last executing test programs:

523.97416ms ago: executing program 2 (id=5173):
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14)
recvmmsg(r0, &(0x7f0000005c80), 0x1b, 0x10122, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1) (async, rerun: 64)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 64)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)=<r4=>0x0) (async)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@private1}, 0x0, @in6}}, &(0x7f0000000340)=0xe8) (async)
r6 = getgid()
ioctl$TUNSETGROUP(r1, 0x400454ce, r6) (async)
setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380)={r4, r5, r6}, 0xc) (async)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r8=>0x0)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r7, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}}, 0x0)
ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, @nfc={0x27, r8, 0xffffffffffffffff, 0x5}, @hci={0x1f, 0x0, 0x2}, 0x4adc, 0x0, 0x0, 0x0, 0xff, &(0x7f0000000000)='pim6reg\x00', 0x1, 0x0, 0x9f1c})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030500000000fcdbdf2500000001", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000100c28000050006"], 0x48}}, 0x0)

523.423359ms ago: executing program 0 (id=5174):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000013000100000000000000000007"], 0x14}], 0x1}, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, <r2=>0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0x1, <r3=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000540)}, 0x20)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f0000000780)=""/170, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0xff7a}, 0x6d)
r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000008c0)=@o_path={&(0x7f0000000880)='./file0\x00', 0x0, 0x6010, r0}, 0x18)
r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940)=@generic={&(0x7f0000000900)='./file0\x00', 0x0, 0x10}, 0x18)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_tracing={0x1a, 0x28, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000700)='syzkaller\x00', 0x7ff, 0xc8, &(0x7f0000000740)=""/200, 0x1e00, 0x26, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x3, 0xd, 0x2, 0xfffffff7}, 0x10, 0x386a, r5, 0x2, &(0x7f0000000980)=[r6], &(0x7f00000009c0)=[{0x3, 0x4, 0xf, 0x8}, {0x4, 0x3, 0x9, 0x7}], 0x10, 0x1cd1}, 0x94)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x37}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0, 0xf7, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000480), &(0x7f0000000200), 0x8, 0x35, 0x8, 0x8, &(0x7f0000000240)}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440)={r8}, 0x4)

415.157262ms ago: executing program 0 (id=5175):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth1_virt_wifi\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080089064803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x4, {0x0, 0x0, 0x0, 0x0, 0x8502, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_ULP(r11, 0x6, 0x1f, &(0x7f0000000300), 0x4)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000802800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0)

414.394555ms ago: executing program 2 (id=5176):
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
socket$kcm(0x10, 0x2, 0x4)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007500000018010000646c6c25000000000e0020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000100000000000000900000085000000b400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071163a0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73, 0x1000000}, 0x70)

342.424615ms ago: executing program 2 (id=5177):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x8000})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf)
epoll_create1(0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230", @ANYRES16], 0x38}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140))

342.201483ms ago: executing program 1 (id=5178):
syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @random="413cd8ae36f5", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0xfff5, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @remote}}}}}}, 0x0)

341.882897ms ago: executing program 2 (id=5179):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r0, 0xc)
connect$x25(r0, &(0x7f00000000c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {0x2}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x40004)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="540100001900010000000000000000001d01000008000500f880000015010400010000800202000031171e44b2b50e8f0400"], 0x154}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720aacff00000000711012000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90)

341.730942ms ago: executing program 1 (id=5180):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x4, 0x0, &(0x7f0000000040))
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/54, 0x36}, 0x4fb}], 0x1, 0x12020, 0x0)
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000120060ce902d120c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb"], 0xfdef)

253.970237ms ago: executing program 2 (id=5181):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000001600)='syzkaller\x00'}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x3, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002004000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c00000002000000ac1414aa0000000000000000000000000600000004030000010400"/180], 0xfc}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000840)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x4000000, 0x2000, 0xdc0, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xc}, @ldst={0x2, 0x0, 0x3}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xdb, &(0x7f0000000700)=""/219}, 0x94)

249.083647ms ago: executing program 0 (id=5182):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000013000100000000000000000007"], 0x14}], 0x1}, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, <r2=>0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0x1, <r3=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000540)}, 0x20)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f0000000780)=""/170, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0xff7a}, 0x6d)
r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000008c0)=@o_path={&(0x7f0000000880)='./file0\x00', 0x0, 0x6010, r0}, 0x18)
r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940)=@generic={&(0x7f0000000900)='./file0\x00', 0x0, 0x10}, 0x18)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_tracing={0x1a, 0x28, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000700)='syzkaller\x00', 0x7ff, 0xc8, &(0x7f0000000740)=""/200, 0x1e00, 0x26, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x3, 0xd, 0x2, 0xfffffff7}, 0x10, 0x386a, r5, 0x2, &(0x7f0000000980)=[r6], &(0x7f00000009c0)=[{0x3, 0x4, 0xf, 0x8}, {0x4, 0x3, 0x9, 0x7}], 0x10, 0x1cd1}, 0x94)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x37}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0, 0xf7, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000480), &(0x7f0000000200), 0x8, 0x35, 0x8, 0x8, &(0x7f0000000240)}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440)={r8}, 0x4)

187.234479ms ago: executing program 2 (id=5183):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
socket(0x40000000015, 0x5, 0xffffffff)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r1 = socket$inet(0x2, 0x5, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680))
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0)

186.979179ms ago: executing program 1 (id=5184):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
close(r0)
connect$can_bcm(r0, &(0x7f00000000c0), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r1=>0x0})
sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="00000000010000000000000084"], 0x48}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x54}]}, &(0x7f0000000740)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x2}, 0x94)

186.706878ms ago: executing program 1 (id=5185):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4068, 0xfe4}, {&(0x7f00000012c0)=""/181, 0xb5}], 0x2, 0x0, 0x0, 0xe40f}, 0x5}], 0x1, 0x12000, 0x0)

110.056827ms ago: executing program 0 (id=5186):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f0000000180)=0xe8)
sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x47, &(0x7f00000002c0)=[{&(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRES32=r1], 0x1c}, {&(0x7f0000000680)={0xffffffffffffff9d, 0x3a, 0x200, 0x270bd2a, 0x25dfdbfc, "", [@nested={0xd4, 0x100, 0x0, 0x1, [@typed={0xbe, 0xbd, 0x0, 0x0, @binary="54e9bdd62a13ec4aa7a6c176d4d59ea491d1f54105ac1d920affd9fb669b155588e6fd6a5ad523122e37f199d09ce23c2b20a507e76a2c1b3986093a5f75f53401d5e80aeec687942525d143b6ae7d41e4cc122e203d0646dc956130c20420c569e23f9c993fc35cddad99405a3cfc8f40ed3bb3067432e3cb30e459332eb83fa44342e8200c18e717b24a6940faa74351a46670294ce01f0e65fa03a70e11e8a72d21665b3021bd93c4f057dab6859b58ac24e56642a443cfb2"}, @typed={0x8, 0xff, 0x0, 0x0, @u32=0x80000001}, @generic="cf3bbf6e1f5de84036a8df3c22b049dd6488a0a25ebd263ded1de7219a07d3be5e860096dddeb3d7db5d345920746a7643ed9fb4b7ba4b71efef9f98fca5ea9bb533b1ffb5ce91fd71c98f34b53bff86240e72c849977905796512b3f67c495d2aa029077ae85e06ac65401f350db7de480854e996e5edebf3b8e207ddeec1af90c6a847d0a0c81367f3e6c12a3670cce8c0fc683acddbefd776bc844326b780c29aa7320948314cdf14", @nested={0x4, 0x85}]}, @typed={0x8, 0x9d, 0x0, 0x0, @uid=r1}]}, 0xec}], 0x2}, 0x400c004)

109.835051ms ago: executing program 1 (id=5187):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x400800, 0x0)
ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000240)={0x80fd, 0x3})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f00000002c0), 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000006c0)={0x7c, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0xff}}]}]}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010)
r7 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r7, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @empty}}}, @ip_retopts={{0x10, 0x110, 0xc}}], 0x30}, 0x0)
sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x70, r6, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0xc000}, 0x840)
sendmmsg$inet6(r1, &(0x7f0000004ac0)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4}, 0x1c, 0x0}}], 0x1, 0x20000800)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
ioctl$VHOST_VDPA_SET_GROUP_ASID(r0, 0x4008af60, &(0x7f0000000740)={0x1, 0x400})

109.514403ms ago: executing program 0 (id=5188):
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
socket$kcm(0x10, 0x2, 0x4)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x2, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40000000}, 0x20000801)
r1 = socket(0x10, 0x803, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, 0xfff, 0x79118b3ee5622451}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r5=>0x0})
getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000580), &(0x7f00000005c0)=0x4)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0x9, 0xb, 0x14, 0x5}}, @TCA_RED_MAX_P={0x8, 0x3, 0x3}]}}]}, 0x150}}, 0x4000010)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
socket$packet(0x11, 0x2, 0x300)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
sendto$packet(r7, 0x0, 0x0, 0x0, &(0x7f0000003340)={0x11, 0x0, 0x0, 0x1, 0x4}, 0x14)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007500000018010000646c6c25000000000e0020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000100000000000000900000085000000b400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071163a0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

109.037763ms ago: executing program 1 (id=5189):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth1_virt_wifi\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080089064803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x4, {0x0, 0x0, 0x0, 0x0, 0x8502, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_ULP(r11, 0x6, 0x1f, &(0x7f0000000300), 0x4)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000802800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0)

0s ago: executing program 0 (id=5190):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc815}, 0x800)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x600, &(0x7f0000000840)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
socket$packet(0x11, 0xa, 0x300)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_udp_encap(r7, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
r8 = accept4$tipc(r1, 0x0, &(0x7f0000000280), 0x80800)
connect$pppl2tp(r1, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x3, 0x1, 0x1, 0x4, {0xa, 0x4e23, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}}, 0x3a)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb8f}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000900)=r10, 0x4)
r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="09002e08e7e10300f00000000000000000df00020000"], 0x16)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x5c}, {0x6}]}, 0x10)

kernel console output (not intermixed with test programs):

, priority 0
[  228.757758][T12368] tipc: Disabling bearer <eth:syzkaller0>
[  228.775896][T12373] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  228.778388][T12373] syzkaller0: entered promiscuous mode
[  228.780253][T12373] syzkaller0: entered allmulticast mode
[  228.791348][T12373] tipc: Resetting bearer <eth:syzkaller0>
[  228.796773][T12373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  228.813632][T12372] tipc: Resetting bearer <eth:syzkaller0>
[  228.825798][T12372] tipc: Disabling bearer <eth:syzkaller0>
[  229.005730][   T56] block nbd1: Receive control failed (result -32)
[  229.347118][T12422] netlink: 'syz.0.2213': attribute type 1 has an invalid length.
[  229.360804][T12422] 8021q: adding VLAN 0 to HW filter on device bond6
[  229.369863][T12422] bond6: (slave gretap1): making interface the new active one
[  229.375009][T12422] bond6: (slave gretap1): Enslaving as an active interface with an up link
[  229.387685][T12422] syz.0.2213 (12422) used greatest stack depth: 17432 bytes left
[  229.583508][ T5844] Bluetooth: hci0: command tx timeout
[  229.828149][T12444] netlink: zone id is out of range
[  229.830566][T12444] netlink: get zone limit has 8 unknown bytes
[  230.050534][T12459] __nla_validate_parse: 24 callbacks suppressed
[  230.050548][T12459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2227'.
[  230.067301][T12459] pim6reg: entered allmulticast mode
[  230.070385][T12459] pim6reg: left allmulticast mode
[  230.079556][T12461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2228'.
[  230.125868][T12464] netlink: 'syz.1.2229': attribute type 42 has an invalid length.
[  230.222426][T12471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2233'.
[  230.227177][T12471] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2233'.
[  230.231056][T12472] netlink: 'syz.1.2232': attribute type 1 has an invalid length.
[  230.236486][T12472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2232'.
[  230.337550][T12481] netlink: 332 bytes leftover after parsing attributes in process `syz.2.2236'.
[  230.418508][T12492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2241'.
[  230.422096][T12492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2241'.
[  230.424561][T12494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2242'.
[  230.429304][T12494] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2242'.
[  230.431388][T12492] netlink: 'syz.2.2241': attribute type 18 has an invalid length.
[  230.653995][T12513] netlink: 'syz.1.2248': attribute type 1 has an invalid length.
[  230.657167][T12513] netlink: 'syz.1.2248': attribute type 1 has an invalid length.
[  230.675363][T12513] netlink: 'syz.1.2248': attribute type 1 has an invalid length.
[  230.678600][T12513] netlink: 'syz.1.2248': attribute type 1 has an invalid length.
[  230.711762][T12513] netlink: 'syz.1.2248': attribute type 1 has an invalid length.
[  230.717247][T12513] netlink: 'syz.1.2248': attribute type 1 has an invalid length.
[  231.167056][T12572] gretap0: entered promiscuous mode
[  232.083682][T12641] macvlan0: entered promiscuous mode
[  232.098180][T12641] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  233.435022][T12732] bridge_slave_0: left allmulticast mode
[  233.437374][T12732] bridge_slave_0: left promiscuous mode
[  233.439615][T12732] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.446450][T12732] bridge_slave_1: left allmulticast mode
[  233.448489][T12732] bridge_slave_1: left promiscuous mode
[  233.450786][T12732] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.458239][T12732] bond0: (slave bond_slave_0): Releasing backup interface
[  233.465656][  T791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  233.470717][T12732] bond0: (slave bond_slave_1): Releasing backup interface
[  233.477874][T12732] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  233.480696][T12732] batman_adv: batadv0: Removing interface: batadv_slave_0
[  233.485162][T12732] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  233.488116][T12732] batman_adv: batadv0: Removing interface: batadv_slave_1
[  233.496943][T12732] bond0: (slave macvlan0): Releasing backup interface
[  233.502256][T12732] bond1: (slave gretap1): Releasing active interface
[  233.508415][T12732] bond1: (slave gretap1): the permanent HWaddr of slave - 0a:4d:cc:b2:27:74 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  233.515668][T12732] bond1: (slave gretap2): making interface the new active one
[  233.522022][T12732] bond1: (slave gretap2): Releasing active interface
[  233.527959][T12732] bond3: (slave wireguard0): Releasing backup interface
[  233.530262][T12732] wireguard0: left promiscuous mode
[  233.532065][T12732] bond3: (slave wireguard1): making interface the new active one
[  233.534850][T12732] wireguard1: entered promiscuous mode
[  233.540025][T12732] bond3: (slave wireguard1): Releasing backup interface
[  233.542363][T12732] wireguard1: left promiscuous mode
[  233.546717][T12732] batman_adv: batadv0: Interface deactivated: macvlan2
[  233.549419][T12732] batman_adv: batadv0: Removing interface: macvlan2
[  233.555046][T12732] bond6: (slave batadv1): Releasing active interface
[  233.628023][T12743] bridge0: port 1(vlan2) entered blocking state
[  233.630284][T12743] bridge0: port 1(vlan2) entered disabled state
[  233.632582][T12743] vlan2: entered allmulticast mode
[  233.634574][T12743] bridge0: entered allmulticast mode
[  233.639072][T12743] vlan2: left allmulticast mode
[  233.640905][T12743] bridge0: left allmulticast mode
[  233.689073][T12747] Unsupported ieee802154 address type: 0
[  233.903503][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  234.138040][T12785] syzkaller1: entered allmulticast mode
[  234.398524][T12807] syzkaller1: entered allmulticast mode
[  234.519181][T12810] sctp: [Deprecated]: syz.1.2350 (pid 12810) Use of int in maxseg socket option.
[  234.519181][T12810] Use struct sctp_assoc_value instead
[  235.139815][T12823] __nla_validate_parse: 76 callbacks suppressed
[  235.139825][T12823] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2355'.
[  235.145165][T12823] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  235.148189][T12823] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  235.506973][T12847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2364'.
[  235.510899][T12847] Unsupported xt match
[  235.510911][T12847] unable to load match
[  235.551945][T12854] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2368'.
[  235.557331][T12854] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2368'.
[  235.678990][T12871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2372'.
[  235.693488][T12871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2372'.
[  235.738920][T12874] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  235.855236][T12891] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2376'.
[  236.618004][T12894] validate_nla: 5 callbacks suppressed
[  236.618019][T12894] netlink: 'syz.2.2379': attribute type 1 has an invalid length.
[  236.628574][T12894] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2379'.
[  236.698239][T12907] netlink: 'syz.2.2384': attribute type 21 has an invalid length.
[  236.701805][T12907] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2384'.
[  236.707245][T12909] netlink: 'syz.2.2384': attribute type 21 has an invalid length.
[  236.716134][T12909] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2384'.
[  236.725538][T12909] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  236.730470][T12907] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  237.666640][T12928] netlink: 'syz.1.2387': attribute type 10 has an invalid length.
[  237.739864][T12928] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  237.854645][T12940] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  237.877377][T12937] tipc: MTU too low for tipc bearer
[  239.162068][T12995] netlink: 'syz.1.2405': attribute type 11 has an invalid length.
[  239.786151][T13037] tap0: tun_chr_ioctl cmd 1074025676
[  239.788078][T13037] tap0: owner set to 0
[  239.959744][T12944] Set syz1 is full, maxelem 65536 reached
[  239.982683][T13052] ip6tnl1: entered promiscuous mode
[  239.986561][T13052] ip6tnl1: entered allmulticast mode
[  239.993031][T13052] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  239.999918][T13053] netlink: 'syz.1.2427': attribute type 6 has an invalid length.
[  240.005016][T13057] netlink: 'syz.1.2427': attribute type 6 has an invalid length.
[  240.009590][T13052] netlink: 'syz.1.2427': attribute type 6 has an invalid length.
[  240.016087][T13059] netlink: 'syz.0.2429': attribute type 1 has an invalid length.
[  240.018607][T13059] netlink: 'syz.0.2429': attribute type 1 has an invalid length.
[  240.182382][T13076] 8021q: adding VLAN 0 to HW filter on device bond8
[  240.216250][T13079] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  240.228632][T13079] tipc: Resetting bearer <eth:syzkaller0>
[  240.232655][T13077] tipc: Resetting bearer <eth:syzkaller0>
[  240.247721][ T2203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  240.266378][T13077] tipc: Disabling bearer <eth:syzkaller0>
[  240.280141][T13081] bridge11: entered promiscuous mode
[  240.282001][T13081] bridge11: entered allmulticast mode
[  240.411052][T13091] __nla_validate_parse: 12 callbacks suppressed
[  240.411066][T13091] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2438'.
[  240.783913][ T2203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  240.893019][T13105] 8021q: adding VLAN 0 to HW filter on device bond7
[  241.058434][T13110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2445'.
[  241.207222][T13114] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2446'.
[  241.409236][T13122] netlink: 51 bytes leftover after parsing attributes in process `syz.1.2448'.
[  241.414378][T13122] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2448'.
[  241.504108][T13127] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2449'.
[  241.535898][T13131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2450'.
[  241.536693][T13133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2451'.
[  241.539749][T13131] tipc: Disabling bearer <udp:syz2>
[  241.667999][T13141] validate_nla: 6 callbacks suppressed
[  241.668009][T13141] netlink: 'syz.0.2455': attribute type 10 has an invalid length.
[  241.715278][T13146] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2457'.
[  241.820861][T13152] _Z`Ԁ@: entered promiscuous mode
[  241.835233][T13152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2459'.
[  242.164328][T13177] netlink: 'syz.0.2470': attribute type 15 has an invalid length.
[  242.194945][T13177] syzkaller0: entered promiscuous mode
[  242.197211][T13177] syzkaller0: entered allmulticast mode
[  243.409155][T13212] netlink: 'syz.1.2482': attribute type 9 has an invalid length.
[  243.413355][T13212] netlink: 'syz.1.2482': attribute type 6 has an invalid length.
[  243.508913][T13225] netlink: 'syz.2.2487': attribute type 2 has an invalid length.
[  244.618928][T13280] syzkaller1: entered promiscuous mode
[  244.621195][T13280] syzkaller1: entered allmulticast mode
[  244.800390][T13293] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  244.838834][T13301] pimreg: left allmulticast mode
[  245.594635][T13321] __nla_validate_parse: 13 callbacks suppressed
[  245.594650][T13321] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2512'.
[  245.786863][T13333] lo speed is unknown, defaulting to 1000
[  245.800461][T13338] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  245.816661][T13338] xt_limit: Overflow, try lower: 271964/0
[  246.108136][T13360] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  246.111791][T13360] syzkaller0: entered promiscuous mode
[  246.115068][T13360] syzkaller0: entered allmulticast mode
[  246.120816][T13362] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  246.141430][T13360] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  246.146409][T13362] tipc: Resetting bearer <eth:syzkaller0>
[  246.155651][T13359] tipc: Resetting bearer <eth:syzkaller0>
[  246.168920][T13359] tipc: Disabling bearer <eth:syzkaller0>
[  246.299685][T13370] lo speed is unknown, defaulting to 1000
[  246.978338][T13386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2529'.
[  247.016626][T13390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2530'.
[  247.030120][T13390] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2530'.
[  247.176485][T13401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2535'.
[  247.179691][T13401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2535'.
[  247.182956][T13401] netlink: 'syz.2.2535': attribute type 20 has an invalid length.
[  247.208174][T13404] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2537'.
[  247.221583][T13404] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2537'.
[  247.227238][T13404] tipc: Invalid UDP bearer configuration
[  247.227270][T13404] tipc: Enabling of bearer <udp:sy{> rejected, failed to enable media
[  247.435025][T13426] netlink: 972 bytes leftover after parsing attributes in process `syz.1.2545'.
[  247.504180][T13434] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2546'.
[  247.508829][T13434] netlink: 'syz.0.2546': attribute type 74 has an invalid length.
[  247.589244][T13440] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  247.714137][T13451] netlink: 'syz.1.2553': attribute type 8 has an invalid length.
[  247.728943][T13452] sctp: [Deprecated]: syz.2.2551 (pid 13452) Use of struct sctp_assoc_value in delayed_ack socket option.
[  247.728943][T13452] Use struct sctp_sack_info instead
[  247.826583][T13451] bond0 (unregistering): Released all slaves
[  248.342068][T13475] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  248.395252][T13477] netlink: 'syz.1.2561': attribute type 11 has an invalid length.
[  248.657548][T13495] batadv_slave_1 (unregistering): left promiscuous mode
[  248.942321][T13515] bond8: entered promiscuous mode
[  249.021933][T13523] pimreg: entered allmulticast mode
[  249.030958][T13523] pimreg: left allmulticast mode
[  249.888608][T13580] netlink: 'syz.0.2593': attribute type 6 has an invalid length.
[  249.891422][T13580] netlink: 'syz.0.2593': attribute type 7 has an invalid length.
[  250.019150][T13590] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  250.103913][T13593] lo speed is unknown, defaulting to 1000
[  250.661333][T13613] __nla_validate_parse: 15 callbacks suppressed
[  250.661348][T13613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2606'.
[  250.667685][T13613] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2606'.
[  250.947642][ T5844] Bluetooth: hci2: link tx timeout
[  250.950366][ T5844] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  250.960123][ T5234] Bluetooth: hci2: link tx timeout
[  250.962229][ T5234] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  250.964941][ T5234] Bluetooth: hci2: link tx timeout
[  250.966691][ T5234] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  251.118536][T13632] netlink: 'syz.2.2613': attribute type 1 has an invalid length.
[  251.121916][T13632] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2613'.
[  251.400694][T13642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2618'.
[  252.149781][T13689] ip6tnl2: entered promiscuous mode
[  252.152286][T13689] ip6tnl2: entered allmulticast mode
[  252.300676][T13709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2638'.
[  252.362669][T13720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2639'.
[  252.376960][T13720] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2639'.
[  252.399787][T13723] tipc: Invalid UDP bearer configuration
[  252.399826][T13723] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  252.411683][T13723] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  252.418997][T13723] CPU: 0 UID: 0 PID: 13723 Comm: syz.1.2641 Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0 PREEMPT(full) 
[  252.419019][T13723] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  252.419026][T13723] Call Trace:
[  252.419032][T13723]  <TASK>
[  252.419038][T13723]  dump_stack_lvl+0x189/0x250
[  252.419062][T13723]  ? __pfx_dump_stack_lvl+0x10/0x10
[  252.419078][T13723]  ? __pfx__printk+0x10/0x10
[  252.419099][T13723]  ? kernfs_path_from_node+0x2f/0x290
[  252.419113][T13723]  ? kernfs_path_from_node+0x250/0x290
[  252.419125][T13723]  ? kernfs_path_from_node+0x2f/0x290
[  252.419168][T13723]  sysfs_warn_dup+0x8e/0xa0
[  252.419184][T13723]  sysfs_do_create_link_sd+0xc0/0x110
[  252.419200][T13723]  device_add_class_symlinks+0x1cf/0x240
[  252.419216][T13723]  device_add+0x475/0xb50
[  252.419232][T13723]  wiphy_register+0x1ba6/0x28d0
[  252.419263][T13723]  ? __pfx_wiphy_register+0x10/0x10
[  252.419279][T13723]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  252.419299][T13723]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  252.419324][T13723]  ieee80211_register_hw+0x3425/0x4080
[  252.419351][T13723]  ? ieee80211_register_hw+0x14b1/0x4080
[  252.419371][T13723]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  252.419387][T13723]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  252.419409][T13723]  ? __hrtimer_setup+0x187/0x210
[  252.419421][T13723]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  252.419440][T13723]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  252.419479][T13723]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  252.419494][T13723]  ? trace_kmalloc+0x1f/0xd0
[  252.419531][T13723]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  252.419548][T13723]  ? kstrndup+0xbf/0x160
[  252.419570][T13723]  hwsim_new_radio_nl+0xea4/0x1b10
[  252.419588][T13723]  ? __pfx___nla_validate_parse+0x10/0x10
[  252.419619][T13723]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  252.419646][T13723]  ? __nla_parse+0x40/0x60
[  252.419666][T13723]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  252.419687][T13723]  genl_family_rcv_msg_doit+0x215/0x300
[  252.419706][T13723]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  252.419730][T13723]  ? bpf_lsm_capable+0x9/0x20
[  252.419746][T13723]  ? security_capable+0x7e/0x2e0
[  252.419768][T13723]  genl_rcv_msg+0x60e/0x790
[  252.419787][T13723]  ? __pfx_genl_rcv_msg+0x10/0x10
[  252.419800][T13723]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  252.419826][T13723]  netlink_rcv_skb+0x208/0x470
[  252.419842][T13723]  ? __lock_acquire+0xab9/0xd20
[  252.419860][T13723]  ? __pfx_genl_rcv_msg+0x10/0x10
[  252.419874][T13723]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  252.419906][T13723]  ? down_read+0x1ad/0x2e0
[  252.419920][T13723]  genl_rcv+0x28/0x40
[  252.419931][T13723]  netlink_unicast+0x82f/0x9e0
[  252.419954][T13723]  ? __pfx_netlink_unicast+0x10/0x10
[  252.419980][T13723]  ? netlink_sendmsg+0x642/0xb30
[  252.420017][T13723]  ? skb_put+0x11b/0x210
[  252.420033][T13723]  netlink_sendmsg+0x805/0xb30
[  252.420059][T13723]  ? __pfx_netlink_sendmsg+0x10/0x10
[  252.420080][T13723]  ? aa_sock_msg_perm+0xf1/0x1d0
[  252.420100][T13723]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  252.420112][T13723]  ? __pfx_netlink_sendmsg+0x10/0x10
[  252.420131][T13723]  __sock_sendmsg+0x21c/0x270
[  252.420178][T13723]  ____sys_sendmsg+0x505/0x830
[  252.420196][T13723]  ? __pfx_____sys_sendmsg+0x10/0x10
[  252.420215][T13723]  ? import_iovec+0x74/0xa0
[  252.420232][T13723]  ___sys_sendmsg+0x21f/0x2a0
[  252.420247][T13723]  ? __pfx____sys_sendmsg+0x10/0x10
[  252.420291][T13723]  ? __fget_files+0x2a/0x420
[  252.420301][T13723]  ? __fget_files+0x3a0/0x420
[  252.420322][T13723]  __x64_sys_sendmsg+0x19b/0x260
[  252.420336][T13723]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  252.420358][T13723]  ? rcu_is_watching+0x15/0xb0
[  252.420375][T13723]  ? do_syscall_64+0xbe/0x3b0
[  252.420397][T13723]  do_syscall_64+0xfa/0x3b0
[  252.420412][T13723]  ? lockdep_hardirqs_on+0x9c/0x150
[  252.420429][T13723]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.420442][T13723]  ? exc_page_fault+0x9f/0xf0
[  252.420461][T13723]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.420473][T13723] RIP: 0033:0x7f7cfa18ebe9
[  252.420486][T13723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  252.420496][T13723] RSP: 002b:00007f7cfafa4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  252.420510][T13723] RAX: ffffffffffffffda RBX: 00007f7cfa3b5fa0 RCX: 00007f7cfa18ebe9
[  252.420519][T13723] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005
[  252.420527][T13723] RBP: 00007f7cfa211e19 R08: 0000000000000000 R09: 0000000000000000
[  252.420535][T13723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  252.420541][T13723] R13: 00007f7cfa3b6038 R14: 00007f7cfa3b5fa0 R15: 00007fffa8ef6408
[  252.420563][T13723]  </TASK>
[  252.667835][T13727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2643'.
[  252.684442][T13727] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  252.689257][T13727] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  252.702677][T13729] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2644'.
[  252.707587][T13729] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2644'.
[  252.722428][T13732] netlink: 'syz.0.2645': attribute type 4 has an invalid length.
[  252.851052][   T33] audit: type=1800 audit(1755532246.487:7): pid=13745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2649" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=4250 res=0 errno=0
[  253.024557][ T5234] Bluetooth: hci2: command 0x0406 tx timeout
[  253.074357][T13759] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  253.117508][T13759] netlink: 'syz.0.2652': attribute type 1 has an invalid length.
[  253.132062][T13759] 8021q: adding VLAN 0 to HW filter on device bond7
[  254.689702][T13838] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  254.912438][T13853] raw_sendmsg: syz.0.2683 forgot to set AF_INET. Fix it!
[  255.225259][T13878] lo speed is unknown, defaulting to 1000
[  255.712001][  T981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  255.716080][  T981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  255.875952][T13917] netlink: 'syz.0.2702': attribute type 1 has an invalid length.
[  255.880757][T13917] __nla_validate_parse: 9 callbacks suppressed
[  255.880824][T13917] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2702'.
[  255.892137][T13917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2702'.
[  255.902820][T13917] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2702'.
[  255.991514][T13919] netlink: 'syz.0.2704': attribute type 10 has an invalid length.
[  255.998301][T13919] syz_tun: entered promiscuous mode
[  256.008601][T13919] syz_tun: entered allmulticast mode
[  256.011161][T13919] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  256.085522][T13929] syzkaller1: entered promiscuous mode
[  256.088259][T13929] syzkaller1: entered allmulticast mode
[  256.091296][T13931] netlink: 'syz.0.2710': attribute type 1 has an invalid length.
[  256.106598][T13931] bond8: entered promiscuous mode
[  256.108498][T13931] 8021q: adding VLAN 0 to HW filter on device bond8
[  256.129354][T13931] bond8: (slave bridge21): making interface the new active one
[  256.132216][T13931] bridge21: entered promiscuous mode
[  256.135538][T13931] bond8: (slave bridge21): Enslaving as an active interface with an up link
[  256.152149][T13931] syzkaller1: entered promiscuous mode
[  256.156336][T13931] syzkaller1: entered allmulticast mode
[  256.298515][T13943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2715'.
[  256.300064][T13946] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2716'.
[  256.301600][T13943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2715'.
[  256.308928][T13946] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2716'.
[  256.308990][T13943] netlink: 'syz.0.2715': attribute type 18 has an invalid length.
[  256.530000][T13971] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2725'.
[  256.533035][T13971] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2725'.
[  256.538668][T13971] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2725'.
[  257.414779][T14001] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  257.418586][T14001] syzkaller0: entered promiscuous mode
[  257.421215][T14001] syzkaller0: entered allmulticast mode
[  257.549011][T14000] tipc: Resetting bearer <eth:syzkaller0>
[  257.561325][T14000] tipc: Disabling bearer <eth:syzkaller0>
[  257.991377][T14045] nbd: must specify at least one socket
[  258.080933][T14053] netlink: 'syz.2.2753': attribute type 1 has an invalid length.
[  258.249511][T14071] netlink: 'syz.2.2759': attribute type 1 has an invalid length.
[  258.289895][T14071] veth5: entered promiscuous mode
[  258.295848][T14071] bond9: (slave veth5): Enslaving as a backup interface with a down link
[  258.496931][T14101] bridge: RTM_NEWNEIGH with invalid ether address
[  258.501274][T14101] bridge: RTM_NEWNEIGH with invalid ether address
[  258.511135][T14101] bridge: RTM_NEWNEIGH with invalid ether address
[  258.515308][T14101] bridge: RTM_NEWNEIGH with invalid ether address
[  258.518295][T14101] bridge: RTM_NEWNEIGH with invalid ether address
[  258.521238][T14101] bridge: RTM_NEWNEIGH with invalid ether address
[  258.528424][T14101] bridge: RTM_NEWNEIGH with invalid ether address
[  258.531047][T14101] bridge: RTM_NEWNEIGH with invalid ether address
[  258.533445][T14101] bridge: RTM_NEWNEIGH with invalid ether address
[  258.535788][T14101] bridge: RTM_NEWNEIGH with invalid ether address
[  258.538079][T14101] bridge: RTM_NEWNEIGH with invalid ether address
[  258.540523][T14101] bridge: RTM_NEWNEIGH with invalid ether address
[  258.542793][T14101] bridge: RTM_NEWNEIGH with invalid ether address
[  258.548176][T14101] bridge: RTM_NEWNEIGH with invalid ether address
[  258.550580][T14101] bridge: RTM_NEWNEIGH with invalid ether address
[  258.553076][T14101] bridge: RTM_NEWNEIGH with invalid ether address
[  258.555694][T14101] bridge: RTM_NEWNEIGH with invalid ether address
[  258.558181][T14101] bridge: RTM_NEWNEIGH with invalid ether address
[  258.560828][T14101] bridge: RTM_NEWNEIGH with invalid ether address
[  258.566009][T14101] bridge: RTM_NEWNEIGH with invalid ether address
[  258.568972][T14101] bridge: RTM_NEWNEIGH with invalid ether address
[  258.571684][T14101] bridge: RTM_NEWNEIGH with invalid ether address
[  258.574847][T14101] bridge: RTM_NEWNEIGH with invalid ether address
[  258.577367][T14101] bridge: RTM_NEWNEIGH with invalid ether address
[  258.579943][T14101] bridge: RTM_NEWNEIGH with invalid ether address
[  258.582453][T14101] bridge: RTM_NEWNEIGH with invalid ether address
[  258.586928][T14101] bridge: RTM_NEWNEIGH with invalid ether address
[  258.589552][T14101] bridge: RTM_NEWNEIGH with invalid ether address
[  258.592191][T14101] bridge: RTM_NEWNEIGH with invalid ether address
[  258.595503][T14101] bridge: RTM_NEWNEIGH with invalid ether address
[  258.598343][T14101] bridge: RTM_NEWNEIGH with invalid ether address
[  258.600639][T14101] bridge: RTM_NEWNEIGH with invalid ether address
[  258.602897][T14101] bridge: RTM_NEWNEIGH with invalid ether address
[  258.770298][T14125] netlink: 'syz.2.2776': attribute type 5 has an invalid length.
[  258.773284][T14125] netlink: 'syz.2.2776': attribute type 5 has an invalid length.
[  259.519032][T14161] IPVS: Scheduler module ip_vs_ not found
[  260.598249][T14197] pim6reg: entered allmulticast mode
[  260.601078][T14197] pim6reg: left allmulticast mode
[  261.291586][T14230] __nla_validate_parse: 22 callbacks suppressed
[  261.291601][T14230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2811'.
[  261.389208][T14243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2814'.
[  261.682512][   T33] audit: type=1107 audit(1755532255.317:8): pid=14269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  261.687188][T14270] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2826'.
[  261.780260][T14283] netlink: 488 bytes leftover after parsing attributes in process `syz.1.2829'.
[  261.796809][T14283] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2829'.
[  261.800312][T14283] nbd: must specify a size in bytes for the device
[  261.857630][T14291] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2829'.
[  261.868670][T14283] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2829'.
[  262.601841][T14337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2841'.
[  263.508879][T14352] netlink: 'syz.1.2847': attribute type 1 has an invalid length.
[  263.511879][T14352] netlink: 'syz.1.2847': attribute type 11 has an invalid length.
[  263.517166][T14352] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2847'.
[  263.527285][T14352] netlink: 'syz.1.2847': attribute type 1 has an invalid length.
[  263.578873][T14365] netlink: 'syz.0.2851': attribute type 11 has an invalid length.
[  263.706711][T14388] netlink: 'syz.2.2858': attribute type 10 has an invalid length.
[  263.717624][T14388] mac80211_hwsim hwsim2 wlan0 (unregistering): left allmulticast mode
[  263.760060][T14391] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2858'.
[  263.822494][T14395] openvswitch: netlink: Flow actions attr not present in new flow.
[  264.083867][T14423] bridge0: port 1(erspan0) entered blocking state
[  264.086196][T14423] bridge0: port 1(erspan0) entered disabled state
[  264.088537][T14423] erspan0: entered allmulticast mode
[  264.091295][T14423] erspan0: left allmulticast mode
[  264.533096][T14448] netlink: 'syz.1.2877': attribute type 1 has an invalid length.
[  264.730392][ T5872] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  265.671674][T14493] netlink: 'syz.1.2890': attribute type 10 has an invalid length.
[  265.681560][T14484] netlink: 'syz.2.2889': attribute type 11 has an invalid length.
[  265.794946][T14506] netlink: 'syz.1.2893': attribute type 62 has an invalid length.
[  266.142705][T14530] netlink: 'syz.0.2905': attribute type 11 has an invalid length.
[  266.389354][T14540] netlink: 'syz.0.2910': attribute type 2 has an invalid length.
[  266.477907][T14544] netlink: 'syz.0.2912': attribute type 1 has an invalid length.
[  266.539969][T14546] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  266.548580][T14546] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  266.570881][T14546] 8021q: adding VLAN 0 to HW filter on device bond9
[  266.581515][T14546] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  266.588845][T14546] bond9: (slave wlan0): Enslaving as an active interface with a down link
[  266.721525][T14556] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20000
[  266.729394][T14514] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  266.861775][T14566] gretap0: refused to change device tx_queue_len
[  266.867832][T14566] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  266.986525][T14571] sctp: [Deprecated]: syz.1.2922 (pid 14571) Use of int in max_burst socket option deprecated.
[  266.986525][T14571] Use struct sctp_assoc_value instead
[  266.999101][T14571] syzkaller1: entered promiscuous mode
[  267.001112][T14571] syzkaller1: entered allmulticast mode
[  267.637992][T14576] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  267.646504][T14576] tipc: Resetting bearer <eth:syzkaller0>
[  267.653062][T14575] tipc: Disabling bearer <eth:syzkaller0>
[  267.751634][T14580] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  267.756138][T14580] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.813756][T14580] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  267.818189][T14580] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.884687][T14580] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  267.887990][T14580] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.935675][T14580] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  267.938994][T14580] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.994058][ T9258] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  267.997497][ T9258] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  268.007301][ T9258] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  268.010557][ T9258] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  268.018538][ T9258] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  268.021424][ T9258] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  268.030829][ T5873] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  268.037585][ T5873] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  268.289307][T14606] bridge16: entered allmulticast mode
[  268.397031][T14617] __nla_validate_parse: 24 callbacks suppressed
[  268.397040][T14617] netlink: 208 bytes leftover after parsing attributes in process `syz.2.2935'.
[  268.471861][T14622] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2937'.
[  268.725959][T14629] validate_nla: 3 callbacks suppressed
[  268.725969][T14629] netlink: 'syz.0.2939': attribute type 10 has an invalid length.
[  268.732939][T14629] bridge0: port 3(dummy0) entered disabled state
[  268.737333][T14629] dummy0: left allmulticast mode
[  268.739354][T14629] dummy0: left promiscuous mode
[  268.741302][T14629] bridge0: port 3(dummy0) entered disabled state
[  268.745720][T14629] netlink: 'syz.0.2939': attribute type 10 has an invalid length.
[  268.750982][T14629] dummy0: entered allmulticast mode
[  268.753357][T14629] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  268.895865][T14640] netlink: 'syz.0.2944': attribute type 6 has an invalid length.
[  268.994488][T14649] netlink: 'syz.0.2947': attribute type 1 has an invalid length.
[  268.998705][T14649] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  269.057468][T14655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2950'.
[  269.061412][T14655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2950'.
[  269.068246][T14655] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2950'.
[  269.099497][T14655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2950'.
[  269.106659][T14657] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2951'.
[  269.181654][T14664] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2954'.
[  269.284638][T14678] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  269.287566][T14677] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  269.296979][T14677] netlink: 'syz.2.2956': attribute type 5 has an invalid length.
[  269.300981][T14677] tipc: Resetting bearer <eth:syzkaller0>
[  269.401462][T14698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2963'.
[  269.414152][T14698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2963'.
[  269.519566][T14711] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  270.086130][T14761] netlink: 'syz.0.2983': attribute type 1 has an invalid length.
[  270.179246][T14775] openvswitch: netlink: Flow actions attr not present in new flow.
[  270.236014][T14783] bridge0: port 3(macsec2) entered blocking state
[  270.239018][T14783] bridge0: port 3(macsec2) entered disabled state
[  270.241756][T14783] macsec2: entered allmulticast mode
[  270.252079][T14783] macsec2: left allmulticast mode
[  271.254329][T14817] netlink: 'syz.1.3000': attribute type 11 has an invalid length.
[  272.136784][T14832] openvswitch: netlink: Missing valid actions attribute.
[  272.140145][T14832] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  272.176144][T14835] netlink: 'syz.0.3005': attribute type 10 has an invalid length.
[  272.278258][T14840] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20001
[  272.453047][T14849] lo speed is unknown, defaulting to 1000
[  272.838502][T14864] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  272.849058][T14864] tipc: Resetting bearer <eth:syzkaller0>
[  273.122373][T14885] lo speed is unknown, defaulting to 1000
[  273.245541][T14896] lo speed is unknown, defaulting to 1000
[  273.511355][T14903] geneve3: entered promiscuous mode
[  274.214765][T14921] __nla_validate_parse: 14 callbacks suppressed
[  274.214775][T14921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3033'.
[  274.327572][T14936] netlink: 'syz.2.3039': attribute type 2 has an invalid length.
[  274.342161][T14936] `: entered promiscuous mode
[  274.430614][T14952] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3044'.
[  274.434939][T14954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3045'.
[  274.438022][T14954] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3045'.
[  274.446478][T14952] netlink: 'syz.2.3044': attribute type 1 has an invalid length.
[  274.601674][T14975] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3052'.
[  274.608313][T14975] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3052'.
[  274.665470][T14980] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  274.774548][T14981] veth7: entered promiscuous mode
[  274.872127][T14993] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3059'.
[  274.983280][T14999] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3061'.
[  275.008498][T15003] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3063'.
[  275.336234][T15026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3068'.
[  276.678371][T15128] netlink: del zone limit has 4 unknown bytes
[  278.057994][T15195] batman_adv: batadv0: Adding interface: ip6gretap1
[  278.061079][T15195] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  278.072982][T15195] batman_adv: batadv0: Interface activated: ip6gretap1
[  278.260300][T15227] syzkaller1: entered promiscuous mode
[  278.262396][T15227] syzkaller1: entered allmulticast mode
[  278.429978][T15256] 8021q: adding VLAN 0 to HW filter on device bond0
[  278.940927][T15302] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  278.969015][T15302] netlink: 'syz.1.3164': attribute type 10 has an invalid length.
[  279.021616][T15309] netlink: 'syz.0.3167': attribute type 10 has an invalid length.
[  279.250158][T15326] lo speed is unknown, defaulting to 1000
[  279.479366][T15324] __nla_validate_parse: 20 callbacks suppressed
[  279.479375][T15324] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3171'.
[  279.490613][T15335] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3175'.
[  279.940528][T15353] sctp: [Deprecated]: syz.1.3179 (pid 15353) Use of int in maxseg socket option.
[  279.940528][T15353] Use struct sctp_assoc_value instead
[  280.037561][T15363] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  280.044990][T15358] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  280.049227][T15357] tipc: Resetting bearer <eth:syzkaller0>
[  280.059236][T15357] tipc: Disabling bearer <eth:syzkaller0>
[  280.150450][T15370] netlink: 'syz.1.3185': attribute type 30 has an invalid length.
[  280.155259][T15370] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  280.158425][T15370] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  280.608541][T15405] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3198'.
[  280.724238][T15414] lo speed is unknown, defaulting to 1000
[  280.880100][T15416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3200'.
[  281.184367][T15432] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  281.370948][T15438] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3206'.
[  281.495945][T15457] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  281.499416][T15457] syzkaller0: entered promiscuous mode
[  281.513466][T15457] syzkaller0: entered allmulticast mode
[  281.538532][T15457] tipc: Resetting bearer <eth:syzkaller0>
[  281.552013][T15456] tipc: Resetting bearer <eth:syzkaller0>
[  281.570228][T15465] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3215'.
[  281.584911][T15456] tipc: Disabling bearer <eth:syzkaller0>
[  281.587637][T15465] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3215'.
[  281.701057][T15477] lo speed is unknown, defaulting to 1000
[  281.786324][T15492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3224'.
[  281.823657][T15492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3224'.
[  281.957778][T15498] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  281.961135][T15498] syzkaller0: entered promiscuous mode
[  281.966149][T15498] syzkaller0: entered allmulticast mode
[  282.017263][T15497] tipc: Resetting bearer <eth:syzkaller0>
[  282.032082][T15497] tipc: Disabling bearer <eth:syzkaller0>
[  282.104304][T15471] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3218'.
[  282.181658][T15517] syzkaller0: entered promiscuous mode
[  282.185223][T15517] syzkaller0: entered allmulticast mode
[  283.029469][T15537] netlink: 'syz.2.3235': attribute type 12 has an invalid length.
[  283.228635][T15562] tipc: New replicast peer: 255.127.0.0
[  283.231479][T15562] tipc: Enabled bearer <udp:s>, priority 10
[  283.599794][T15583] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  283.689276][T15591] netlink: 'syz.2.3253': attribute type 2 has an invalid length.
[  283.692869][T15591] netlink: 'syz.2.3253': attribute type 1 has an invalid length.
[  283.699067][T15591] netlink: 'syz.2.3253': attribute type 178 has an invalid length.
[  284.137154][T15632] netlink: 'syz.0.3268': attribute type 5 has an invalid length.
[  284.721091][T15671] __nla_validate_parse: 9 callbacks suppressed
[  284.721102][T15671] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3276'.
[  284.727742][T15671] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3276'.
[  284.731331][T15671] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3276'.
[  284.925066][T15687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3281'.
[  285.919710][T15716] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  286.066831][T15724] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  286.069259][T15724] batman_adv: batadv0: Removing interface: ip6gretap1
[  286.097312][T15724] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  286.107748][ T2203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  286.112327][T15729] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3298'.
[  286.286354][T15745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3304'.
[  286.570849][T15760] netlink: 'syz.2.3309': attribute type 1 has an invalid length.
[  286.573857][T15760] netlink: 'syz.2.3309': attribute type 4 has an invalid length.
[  286.576696][T15760] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3309'.
[  286.580383][T15761] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3309'.
[  286.584185][T15761] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3309'.
[  287.024407][ T2203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  287.081041][T15797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3323'.
[  287.397457][T15818] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  287.400448][T15818] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  288.152096][T15814] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  288.154396][T15814] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  288.230076][T15814] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  288.232357][T15814] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  288.257139][T15814] tipc: Resetting bearer <eth:syzkaller0>
[  288.471733][T15846] netlink: 'syz.0.3338': attribute type 12 has an invalid length.
[  288.488904][T15848] netlink: 'syz.1.3339': attribute type 1 has an invalid length.
[  288.506924][T15852] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  288.522575][T15848] bond10: (slave gretap3): making interface the new active one
[  288.527803][T15848] bond10: (slave gretap3): Enslaving as an active interface with an up link
[  288.776325][T15880] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  289.385054][T15925] can: request_module (can-proto-0) failed.
[  289.557188][T15944] netlink: 'syz.1.3361': attribute type 12 has an invalid length.
[  289.647291][T15959] nbd: illegal input index -1
[  290.125447][T15984] netlink: 'syz.2.3373': attribute type 4 has an invalid length.
[  290.279711][T15991] openvswitch: netlink: Missing key (keys=40, expected=80)
[  290.411943][T16000] netlink: 'syz.1.3379': attribute type 1 has an invalid length.
[  290.510847][T16011] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  290.516130][T16011] CPU: 1 UID: 0 PID: 16011 Comm: syz.1.3379 Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0 PREEMPT(full) 
[  290.516151][T16011] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  290.516158][T16011] Call Trace:
[  290.516164][T16011]  <TASK>
[  290.516171][T16011]  dump_stack_lvl+0x189/0x250
[  290.516195][T16011]  ? __pfx_dump_stack_lvl+0x10/0x10
[  290.516210][T16011]  ? __pfx__printk+0x10/0x10
[  290.516233][T16011]  ? kernfs_path_from_node+0x2f/0x290
[  290.516246][T16011]  ? kernfs_path_from_node+0x250/0x290
[  290.516258][T16011]  ? kernfs_path_from_node+0x2f/0x290
[  290.516274][T16011]  sysfs_warn_dup+0x8e/0xa0
[  290.516288][T16011]  sysfs_do_create_link_sd+0xc0/0x110
[  290.516304][T16011]  device_add_class_symlinks+0x1cf/0x240
[  290.516320][T16011]  device_add+0x475/0xb50
[  290.516336][T16011]  wiphy_register+0x1ba6/0x28d0
[  290.516368][T16011]  ? __pfx_wiphy_register+0x10/0x10
[  290.516385][T16011]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  290.516404][T16011]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  290.516441][T16011]  ieee80211_register_hw+0x3425/0x4080
[  290.516470][T16011]  ? ieee80211_register_hw+0x14b1/0x4080
[  290.516490][T16011]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  290.516506][T16011]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  290.516529][T16011]  ? __hrtimer_setup+0x187/0x210
[  290.516540][T16011]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  290.516558][T16011]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  290.516596][T16011]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  290.516611][T16011]  ? trace_kmalloc+0x1f/0xd0
[  290.516651][T16011]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  290.516668][T16011]  ? kstrndup+0xbf/0x160
[  290.516689][T16011]  hwsim_new_radio_nl+0xea4/0x1b10
[  290.516705][T16011]  ? __pfx___nla_validate_parse+0x10/0x10
[  290.516731][T16011]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  290.516752][T16011]  ? __nla_parse+0x40/0x60
[  290.516769][T16011]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  290.516787][T16011]  genl_family_rcv_msg_doit+0x215/0x300
[  290.516807][T16011]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  290.516829][T16011]  ? bpf_lsm_capable+0x9/0x20
[  290.516845][T16011]  ? security_capable+0x7e/0x2e0
[  290.516867][T16011]  genl_rcv_msg+0x60e/0x790
[  290.516886][T16011]  ? __pfx_genl_rcv_msg+0x10/0x10
[  290.516899][T16011]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  290.516925][T16011]  netlink_rcv_skb+0x208/0x470
[  290.516940][T16011]  ? __lock_acquire+0xab9/0xd20
[  290.516955][T16011]  ? __pfx_genl_rcv_msg+0x10/0x10
[  290.516967][T16011]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  290.516998][T16011]  ? down_read+0x1ad/0x2e0
[  290.517011][T16011]  genl_rcv+0x28/0x40
[  290.517022][T16011]  netlink_unicast+0x82f/0x9e0
[  290.517045][T16011]  ? __pfx_netlink_unicast+0x10/0x10
[  290.517061][T16011]  ? netlink_sendmsg+0x642/0xb30
[  290.517076][T16011]  ? skb_put+0x11b/0x210
[  290.517091][T16011]  netlink_sendmsg+0x805/0xb30
[  290.517115][T16011]  ? __pfx_netlink_sendmsg+0x10/0x10
[  290.517136][T16011]  ? aa_sock_msg_perm+0xf1/0x1d0
[  290.517156][T16011]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  290.517168][T16011]  ? __pfx_netlink_sendmsg+0x10/0x10
[  290.517186][T16011]  __sock_sendmsg+0x21c/0x270
[  290.517205][T16011]  ____sys_sendmsg+0x505/0x830
[  290.517222][T16011]  ? __pfx_____sys_sendmsg+0x10/0x10
[  290.517242][T16011]  ? import_iovec+0x74/0xa0
[  290.517260][T16011]  ___sys_sendmsg+0x21f/0x2a0
[  290.517273][T16011]  ? __pfx____sys_sendmsg+0x10/0x10
[  290.517308][T16011]  ? __fget_files+0x2a/0x420
[  290.517319][T16011]  ? __fget_files+0x3a0/0x420
[  290.517339][T16011]  __x64_sys_sendmsg+0x19b/0x260
[  290.517353][T16011]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  290.517374][T16011]  ? rcu_is_watching+0x15/0xb0
[  290.517391][T16011]  ? do_syscall_64+0xbe/0x3b0
[  290.517411][T16011]  do_syscall_64+0xfa/0x3b0
[  290.517437][T16011]  ? lockdep_hardirqs_on+0x9c/0x150
[  290.517453][T16011]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.517466][T16011]  ? exc_page_fault+0x9f/0xf0
[  290.517483][T16011]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.517496][T16011] RIP: 0033:0x7f7cfa18ebe9
[  290.517509][T16011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  290.517520][T16011] RSP: 002b:00007f7cfaf83038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  290.517535][T16011] RAX: ffffffffffffffda RBX: 00007f7cfa3b6090 RCX: 00007f7cfa18ebe9
[  290.517543][T16011] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000c
[  290.517551][T16011] RBP: 00007f7cfa211e19 R08: 0000000000000000 R09: 0000000000000000
[  290.517558][T16011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  290.517565][T16011] R13: 00007f7cfa3b6128 R14: 00007f7cfa3b6090 R15: 00007fffa8ef6408
[  290.517587][T16011]  </TASK>
[  290.740961][T16019] __nla_validate_parse: 14 callbacks suppressed
[  290.740975][T16019] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3384'.
[  290.827132][T16025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3386'.
[  290.830978][T16025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3386'.
[  290.837450][T16025] netlink: 'syz.0.3386': attribute type 7 has an invalid length.
[  290.876171][T16031] tipc: New replicast peer: 0.0.0.0
[  290.878519][T16031] tipc: Enabled bearer <udp:syz2>, priority 10
[  290.881363][T16031] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[  290.926774][T16036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3392'.
[  290.929649][T16037] tipc: New replicast peer: 255.255.255.255
[  290.932789][T16037] tipc: Enabled bearer <udp:syz2>, priority 10
[  290.937287][T16037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3391'.
[  290.940424][T16037] tipc: Disabling bearer <udp:syz2>
[  290.985546][T16038] netlink: 'syz.0.3392': attribute type 4 has an invalid length.
[  290.994743][   T10] lo speed is unknown, defaulting to 1000
[  290.996778][   T10] syz0: Port: 1 Link DOWN
[  291.013219][   T10] lo speed is unknown, defaulting to 1000
[  291.302363][T16064] netlink: 'syz.2.3400': attribute type 13 has an invalid length.
[  291.338032][T16064] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  291.367794][T16059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  291.401167][T16070] gretap0: entered promiscuous mode
[  291.406235][T16070] batman_adv: batadv0: Adding interface: macvlan4
[  291.408968][T16070] batman_adv: batadv0: The MTU of interface macvlan4 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  291.420424][T16070] batman_adv: batadv0: Interface activated: macvlan4
[  291.425760][T16059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  291.481389][T16059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  291.519648][T16079] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  291.524658][T16079] CPU: 0 UID: 0 PID: 16079 Comm: syz.0.3406 Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0 PREEMPT(full) 
[  291.524671][T16079] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  291.524675][T16079] Call Trace:
[  291.524678][T16079]  <TASK>
[  291.524682][T16079]  dump_stack_lvl+0x189/0x250
[  291.524697][T16079]  ? __pfx_dump_stack_lvl+0x10/0x10
[  291.524706][T16079]  ? __pfx__printk+0x10/0x10
[  291.524718][T16079]  ? kernfs_path_from_node+0x2f/0x290
[  291.524727][T16079]  ? kernfs_path_from_node+0x250/0x290
[  291.524735][T16079]  ? kernfs_path_from_node+0x2f/0x290
[  291.524744][T16079]  sysfs_warn_dup+0x8e/0xa0
[  291.524758][T16079]  sysfs_do_create_link_sd+0xc0/0x110
[  291.524766][T16079]  device_add_class_symlinks+0x1cf/0x240
[  291.524776][T16079]  device_add+0x475/0xb50
[  291.524786][T16079]  wiphy_register+0x1ba6/0x28d0
[  291.524804][T16079]  ? __pfx_wiphy_register+0x10/0x10
[  291.524813][T16079]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  291.524824][T16079]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  291.524838][T16079]  ieee80211_register_hw+0x3425/0x4080
[  291.524853][T16079]  ? ieee80211_register_hw+0x14b1/0x4080
[  291.524865][T16079]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  291.524874][T16079]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  291.524887][T16079]  ? __hrtimer_setup+0x187/0x210
[  291.524893][T16079]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  291.524904][T16079]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  291.524925][T16079]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  291.524933][T16079]  ? trace_kmalloc+0x1f/0xd0
[  291.524941][T16079]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  291.524951][T16079]  ? kstrndup+0xbf/0x160
[  291.524963][T16079]  hwsim_new_radio_nl+0xea4/0x1b10
[  291.524972][T16079]  ? __pfx___nla_validate_parse+0x10/0x10
[  291.524989][T16079]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  291.525003][T16079]  ? __nla_parse+0x40/0x60
[  291.525014][T16079]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  291.525026][T16079]  genl_family_rcv_msg_doit+0x215/0x300
[  291.525037][T16079]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  291.525050][T16079]  ? bpf_lsm_capable+0x9/0x20
[  291.525058][T16079]  ? security_capable+0x7e/0x2e0
[  291.525070][T16079]  genl_rcv_msg+0x60e/0x790
[  291.525080][T16079]  ? __pfx_genl_rcv_msg+0x10/0x10
[  291.525087][T16079]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  291.525101][T16079]  netlink_rcv_skb+0x208/0x470
[  291.525109][T16079]  ? __lock_acquire+0xab9/0xd20
[  291.525119][T16079]  ? __pfx_genl_rcv_msg+0x10/0x10
[  291.525127][T16079]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  291.525143][T16079]  ? down_read+0x1ad/0x2e0
[  291.525151][T16079]  genl_rcv+0x28/0x40
[  291.525157][T16079]  netlink_unicast+0x82f/0x9e0
[  291.525169][T16079]  ? __pfx_netlink_unicast+0x10/0x10
[  291.525178][T16079]  ? netlink_sendmsg+0x642/0xb30
[  291.525186][T16079]  ? skb_put+0x11b/0x210
[  291.525194][T16079]  netlink_sendmsg+0x805/0xb30
[  291.525207][T16079]  ? __pfx_netlink_sendmsg+0x10/0x10
[  291.525217][T16079]  ? aa_sock_msg_perm+0xf1/0x1d0
[  291.525228][T16079]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  291.525238][T16079]  ? __pfx_netlink_sendmsg+0x10/0x10
[  291.525252][T16079]  __sock_sendmsg+0x21c/0x270
[  291.525268][T16079]  ____sys_sendmsg+0x505/0x830
[  291.525283][T16079]  ? __pfx_____sys_sendmsg+0x10/0x10
[  291.525303][T16079]  ? import_iovec+0x74/0xa0
[  291.525320][T16079]  ___sys_sendmsg+0x21f/0x2a0
[  291.525334][T16079]  ? __pfx____sys_sendmsg+0x10/0x10
[  291.525375][T16079]  ? __fget_files+0x2a/0x420
[  291.525385][T16079]  ? __fget_files+0x3a0/0x420
[  291.525397][T16079]  __x64_sys_sendmsg+0x19b/0x260
[  291.525406][T16079]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  291.525418][T16079]  ? rcu_is_watching+0x15/0xb0
[  291.525429][T16079]  ? do_syscall_64+0xbe/0x3b0
[  291.525441][T16079]  do_syscall_64+0xfa/0x3b0
[  291.525449][T16079]  ? lockdep_hardirqs_on+0x9c/0x150
[  291.525459][T16079]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.525466][T16079]  ? exc_page_fault+0x9f/0xf0
[  291.525475][T16079]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.525481][T16079] RIP: 0033:0x7fd187d8ebe9
[  291.525489][T16079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  291.525494][T16079] RSP: 002b:00007fd188b4e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  291.525504][T16079] RAX: ffffffffffffffda RBX: 00007fd187fb6090 RCX: 00007fd187d8ebe9
[  291.525509][T16079] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000c
[  291.525514][T16079] RBP: 00007fd187e11e19 R08: 0000000000000000 R09: 0000000000000000
[  291.525518][T16079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  291.525522][T16079] R13: 00007fd187fb6128 R14: 00007fd187fb6090 R15: 00007ffff36afdb8
[  291.525535][T16079]  </TASK>
[  292.146691][T16109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3418'.
[  292.219515][T16122] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3423'.
[  292.231416][T16121] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3423'.
[  292.346627][T16128] ip6gre1: entered allmulticast mode
[  292.387101][T16128] IPVS: Scheduler module ip_vs_sip not found
[  293.160162][T16141] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3429'.
[  293.321144][T16172] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3439'.
[  293.404974][T16180] openvswitch: netlink: IP tunnel dst address not specified
[  293.477550][T16191] validate_nla: 2 callbacks suppressed
[  293.477564][T16191] netlink: 'syz.0.3444': attribute type 3 has an invalid length.
[  293.731678][T16216] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  293.740781][T16216] syzkaller0: entered promiscuous mode
[  293.742764][T16216] syzkaller0: entered allmulticast mode
[  293.792343][T16221] netlink: 'syz.2.3453': attribute type 1 has an invalid length.
[  294.123670][T16241] netlink: 'syz.2.3461': attribute type 12 has an invalid length.
[  294.151481][T16243] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  294.159095][T16243] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  294.551346][T16269] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  294.595439][T16215] tipc: Resetting bearer <eth:syzkaller0>
[  294.608018][T16215] tipc: Disabling bearer <eth:syzkaller0>
[  294.716908][T16287] openvswitch: netlink: Flow key attr not present in new flow.
[  294.725160][T16287] IPv6: Can't replace route, no match found
[  295.109337][T16343] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  295.970246][T16349] netlink: 'syz.1.3501': attribute type 12 has an invalid length.
[  296.050802][T16357] __nla_validate_parse: 13 callbacks suppressed
[  296.050812][T16357] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3506'.
[  296.089186][T16364] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  296.094477][T16364] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  296.107810][T16360] netlink: 'syz.0.3507': attribute type 21 has an invalid length.
[  296.142160][T16367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3508'.
[  296.281031][T16359] batman_adv: batadv0: Interface deactivated: macvlan4
[  296.307065][T16369] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  296.314362][T16369] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  296.318588][T16369] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  296.378775][T16369] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  296.381983][T16369] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  296.385726][T16369] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  296.428413][T16369] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  296.432313][T16369] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  296.437026][T16369] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  296.448219][T16375] netlink: 'syz.0.3509': attribute type 16 has an invalid length.
[  296.451395][T16375] netlink: 'syz.0.3509': attribute type 17 has an invalid length.
[  296.463517][T16375] gretap0: left promiscuous mode
[  296.483086][T16375] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  296.490265][ T2203] lo speed is unknown, defaulting to 1000
[  296.496198][T16369] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  296.497436][ T2203] syz0: Port: 1 Link ACTIVE
[  296.499885][T16369] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  296.508735][T16369] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  296.517598][ T2203] lo speed is unknown, defaulting to 1000
[  296.590807][ T5872] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  296.594946][ T5872] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  296.598602][ T5872] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  296.608189][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  296.611603][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  296.615843][   T13] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  296.626193][ T5872] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  296.629186][ T5872] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  296.632002][ T5872] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  296.646009][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  296.648820][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  296.651439][   T13] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  297.004152][T16388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3512'.
[  297.227692][T16394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3514'.
[  297.931904][T16411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3518'.
[  298.032954][T16416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3519'.
[  298.037218][T16416] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3519'.
[  298.068859][T16418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3520'.
[  298.107077][T16417] delete_channel: no stack
[  298.290748][T16424] lo speed is unknown, defaulting to 1000
[  299.089776][T16430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3523'.
[  299.097060][T16432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3523'.
[  299.106126][T16430] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  299.113601][T16432] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  299.539650][T16449] 8021q: VLANs not supported on vcan0
[  300.562524][T16490] mac80211_hwsim hwsim19 wlan0: entered promiscuous mode
[  300.566071][T16490] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  301.307598][T16513] __nla_validate_parse: 8 callbacks suppressed
[  301.307620][T16513] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3554'.
[  301.548902][T16530] IPv6: Can't replace route, no match found
[  301.809272][T16540] netlink: 'syz.0.3564': attribute type 10 has an invalid length.
[  301.812513][T16540] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3564'.
[  302.002674][T16548] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  302.007846][T16548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3568'.
[  302.934413][T16588] netlink: 'syz.0.3583': attribute type 1 has an invalid length.
[  302.975947][T16588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3583'.
[  303.025048][T16588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3583'.
[  303.407422][T16609] syzkaller1: entered allmulticast mode
[  303.412015][T16609] syzkaller1: left allmulticast mode
[  303.600222][T16619] netlink: 'syz.2.3591': attribute type 1 has an invalid length.
[  303.667143][T16622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3591'.
[  303.692221][T16619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3591'.
[  303.880872][T16624] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3592'.
[  304.366067][T16643] netlink: 'syz.2.3600': attribute type 1 has an invalid length.
[  304.378253][T16647] netlink: 'syz.0.3605': attribute type 4 has an invalid length.
[  304.382238][T16647] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3605'.
[  304.388460][T16646] netlink: 'syz.1.3599': attribute type 1 has an invalid length.
[  304.414509][T16643] 8021q: adding VLAN 0 to HW filter on device bond11
[  304.420034][T16646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3599'.
[  304.740158][T16674] netlink: 'syz.2.3608': attribute type 10 has an invalid length.
[  304.759294][T16674] macvlan0: entered promiscuous mode
[  305.281073][T16712] netlink: 'syz.0.3622': attribute type 1 has an invalid length.
[  305.297571][T16712] 8021q: adding VLAN 0 to HW filter on device bond10
[  305.309538][T16712] veth5: entered promiscuous mode
[  305.315227][T16712] bond10: (slave veth5): Enslaving as an active interface with a down link
[  305.321057][T16712] erspan0: entered allmulticast mode
[  305.328257][T16712] bond10: (slave erspan0): making interface the new active one
[  305.331833][T16712] erspan0: entered promiscuous mode
[  305.336100][T16712] bond10: (slave erspan0): Enslaving as an active interface with an up link
[  305.417483][T16721] netlink: 'syz.0.3624': attribute type 1 has an invalid length.
[  305.539392][T16731] dvmrp8: entered allmulticast mode
[  305.545927][T16729] dvmrp8: left allmulticast mode
[  305.567276][T16738] netlink: 'syz.0.3629': attribute type 2 has an invalid length.
[  305.699306][T16750] team0: Device C is loopback device. Loopback devices can't be added as a team port
[  305.713644][T16750] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  305.827972][T16760] openvswitch: netlink: Key type 10512 is out of range max 32
[  306.022802][T16785] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  306.067525][T16791] can: request_module (can-proto-0) failed.
[  306.395622][T16820] __nla_validate_parse: 12 callbacks suppressed
[  306.395633][T16820] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3659'.
[  307.109307][T16841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3665'.
[  307.120684][T16843] validate_nla: 3 callbacks suppressed
[  307.120699][T16843] netlink: 'syz.1.3666': attribute type 4 has an invalid length.
[  307.129979][T16843] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3666'.
[  307.256943][T16844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3665'.
[  307.260713][T16844] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) !
[  307.723951][T16865] netlink: 'syz.2.3672': attribute type 8 has an invalid length.
[  307.980686][T16872] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3674'.
[  309.058680][T16892] netlink: 'syz.1.3682': attribute type 1 has an invalid length.
[  309.067559][T16895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3683'.
[  309.090350][T16892] 8021q: adding VLAN 0 to HW filter on device bond11
[  309.104527][T16892] bond11: (slave bridge20): making interface the new active one
[  309.108565][T16892] bond11: (slave bridge20): Enslaving as an active interface with an up link
[  309.114410][T16895] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  309.191519][T16904] bond11: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  309.271096][T16907] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3686'.
[  309.452338][T16923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3691'.
[  309.456937][T16923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3691'.
[  309.460652][T16923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3691'.
[  309.978518][T16947] _Z`Ԁ@: entered promiscuous mode
[  310.176684][T16968] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  310.219945][T16978] macvlan0: left promiscuous mode
[  310.226313][T16978] netlink: 'syz.1.3713': attribute type 1 has an invalid length.
[  310.230701][T16978] netlink: 'syz.1.3713': attribute type 2 has an invalid length.
[  310.371576][T16997] netlink: 'syz.0.3717': attribute type 3 has an invalid length.
[  310.459188][T17000] netlink: 'syz.2.3718': attribute type 6 has an invalid length.
[  310.462485][T17000] netlink: 'syz.2.3718': attribute type 6 has an invalid length.
[  311.226948][T17009] sctp: [Deprecated]: syz.0.3721 (pid 17009) Use of int in maxseg socket option.
[  311.226948][T17009] Use struct sctp_assoc_value instead
[  311.375531][T17032] netlink: 'syz.0.3729': attribute type 4 has an invalid length.
[  311.440119][T17040] __nla_validate_parse: 5 callbacks suppressed
[  311.440129][T17040] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3732'.
[  311.474818][T17044] bridge22: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  311.517319][T17044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3734'.
[  311.521801][T17044] netlink: 428 bytes leftover after parsing attributes in process `syz.2.3734'.
[  311.525664][T17044] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3734'.
[  311.710694][T17060] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  312.110828][T17079] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  312.145067][T17084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3746'.
[  312.287590][T17089] netlink: 'syz.2.3748': attribute type 1 has an invalid length.
[  312.291091][T17089] netlink: 208 bytes leftover after parsing attributes in process `syz.2.3748'.
[  312.522169][T17098] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3751'.
[  312.582945][T17100] syzkaller1: entered promiscuous mode
[  312.585347][T17100] syzkaller1: entered allmulticast mode
[  312.590502][T17100] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3752'.
[  312.621516][T17100] bond14: (slave geneve3): Enslaving as an active interface with an up link
[  312.625748][   T13] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  312.629640][   T13] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  312.634462][   T13] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  312.644072][   T13] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  312.875761][T17125] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3762'.
[  312.927143][T17132] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:20002
[  313.175667][T17168] vcan0: tx drop: invalid da for name 0x00000000000000c7
[  313.245572][T17175] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  313.254614][T17175] vxcan0: entered promiscuous mode
[  313.332403][T17187] netlink: 'syz.2.3784': attribute type 9 has an invalid length.
[  313.335547][T17187] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3784'.
[  313.406985][T17198] sctp: [Deprecated]: syz.2.3788 (pid 17198) Use of struct sctp_assoc_value in delayed_ack socket option.
[  313.406985][T17198] Use struct sctp_sack_info instead
[  313.434477][T17193] netlink: 'syz.1.3785': attribute type 2 has an invalid length.
[  313.515773][T17207] netlink: 'syz.2.3788': attribute type 2 has an invalid length.
[  313.651004][T17212] netlink: 'syz.1.3792': attribute type 7 has an invalid length.
[  313.654757][T17212] netlink: 'syz.1.3792': attribute type 8 has an invalid length.
[  313.849976][T17218] netlink: 'syz.1.3794': attribute type 2 has an invalid length.
[  313.852843][T17218] netlink: 'syz.1.3794': attribute type 1 has an invalid length.
[  314.282639][T17235] netem: invalid attributes len -16
[  314.287485][T17235] netem: change failed
[  314.881024][T17253] netlink: 'syz.1.3803': attribute type 2 has an invalid length.
[  315.001720][T17257] lo speed is unknown, defaulting to 1000
[  315.204223][T17262] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  315.753043][T17300] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  315.832523][T17303] openvswitch: netlink: IP tunnel TTL not specified.
[  316.078160][T17330] nbd: must specify a device to reconfigure
[  316.266602][T17346] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  316.269950][T17346] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.273907][T17346] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  316.317636][T17346] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  316.321181][T17346] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.325481][T17346] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  316.388141][T17346] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  316.391381][T17346] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.400207][T17346] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  316.436517][T17346] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  316.440510][T17346] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.444251][T17346] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  316.474225][   T12] erspan0: left promiscuous mode
[  316.515479][ T5737] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  316.518303][ T5737] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  316.521102][ T5737] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  316.543719][ T5737] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  316.547549][ T5737] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  316.550438][ T5737] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  316.561824][ T5737] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  316.567438][ T5737] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  316.571080][ T5737] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  316.587702][ T5737] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  316.594329][ T5737] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  316.597958][ T5737] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  316.708884][ T1360] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  316.728204][T17403] netlink: 'syz.2.3851': attribute type 3 has an invalid length.
[  316.730855][T17403] __nla_validate_parse: 79 callbacks suppressed
[  316.730863][T17403] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3851'.
[  317.955557][T17481] sit0: entered promiscuous mode
[  317.959610][T17481] netlink: 'syz.2.3876': attribute type 1 has an invalid length.
[  317.962704][T17481] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3876'.
[  318.022744][T17487] netlink: 'syz.2.3881': attribute type 1 has an invalid length.
[  318.128333][T17499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3886'.
[  318.130074][T17497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3885'.
[  318.131771][T17499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3886'.
[  318.202506][T17507] netlink: 'syz.1.3889': attribute type 1 has an invalid length.
[  318.202769][T17509] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  318.207746][T17507] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3889'.
[  318.211840][T17507] netlink: 97 bytes leftover after parsing attributes in process `syz.1.3889'.
[  318.318461][T17521] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  318.479873][T17532] netlink: 'syz.2.3901': attribute type 2 has an invalid length.
[  318.498009][T17537] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  318.566844][T17549] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  318.578729][T17552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3907'.
[  318.582781][T17552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3907'.
[  318.780852][T17573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3916'.
[  318.856790][T17581] netlink: 'syz.1.3920': attribute type 9 has an invalid length.
[  319.118977][T17590] lo speed is unknown, defaulting to 1000
[  319.517031][T17610] only policy match revision 0 supported
[  319.517046][T17610] unable to load match
[  319.975785][T17639] syzkaller1: entered promiscuous mode
[  319.978319][T17639] syzkaller1: entered allmulticast mode
[  320.087521][T17659] netlink: 'syz.1.3944': attribute type 1 has an invalid length.
[  320.101993][T17659] 8021q: adding VLAN 0 to HW filter on device bond12
[  320.116084][T17659] bond12: (slave ip6erspan0): making interface the new active one
[  320.120925][T17659] bond12: (slave ip6erspan0): Enslaving as an active interface with an up link
[  320.308349][T17692] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  320.310889][T17692] IPv6: NLM_F_CREATE should be set when creating new route
[  320.313416][T17692] IPv6: NLM_F_CREATE should be set when creating new route
[  320.318018][T17692] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  320.330667][T17692] bond0: option use_carrier: invalid value (6)
[  320.399036][T17704] sock: sock_timestamping_bind_phc: sock not bind to device
[  320.548106][T17716] only policy match revision 0 supported
[  320.548118][T17716] unable to load match
[  320.726324][T17732] bond0: down delay (5) is not a multiple of miimon (100), value rounded to 0 ms
[  320.730561][T17732] bond0: option all_slaves_active: invalid value (7)
[  320.795544][T17736] tap0: tun_chr_ioctl cmd 1074025675
[  320.797978][T17736] tap0: persist disabled
[  321.847738][T17814] __nla_validate_parse: 12 callbacks suppressed
[  321.847752][T17814] netlink: 19 bytes leftover after parsing attributes in process `syz.1.3991'.
[  321.961655][T17825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3994'.
[  322.026760][T17827] lo speed is unknown, defaulting to 1000
[  322.316761][T17850] syzkaller1: entered promiscuous mode
[  322.318721][T17850] syzkaller1: entered allmulticast mode
[  322.356527][T17853] lo speed is unknown, defaulting to 1000
[  322.374917][T17854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4002'.
[  322.639465][T17864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4005'.
[  322.643752][T17857] lo speed is unknown, defaulting to 1000
[  322.681913][T17864] pim6reg: entered allmulticast mode
[  322.693775][T17864] pim6reg: left allmulticast mode
[  322.833833][T17860] lo speed is unknown, defaulting to 1000
[  323.300559][T17883] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4011'.
[  323.422264][T17898] 8021q: VLANs not supported on ipvlan1
[  323.462827][T17900] netlink: 71 bytes leftover after parsing attributes in process `syz.0.4016'.
[  323.552460][T17904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4018'.
[  323.552660][T17906] netlink: 788 bytes leftover after parsing attributes in process `syz.0.4019'.
[  323.720311][T17910] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4020'.
[  324.357140][T17935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4029'.
[  324.776243][T17981] netlink: 'syz.2.4043': attribute type 12 has an invalid length.
[  324.852913][T17986] netlink: 'syz.1.4044': attribute type 2 has an invalid length.
[  324.925491][T17994] lo speed is unknown, defaulting to 1000
[  326.050818][T18070] netlink: 'syz.0.4072': attribute type 4 has an invalid length.
[  326.070494][ T5883] lo speed is unknown, defaulting to 1000
[  326.072547][ T5883] syz0: Port: 1 Link DOWN
[  326.078509][ T5883] lo speed is unknown, defaulting to 1000
[  326.477560][T18119] openvswitch: netlink: Message has 5 unknown bytes.
[  326.607742][   T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  326.611829][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  326.615238][   T12] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  326.618532][   T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  326.621861][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  326.625565][   T12] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  326.629173][   T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  326.631981][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  326.635296][   T12] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  326.638280][   T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  326.641237][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  326.645924][   T12] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  327.310576][T18134] lo: entered allmulticast mode
[  327.310626][T18132] netlink: 'syz.2.4093': attribute type 4 has an invalid length.
[  327.319211][T18134] lo: left allmulticast mode
[  327.525512][T18156] __nla_validate_parse: 13 callbacks suppressed
[  327.525523][T18156] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4103'.
[  327.531615][T18156] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4103'.
[  328.283007][T18184] netlink: 410 bytes leftover after parsing attributes in process `syz.0.4112'.
[  328.457318][T18198] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4118'.
[  328.559892][T18206] netlink: 'syz.0.4122': attribute type 10 has an invalid length.
[  328.564361][T18206] 8021q: adding VLAN 0 to HW filter on device batadv0
[  328.568886][T18206] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  328.628831][T18211] netlink: 'syz.0.4122': attribute type 10 has an invalid length.
[  328.631921][T18211] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4122'.
[  328.640503][T18211] batadv0: entered promiscuous mode
[  328.644512][T18211] bond0: (slave batadv0): Releasing backup interface
[  328.659155][T18211] bridge0: port 3(batadv0) entered blocking state
[  328.665181][T18211] bridge0: port 3(batadv0) entered disabled state
[  328.671140][T18211] netlink: 'syz.0.4122': attribute type 1 has an invalid length.
[  328.675355][T18211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4122'.
[  328.679412][T18211] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4122'.
[  328.685440][T18213] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4125'.
[  328.704851][T18211] netlink: 45 bytes leftover after parsing attributes in process `syz.0.4122'.
[  328.768581][T18218] netlink: 'syz.1.4127': attribute type 13 has an invalid length.
[  328.771395][T18218] netlink: 'syz.1.4127': attribute type 17 has an invalid length.
[  328.785575][T18218] gretap0: refused to change device tx_queue_len
[  328.788219][T18218] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  328.872377][T18224] netlink: 'syz.1.4130': attribute type 1 has an invalid length.
[  328.876788][T18224] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4130'.
[  328.904385][   T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  328.908595][   T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  328.946022][T18228] dvmrp1: tun_chr_ioctl cmd 1074812118
[  328.957025][T18228] : entered promiscuous mode
[  329.204356][T18240] gretap0: refused to change device tx_queue_len
[  329.207779][T18240] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  329.324342][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  329.403872][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  330.300603][T18254] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  330.303718][T18254] syzkaller0: entered promiscuous mode
[  330.305564][T18254] syzkaller0: entered allmulticast mode
[  330.329340][T18253] tipc: Resetting bearer <eth:syzkaller0>
[  330.341458][T18253] tipc: Disabling bearer <eth:syzkaller0>
[  330.543785][T18271] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  332.063830][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  332.121747][T18288] netlink: ct family unspecified
[  332.132235][T18288] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  332.312566][T18314] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  332.315613][T18314] syzkaller0: entered promiscuous mode
[  332.317416][T18314] syzkaller0: entered allmulticast mode
[  332.355208][T18314] tipc: Resetting bearer <eth:syzkaller0>
[  332.383730][T18314] tipc: Resetting bearer <eth:syzkaller0>
[  332.397309][T18314] tipc: Disabling bearer <eth:syzkaller0>
[  332.402359][T18321] bond0: invalid ARP target 0.0.0.0 specified for addition
[  332.405602][T18321] bond0: option arp_ip_target: invalid value (0)
[  332.718360][T18352] __nla_validate_parse: 5 callbacks suppressed
[  332.718369][T18352] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4181'.
[  332.799341][T18354] validate_nla: 4 callbacks suppressed
[  332.799350][T18354] netlink: 'syz.0.4182': attribute type 1 has an invalid length.
[  332.806721][T18354] netlink: 208 bytes leftover after parsing attributes in process `syz.0.4182'.
[  332.895338][T18367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4186'.
[  332.898572][T18366] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4186'.
[  332.908376][T18360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4184'.
[  332.911848][T18359] delete_channel: no stack
[  333.182640][T18378] netlink: 452 bytes leftover after parsing attributes in process `syz.0.4191'.
[  333.293109][T18382] netlink: 'syz.0.4193': attribute type 6 has an invalid length.
[  333.495985][T18396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4198'.
[  333.496391][T18385] lo speed is unknown, defaulting to 1000
[  333.701629][T18410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4202'.
[  333.807340][T18417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4205'.
[  333.935318][T18422] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4207'.
[  334.065984][T18437] nftables ruleset with unbound set
[  334.099396][T18438] IPVS: Scheduler module ip_vs_, not found
[  334.600230][T18499] delete_channel: no stack
[  337.748197][T18528] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  337.751210][T18526] syzkaller1: entered promiscuous mode
[  337.756106][T18526] syzkaller1: entered allmulticast mode
[  337.762568][T18528] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig
[  337.767872][T18528] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  337.778259][T18528] netlink: 'syz.2.4242': attribute type 10 has an invalid length.
[  337.796851][T18528] netlink: 'syz.2.4242': attribute type 10 has an invalid length.
[  337.802411][T18528] __nla_validate_parse: 10 callbacks suppressed
[  337.802420][T18528] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4242'.
[  337.897629][T18539] netlink: 'syz.2.4246': attribute type 23 has an invalid length.
[  338.041756][T18553] netlink: 'syz.1.4250': attribute type 1 has an invalid length.
[  338.047456][T18553] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4250'.
[  338.051197][T18553] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4250'.
[  338.067233][T18553] netlink: 'syz.1.4250': attribute type 1 has an invalid length.
[  338.070360][T18553] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4250'.
[  338.256160][T18569] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4256'.
[  338.260093][T18569] openvswitch: netlink: Flow key attr not present in new flow.
[  338.329869][T18571] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4257'.
[  338.336212][T18571] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4257'.
[  338.810901][T18581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4261'.
[  338.859367][T18585] netlink: 'syz.0.4260': attribute type 1 has an invalid length.
[  338.862523][T18585] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4260'.
[  338.868398][T18585] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4260'.
[  339.243895][T18617] netlink: 'syz.1.4275': attribute type 14 has an invalid length.
[  339.247202][T18617] netlink: 'syz.1.4275': attribute type 13 has an invalid length.
[  339.447397][T18641] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  339.496201][T18648] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  339.945445][T18681] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  339.948705][T18681] IPv6: NLM_F_CREATE should be set when creating new route
[  339.952725][T18681] netlink: 'syz.0.4296': attribute type 1 has an invalid length.
[  340.091060][T18695] unknown channel width for channel at 909000KHz?
[  340.482833][T18742] netlink: 'syz.2.4318': attribute type 7 has an invalid length.
[  340.979060][T18774] lo: MTU too low for tipc bearer
[  340.986113][T18774] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  341.573871][T18793] block nbd2: server does not support multiple connections per device.
[  341.579466][T18793] block nbd2: shutting down sockets
[  341.651858][T18797] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  342.178942][T18812] netlink: 'syz.1.4340': attribute type 2 has an invalid length.
[  342.190019][T18812] sch_tbf: burst 0 is lower than device vlan0 mtu (1514) !
[  342.338495][T18827] netlink: 'syz.1.4342': attribute type 4 has an invalid length.
[  342.802120][T18852] bond11: entered promiscuous mode
[  342.806181][T18852] 8021q: adding VLAN 0 to HW filter on device bond11
[  342.819564][T18852] 8021q: adding VLAN 0 to HW filter on device bond11
[  342.822435][T18852] bond11: (slave vxcan1): The slave device specified does not support setting the MAC address
[  342.826556][T18852] bond11: (slave vxcan1): Setting fail_over_mac to active for active-backup mode
[  342.831540][T18852] bond11: (slave vxcan1): making interface the new active one
[  342.834482][T18852] vxcan1: entered promiscuous mode
[  342.836742][T18852] bond11: (slave vxcan1): Enslaving as an active interface with an up link
[  342.957240][T18861] veth0_to_bridge: entered allmulticast mode
[  343.145456][T18868] syzkaller0: create flow: hash 44118268 index 1
[  343.198546][T18868] syzkaller0: delete flow: hash 44118268 index 1
[  344.111178][T18888] __nla_validate_parse: 26 callbacks suppressed
[  344.111189][T18888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4367'.
[  344.563864][T18898] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4370'.
[  344.568705][T18902] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4370'.
[  344.624365][T18907] validate_nla: 3 callbacks suppressed
[  344.624380][T18907] netlink: 'syz.2.4374': attribute type 21 has an invalid length.
[  344.632438][T18907] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4374'.
[  344.638278][T18908] netlink: 'syz.1.4373': attribute type 3 has an invalid length.
[  344.696626][T18909] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4374'.
[  344.702850][T18909] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4374'.
[  344.815955][T18916] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  344.818634][T18916] IPv6: NLM_F_CREATE should be set when creating new route
[  344.821257][T18916] IPv6: NLM_F_CREATE should be set when creating new route
[  344.999204][T18925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4380'.
[  345.006519][T18925] netlink: 'syz.1.4380': attribute type 10 has an invalid length.
[  345.009980][T18925] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4380'.
[  345.020601][T18925] dummy0: entered promiscuous mode
[  345.022711][T18925] dummy0: entered allmulticast mode
[  345.025834][T18925] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  345.286333][T18933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4383'.
[  345.295906][T18933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4383'.
[  345.383036][T18937] netlink: 'syz.1.4385': attribute type 1 has an invalid length.
[  345.762172][T18964] netlink: 'syz.0.4396': attribute type 18 has an invalid length.
[  345.807126][T18969] netlink: 'syz.2.4397': attribute type 23 has an invalid length.
[  346.016472][T18983] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  346.281577][T19005] netlink: 'syz.0.4408': attribute type 21 has an invalid length.
[  346.599615][T19031] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  346.899126][T19071] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  347.096557][T19096] netlink: 'syz.1.4440': attribute type 1 has an invalid length.
[  347.099285][T19096] netlink: 'syz.1.4440': attribute type 2 has an invalid length.
[  347.205139][   T33] audit: type=1107 audit(1755532340.847:9): pid=19106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  347.318574][T19121] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  347.485704][T19135] netem: incorrect gi model size
[  347.586058][T19147] netlink: 'syz.1.4458': attribute type 7 has an invalid length.
[  347.671456][T19150] lo speed is unknown, defaulting to 1000
[  348.145454][T19203] IPv6: sit3: Disabled Multicast RS
[  348.175327][T19208] erspan0: left allmulticast mode
[  348.179668][T19208] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  348.206354][ T5737] bond10: (slave erspan0): link status definitely down, disabling slave
[  348.214249][ T5737] bond10: now running without any active interface!
[  348.294354][T19214] bridge0: port 4(macsec0) entered blocking state
[  348.296863][T19214] bridge0: port 4(macsec0) entered disabled state
[  348.299375][T19214] macsec0: entered allmulticast mode
[  348.302560][T19214] macsec0: left allmulticast mode
[  348.659702][T19236] 8021q: VLANs not supported on caif0
[  349.030679][T19265] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  349.139714][T19280] __nla_validate_parse: 15 callbacks suppressed
[  349.139723][T19280] netlink: 410 bytes leftover after parsing attributes in process `syz.0.4508'.
[  349.155805][T19279] netlink: 410 bytes leftover after parsing attributes in process `syz.0.4508'.
[  349.170740][T19286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4510'.
[  349.437875][ T3636] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  349.441044][ T3636] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  349.579164][T19306] netlink: 308 bytes leftover after parsing attributes in process `syz.0.4516'.
[  349.582189][T19306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4516'.
[  349.671550][T19316] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4521'.
[  349.705052][T19321] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  349.707994][T19321] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  349.715265][T19321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4523'.
[  349.723365][T19321] macvlan0: left promiscuous mode
[  349.725328][T19321] validate_nla: 5 callbacks suppressed
[  349.725335][T19321] netlink: 'syz.2.4523': attribute type 2 has an invalid length.
[  349.761053][T19332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4526'.
[  349.765670][T19332] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4526'.
[  349.777369][T19332] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4526'.
[  349.812066][T19337] netlink: 'syz.2.4530': attribute type 18 has an invalid length.
[  349.851567][T19345] ip6tnl3: entered promiscuous mode
[  349.858398][T19345] ip6tnl3: entered allmulticast mode
[  349.876163][T19347] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  349.907644][T19348] netlink: 'syz.0.4528': attribute type 1 has an invalid length.
[  349.910436][T19348] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  350.653670][T19339] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  350.756594][T19357] syzkaller1: entered promiscuous mode
[  350.758985][T19357] syzkaller1: entered allmulticast mode
[  350.824523][T19363] bond0: option min_links: invalid value (18446744072019614533)
[  350.827545][T19363] bond0: option min_links: allowed values 0 - 2147483647
[  351.107822][T19381] sctp: [Deprecated]: syz.0.4543 (pid 19381) Use of struct sctp_assoc_value in delayed_ack socket option.
[  351.107822][T19381] Use struct sctp_sack_info instead
[  351.222085][T19394] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  351.225602][T19394] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  351.228364][T19394] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  351.682762][T19414] lo speed is unknown, defaulting to 1000
[  351.739467][T19416] ip6gretap0: entered promiscuous mode
[  351.743142][T19416] ip6gretap0: entered allmulticast mode
[  351.810347][T19419] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  352.538384][T19460] lo speed is unknown, defaulting to 1000
[  352.706831][T19480] !: renamed from dummy0 (while UP)
[  352.796211][T19485] lo speed is unknown, defaulting to 1000
[  354.142998][T19566] netlink: 'syz.1.4598': attribute type 1 has an invalid length.
[  354.166160][T19566] bond14: entered promiscuous mode
[  354.169835][T19566] 8021q: adding VLAN 0 to HW filter on device bond14
[  354.173014][T19568] __nla_validate_parse: 19 callbacks suppressed
[  354.173023][T19568] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4597'.
[  354.181173][T19566] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4598'.
[  354.186418][T19566] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4598'.
[  354.290726][T19572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4600'.
[  354.306409][T19577] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4601'.
[  354.313144][T19577] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4601'.
[  354.328169][T19580] netlink: 212924 bytes leftover after parsing attributes in process `syz.1.4602'.
[  354.352196][T19582] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  354.607101][T19602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4608'.
[  354.654627][T19605] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4610'.
[  354.974343][T19644] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  354.980289][T19644] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  355.022711][T19649] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4624'.
[  355.469510][T19712] netlink: 'syz.1.4642': attribute type 17 has an invalid length.
[  355.479107][T19712] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  355.829321][T19752] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  355.908421][T19750] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  356.234112][T19777] netlink: 'syz.1.4660': attribute type 10 has an invalid length.
[  356.704365][T19786] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  356.882433][T19804] netlink: 'syz.2.4667': attribute type 13 has an invalid length.
[  356.887186][T19804] netlink: 'syz.2.4667': attribute type 17 has an invalid length.
[  356.892272][T19804] gretap0: left promiscuous mode
[  356.897596][T19804] sit0: left promiscuous mode
[  356.911258][T19804] 8021q: adding VLAN 0 to HW filter on device team0
[  356.915068][T19804] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  356.952236][T19799] lo speed is unknown, defaulting to 1000
[  357.005302][T19804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  357.061118][T19817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  357.125228][T19804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  357.392468][T19856] netlink: 'syz.1.4677': attribute type 20 has an invalid length.
[  357.396418][T19856] netlink: 'syz.1.4677': attribute type 21 has an invalid length.
[  357.699188][T19895] netlink: 'syz.2.4685': attribute type 10 has an invalid length.
[  357.787697][T19908] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  358.172174][T19953] netlink: 'syz.2.4702': attribute type 1 has an invalid length.
[  358.197613][T19953] netlink: 'syz.2.4702': attribute type 1 has an invalid length.
[  359.266434][   T33] audit: type=1800 audit(1755532352.907:10): pid=19995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4714" name="cgroup.controllers" dev="tmpfs" ino=7964 res=0 errno=0
[  359.386465][T20016] __nla_validate_parse: 20 callbacks suppressed
[  359.386474][T20016] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4722'.
[  359.459021][T20025] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4726'.
[  359.479060][T20030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4728'.
[  359.482587][T20030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4728'.
[  359.517344][T20037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4730'.
[  359.536346][T20041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4732'.
[  359.649525][T20047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4735'.
[  359.653131][T20047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4735'.
[  359.659908][T20049] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  359.663037][T20049] IPv6: NLM_F_CREATE should be set when creating new route
[  359.766861][T20062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4738'.
[  359.858707][T20072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4741'.
[  360.063916][T20097] netlink: 'syz.2.4746': attribute type 9 has an invalid length.
[  360.954107][T20118] veth0_vlan: left promiscuous mode
[  360.956965][T20118] veth0_vlan: entered promiscuous mode
[  361.346401][T20170] sctp: [Deprecated]: syz.0.4771 (pid 20170) Use of struct sctp_assoc_value in delayed_ack socket option.
[  361.346401][T20170] Use struct sctp_sack_info instead
[  361.726784][T20191] openvswitch: netlink: Message has 5 unknown bytes.
[  361.971760][T20199] syz.1.4783 uses old SIOCAX25GETINFO
[  362.254310][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  363.020907][T20240] validate_nla: 1 callbacks suppressed
[  363.020916][T20240] netlink: 'syz.2.4793': attribute type 10 has an invalid length.
[  363.029007][T20240] macvlan0: entered promiscuous mode
[  363.059310][T20242] tun0: tun_chr_ioctl cmd 2147767520
[  363.173969][T20251] openvswitch: netlink: Geneve opt len 11 is not a multiple of 4.
[  363.527080][T20277] netlink: 'syz.0.4805': attribute type 1 has an invalid length.
[  363.648413][T20288] netlink: 'syz.2.4810': attribute type 7 has an invalid length.
[  363.652002][T20288] netlink: 'syz.2.4810': attribute type 8 has an invalid length.
[  363.745210][T20292] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  363.749733][T20292] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  363.783970][T20296] IPVS: length: 209 != 24
[  364.299530][T20317] syzkaller1: entered promiscuous mode
[  364.307399][T20317] syzkaller1: entered allmulticast mode
[  364.452877][T20326] __nla_validate_parse: 28 callbacks suppressed
[  364.452892][T20326] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4825'.
[  364.670890][T20324] bond0: (slave gretap0): Error: Device type is different from other slaves
[  364.817072][T20352] sctp: [Deprecated]: syz.0.4834 (pid 20352) Use of int in max_burst socket option.
[  364.817072][T20352] Use struct sctp_assoc_value instead
[  364.856732][T20356] netlink: 'syz.2.4836': attribute type 1 has an invalid length.
[  364.862311][T20356] netlink: 'syz.2.4836': attribute type 2 has an invalid length.
[  365.017165][T20365] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4838'.
[  365.024682][T20365] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4838'.
[  365.079401][T20375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4841'.
[  365.088638][T20375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4841'.
[  365.121060][T20379] netlink: 'syz.1.4843': attribute type 1 has an invalid length.
[  365.162688][T20384] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  365.169167][T20385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4845'.
[  365.172576][T20385] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4845'.
[  365.311899][T20402] openvswitch: netlink: Geneve opt len 11 is not a multiple of 4.
[  365.335651][T20404] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  365.552706][T20416] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  365.727910][T20430] netlink: 'syz.1.4860': attribute type 21 has an invalid length.
[  365.730722][T20430] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4860'.
[  365.819744][T20435] netlink: 'syz.1.4862': attribute type 1 has an invalid length.
[  365.822503][T20435] netlink: 208 bytes leftover after parsing attributes in process `syz.1.4862'.
[  365.934361][T20440] bond0 (unregistering): Released all slaves
[  366.045228][T20452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4868'.
[  366.048793][T20452] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  366.100198][T20462] netlink: 'syz.0.4872': attribute type 1 has an invalid length.
[  366.425163][T20492] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  366.428296][T20492] IPv6: NLM_F_CREATE should be set when creating new route
[  366.431401][T20492] IPv6: NLM_F_CREATE should be set when creating new route
[  366.506929][T20501] sctp: [Deprecated]: syz.2.4885 (pid 20501) Use of struct sctp_assoc_value in delayed_ack socket option.
[  366.506929][T20501] Use struct sctp_sack_info instead
[  366.704779][T20518] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  366.727869][T20520] syzkaller1: entered promiscuous mode
[  366.732705][T20520] syzkaller1: entered allmulticast mode
[  366.738884][T20520] IPVS: Error connecting to the multicast addr
[  367.294416][T20562] lo speed is unknown, defaulting to 1000
[  367.337247][T20565] tipc: Failed to remove unknown binding: 66,1,1/92966640:4124686337/4124686339
[  367.341478][T20565] tipc: Failed to remove unknown binding: 66,1,1/92966640:4124686337/4124686339
[  367.346798][T20565] tipc: Failed to remove unknown binding: 66,1,1/92966640:4124686337/4124686339
[  367.525967][T20576] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  367.529846][T20576] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  367.537542][T20576] hsr0: entered allmulticast mode
[  367.539488][T20576] hsr_slave_0: entered allmulticast mode
[  367.541522][T20576] hsr_slave_1: entered allmulticast mode
[  369.131310][T20666] Bluetooth: MGMT ver 1.23
[  369.367748][T20679] can: request_module (can-proto-0) failed.
[  369.375975][T20679] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  369.379437][T20679] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  369.384048][T20685] tun0: tun_chr_ioctl cmd 2147767520
[  369.386013][T20684] tun0: tun_chr_ioctl cmd 1074025673
[  369.388064][T20685] tun0: tun_chr_ioctl cmd 2147767520
[  369.389930][T20685] tun0: tun_chr_ioctl cmd 2147767520
[  369.391987][T20685] tun0: tun_chr_ioctl cmd 2147767520
[  369.394393][T20684] tun0: tun_chr_ioctl cmd 1074025673
[  369.399191][T20684] tun0: tun_chr_ioctl cmd 1074025673
[  369.401179][T20684] tun0: tun_chr_ioctl cmd 1074025673
[  369.403140][T20684] tun0: tun_chr_ioctl cmd 1074025673
[  369.411259][T20684] tun0: tun_chr_ioctl cmd 1074025673
[  369.413700][T20684] tun0: tun_chr_ioctl cmd 1074025673
[  369.415789][T20685] tun0: tun_chr_ioctl cmd 2147767520
[  369.417637][T20684] tun0: tun_chr_ioctl cmd 1074025673
[  369.419733][T20684] tun0: tun_chr_ioctl cmd 1074025673
[  369.422401][T20685] tun0: tun_chr_ioctl cmd 2147767520
[  369.425374][T20684] tun0: tun_chr_ioctl cmd 1074025673
[  369.428087][T20684] tun0: tun_chr_ioctl cmd 1074025673
[  369.430037][T20685] tun0: tun_chr_ioctl cmd 2147767520
[  369.458854][T20691] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  369.631586][T20703] delete_channel: no stack
[  369.730073][T20719] validate_nla: 2 callbacks suppressed
[  369.730087][T20719] netlink: 'syz.1.4954': attribute type 1 has an invalid length.
[  369.762007][T20719] 8021q: adding VLAN 0 to HW filter on device bond0
[  369.812088][T20719] 8021q: adding VLAN 0 to HW filter on device bond0
[  369.814835][T20719] bond0: (slave vxcan5): The slave device specified does not support setting the MAC address
[  369.819325][T20719] bond0: (slave vxcan5): Error -95 calling set_mac_address
[  369.867808][T20726] __nla_validate_parse: 17 callbacks suppressed
[  369.867818][T20726] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4954'.
[  369.871724][T20728] sctp: [Deprecated]: syz.0.4957 (pid 20728) Use of struct sctp_assoc_value in delayed_ack socket option.
[  369.871724][T20728] Use struct sctp_sack_info instead
[  369.977151][T20742] IPVS: length: 239 != 24
[  370.043101][T20751] openvswitch: netlink: Key type 294 is out of range max 32
[  370.166264][T20755] tap0: tun_chr_ioctl cmd 1074025680
[  370.169149][T20755] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  370.173070][T20755] D: renamed from syzkaller0
[  370.178212][T20755] tipc: Disabling bearer <eth:syzkaller0>
[  370.285833][T20765] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4968'.
[  370.322351][T20769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4970'.
[  370.423720][T20778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4974'.
[  370.527724][T20788] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4976'.
[  370.558164][T20791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4977'.
[  370.561669][T20791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4977'.
[  370.689249][T20797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4979'.
[  370.746484][T20804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4981'.
[  370.756258][T20804] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4981'.
[  371.207114][T20844] IPVS: set_ctl: invalid protocol: 115 172.30.1.3:20003
[  371.653023][T20880] syzkaller0: entered promiscuous mode
[  371.655914][T20880] syzkaller0: entered allmulticast mode
[  371.686661][T20879] bond0: mtu less than device minimum
[  372.019479][T20901] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001
[  372.039561][T20843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  372.512252][T20949] syzkaller1: entered promiscuous mode
[  372.514479][T20949] syzkaller1: entered allmulticast mode
[  372.599991][T20955] can: request_module (can-proto-3) failed.
[  373.535172][T21045] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  373.552462][T21044] tipc: Disabling bearer <eth:syzkaller0>
[  373.650757][T21053] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20131
[  373.801561][T21077] lo speed is unknown, defaulting to 1000
[  373.886723][T21072] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  373.979053][T21077] netlink: 'syz.2.5071': attribute type 13 has an invalid length.
[  373.986391][T21077] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  374.326445][T21104] netlink: 'syz.1.5079': attribute type 1 has an invalid length.
[  374.362630][T21104] 8021q: adding VLAN 0 to HW filter on device bond15
[  374.392517][T21104] vlan2: entered promiscuous mode
[  374.394739][T21104] bond15: entered promiscuous mode
[  374.396731][T21104] vlan2: entered allmulticast mode
[  374.398709][T21104] bond15: entered allmulticast mode
[  374.772809][T21133] netlink: 'syz.0.5086': attribute type 2 has an invalid length.
[  374.870439][T21141] Unsupported ieee802154 address type: 0
[  375.567349][T21180] openvswitch: netlink: Key type 110 is out of range max 32
[  375.697138][T21190] __nla_validate_parse: 23 callbacks suppressed
[  375.697153][T21190] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5108'.
[  375.850136][T21198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5111'.
[  375.855026][T21198] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5111'.
[  375.897716][T21202] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5112'.
[  375.926394][T21206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5115'.
[  375.929438][T21206] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5115'.
[  375.939647][T21208] unsupported nla_type 52263
[  376.211373][T21236] netlink: 'syz.2.5126': attribute type 10 has an invalid length.
[  376.283077][T21243] delete_channel: no stack
[  376.474684][T21258] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5134'.
[  376.490443][T21258] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5134'.
[  376.525798][T21256] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5133'.
[  376.724818][T21276] syzkaller1: entered allmulticast mode
[  376.817735][T21280] gre0: entered allmulticast mode
[  376.875195][T21280] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5142'.
[  376.881415][T21279] gre0: left allmulticast mode
[  376.927158][T21289] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  376.930114][T21285] netem: change failed
[  376.935215][T21289] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  376.943677][T21289] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  376.956383][T21289] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  376.959866][T21289] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  376.968691][T21289] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  376.972572][T21289] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  376.989746][T21289] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  376.997072][T21289] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  377.056913][T21302] netlink: 'syz.1.5150': attribute type 1 has an invalid length.
[  377.080758][T21302] 8021q: adding VLAN 0 to HW filter on device bond16
[  377.115801][T21302] bond16: (slave bridge29): making interface the new active one
[  377.119674][T21302] bond16: (slave bridge29): Enslaving as an active interface with an up link
[  377.130837][T21302] bond16: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  377.266711][T21316] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  377.365112][T21327] netlink: 'syz.2.5159': attribute type 1 has an invalid length.
[  377.380288][T21327] 8021q: adding VLAN 0 to HW filter on device bond15
[  377.411093][T21327] bond15: (slave bridge34): making interface the new active one
[  377.417353][T21327] bond15: (slave bridge34): Enslaving as an active interface with an up link
[  377.440049][T21327] bond15: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  377.917724][T21371] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  378.004708][T21383] netlink: 'syz.0.5175': attribute type 1 has an invalid length.
[  378.025986][T21383] 8021q: adding VLAN 0 to HW filter on device bond13
[  378.051847][T21383] bond13: (slave bridge32): making interface the new active one
[  378.056149][T21383] bond13: (slave bridge32): Enslaving as an active interface with an up link
[  378.097168][T21383] bond13: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  378.332508][T21411] netlink: 'syz.1.5189': attribute type 1 has an invalid length.
[  378.353421][T21411] 8021q: adding VLAN 0 to HW filter on device bond17
[  378.369687][T21411] bond17: (slave bridge30): making interface the new active one
[  378.372954][T21411] bond17: (slave bridge30): Enslaving as an active interface with an up link
[  378.391741][T21411] bond17: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  378.410123][T21415] netlink: 'syz.0.5190': attribute type 10 has an invalid length.
Connection to localhost closed by remote host.
[  378.671245][ T5872] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  378.685494][ T5872] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  378.688848][ T5872] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  378.760773][ T5849] bond0: (slave syz_tun): Releasing backup interface
[  378.765153][ T5849] syz_tun (unregistering): left allmulticast mode
[  378.794810][ T5872] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  378.798115][ T5872] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  378.801447][ T5872] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  378.877935][ T5872] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  378.881344][ T5872] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  378.885091][ T5872] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  378.916696][ T5872] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  378.920069][ T5872] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  378.923785][ T5872] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  379.150850][ T5872] bond12 (unregistering): (slave ip6erspan0): Releasing active interface
[  379.308811][ T5872] bond10 (unregistering): (slave gretap3): Releasing active interface
[  380.250865][ T5872] bond11 (unregistering): (slave bridge20): Releasing active interface
[  380.741030][ T5872] bond16 (unregistering): (slave bridge29): Releasing active interface
[  380.810639][ T5872] bond17 (unregistering): (slave bridge30): Releasing active interface
[  380.875895][ T5872] bond1 (unregistering): Released all slaves
[  380.941689][ T5872] bond2 (unregistering): Released all slaves
[  381.010265][ T5872] bond3 (unregistering): Released all slaves
[  381.081960][ T5872] bond4 (unregistering): Released all slaves
[  381.089133][ T5872] bond5 (unregistering): Released all slaves
[  381.159310][ T5872] bond6 (unregistering): Released all slaves
[  381.165924][ T5872] bond7 (unregistering): Released all slaves
[  381.237311][ T5872] bond8 (unregistering): Released all slaves
[  381.244165][ T5872] bond9 (unregistering): Released all slaves
[  381.250570][ T5872] bond10 (unregistering): Released all slaves
[  381.319514][ T5872] bond11 (unregistering): Released all slaves
[  381.382637][ T5872] bond12 (unregistering): Released all slaves
[  381.389443][ T5872] bond13 (unregistering): Released all slaves
[  381.456789][ T5872] bond14 (unregistering): Released all slaves
[  381.532008][ T5872] bond0 (unregistering): Released all slaves
[  381.602626][ T5872] bond15 (unregistering): Released all slaves
[  381.667464][ T5872] bond16 (unregistering): Released all slaves
[  381.732356][ T5872] bond17 (unregistering): Released all slaves
[  381.877194][ T5872] : left promiscuous mode
[  381.928265][ T5872] _Z`Ԁ@: left promiscuous mode
[  381.986500][ T5872] : left promiscuous mode
[  382.028654][ T5872] tipc: Disabling bearer <udp:s>
[  382.036489][ T5872] tipc: Left network mode
[  382.371031][ T5872] hsr_slave_0: left promiscuous mode
[  382.373568][ T5872] hsr_slave_1: left promiscuous mode
[  382.380359][ T5872] veth1_vlan: left promiscuous mode
[  383.242400][ T5872] ------------[ cut here ]------------
[  383.244988][ T5872] WARNING: CPU: 1 PID: 5872 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x7e/0x100
[  383.249344][ T5872] Modules linked in:
[  383.251126][ T5872] CPU: 1 UID: 0 PID: 5872 Comm: kworker/u8:3 Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0 PREEMPT(full) 
[  383.257166][ T5872] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  383.261613][ T5872] Workqueue: netns cleanup_net
[  383.264944][ T5872] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[  383.267034][ T5872] Code: a8 81 df f7 4b 83 3c 2c 00 75 19 e8 4c 18 7c f7 49 81 fd f8 07 00 00 74 1d e8 3e 18 7c f7 49 83 c5 08 eb c9 e8 33 18 7c f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  383.275659][ T5872] RSP: 0018:ffffc900038ff8b0 EFLAGS: 00010293
[  383.278271][ T5872] RAX: ffffffff8a43935d RBX: ffff888109958000 RCX: ffff8881081fb980
[  383.280885][ T5872] RDX: 0000000000000000 RSI: ffffffff8d9b6e8f RDI: ffff888109958000
[  383.283931][ T5872] RBP: ffffc900038ff9b0 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6
[  383.287193][ T5872] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffff888109958000
[  383.290405][ T5872] R13: 0000000000000000 R14: ffff88810cc5a440 R15: dffffc0000000000
[  383.294155][ T5872] FS:  0000000000000000(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  383.298129][ T5872] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  383.300691][ T5872] CR2: 000055b0bd2f6000 CR3: 000000010ce3a000 CR4: 00000000000006f0
[  383.304524][ T5872] Call Trace:
[  383.305696][ T5872]  <TASK>
[  383.306692][ T5872]  ops_undo_list+0x49a/0x990
[  383.308301][ T5872]  ? __pfx_ops_undo_list+0x10/0x10
[  383.310091][ T5872]  ? do_raw_spin_unlock+0x4d/0x240
[  383.311864][ T5872]  cleanup_net+0x4c5/0x800
[  383.313698][ T5872]  ? __pfx_cleanup_net+0x10/0x10
[  383.315392][ T5872]  ? _raw_spin_unlock_irq+0x23/0x50
[  383.317226][ T5872]  ? process_scheduled_works+0x9ef/0x17b0
[  383.319166][ T5872]  ? process_scheduled_works+0x9ef/0x17b0
[  383.321120][ T5872]  process_scheduled_works+0xae1/0x17b0
[  383.323469][ T5872]  ? __pfx_process_scheduled_works+0x10/0x10
[  383.325536][ T5872]  worker_thread+0x8a0/0xda0
[  383.327128][ T5872]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  383.329282][ T5872]  ? __kthread_parkme+0x7b/0x200
[  383.330965][ T5872]  kthread+0x711/0x8a0
[  383.332424][ T5872]  ? __pfx_worker_thread+0x10/0x10
[  383.334347][ T5872]  ? __pfx_kthread+0x10/0x10
[  383.335972][ T5872]  ? _raw_spin_unlock_irq+0x23/0x50
[  383.337754][ T5872]  ? lockdep_hardirqs_on+0x9c/0x150
[  383.339535][ T5872]  ? __pfx_kthread+0x10/0x10
[  383.341111][ T5872]  ret_from_fork+0x3fc/0x770
[  383.342845][ T5872]  ? __pfx_ret_from_fork+0x10/0x10
[  383.344779][ T5872]  ? __switch_to_asm+0x39/0x70
[  383.346427][ T5872]  ? __switch_to_asm+0x33/0x70
[  383.348046][ T5872]  ? __pfx_kthread+0x10/0x10
[  383.349633][ T5872]  ret_from_fork_asm+0x1a/0x30
[  383.351278][ T5872]  </TASK>
[  383.352407][ T5872] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  383.354800][ T5872] CPU: 1 UID: 0 PID: 5872 Comm: kworker/u8:3 Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0 PREEMPT(full) 
[  383.358951][ T5872] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  383.362387][ T5872] Workqueue: netns cleanup_net
[  383.364063][ T5872] Call Trace:
[  383.365210][ T5872]  <TASK>
[  383.366230][ T5872]  dump_stack_lvl+0x99/0x250
[  383.367822][ T5872]  ? __asan_memcpy+0x40/0x70
[  383.369323][ T5872]  ? __pfx_dump_stack_lvl+0x10/0x10
[  383.371079][ T5872]  ? __pfx__printk+0x10/0x10
[  383.372729][ T5872]  vpanic+0x281/0x750
[  383.374082][ T5872]  ? __pfx__printk+0x10/0x10
[  383.375614][ T5872]  ? __pfx_vpanic+0x10/0x10
[  383.377153][ T5872]  ? is_bpf_text_address+0x292/0x2b0
[  383.379337][ T5872]  panic+0xb9/0xc0
[  383.380706][ T5872]  ? __pfx_panic+0x10/0x10
[  383.382280][ T5872]  __warn+0x31b/0x4b0
[  383.383698][ T5872]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  383.385551][ T5872]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  383.387378][ T5872]  report_bug+0x2be/0x4f0
[  383.388873][ T5872]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  383.390699][ T5872]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  383.392576][ T5872]  ? xfrm6_tunnel_net_exit+0x80/0x100
[  383.394328][ T5872]  handle_bug+0x84/0x160
[  383.395745][ T5872]  exc_invalid_op+0x1a/0x50
[  383.397306][ T5872]  asm_exc_invalid_op+0x1a/0x20
[  383.398932][ T5872] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[  383.400951][ T5872] Code: a8 81 df f7 4b 83 3c 2c 00 75 19 e8 4c 18 7c f7 49 81 fd f8 07 00 00 74 1d e8 3e 18 7c f7 49 83 c5 08 eb c9 e8 33 18 7c f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  383.407315][ T5872] RSP: 0018:ffffc900038ff8b0 EFLAGS: 00010293
[  383.409397][ T5872] RAX: ffffffff8a43935d RBX: ffff888109958000 RCX: ffff8881081fb980
[  383.412063][ T5872] RDX: 0000000000000000 RSI: ffffffff8d9b6e8f RDI: ffff888109958000
[  383.414764][ T5872] RBP: ffffc900038ff9b0 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6
[  383.417442][ T5872] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffff888109958000
[  383.420124][ T5872] R13: 0000000000000000 R14: ffff88810cc5a440 R15: dffffc0000000000
[  383.422818][ T5872]  ? xfrm6_tunnel_net_exit+0x7d/0x100
[  383.424605][ T5872]  ops_undo_list+0x49a/0x990
[  383.426189][ T5872]  ? __pfx_ops_undo_list+0x10/0x10
[  383.427928][ T5872]  ? do_raw_spin_unlock+0x4d/0x240
[  383.429651][ T5872]  cleanup_net+0x4c5/0x800
[  383.431166][ T5872]  ? __pfx_cleanup_net+0x10/0x10
[  383.432915][ T5872]  ? _raw_spin_unlock_irq+0x23/0x50
[  383.434688][ T5872]  ? process_scheduled_works+0x9ef/0x17b0
[  383.436615][ T5872]  ? process_scheduled_works+0x9ef/0x17b0
[  383.438499][ T5872]  process_scheduled_works+0xae1/0x17b0
[  383.440344][ T5872]  ? __pfx_process_scheduled_works+0x10/0x10
[  383.442409][ T5872]  worker_thread+0x8a0/0xda0
[  383.443986][ T5872]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  383.446127][ T5872]  ? __kthread_parkme+0x7b/0x200
[  383.447812][ T5872]  kthread+0x711/0x8a0
[  383.449209][ T5872]  ? __pfx_worker_thread+0x10/0x10
[  383.450933][ T5872]  ? __pfx_kthread+0x10/0x10
[  383.452498][ T5872]  ? _raw_spin_unlock_irq+0x23/0x50
[  383.454198][ T5872]  ? lockdep_hardirqs_on+0x9c/0x150
[  383.455980][ T5872]  ? __pfx_kthread+0x10/0x10
[  383.457579][ T5872]  ret_from_fork+0x3fc/0x770
[  383.459183][ T5872]  ? __pfx_ret_from_fork+0x10/0x10
[  383.460926][ T5872]  ? __switch_to_asm+0x39/0x70
[  383.462595][ T5872]  ? __switch_to_asm+0x33/0x70
[  383.464211][ T5872]  ? __pfx_kthread+0x10/0x10
[  383.465931][ T5872]  ret_from_fork_asm+0x1a/0x30
[  383.467640][ T5872]  </TASK>
[  383.469425][ T5872] Kernel Offset: disabled
[  383.470900][ T5872] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:52:57  Registers:
info registers vcpu 0

CPU#0
RAX=4c247ede2cce2700 RBX=ffffffff81968308 RCX=4c247ede2cce2700 RDX=0000000000000001
RSI=ffffffff8d9b6e8f RDI=ffffffff8be33400 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa37e30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7953f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055d592746a18 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f XMM01=0000000000000000 0000000000000000
XMM02=ffffffffffffffff ffffffffffffff00 XMM03=00000000000000ff 000000000000ff00
XMM04=0000000000ff0000 0000ff0000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000006f RBX=000000000000006f RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900038ff050
R8 =ffff8880214e0237 R9 =1ffff1100429c046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af98f8 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055b0bd2f6000 CR3=000000010ce3a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000ff 00000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 ff00000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000000000ff 00000000000000ff XMM05=0000000000000031 000000346e1e4f3a
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffff0000000000 XMM09=0000000000000031 000000346e616c77
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
