x970/0xce0
[   77.683501][ T6905]  ? rcu_is_watching+0x15/0xb0
[   77.683514][ T6905]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[   77.683541][ T6905]  ? __pfx___mutex_lock+0x10/0x10
[   77.683553][ T6905]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   77.683568][ T6905]  ? __pfx_futex_wait+0x10/0x10
[   77.683586][ T6905]  nf_setsockopt+0x26f/0x290
[   77.683607][ T6905]  rawv6_setsockopt+0x23b/0x5b0
[   77.683624][ T6905]  ? __lock_acquire+0xab9/0xd20
[   77.683640][ T6905]  ? __pfx_rawv6_setsockopt+0x10/0x10
[   77.683657][ T6905]  ? aa_sock_opt_perm+0x74/0x110
[   77.683677][ T6905]  ? sock_common_setsockopt+0x36/0xc0
[   77.683724][ T6905]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   77.683740][ T6905]  do_sock_setsockopt+0x25a/0x3e0
[   77.683757][ T6905]  ? __pfx_do_sock_setsockopt+0x10/0x10
[   77.683776][ T6905]  ? __fget_files+0x2a/0x420
[   77.683799][ T6905]  __x64_sys_setsockopt+0x18b/0x220
[   77.683819][ T6905]  do_syscall_64+0xfa/0x3b0
[   77.683837][ T6905]  ? lockdep_hardirqs_on+0x9c/0x150
[   77.683848][ T6905]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.683860][ T6905]  ? exc_page_fault+0x9f/0xf0
[   77.683879][ T6905]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.683891][ T6905] RIP: 0033:0x7fab0078e929
[   77.683903][ T6905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   77.683913][ T6905] RSP: 002b:00007fab01588038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   77.683927][ T6905] RAX: ffffffffffffffda RBX: 00007fab009b6080 RCX: 00007fab0078e929
[   77.683935][ T6905] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 000000000000000a
[   77.683942][ T6905] RBP: 00007fab00810b39 R08: 00000000000005c0 R09: 0000000000000000
[   77.683950][ T6905] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000
[   77.683957][ T6905] R13: 0000000000000000 R14: 00007fab009b6080 R15: 00007ffc5d1632a8
[   77.683977][ T6905]  </TASK>
[   77.688302][ T6905] Mem-Info:
[   77.815649][ T6905] active_anon:4435 inactive_anon:0 isolated_anon:0
[   77.815649][ T6905]  active_file:977 inactive_file:38212 isolated_file:0
[   77.815649][ T6905]  unevictable:1768 dirty:469 writeback:0
[   77.815649][ T6905]  slab_reclaimable:9119 slab_unreclaimable:53200
[   77.815649][ T6905]  mapped:18014 shmem:2500 pagetables:922
[   77.815649][ T6905]  sec_pagetables:0 bounce:0
[   77.815649][ T6905]  kernel_misc_reclaimable:0
[   77.815649][ T6905]  free:301014 free_pcp:22823 free_cma:0
[   77.831114][ T6905] Node 0 active_anon:11984kB inactive_anon:0kB active_file:3004kB inactive_file:63256kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:45100kB dirty:1652kB writeback:0kB shmem:5024kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3084kB pagetables:2528kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   77.842396][ T6905] Node 1 active_anon:5484kB inactive_anon:0kB active_file:904kB inactive_file:89592kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:26956kB dirty:224kB writeback:0kB shmem:4636kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8080kB pagetables:1092kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   77.852928][ T6905] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   77.863206][ T6905] lowmem_reserve[]: 0 812 812 812 812
[   77.865084][ T6905] Node 0 DMA32 free:334172kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12052kB inactive_anon:0kB active_file:3004kB inactive_file:63256kB unevictable:3536kB writepending:1652kB present:1556484kB managed:831900kB mlocked:0kB bounce:0kB free_pcp:51252kB local_pcp:17952kB free_cma:0kB
[   77.875622][ T6905] lowmem_reserve[]: 0 0 0 0 0
[   77.884339][ T6905] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[   77.896106][ T6905] lowmem_reserve[]: 0 0 854 854 854
[   77.898054][ T6905] Node 1 Normal free:396032kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:5484kB inactive_anon:0kB active_file:904kB inactive_file:89592kB unevictable:3536kB writepending:224kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:40196kB local_pcp:18904kB free_cma:0kB
[   77.909396][ T6905] lowmem_reserve[]: 0 0 0 0 0
[   77.910296][ T6926] bridge_slave_0: left allmulticast mode
[   77.911213][ T6905] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB 
[   77.913077][ T6926] bridge_slave_0: left promiscuous mode
[   77.916264][ T6905] (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   77.918463][ T6926] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.920172][ T6905] Node 0 DMA32: 508*4kB (ME) 272*8kB (ME) 128*16kB (UME) 74*32kB (M) 24*64kB (M) 13*128kB (UM) 5*256kB (UME) 1*512kB (M) 3*1024kB (UME) 1*2048kB (U) 77*4096kB (M) = 334128kB
[   77.929341][ T6905] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   77.935057][ T6905] Node 1 Normal: 478*4kB (UME) 657*8kB (UME) 278*16kB (UME) 529*32kB (UME) 152*64kB (UME) 53*128kB (UM) 23*256kB (UME) 6*512kB (UM) 6*1024kB (ME) 6*2048kB (UM) 79*4096kB (M) = 396032kB
[   77.940956][ T6905] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   77.943939][ T6905] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   77.946935][ T6905] 41604 total pagecache pages
[   77.948582][ T6905] 0 pages in swap cache
[   77.949951][ T6905] Free swap  = 124996kB
[   77.951343][ T6905] Total swap = 124996kB
[   77.952741][ T6905] 786301 pages RAM
[   77.954046][ T6905] 0 pages HighMem/MovableOnly
[   77.955337][ T6926] bridge_slave_1: left allmulticast mode
[   77.955643][ T6905] 241078 pages reserved
[   77.955649][ T6905] 0 pages cma reserved
[   77.964742][ T6926] bridge_slave_1: left promiscuous mode
[   77.973903][ T6926] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.981117][ T6926] bond0: (slave bond_slave_0): Releasing backup interface
[   77.989939][ T6927] netlink: 'syz.0.347': attribute type 10 has an invalid length.
[   77.999324][ T6926] bond0: (slave bond_slave_1): Releasing backup interface
[   78.034013][ T6926] team0: Port device team_slave_0 removed
[   78.040186][ T6926] team0: Port device team_slave_1 removed
[   78.043621][ T6926] batman_adv: batadv0: Removing interface: batadv_slave_0
[   78.047339][ T6926] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.054437][ T6926] batman_adv: batadv0: Removing interface: batadv_slave_1
[   78.084820][ T6927] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   78.404528][ T6941] netlink: 'syz.0.352': attribute type 10 has an invalid length.
[   78.430951][ T6952] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[   78.433734][ T6952] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[   78.623229][ T6964] __nla_validate_parse: 4 callbacks suppressed
[   78.623239][ T6964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.357'.
[   78.641263][ T6964] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[   78.645167][ T6964] bond1: (slave vcan1): Error -95 calling set_mac_address
[   78.672495][ T6970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.361'.
[   78.707604][ T6970] 8021q: adding VLAN 0 to HW filter on device bond3
[   78.710357][ T6974] netlink: 96 bytes leftover after parsing attributes in process `syz.1.362'.
[   78.716557][ T6970] netlink: 36 bytes leftover after parsing attributes in process `syz.0.361'.
[   78.730288][ T6974] netlink: 'syz.1.362': attribute type 30 has an invalid length.
[   78.764353][ T6980] netlink: 92 bytes leftover after parsing attributes in process `syz.1.365'.
[   78.768406][ T6980] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   78.780699][ T6983] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   78.783571][ T6983] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   78.794843][ T6983] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   78.842020][ T6985] ieee802154 phy0 wpan0: encryption failed: -90
[   78.882150][ T6991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.370'.
[   78.935593][ T7000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.372'.
[   78.988280][ T7002] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.991628][ T7002] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.074282][ T7002] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.086164][ T7002] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.133599][ T7002] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.137395][ T7002] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.142772][ T7002] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.146495][ T7002] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.178788][ T7010] 8021q: VLANs not supported on ip6gre0
[   79.200339][ T7015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.377'.
[   79.218761][ T7015] delete_channel: no stack
[   79.223894][ T7014] delete_channel: no stack
[   79.283419][ T7022] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[   79.290429][ T7020] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   79.362173][ T7029] x_tables: duplicate underflow at hook 2
[   79.444585][ T7035] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   80.328439][ T7061] netlink: 'syz.2.396': attribute type 21 has an invalid length.
[   80.334635][ T7061] netlink: 132 bytes leftover after parsing attributes in process `syz.2.396'.
[   80.471876][ T7072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.401'.
[   80.789358][ T7095] netem: change failed
[   80.947014][ T7101] geneve2: entered allmulticast mode
[   81.103795][ T1863] cfg80211: failed to load regulatory.db
[   81.108869][ T7110] netlink: 'syz.1.413': attribute type 1 has an invalid length.
[   81.112041][ T7110] netlink: 'syz.1.413': attribute type 1 has an invalid length.
[   81.241243][ T7112] netlink: 'syz.1.414': attribute type 3 has an invalid length.
[   81.247242][ T7112] xt_hashlimit: overflow, try lower: 72057594037927936/255
[   81.439992][ T7137] tipc: Started in network mode
[   81.441588][ T7137] tipc: Node identity 0a764a06c7fd, cluster identity 4711
[   81.444964][ T7137] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.458882][ T7137] syzkaller0: entered promiscuous mode
[   81.460762][ T7137] syzkaller0: entered allmulticast mode
[   81.511962][ T7137] tipc: Resetting bearer <eth:syzkaller0>
[   81.526795][ T7133] tipc: Resetting bearer <eth:syzkaller0>
[   81.541495][ T7133] tipc: Disabling bearer <eth:syzkaller0>
[   81.634583][ T7151] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[   81.644849][ T7151] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   82.219722][ T7168] netlink: 'syz.2.433': attribute type 10 has an invalid length.
[   82.223482][ T7168] bond0: (slave wlan1): Opening slave failed
[  111.194341][ T7217] __nla_validate_parse: 10 callbacks suppressed
[  111.194355][ T7217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.443'.
[  111.204172][ T7217] netlink: 60 bytes leftover after parsing attributes in process `syz.0.443'.
[  111.206016][ T7215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.442'.
[  111.533281][ T7250] netlink: 20 bytes leftover after parsing attributes in process `syz.2.456'.
[  111.564268][ T7254] netlink: 116 bytes leftover after parsing attributes in process `syz.0.457'.
[  112.643082][ T7306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.474'.
[  112.989477][ T7327] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  113.268988][ T7338] tipc: Started in network mode
[  113.271261][ T7338] tipc: Node identity 080211000001, cluster identity 4711
[  113.274375][ T7338] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.277474][ T7339] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  113.285265][ T7338] netlink: 'syz.0.486': attribute type 1 has an invalid length.
[  113.315128][ T7338] bond4: (slave gretap1): making interface the new active one
[  113.319355][ T7338] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  113.324319][ T7339] mac80211_hwsim hwsim7 D: renamed from syzkaller0
[  113.329495][ T7339] tipc: Disabling bearer <eth:syzkaller0>
[  113.565072][ T7367] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  113.573709][ T7367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.492'.
[  113.820276][ T7378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.496'.
[  114.179341][ T7402] netlink: 16 bytes leftover after parsing attributes in process `syz.1.505'.
[  114.183773][ T7402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.505'.
[  114.483535][ T7414] netlink: 'syz.0.509': attribute type 10 has an invalid length.
[  114.742677][ T7422] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.746370][ T7422] syzkaller0: entered allmulticast mode
[  114.755211][ T7422] tipc: Resetting bearer <eth:syzkaller0>
[  114.765352][ T7421] tipc: Disabling bearer <eth:syzkaller0>
[  114.915166][ T7424] netlink: 'syz.0.513': attribute type 7 has an invalid length.
[  115.108960][ T7433] siw: device registration error -23
[  115.454103][ T7446] netlink: 'syz.0.521': attribute type 10 has an invalid length.
[  115.493530][ T7458] netlink: 'syz.1.525': attribute type 10 has an invalid length.
[  116.003946][ T7502] IPVS: set_ctl: invalid protocol: 44 172.30.1.2:20003
[  116.101081][ T7511] netlink: zone id is out of range
[  116.103017][ T7511] netlink: zone id is out of range
[  116.104834][ T7511] netlink: zone id is out of range
[  116.106582][ T7511] netlink: zone id is out of range
[  116.122606][ T7511] netlink: zone id is out of range
[  116.124844][ T7511] netlink: zone id is out of range
[  116.127008][ T7511] netlink: zone id is out of range
[  116.129455][ T7511] netlink: zone id is out of range
[  116.131583][ T7511] netlink: zone id is out of range
[  116.175849][ T7496] netlink: 'syz.2.535': attribute type 10 has an invalid length.
[  116.257717][ T7520] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component
[  116.362299][ T7531] netlink: 'syz.0.546': attribute type 1 has an invalid length.
[  116.365478][ T7531] __nla_validate_parse: 6 callbacks suppressed
[  116.365489][ T7531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.546'.
[  116.380459][ T7525] x_tables: ip_tables: osf match: only valid for protocol 6
[  116.461693][ T7539] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.466231][ T7539] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.473980][ T7539] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.480430][ T7539] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.546483][ T7549] netlink: 'syz.0.552': attribute type 5 has an invalid length.
[  116.550564][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.552'.
[  116.688520][ T7547] netlink: 'syz.2.551': attribute type 10 has an invalid length.
[  117.350792][ T7560] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦KWc3
[  117.582486][ T7576] netlink: 68 bytes leftover after parsing attributes in process `syz.0.561'.
[  117.589670][ T7576] netlink: 68 bytes leftover after parsing attributes in process `syz.0.561'.
[  117.662634][ T7585] netlink: 20 bytes leftover after parsing attributes in process `syz.0.563'.
[  117.666704][ T7585] netlink: 36 bytes leftover after parsing attributes in process `syz.0.563'.
[  117.741857][ T7589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.566'.
[  117.758522][ T7589] ipvlan2: entered promiscuous mode
[  117.764688][   T33] audit: type=1800 audit(1752059516.973:2): pid=7592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.565" name=14 dev="tmpfs" ino=1079 res=0 errno=0
[  117.981955][ T7611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.571'.
[  118.084853][ T7619] netlink: 16 bytes leftover after parsing attributes in process `syz.1.577'.
[  118.177318][ T7625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.579'.
[  118.237000][ T7629] netlink: 'syz.1.581': attribute type 5 has an invalid length.
[  118.253126][ T7629] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  118.256780][ T7629] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  118.260985][ T7629] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  118.264640][ T7629] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  118.268528][ T7629] geneve3: entered promiscuous mode
[  118.271207][ T7629] geneve3: entered allmulticast mode
[  118.446047][ T7639] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled
[  119.046939][ T7695] netlink: 'syz.0.606': attribute type 10 has an invalid length.
[  119.291038][ T7712] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  119.303241][ T5829] Bluetooth: hci2: link tx timeout
[  119.305552][ T5829] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  119.309041][ T5829] Bluetooth: hci2: link tx timeout
[  119.311326][ T5829] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  119.314016][ T5829] Bluetooth: hci2: link tx timeout
[  119.316043][ T5829] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  119.318735][ T5829] Bluetooth: hci2: link tx timeout
[  119.320547][ T5829] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  119.323655][ T5829] Bluetooth: hci2: link tx timeout
[  119.325553][ T5829] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  119.328643][ T5829] Bluetooth: hci2: link tx timeout
[  119.330925][ T5829] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  119.400872][ T7702] netlink: 'syz.0.610': attribute type 10 has an invalid length.
[  119.742140][ T7740] netlink: 'syz.0.623': attribute type 2 has an invalid length.
[  119.748934][ T7740] netlink: 'syz.0.623': attribute type 1 has an invalid length.
[  119.923220][ T7757] netlink: 'syz.2.627': attribute type 3 has an invalid length.
[  119.926799][ T7757] net_ratelimit: 12 callbacks suppressed
[  119.926812][ T7757] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  119.933676][ T7757] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.996795][ T7761] pim6reg1: entered allmulticast mode
[  120.002146][ T7767] netlink: 'syz.1.631': attribute type 13 has an invalid length.
[  120.016564][ T7767] gretap0: refused to change device tx_queue_len
[  120.018939][ T7767] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  120.025356][ T7761] pim6reg1: left allmulticast mode
[  120.226643][ T7778] netlink: 'syz.1.634': attribute type 16 has an invalid length.
[  120.299613][   T47] tipc: Node number set to 3448457734
[  120.457127][ T7789] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  120.464822][ T7789] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  120.510637][ T7792] syzkaller1: entered promiscuous mode
[  120.513181][ T7792] syzkaller1: entered allmulticast mode
[  120.779710][ T7798] netlink: 'syz.1.639': attribute type 10 has an invalid length.
[  120.879825][ T7802] netlink: 'syz.1.640': attribute type 10 has an invalid length.
[  121.071426][ T7819] openvswitch: netlink: IPv4 tunnel dst address is zero
[  121.145545][ T7826] netlink: 'syz.2.650': attribute type 10 has an invalid length.
[  121.158558][ T7826] bond0: (slave wlan1): Opening slave failed
[  121.274890][ T7839] vxcan1: entered allmulticast mode
[  121.348170][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  121.782309][ T7884] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32)
[  121.786907][ T7884] __nla_validate_parse: 12 callbacks suppressed
[  121.786920][ T7884] netlink: 28 bytes leftover after parsing attributes in process `syz.2.670'.
[  121.815246][ T7886] netlink: 244 bytes leftover after parsing attributes in process `syz.0.673'.
[  121.912510][ T7895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.676'.
[  121.956737][ T7888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.674'.
[  122.015822][ T7906] x_tables: duplicate underflow at hook 3
[  122.021878][ T7906] x_tables: duplicate underflow at hook 3
[  122.357942][ T7928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.686'.
[  123.162675][ T7951] netlink: 48 bytes leftover after parsing attributes in process `syz.2.693'.
[  123.677771][ T7971] netlink: 28 bytes leftover after parsing attributes in process `syz.0.700'.
[  123.682277][ T7971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.700'.
[  123.687258][ T7971] netlink: 128 bytes leftover after parsing attributes in process `syz.0.700'.
[  123.695756][ T7971] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  123.869467][ T7981] netlink: 64 bytes leftover after parsing attributes in process `syz.0.703'.
[  123.899655][ T7981] team0: Mode "b" not found
[  124.032887][ T7989] IPv6: NLM_F_CREATE should be specified when creating new route
[  124.094625][ T7993] veth0: entered promiscuous mode
[  124.166540][ T7992] veth0: left promiscuous mode
[  124.300581][ T8005] delete_channel: no stack
[  124.623524][ T8031] netem: change failed
[  125.221827][ T8052] validate_nla: 2 callbacks suppressed
[  125.221841][ T8052] netlink: 'syz.2.729': attribute type 10 has an invalid length.
[  126.111564][ T8145] netlink: 'syz.0.758': attribute type 16 has an invalid length.
[  126.465312][ T8159] IPv6: sit1: Disabled Multicast RS
[  126.476379][ T8159] sit1: entered allmulticast mode
[  126.689361][ T8181] syz_tun: entered promiscuous mode
[  126.692193][ T8181] batadv_slave_0: entered promiscuous mode
[  126.697724][ T8181] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network
[  126.702116][ T8181] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network
[  126.706364][ T8181] hsr1: entered allmulticast mode
[  126.709459][ T8181] syz_tun: entered allmulticast mode
[  126.711224][ T8181] batadv_slave_0: entered allmulticast mode
[  126.756454][ T8190] netlink: 'syz.2.776': attribute type 11 has an invalid length.
[  126.802753][ T8194] __nla_validate_parse: 21 callbacks suppressed
[  126.802768][ T8194] netlink: 27 bytes leftover after parsing attributes in process `syz.1.777'.
[  126.867825][ T8197] netlink: 'syz.0.778': attribute type 10 has an invalid length.
[  127.024737][ T8215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.786'.
[  127.089245][ T8225] netlink: 'syz.2.788': attribute type 5 has an invalid length.
[  127.112250][ T8226] netlink: 'syz.0.790': attribute type 10 has an invalid length.
[  127.131049][ T8225] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  127.154728][ T8230] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  127.194203][ T8233] netlink: 24 bytes leftover after parsing attributes in process `syz.2.788'.
[  127.284282][ T8246] netlink: 'syz.1.796': attribute type 10 has an invalid length.
[  127.322059][ T8247] netlink: 'syz.0.795': attribute type 1 has an invalid length.
[  127.324592][ T8247] netlink: 228 bytes leftover after parsing attributes in process `syz.0.795'.
[  127.327612][ T8247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.795'.
[  127.414336][ T8259] xt_recent: Unsupported userspace flags (00000048)
[  127.433207][ T8256] macsec1: entered promiscuous mode
[  127.435118][ T8256] macsec1: entered allmulticast mode
[  127.437215][ T8256] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  127.474675][ T8264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.802'.
[  127.501933][ T8270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.804'.
[  127.596350][ T8275] netlink: 76 bytes leftover after parsing attributes in process `syz.1.805'.
[  127.903083][ T8288] netlink: 'syz.1.810': attribute type 10 has an invalid length.
[  128.010649][ T8295] netlink: 'syz.0.811': attribute type 1 has an invalid length.
[  128.013888][ T8295] netlink: 224 bytes leftover after parsing attributes in process `syz.0.811'.
[  128.147422][ T8297] netlink: 104 bytes leftover after parsing attributes in process `syz.2.812'.
[  128.155247][ T8297] netlink: 'syz.2.812': attribute type 8 has an invalid length.
[  128.288267][ T8303] syz.1.813 (8303) used obsolete PPPIOCDETACH ioctl
[  128.680381][ T8325] bridge0: port 1(veth0_to_bridge) entered blocking state
[  128.683702][ T8325] bridge0: port 1(veth0_to_bridge) entered disabled state
[  128.687032][ T8325] veth0_to_bridge: entered allmulticast mode
[  128.690387][ T8325] veth0_to_bridge: entered promiscuous mode
[  128.694671][ T8325] bridge0: port 1(veth0_to_bridge) entered blocking state
[  128.698592][ T8325] bridge0: port 1(veth0_to_bridge) entered forwarding state
[  128.706865][ T5874] IPVS: starting estimator thread 0...
[  128.808132][ T8328] IPVS: using max 40 ests per chain, 96000 per kthread
[  129.103286][ T8362] geneve0: left promiscuous mode
[  129.106512][ T8362] geneve0: left allmulticast mode
[  129.116356][ T8362] team0: Port device geneve0 added
[  129.132109][ T8364] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  129.241627][ T8370] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96
[  129.634845][ T8394] xt_bpf: check failed: parse error
[  129.699384][ T8396] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  130.600398][ T8439] xt_HMARK: spi-set and port-set can't be combined
[  130.607375][ T8439] validate_nla: 5 callbacks suppressed
[  130.607392][ T8439] netlink: 'syz.2.865': attribute type 3 has an invalid length.
[  130.615528][ T8439] netlink: 'syz.2.865': attribute type 1 has an invalid length.
[  130.810245][ T8448] netlink: 'syz.2.868': attribute type 1 has an invalid length.
[  131.179185][ T8468] xt_hashlimit: size too large, truncated to 1048576
[  131.512151][ T8479] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  131.896332][ T8505] __nla_validate_parse: 18 callbacks suppressed
[  131.896344][ T8505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.888'.
[  131.927570][ T8510] netlink: 112 bytes leftover after parsing attributes in process `syz.0.890'.
[  131.932094][ T8510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.890'.
[  131.944035][ T8510] netlink: 112 bytes leftover after parsing attributes in process `syz.0.890'.
[  131.947856][ T8510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.890'.
[  131.994996][ T8521] netlink: 'syz.1.892': attribute type 2 has an invalid length.
[  132.166909][ T8544] smc: net device bond0 applied user defined pnetid SYZ2
[  132.170205][ T8544] smc: net device bond0 erased user defined pnetid SYZ2
[  132.189047][ T8546] netlink: 'syz.2.901': attribute type 10 has an invalid length.
[  132.192999][ T8546] bond0: (slave wlan1): Opening slave failed
[  132.205997][ T8548] netlink: 'syz.0.902': attribute type 1 has an invalid length.
[  132.228983][ T8548] bond5: entered promiscuous mode
[  132.231396][ T8548] bond5: entered allmulticast mode
[  132.234044][ T8548] 8021q: adding VLAN 0 to HW filter on device bond5
[  132.249060][ T8548] bridge4: entered promiscuous mode
[  132.251477][ T8548] bridge4: entered allmulticast mode
[  132.255003][ T8548] bond5: (slave bridge4): Enslaving as a backup interface with an up link
[  132.302306][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.305711][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.339221][   T13] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  132.353459][ T8562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.906'.
[  132.356941][ T8562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.906'.
[  132.381154][ T8562] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (3)
[  132.448417][   T13] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  132.486789][ T8574] ip6gretap2: entered promiscuous mode
[  132.660503][ T8595] 8021q: VLANs not supported on syzkaller1
[  132.669046][ T8598] netlink: 64 bytes leftover after parsing attributes in process `syz.2.919'.
[  132.786318][ T8600] netlink: 52 bytes leftover after parsing attributes in process `syz.0.921'.
[  132.981803][ T8612] netlink: 40 bytes leftover after parsing attributes in process `syz.1.926'.
[  133.034123][ T8618] netlink: 'syz.1.928': attribute type 1 has an invalid length.
[  133.208486][ T8632] block nbd1: server does not support multiple connections per device.
[  133.212210][ T8632] block nbd1: shutting down sockets
[  133.854289][ T8706] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  134.061508][ T8717] xt_CT: No such helper "snmp_trap"
[  134.299737][ T8734] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.302914][ T8734] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.305586][ T8734] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.309638][ T8734] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.737345][ T8747] netlink: 'syz.1.970': attribute type 1 has an invalid length.
[  134.791791][ T8752] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  134.900953][ T8765] netlink: 'syz.2.975': attribute type 10 has an invalid length.
[  134.904817][ T8765] bond0: (slave wlan1): Opening slave failed
[  135.072469][ T8784] netlink: 'syz.1.981': attribute type 1 has an invalid length.
[  135.170795][ T8788] pim6reg1: entered promiscuous mode
[  135.172813][ T8788] pim6reg1: entered allmulticast mode
[  135.175622][ T8790] sctp: [Deprecated]: syz.2.984 (pid 8790) Use of int in maxseg socket option.
[  135.175622][ T8790] Use struct sctp_assoc_value instead
[  135.217576][ T8790] 8021q: VLANs not supported on gre0
[  135.267197][ T8794] 8021q: adding VLAN 0 to HW filter on device bond1
[  135.276888][ T8794] ipvlan2: entered allmulticast mode
[  135.279162][ T8794] bond1: entered allmulticast mode
[  135.290367][ T8794] bond1: (slave gretap1): making interface the new active one
[  135.293272][ T8794] gretap1: entered allmulticast mode
[  135.296924][ T8794] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  135.463504][ T8815] Bluetooth: MGMT ver 1.23
[  135.509909][ T8817] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  135.574210][ T8825] ipt_REJECT: ECHOREPLY no longer supported.
[  135.747957][ T8837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  135.906287][ T8850] pim6reg1: entered allmulticast mode
[  135.910527][ T8850] gretap0: entered allmulticast mode
[  135.995019][ T8852] sctp: [Deprecated]: syz.0.1006 (pid 8852) Use of int in maxseg socket option.
[  135.995019][ T8852] Use struct sctp_assoc_value instead
[  136.199034][ T8860] team0 (unregistering): Port device geneve0 removed
[  136.304899][ T8865] delete_channel: no stack
[  136.304983][ T8869] validate_nla: 2 callbacks suppressed
[  136.304992][ T8869] netlink: 'syz.0.1012': attribute type 10 has an invalid length.
[  136.593382][ T8899] netlink: 'syz.0.1020': attribute type 10 has an invalid length.
[  136.731590][ T8911] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  136.736860][ T8908] tipc: Disabling bearer <eth:syzkaller0>
[  136.813929][ T8918] netlink: 'syz.0.1029': attribute type 10 has an invalid length.
[  136.907500][ T8928] __nla_validate_parse: 24 callbacks suppressed
[  136.907512][ T8928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1032'.
[  136.973538][ T8931] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1034'.
[  137.006202][ T8933] netlink: 'syz.0.1035': attribute type 1 has an invalid length.
[  137.009782][ T8933] netlink: 'syz.0.1035': attribute type 10 has an invalid length.
[  137.013338][ T8933] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1035'.
[  137.148105][ T8946] netlink: 'syz.2.1039': attribute type 3 has an invalid length.
[  137.211514][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1041'.
[  137.607349][ T8982] @: renamed from bond_slave_0
[  137.613924][ T8982] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1052'.
[  137.626382][ T8982] geneve3: entered promiscuous mode
[  137.628867][ T8982] geneve3: entered allmulticast mode
[  137.695133][ T8986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1054'.
[  137.733372][ T8991] netlink: 'syz.0.1055': attribute type 1 has an invalid length.
[  137.736556][ T8991] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1055'.
[  137.781901][ T8993] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1056'.
[  137.786851][ T8996] netlink: 'syz.0.1055': attribute type 1 has an invalid length.
[  137.791235][ T8996] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1055'.
[  137.851241][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1059'.
[  137.952417][ T9011] xt_limit: Overflow, try lower: 0/0
[  137.963528][ T9011] ip6gre0: Master is either lo or non-ether device
[  138.025319][ T9019] netlink: 'syz.1.1065': attribute type 1 has an invalid length.
[  138.037522][ T9009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  138.215123][ T9033] netlink: 'syz.2.1070': attribute type 11 has an invalid length.
[  138.222538][ T9033] netlink: 'syz.2.1070': attribute type 10 has an invalid length.
[  138.226316][ T9033] bond0: (slave wlan1): Opening slave failed
[  138.414855][ T9054] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  138.516603][ T9067] bridge5: entered promiscuous mode
[  138.520469][ T9067] bridge5: entered allmulticast mode
[  138.530640][ T9067] team0: Port device bridge5 added
[  138.542879][ T9065] tap0: tun_chr_ioctl cmd 1074025676
[  138.545349][ T9065] tap0: owner set to 0
[  138.571244][   T33] audit: type=1107 audit(1752059537.783:3): pid=9069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  138.571911][ T9070] ieee802154 phy0 wpan0: encryption failed: -22
[  138.691928][ T9074] lo: entered allmulticast mode
[  138.694031][ T9074] tunl0: entered allmulticast mode
[  138.696330][ T9074] gre0: entered allmulticast mode
[  138.700373][ T9074] gretap0: entered allmulticast mode
[  138.702652][ T9074] ip_vti0: entered allmulticast mode
[  138.704920][ T9074] ip6_vti0: entered allmulticast mode
[  138.707142][ T9074] sit0: entered allmulticast mode
[  138.709405][ T9074] ip6tnl0: entered allmulticast mode
[  138.711567][ T9074] ip6gre0: entered allmulticast mode
[  138.713863][ T9074] ip6gretap0: entered allmulticast mode
[  138.717209][ T9074] bridge0: entered allmulticast mode
[  138.719628][ T9074] vcan0: entered allmulticast mode
[  138.721742][ T9074] bond0: entered allmulticast mode
[  138.723769][ T9074] bond_slave_0: entered allmulticast mode
[  138.725989][ T9074] bond_slave_1: entered allmulticast mode
[  138.728707][ T9074] team0: entered allmulticast mode
[  138.730822][ T9074] team_slave_0: entered allmulticast mode
[  138.733169][ T9074] team_slave_1: entered allmulticast mode
[  138.735574][ T9074] dummy0: entered allmulticast mode
[  138.737964][ T9074] nlmon0: entered allmulticast mode
[  138.740683][ T9074] caif0: entered allmulticast mode
[  138.743763][ T9074] batadv0: entered allmulticast mode
[  138.746024][ T9074] veth0: entered allmulticast mode
[  138.748477][ T9074] veth1: entered allmulticast mode
[  138.751734][ T9074] wg0: entered allmulticast mode
[  138.753977][ T9074] wg1: entered allmulticast mode
[  138.756344][ T9074] wg2: entered allmulticast mode
[  138.760346][ T9074] veth0_to_bridge: entered allmulticast mode
[  138.762650][ T9074] veth1_to_bridge: entered allmulticast mode
[  138.765210][ T9074] veth0_to_bond: entered allmulticast mode
[  138.767378][ T9074] veth1_to_bond: entered allmulticast mode
[  138.770025][ T9074] veth0_to_team: entered allmulticast mode
[  138.772867][ T9074] veth1_to_team: entered allmulticast mode
[  138.775063][ T9074] veth0_to_batadv: entered allmulticast mode
[  138.777620][ T9074] veth1_to_batadv: entered allmulticast mode
[  138.780921][ T9074] batadv_slave_1: entered allmulticast mode
[  138.783368][ T9074] xfrm0: entered allmulticast mode
[  138.785260][ T9074] veth0_to_hsr: entered allmulticast mode
[  138.787504][ T9074] hsr_slave_0: entered allmulticast mode
[  138.790374][ T9074] veth1_to_hsr: entered allmulticast mode
[  138.793375][ T9074] hsr_slave_1: entered allmulticast mode
[  138.795723][ T9074] hsr0: entered allmulticast mode
[  138.797590][ T9074] veth1_virt_wifi: entered allmulticast mode
[  138.800850][ T9074] veth0_virt_wifi: entered allmulticast mode
[  138.803340][ T9074] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  138.806332][ T9074] veth1_macvtap: entered allmulticast mode
[  138.808661][ T9074] veth0_macvtap: entered allmulticast mode
[  138.810862][ T9074] macvtap0: entered allmulticast mode
[  138.812957][ T9074] macsec0: entered allmulticast mode
[  138.814926][ T9074] geneve0: left promiscuous mode
[  138.816758][ T9074] geneve1: entered allmulticast mode
[  138.819687][ T9074] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  138.822270][ T9074] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  138.825134][ T9074] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  138.827673][ T9074] vxlan0: entered allmulticast mode
[  138.829802][ T9074] vxlan1: entered allmulticast mode
[  138.831666][ T9074] ip6tnl1: entered allmulticast mode
[  138.833647][ T9074] bond1: entered allmulticast mode
[  138.835493][ T9074] netdevsim netdevsim2 eth0: entered allmulticast mode
[  138.837961][ T9074] netdevsim netdevsim2 eth1: entered allmulticast mode
[  138.841648][ T9074] netdevsim netdevsim2 eth2: entered allmulticast mode
[  138.844865][ T9074] netdevsim netdevsim2 eth3: entered allmulticast mode
[  138.847505][ T9074] gre1: entered allmulticast mode
[  138.850149][ T9074] ip6gretap1: entered allmulticast mode
[  138.852506][ T9074] mac80211_hwsim hwsim26 wlan2: entered allmulticast mode
[  138.855119][ T9074] bridge1: entered allmulticast mode
[  138.857255][ T9074] bond2: entered allmulticast mode
[  138.860120][ T9074] bridge2: entered allmulticast mode
[  138.862054][ T9074] vti0: entered allmulticast mode
[  138.863990][ T9074] bridge3: entered allmulticast mode
[  138.866391][ T9074] bridge4: entered allmulticast mode
[  138.869034][ T9074] ip6gretap2: left promiscuous mode
[  138.871024][ T9074] ip6gretap2: entered allmulticast mode
[  138.873953][ T9074] bridge5: left promiscuous mode
[  138.876217][ T9074] syzkaller0: entered allmulticast mode
[  140.710876][ T9237] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  140.918234][ T9255] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  140.966421][ T9259] siw: device registration error -23
[  141.171420][ T9274] vlan0: entered promiscuous mode
[  141.173940][ T9274] vlan0: entered allmulticast mode
[  141.496350][ T9302] ip6tnl3: entered promiscuous mode
[  141.609374][ T9314] validate_nla: 3 callbacks suppressed
[  141.609386][ T9314] netlink: 'syz.2.1163': attribute type 1 has an invalid length.
[  141.615417][ T9316] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  141.700692][ T9325] team0: No ports can be present during mode change
[  141.761458][ T9325] dvmrp0: entered allmulticast mode
[  141.873838][ T9340] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  142.608100][ T5873] tipc: Node number set to 97965819
[  142.725114][ T9362] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  142.814753][ T9366] netlink: 'syz.2.1181': attribute type 1 has an invalid length.
[  142.819601][ T9366] netlink: 'syz.2.1181': attribute type 11 has an invalid length.
[  142.823019][ T9366] __nla_validate_parse: 22 callbacks suppressed
[  142.823029][ T9366] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1181'.
[  142.883507][ T9375] netlink: 'syz.2.1181': attribute type 1 has an invalid length.
[  142.889076][ T9375] netlink: 'syz.2.1181': attribute type 11 has an invalid length.
[  142.891913][ T9375] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1181'.
[  143.011437][ T9391] macvlan0: entered promiscuous mode
[  143.013761][ T9391] macvlan0: entered allmulticast mode
[  143.043649][ T9392] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1187'.
[  143.047275][ T9392] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1187'.
[  143.087326][ T9395] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1189'.
[  143.226258][ T9405] vti1: entered promiscuous mode
[  143.256382][ T9405] lo: left allmulticast mode
[  143.262197][ T9405] tunl0: left allmulticast mode
[  143.264569][ T9405] gre0: left allmulticast mode
[  143.267653][ T9405] gretap0: left allmulticast mode
[  143.274299][ T9405] erspan0: left allmulticast mode
[  143.276411][ T9405] ip_vti0: left allmulticast mode
[  143.280000][ T9405] ip6_vti0: left allmulticast mode
[  143.282516][ T9405] sit0: left allmulticast mode
[  143.284663][ T9405] ip6tnl0: left allmulticast mode
[  143.287044][ T9405] ip6gre0: left allmulticast mode
[  143.292767][ T9405] ip6gretap0: left allmulticast mode
[  143.295050][ T9405] bridge0: left allmulticast mode
[  143.297907][ T9405] vcan0: left allmulticast mode
[  143.309943][ T9405] bond0: left allmulticast mode
[  143.312086][ T9405] team0: left allmulticast mode
[  143.314310][ T9405] dummy0: left allmulticast mode
[  143.316492][ T9405] nlmon0: left allmulticast mode
[  143.320145][ T9405] caif0: left allmulticast mode
[  143.322269][ T9405] batadv0: left allmulticast mode
[  143.324247][ T9405] veth0: left allmulticast mode
[  143.326291][ T9405] veth1: left allmulticast mode
[  143.361815][ T9405] wg0: left allmulticast mode
[  143.370934][ T9405] wg1: left allmulticast mode
[  143.372967][ T9405] wg2: left allmulticast mode
[  143.374842][ T9405] veth0_to_bridge: left allmulticast mode
[  143.377427][ T9405] veth1_to_bridge: left allmulticast mode
[  143.379900][ T9405] veth0_to_bond: left allmulticast mode
[  143.381803][ T9405] bond_slave_0: left allmulticast mode
[  143.383895][ T9405] veth1_to_bond: left allmulticast mode
[  143.386446][ T9405] bond_slave_1: left allmulticast mode
[  143.388820][ T9405] veth0_to_team: left allmulticast mode
[  143.391031][ T9405] team_slave_0: left allmulticast mode
[  143.393242][ T9405] veth1_to_team: left allmulticast mode
[  143.395317][ T9405] team_slave_1: left allmulticast mode
[  143.397597][ T9405] veth0_to_batadv: left allmulticast mode
[  143.400518][ T9405] veth1_to_batadv: left allmulticast mode
[  143.402945][ T9405] batadv_slave_1: left allmulticast mode
[  143.404993][ T9405] xfrm0: left allmulticast mode
[  143.406924][ T9405] veth0_to_hsr: left allmulticast mode
[  143.409811][ T9405] veth1_to_hsr: left allmulticast mode
[  143.413089][ T9405] hsr0: left allmulticast mode
[  143.414778][ T9405] hsr_slave_0: left allmulticast mode
[  143.416863][ T9405] veth1_virt_wifi: left allmulticast mode
[  143.419199][ T9405] veth0_virt_wifi: left allmulticast mode
[  143.422071][ T9405] net veth1_virt_wifi virt_wifi0: left allmulticast mode
[  143.425921][ T9405] veth1_macvtap: left allmulticast mode
[  143.428186][ T9405] veth0_macvtap: left allmulticast mode
[  143.430396][ T9405] macvtap0: left allmulticast mode
[  143.432367][ T9405] macsec0: left allmulticast mode
[  143.434668][ T9405] geneve0: left allmulticast mode
[  143.437083][ T9405] geneve1: left allmulticast mode
[  143.439787][ T9405] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  143.443621][ T9405] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  143.446638][ T9405] vxlan0: left allmulticast mode
[  143.448939][ T9405] vxlan1: left allmulticast mode
[  143.450992][ T9405] ip6tnl1: left allmulticast mode
[  143.453098][ T9405] bond1: left allmulticast mode
[  143.462000][ T9405] netdevsim netdevsim2 eth0: left allmulticast mode
[  143.464796][ T9405] netdevsim netdevsim2 eth1: left allmulticast mode
[  143.467077][ T9405] netdevsim netdevsim2 eth2: left allmulticast mode
[  143.469643][ T9405] netdevsim netdevsim2 eth3: left allmulticast mode
[  143.471773][ T9405] gre1: left allmulticast mode
[  143.473343][ T9405] ip6gretap1: left allmulticast mode
[  143.475066][ T9405] mac80211_hwsim hwsim26 wlan2: left allmulticast mode
[  143.477367][ T9405] hsr1: left allmulticast mode
[  143.479011][ T9405] syz_tun: left allmulticast mode
[  143.480614][ T9405] batadv_slave_0: left allmulticast mode
[  143.482557][ T9405] bridge1: left allmulticast mode
[  143.484286][ T9405] bond2: left allmulticast mode
[  143.485949][ T9405] bridge2: left allmulticast mode
[  143.487637][ T9426] netlink: 'syz.1.1198': attribute type 10 has an invalid length.
[  143.487753][ T9405] vti0: left allmulticast mode
[  143.492639][ T9405] bridge3: left allmulticast mode
[  143.494429][ T9405] bridge4: left allmulticast mode
[  143.496147][ T9405] ip6gretap2: left allmulticast mode
[  143.500662][ T9405] bridge5: left allmulticast mode
[  143.503693][ T9405] vlan0: left promiscuous mode
[  143.505936][ T9405] vlan0: left allmulticast mode
[  143.508102][ T9405] hsr_slave_1: left allmulticast mode
[  143.512569][ T9405] macvlan0: left promiscuous mode
[  143.514788][ T9405] macvlan0: left allmulticast mode
[  143.517330][ T9405] vti1: left promiscuous mode
[  143.653784][ T9435] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  144.367331][ T9497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1222'.
[  145.162934][ T9511] openvswitch: netlink: IP tunnel dst address not specified
[  145.187341][ T9505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1225'.
[  145.415155][ T9521] x_tables: duplicate underflow at hook 1
[  145.492090][ T9525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1230'.
[  145.567095][ T9514] netlink: 'syz.0.1227': attribute type 10 has an invalid length.
[  145.597468][ T9528] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1231'.
[  145.624499][ T9528] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1231'.
[  145.762545][ T9541] netlink: 'syz.1.1235': attribute type 13 has an invalid length.
[  145.765334][ T9541] netlink: 'syz.1.1235': attribute type 17 has an invalid length.
[  145.889052][ T9546] netlink: 'syz.0.1237': attribute type 10 has an invalid length.
[  146.799841][ T9556] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  146.804630][ T9556] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  147.092891][ T9563] validate_nla: 1 callbacks suppressed
[  147.092907][ T9563] netlink: 'syz.2.1241': attribute type 10 has an invalid length.
[  147.107795][ T9563] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  149.978212][ T9580] __nla_validate_parse: 2 callbacks suppressed
[  149.978222][ T9580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1246'.
[  149.993191][ T9580] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  150.064697][   T33] audit: type=1800 audit(1752059549.273:4): pid=9576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1245" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1961 res=0 errno=0
[  150.076325][   T33] audit: type=1800 audit(1752059549.273:5): pid=9576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1245" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1961 res=0 errno=0
[  150.134898][ T9595] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1251'.
[  150.144190][ T9597] netlink: 'syz.2.1252': attribute type 10 has an invalid length.
[  150.147448][ T9597] bond0: (slave wlan1): Opening slave failed
[  150.421630][ T9628] netlink: 'syz.1.1260': attribute type 10 has an invalid length.
[  150.565416][ T9641] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  150.624907][ T9637] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.634183][ T9637] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  150.655083][ T9645] veth0: entered promiscuous mode
[  150.709796][ T9637] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.714906][ T9637] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  150.766475][ T9637] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.771549][ T9637] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  150.819055][ T9637] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.823253][ T9637] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  150.894123][ T9637] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  150.896855][ T9637] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  150.905334][ T9637] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  150.908205][ T9637] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  150.915881][ T9637] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  150.919060][ T9637] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  150.926297][ T9637] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  150.931645][ T9637] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  150.962692][ T9649] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1267'.
[  150.988650][ T9651] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1268'.
[  150.991927][ T9651] netlink: 'syz.1.1268': attribute type 1 has an invalid length.
[  151.030987][ T9653] netlink: 'syz.1.1269': attribute type 10 has an invalid length.
[  151.091091][ T9659] netlink: 'syz.1.1271': attribute type 29 has an invalid length.
[  151.225866][ T9663] batadv_slave_0: entered promiscuous mode
[  151.237503][ T9663] ieee802154 phy0 wpan0: encryption failed: -22
[  151.263144][ T9661] netlink: 'syz.0.1272': attribute type 10 has an invalid length.
[  151.464652][ T9644] veth0: left promiscuous mode
[  151.561403][ T9691] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1280'.
[  151.656957][ T9700] netlink: 'syz.0.1283': attribute type 29 has an invalid length.
[  151.674362][ T9700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1283'.
[  151.684540][ T9700] netlink: 'syz.0.1283': attribute type 29 has an invalid length.
[  151.694671][ T9700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1283'.
[  151.743189][ T9707] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1286'.
[  151.790661][ T9712] netlink: 'syz.0.1287': attribute type 2 has an invalid length.
[  151.802340][ T9712] : entered promiscuous mode
[  152.955138][ T9784] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1309'.
[  153.149815][ T9789] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  153.218701][ T9790] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  153.338354][   T36] wlan0: Trigger new scan to find an IBSS to join
[  153.381102][ T9802] geneve3: entered promiscuous mode
[  153.446350][ T9810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1320'.
[  153.536898][ T9822] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.560931][ T9822] syzkaller0: entered promiscuous mode
[  153.566811][ T9822] syzkaller0: entered allmulticast mode
[  153.583092][ T9822] tipc: Resetting bearer <eth:syzkaller0>
[  153.587076][ T9820] tipc: Resetting bearer <eth:syzkaller0>
[  153.600288][ T9820] tipc: Disabling bearer <eth:syzkaller0>
[  153.609793][ T9829] Bluetooth: MGMT ver 1.23
[  153.742716][ T9841] xt_hashlimit: max too large, truncated to 1048576
[  153.750243][ T9843] IPVS: sync thread started: state = MASTER, mcast_ifn = vlan0, syncid = 1, id = 0
[  153.754644][ T9841] No such timeout policy "syz1"
[  153.890766][ T9859] ipt_REJECT: TCP_RESET invalid for non-tcp
[  153.896301][ T9858] netlink: 'syz.1.1336': attribute type 1 has an invalid length.
[  153.945106][ T9855] netlink: 'syz.0.1337': attribute type 10 has an invalid length.
[  153.952859][ T9855] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  154.144607][ T9880] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.185825][ T9888] SET target dimension over the limit!
[  154.192975][ T9888] netlink: 'syz.1.1348': attribute type 2 has an invalid length.
[  154.256545][ T9895] netlink: 'syz.1.1349': attribute type 58 has an invalid length.
[  154.306643][ T9900] 8021q: adding VLAN 0 to HW filter on device bond3
[  154.316928][ T9900] bridge0: port 3(bond3) entered blocking state
[  154.319923][ T9900] bridge0: port 3(bond3) entered disabled state
[  154.322838][ T9900] bond3: entered allmulticast mode
[  154.328798][ T9900] bond3: entered promiscuous mode
[  154.331341][ T9900] bridge0: port 3(bond3) entered blocking state
[  154.334487][ T9900] bridge0: port 3(bond3) entered forwarding state
[  154.340869][   T36] bridge0: port 3(bond3) entered disabled state
[  154.515467][ T9908] netlink: 'syz.2.1354': attribute type 10 has an invalid length.
[  154.599892][ T9922] netlink: 'syz.1.1358': attribute type 1 has an invalid length.
[  154.725365][ T9933] xt_nfacct: accounting object `syz1' does not exists
[  154.795812][ T9938] netlink: 'syz.2.1363': attribute type 10 has an invalid length.
[  154.851534][ T9938] bond0: (slave wlan1): Opening slave failed
[  155.179764][ T9962] __nla_validate_parse: 7 callbacks suppressed
[  155.179775][ T9962] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1370'.
[  155.230294][ T9968] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1374'.
[  155.268182][ T9949] netlink: 'syz.0.1367': attribute type 10 has an invalid length.
[  155.291500][ T9974] netlink: 'syz.2.1375': attribute type 10 has an invalid length.
[  155.295084][ T9974] bond0: (slave wlan1): Opening slave failed
[  155.412483][ T9977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1376'.
[  155.441391][ T9978] netlink: 'syz.0.1376': attribute type 1 has an invalid length.
[  155.442001][ T9981] sctp: [Deprecated]: syz.0.1376 (pid 9981) Use of int in max_burst socket option deprecated.
[  155.442001][ T9981] Use struct sctp_assoc_value instead
[  155.676633][ T9991] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1381'.
[  156.146376][T10010] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1388'.
[  156.292301][T10018] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1391'.
[  156.356434][T10023] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  156.378442][  T721] wlan0: Trigger new scan to find an IBSS to join
[  156.487278][T10030] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1395'.
[  156.544805][T10037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1399'.
[  156.568709][T10037] 8021q: adding VLAN 0 to HW filter on device bond7
[  156.575219][T10038] bond7: (slave batadv1): Opening slave failed
[  156.645057][T10050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1402'.
[  157.413367][T10085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1414'.
[  157.811819][T10094] netlink: 'syz.2.1417': attribute type 11 has an invalid length.
[  158.645271][T10155] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000
[  158.649882][T10155] tipc: Enabled bearer <udp:syz1>, priority 10
[  158.653332][T10155] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  159.126765][T10215] openvswitch: netlink: Flow actions attr not present in new flow.
[  159.144020][T10214] validate_nla: 8 callbacks suppressed
[  159.144034][T10214] netlink: 'syz.1.1453': attribute type 62 has an invalid length.
[  159.275573][T10230] team0: Port device gtp0 added
[  159.285294][T10230] netlink: 'syz.1.1457': attribute type 4 has an invalid length.
[  159.405364][T10251] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  159.454064][T10257] netlink: 'syz.2.1468': attribute type 3 has an invalid length.
[  159.485211][T10259] unsupported nlmsg_type 40
[  159.542638][T10265] xt_ecn: cannot match TCP bits for non-tcp packets
[  159.581806][T10267] xt_CT: You must specify a L4 protocol and not use inversions on it
[  159.659584][ T5888] tipc: Node number set to 134418688
[  159.750888][T10285] pim6reg: entered allmulticast mode
[  159.762288][T10280] pim6reg: left allmulticast mode
[  159.845498][T10293] veth0_to_bridge: left allmulticast mode
[  159.848270][T10293] veth0_to_bridge: left promiscuous mode
[  159.852133][T10293] bridge0: port 1(veth0_to_bridge) entered disabled state
[  160.190634][T10313] __nla_validate_parse: 13 callbacks suppressed
[  160.190644][T10313] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1488'.
[  160.407593][T10328] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  160.412650][T10328] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  160.423840][T10328] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1494'.
[  161.010668][T10384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1504'.
[  161.013876][T10384] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  161.016619][T10384] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  161.703887][T10395] netlink: 'syz.2.1508': attribute type 3 has an invalid length.
[  162.308393][ T1091] wlan0: Trigger new scan to find an IBSS to join
[  162.542469][T10400] netlink: 'syz.1.1509': attribute type 7 has an invalid length.
[  162.549618][T10400] ieee802154 phy1 wpan1: encryption failed: -22
[  162.563877][T10400] x_tables: duplicate underflow at hook 4
[  162.828498][T10420] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1516'.
[  162.885700][T10424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1517'.
[  162.889692][T10424] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1517'.
[  162.930083][T10427] tipc: Invalid UDP bearer configuration
[  162.930124][T10427] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  162.966034][T10427] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  163.080492][T10439] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1522'.
[  163.127103][T10441] tipc: Can't bind to reserved service type 2
[  163.343028][T10449] netlink: 'syz.2.1525': attribute type 32 has an invalid length.
[  163.345801][T10449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1525'.
[  163.349401][T10449] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  163.421580][T10452] dummy0: mtu less than device minimum
[  163.473205][T10454] netlink: 283 bytes leftover after parsing attributes in process `syz.2.1527'.
[  163.521390][T10459] netlink: 'syz.2.1528': attribute type 39 has an invalid length.
[  163.724832][T10472] IPVS: set_ctl: invalid protocol: 98 172.20.20.41:20003
[  163.823394][T10489] veth1_to_batadv: mtu greater than device maximum
[  163.825627][T10489] veth1_to_batadv: mtu greater than device maximum
[  163.827721][T10489] veth1_to_batadv: mtu greater than device maximum
[  163.865444][T10494] netlink: 'syz.1.1535': attribute type 4 has an invalid length.
[  163.938545][T10505] netlink: 'syz.1.1540': attribute type 1 has an invalid length.
[  163.941339][ T5862] hid-generic 0005:0B57:0007.0002: collection stack underflow
[  163.941369][ T5862] hid-generic 0005:0B57:0007.0002: item 0 0 0 12 parsing failed
[  163.941659][ T5862] hid-generic 0005:0B57:0007.0002: probe with driver hid-generic failed with error -22
[  163.983470][T10505] 8021q: adding VLAN 0 to HW filter on device bond2
[  164.028965][T10505] bond2: (slave ip6erspan0): making interface the new active one
[  164.032642][T10505] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link
[  164.055262][T10515] ip6t_srh: unknown srh invflags 4449
[  164.082128][T10517] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1546'.
[  164.123431][T10529] sctp: [Deprecated]: syz.1.1549 (pid 10529) Use of int in maxseg socket option.
[  164.123431][T10529] Use struct sctp_assoc_value instead
[  164.374676][T10562] netlink: 'syz.0.1560': attribute type 1 has an invalid length.
[  164.646201][T10593] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  164.814995][T10612] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  165.027725][T10628] netlink: 'syz.1.1582': attribute type 1 has an invalid length.
[  165.062835][T10624] netlink: 'syz.2.1581': attribute type 3 has an invalid length.
[  165.062841][T10632] netlink: 'syz.2.1581': attribute type 3 has an invalid length.
[  165.134322][T10624] netlink: 'syz.2.1581': attribute type 7 has an invalid length.
[  165.222165][T10647] sctp: [Deprecated]: syz.0.1587 (pid 10647) Use of struct sctp_assoc_value in delayed_ack socket option.
[  165.222165][T10647] Use struct sctp_sack_info instead
[  165.229687][T10644] __nla_validate_parse: 4 callbacks suppressed
[  165.229698][T10644] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1586'.
[  165.271236][T10650] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1589'.
[  165.339196][   T28] wlan0: Trigger new scan to find an IBSS to join
[  165.389379][T10664] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1595'.
[  165.486849][T10680] netlink: 'syz.0.1601': attribute type 7 has an invalid length.
[  165.510757][T10681] netlink: 'syz.2.1596': attribute type 2 has an invalid length.
[  165.533028][T10683] xt_CT: No such helper "pptp"
[  165.547692][T10687] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1603'.
[  165.552673][T10687] IPv6: NLM_F_CREATE should be specified when creating new route
[  165.584355][T10690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1604'.
[  165.594686][T10691] --map-set only usable from mangle table
[  165.997513][T10719] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1615'.
[  166.266632][T10724] veth1_macvtap: left promiscuous mode
[  166.269300][T10724] macsec0: entered promiscuous mode
[  166.276142][T10724] veth1_macvtap: entered promiscuous mode
[  166.281540][T10724] macsec0: left promiscuous mode
[  166.294896][T10724] netlink: 'syz.0.1616': attribute type 83 has an invalid length.
[  166.353135][T10733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1619'.
[  166.356962][T10733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1619'.
[  166.425018][T10740] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1621'.
[  166.483514][T10746] syzkaller1: entered promiscuous mode
[  166.485914][T10746] syzkaller1: entered allmulticast mode
[  166.491902][T10746] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1623'.
[  166.585690][T10750] netlink: 'syz.0.1625': attribute type 41 has an invalid length.
[  166.647507][T10752] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  166.682341][T10752] syzkaller0: entered promiscuous mode
[  166.685961][T10752] syzkaller0: entered allmulticast mode
[  166.693609][T10752] tipc: Resetting bearer <eth:syzkaller0>
[  166.732755][T10749] tipc: Resetting bearer <eth:syzkaller0>
[  167.759595][T10749] tipc: Disabling bearer <eth:syzkaller0>
[  167.852668][T10788] netlink: 'syz.0.1636': attribute type 1 has an invalid length.
[  167.915318][T10793] delete_channel: no stack
[  168.154469][T10818] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.378256][   T28] wlan0: Trigger new scan to find an IBSS to join
[  168.720479][T10879] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  168.725259][T10879] macsec1: entered allmulticast mode
[  168.727552][T10879] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[  168.742830][T10879] mac80211_hwsim hwsim5 wlan0: left allmulticast mode
[  168.745779][T10879] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[  168.773220][T10881] vlan1: entered promiscuous mode
[  168.775638][T10881] bridge0: entered promiscuous mode
[  168.780100][T10881] vlan1: entered allmulticast mode
[  168.782328][T10881] bridge0: entered allmulticast mode
[  168.817829][T10882] bond0: (slave bridge0): Releasing backup interface
[  168.830156][T10882] bridge_slave_0: left allmulticast mode
[  168.833633][T10882] bridge_slave_0: left promiscuous mode
[  168.837435][T10882] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.845287][T10882] bridge_slave_1: left allmulticast mode
[  168.847719][T10882] bridge_slave_1: left promiscuous mode
[  168.850391][T10882] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.857009][T10882] bond0: (slave bond_slave_0): Releasing backup interface
[  168.869779][T10882] bond0: (slave bond_slave_1): Releasing backup interface
[  168.885820][T10882] team0: Port device team_slave_0 removed
[  168.891449][T10882] team0: Port device team_slave_1 removed
[  168.894137][T10882] batman_adv: batadv0: Removing interface: batadv_slave_0
[  168.897848][T10882] batman_adv: batadv0: Removing interface: batadv_slave_1
[  168.905647][T10882] team0: Port device bridge5 removed
[  168.908951][T10882] bond3: left allmulticast mode
[  168.911138][T10882] bond3: left promiscuous mode
[  168.913436][T10882] bridge0: port 3(bond3) entered disabled state
[  169.269792][T10078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  169.313931][    C1] ------------[ cut here ]------------
[  169.315831][    C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  169.320012][    C1] WARNING: CPU: 1 PID: 0 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820
[  169.323618][    C1] Modules linked in:
[  169.325188][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  169.331153][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  169.335431][    C1] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  169.338152][    C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 e0 20 af 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 02 fb 9d f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  169.345952][    C1] RSP: 0018:ffffc900001e0758 EFLAGS: 00010246
[  169.348519][    C1] RAX: f63a9fa06c7a7400 RBX: 000000000000000c RCX: ffff8881000f0000
[  169.351778][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  169.355055][    C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  169.358461][    C1] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffff88811e07d0a8
[  169.361818][    C1] R13: 0000000000000000 R14: ffff888107be0e40 R15: ffff888107be30d8
[  169.365148][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c1d000(0000) knlGS:0000000000000000
[  169.368855][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  169.371677][    C1] CR2: 0000200000000040 CR3: 0000000026a2c000 CR4: 00000000000006f0
[  169.374947][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  169.378411][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  169.381759][    C1] Call Trace:
[  169.383169][    C1]  <IRQ>
[  169.384458][    C1]  rate_control_send_low+0x194/0x7a0
[  169.386743][    C1]  rate_control_get_rate+0x20b/0x5d0
[  169.388982][    C1]  ieee80211_beacon_get_finish+0x38c/0x6b0
[  169.391404][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  169.393954][    C1]  ? __pfx___netdev_alloc_skb+0x10/0x10
[  169.396250][    C1]  ? __ieee80211_beacon_get+0xfc9/0x17b0
[  169.398671][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  169.400938][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  169.403216][    C1]  __ieee80211_beacon_get+0x1033/0x17b0
[  169.405519][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  169.407828][    C1]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  169.410153][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  169.412747][    C1]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  169.415039][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  169.417954][    C1]  __iterate_interfaces+0x2ab/0x590
[  169.420268][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  169.422780][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  169.425785][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  169.428429][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  169.431365][    C1]  mac80211_hwsim_beacon+0xbb/0x1c0
[  169.433543][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  169.435939][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  169.438185][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  169.440552][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  169.443020][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  169.445243][    C1]  handle_softirqs+0x286/0x870
[  169.447218][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  169.449374][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  169.451595][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  169.453750][    C1]  __irq_exit_rcu+0xca/0x1f0
[  169.455689][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  169.457890][    C1]  irq_exit_rcu+0x9/0x30
[  169.459708][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  169.462070][    C1]  </IRQ>
[  169.463356][    C1]  <TASK>
[  169.464636][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  169.467067][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  169.469514][    C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d e3 45 19 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  169.477398][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000286
[  169.480086][    C1] RAX: f63a9fa06c7a7400 RBX: ffffffff81975d58 RCX: f63a9fa06c7a7400
[  169.483502][    C1] RDX: 0000000000000001 RSI: ffffffff8d996d7c RDI: ffffffff8be28fc0
[  169.486689][    C1] RBP: ffffc90000177f20 R08: ffff888136632f5b R09: 1ffff11026cc65eb
[  169.490041][    C1] R10: dffffc0000000000 R11: ffffed1026cc65ec R12: ffffffff8fa1e0f0
[  169.493356][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1102001e000
[  169.496583][    C1]  ? do_idle+0x1e8/0x510
[  169.498473][    C1]  default_idle+0x13/0x20
[  169.500291][    C1]  default_idle_call+0x74/0xb0
[  169.502351][    C1]  do_idle+0x1e8/0x510
[  169.504128][    C1]  ? __pfx_do_idle+0x10/0x10
[  169.506065][    C1]  cpu_startup_entry+0x44/0x60
[  169.508156][    C1]  start_secondary+0x101/0x110
[  169.510112][    C1]  common_startup_64+0x13e/0x147
[  169.512142][    C1]  </TASK>
[  169.513451][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  169.516454][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  169.521350][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  169.525197][    C1] Call Trace:
[  169.526247][    C1]  <IRQ>
[  169.527204][    C1]  dump_stack_lvl+0x99/0x250
[  169.529066][    C1]  ? __asan_memcpy+0x40/0x70
[  169.530950][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  169.533060][    C1]  ? __pfx__printk+0x10/0x10
[  169.534947][    C1]  panic+0x2db/0x790
[  169.536589][    C1]  ? __pfx_panic+0x10/0x10
[  169.538463][    C1]  ? common_startup_64+0x13e/0x147
[  169.540537][    C1]  __warn+0x31b/0x4b0
[  169.542046][    C1]  ? __rate_control_send_low+0x5df/0x820
[  169.544402][    C1]  ? __rate_control_send_low+0x5df/0x820
[  169.546690][    C1]  report_bug+0x2be/0x4f0
[  169.548114][    C1]  ? __rate_control_send_low+0x5df/0x820
[  169.550455][    C1]  ? __rate_control_send_low+0x5df/0x820
[  169.552726][    C1]  ? __rate_control_send_low+0x5e1/0x820
[  169.554974][    C1]  handle_bug+0x84/0x160
[  169.556641][    C1]  exc_invalid_op+0x1a/0x50
[  169.558564][    C1]  asm_exc_invalid_op+0x1a/0x20
[  169.560556][    C1] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  169.562980][    C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 e0 20 af 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 02 fb 9d f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  169.569715][    C1] RSP: 0018:ffffc900001e0758 EFLAGS: 00010246
[  169.571601][    C1] RAX: f63a9fa06c7a7400 RBX: 000000000000000c RCX: ffff8881000f0000
[  169.574066][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  169.576565][    C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  169.579055][    C1] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffff88811e07d0a8
[  169.581630][    C1] R13: 0000000000000000 R14: ffff888107be0e40 R15: ffff888107be30d8
[  169.584559][    C1]  ? __rate_control_send_low+0x5de/0x820
[  169.586474][    C1]  rate_control_send_low+0x194/0x7a0
[  169.588222][    C1]  rate_control_get_rate+0x20b/0x5d0
[  169.589912][    C1]  ieee80211_beacon_get_finish+0x38c/0x6b0
[  169.591744][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  169.593788][    C1]  ? __pfx___netdev_alloc_skb+0x10/0x10
[  169.595517][    C1]  ? __ieee80211_beacon_get+0xfc9/0x17b0
[  169.597294][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  169.599265][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  169.601209][    C1]  __ieee80211_beacon_get+0x1033/0x17b0
[  169.603096][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  169.605282][    C1]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  169.607368][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  169.609550][    C1]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  169.611424][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  169.613711][    C1]  __iterate_interfaces+0x2ab/0x590
[  169.615406][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  169.617345][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  169.619846][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  169.622375][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  169.625228][    C1]  mac80211_hwsim_beacon+0xbb/0x1c0
[  169.627399][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  169.629743][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  169.631926][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  169.633893][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  169.635812][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  169.637470][    C1]  handle_softirqs+0x286/0x870
[  169.639097][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  169.640780][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  169.642517][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  169.644210][    C1]  __irq_exit_rcu+0xca/0x1f0
[  169.645716][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  169.647448][    C1]  irq_exit_rcu+0x9/0x30
[  169.648849][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  169.650684][    C1]  </IRQ>
[  169.651664][    C1]  <TASK>
[  169.652617][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  169.654521][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  169.656344][    C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d e3 45 19 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  169.663448][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000286
[  169.665949][    C1] RAX: f63a9fa06c7a7400 RBX: ffffffff81975d58 RCX: f63a9fa06c7a7400
[  169.669145][    C1] RDX: 0000000000000001 RSI: ffffffff8d996d7c RDI: ffffffff8be28fc0
[  169.672228][    C1] RBP: ffffc90000177f20 R08: ffff888136632f5b R09: 1ffff11026cc65eb
[  169.675153][    C1] R10: dffffc0000000000 R11: ffffed1026cc65ec R12: ffffffff8fa1e0f0
[  169.678200][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1102001e000
[  169.681300][    C1]  ? do_idle+0x1e8/0x510
[  169.682899][    C1]  default_idle+0x13/0x20
[  169.684660][    C1]  default_idle_call+0x74/0xb0
[  169.686508][    C1]  do_idle+0x1e8/0x510
[  169.688202][    C1]  ? __pfx_do_idle+0x10/0x10
[  169.689967][    C1]  cpu_startup_entry+0x44/0x60
[  169.691868][    C1]  start_secondary+0x101/0x110
[  169.693738][    C1]  common_startup_64+0x13e/0x147
[  169.695669][    C1]  </TASK>
[  169.697587][    C1] Kernel Offset: disabled
[  169.699245][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:12:48  Registers:
info registers vcpu 0

CPU#0
RAX=01441d518229c500 RBX=ffffffff81975d58 RCX=01441d518229c500 RDX=0000000000000001
RSI=ffffffff8d996d7c RDI=ffffffff8be28fc0 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1e0f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6ee4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fab015a8fc8 CR3=0000000026c84000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f0ac1584478 00007f0ac1584450 XMM03=00007f0ac1584488 00007f0ac1584480
XMM04=00007f0ac20ed100 00007f0ac1584440 XMM05=00007f0ac1584458 00007f0ac15844a0
XMM06=00007f0ac1584498 00007f0ac1584490 XMM07=00007f0ac1584488 00007f0ac1584480
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000074 RBX=0000000000000074 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001dfef0
R8 =ffff88801fa00237 R9 =1ffff11003f40046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af78ff R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000040 CR3=0000000026a2c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fab00984478 00007fab00984450 XMM03=00007fab00984488 00007fab00984480
XMM04=00007fab014ed100 00007fab00984440 XMM05=00007fab00984458 00007fab009844a0
XMM06=00007fab00984498 00007fab00984490 XMM07=00007fab00984488 00007fab00984480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fab00811c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
