last executing test programs:

1.306967672s ago: executing program 0 (id=1914):
socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000400000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000700000000000000000000000900000000000000000000000900000000000000000000000902"], 0x0, 0x96}, 0x28)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)

1.206639349s ago: executing program 1 (id=1915):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xbba0909f0b2a443a, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_blackhole={0xe}, @qdisc_kind_options=@q_blackhole={0xe}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x100}]}, 0x4c}}, 0x90)

1.20611715s ago: executing program 1 (id=1916):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet(0x2, 0x80000, 0x7)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x65, 0x3, 0xd913, 0x81, 0x1}}}}]}, 0x4c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}}}, 0x24}}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0), 0x1)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="a544c7ca420080000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4008800)
socket$packet(0x11, 0x2, 0x300)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
socket(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000200af501000000000000000001"], 0x84}, 0x1, 0x0, 0x0, 0x844}, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r8=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000055003d09000000f9b718810007000000", @ANYRES32=r8, @ANYBLOB="20000280", @ANYRES32=r7, @ANYBLOB="0000000000000000000000000a000000000000000000001420000100", @ANYRES8=r7], 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x0)
epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1.086667939s ago: executing program 1 (id=1917):
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
pipe(&(0x7f0000000000))
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
read$alg(r2, &(0x7f0000000500)=""/4065, 0xfe1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
setsockopt$inet6_tcp_int(r3, 0x6, 0x1d, &(0x7f0000000000)=0xfff, 0x4)
socket(0x10, 0x80003, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$unix(0x1, 0x5, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r4], 0x38}, 0x1, 0x2000000}, 0x10)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000800, 0x0, 0x0)

944.64051ms ago: executing program 0 (id=1918):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x1}, 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='btrfs_find_cluster\x00', r0, 0x0, 0x100}, 0x18)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f0000000700)=[{{&(0x7f0000000340)={0xa, 0x4e22, 0x7ac, @empty, 0x9}, 0x1c, &(0x7f00000004c0)}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x786ba9af, @private2, 0x7}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000580)="69b1cd1aa3b6b202915f0c2951725031cb90f8c0c68e6a62e5909ec73a7f2d81acf1e3faaa1fccb4f3746804283c0f71c178f3f2f232c8b5f12ee0cdb4607e7e08343a0de825412157fdc9b1ef59aa5126767d5568eefb4c274d539ead6f6f87cd926a6b970176e6e667c36d0dccd243494b01fc37dc56cdf4141d95", 0x7c}], 0x1, &(0x7f0000000a80)=ANY=[@ANYBLOB="140000000000000029000000340000007f0000000000000014000000000000002900000008000000bf000000000000001400000000000000290000000b000000000000020000000024000000000000002900000032000000fe80000000000000000000000000001c", @ANYRES32=0x0, @ANYBLOB="01000000141600de0000ff000000"], 0x88}}], 0x2, 0x2400c044) (async, rerun: 64)
shutdown(r1, 0x1) (async, rerun: 64)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) (async, rerun: 32)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async, rerun: 32)
recvmmsg(r3, &(0x7f0000000480), 0x0, 0x0, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001040)=@delchain={0x51c, 0x65, 0x10, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x9}, {0x0, 0x2}, {0xffff, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_RATE={0x6, 0x5, {0x4, 0x8}}, @filter_kind_options=@f_u32={{0x8}, {0x4e0, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x18}, @TCA_U32_SEL={0x4d4, 0x5, {0x0, 0x81, 0x97, 0x6, 0x1, 0x1, 0x4, 0x8, [{0x4, 0xf7b, 0x4, 0x7}, {0x400, 0x7, 0x101, 0x25c7}, {0xffffffff, 0x4, 0x2, 0xfffffffb}, {0x5, 0x5, 0x0, 0x1}, {0xb, 0x4, 0x9, 0x1}, {0x80000001, 0x2f, 0x4, 0x9a4c}, {0xe8000000, 0x1, 0x401, 0x9}, {0xd, 0x6f12, 0x3cdb, 0x180000}, {0x7, 0xe56, 0x2, 0x7}, {0xffffffff, 0x3, 0x1ff, 0x6}, {0xb, 0x8, 0xf17}, {0x1, 0x6, 0xff}, {0x9, 0x40, 0x0, 0xc}, {0x9, 0x2, 0x7fff, 0x3}, {0x9396, 0x0, 0x5, 0x5}, {0x7, 0x6, 0xc42, 0xde4a}, {0x0, 0xe0, 0x4, 0x5}, {0x2e, 0x7b1bc96a, 0x2, 0x6}, {0x85, 0x4, 0x2, 0x2}, {0x4, 0x80000001, 0xd41, 0x9d}, {0x7f, 0x19b3, 0x400, 0x3}, {0x101, 0xfff, 0x2, 0x3ff}, {0xffff, 0x8001, 0x7, 0xffffffff}, {0xfffffff9, 0x7f, 0x4, 0x6}, {0x4, 0x7fffffff, 0x8000, 0x6}, {0x100, 0x8, 0x0, 0x50}, {0x72d, 0x10001, 0x4, 0xf5f}, {0x60, 0x6, 0x9, 0xffffffff}, {0x4, 0x0, 0x1b37, 0x7}, {0x2, 0x2, 0x10001, 0x80000000}, {0x8001, 0xff, 0x5, 0x3}, {0xf, 0x6, 0x1000, 0x9}, {0xb, 0x3ff, 0x1b8, 0x5}, {0xd2, 0x2, 0x2, 0x9}, {0x2, 0x79, 0x6}, {0xe, 0x8, 0x1, 0x7153}, {0x1, 0xe, 0xc64, 0x800}, {0xc, 0x7, 0xe}, {0x1000, 0x9, 0x3, 0x1}, {0xd, 0x6, 0x800, 0xd}, {0xbdbd, 0x4, 0xaaeb, 0x4}, {0x9, 0x4, 0x5df, 0x3}, {0x401, 0x7, 0x1, 0x9}, {0x8, 0xfffffffe, 0x5}, {0xffff, 0xb, 0x7, 0x5}, {0x0, 0x9a, 0x5, 0x2}, {0x6, 0x9, 0x44c2, 0x100000}, {0x216, 0x52b, 0xfe, 0x6}, {0x0, 0x5, 0x6, 0x3}, {0x9, 0xfffffffa, 0x5ce}, {0xa, 0x9, 0x0, 0x6}, {0x8, 0xfd7, 0x7, 0xfffffff8}, {0x7, 0x8, 0x8, 0x7}, {0x1000, 0x8, 0x6, 0x2}, {0x7, 0x2, 0x8, 0xffffffff}, {0x7, 0x9, 0x5, 0x1}, {0x6, 0x1, 0x40, 0x19}, {0xa2, 0xe, 0x7ee, 0x7}, {0x4, 0xfffffffa, 0x9, 0x8}, {0x400, 0x9, 0x3, 0x400}, {0x2254fd80, 0x5, 0x2, 0x9}, {0x7ff, 0x45e4bb02, 0x7fff, 0xfffffff3}, {0x400, 0x308f, 0x1, 0x7fffffff}, {0x685, 0x1, 0x0, 0x80000001}, {0x37, 0x401, 0xfffffc01, 0x3ff}, {0x4b7a, 0x9, 0x4}, {0x1, 0xa88, 0x578, 0x4}, {0x9dd, 0x7fffffff, 0x6, 0x7}, {0xf, 0x5, 0x401, 0x2}, {0x610, 0x6, 0x9, 0x3c}, {0x8, 0xfffffff8, 0x1d01, 0xfffffff8}, {0x200, 0xfffffffc, 0xc, 0x19f00000}, {0x1, 0x7ff, 0x8, 0x5}, {0x4ce, 0xfffffff1, 0x5}, {0x5, 0x10001, 0xd, 0x6}, {0x5, 0x9, 0x4, 0x10000}]}}]}}]}, 0x51c}}, 0x4000000) (async, rerun: 64)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000002040)=ANY=[@ANYBLOB="6900d906", @ANYRES16=r7, @ANYBLOB="010000002000ffdbdf25010000001400020077673100000000000000000000000000380008803400008006000500080d000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff04000980"], 0x60}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_tracing={0x1a, 0x30, &(0x7f0000000c80)=ANY=[@ANYRESDEC=r4, @ANYRES32=<r8=>0xffffffffffffffff, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000b00000085000000060000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000080850000000600000018130000", @ANYRES32=r4, @ANYBLOB="000000000000000092550400000000007d000c00f0ffffff183f000002000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018320000040000000000000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x4a, &(0x7f0000000980)=""/74, 0x41000, 0x2, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x6, 0xffffffff, 0x3}, 0x10, 0xaeb8, r0, 0x6, &(0x7f0000000780)=[r4, r4, r4, r4, r4, 0xffffffffffffffff, r4], &(0x7f0000000b40)=[{0x5, 0x5, 0xb, 0x3}, {0x2, 0x4, 0x7, 0x6}, {0x0, 0x5, 0xd, 0xa}, {0x1, 0x4, 0x9, 0x6}, {0x1, 0x3, 0xd, 0x1}, {0x5, 0x2, 0x8, 0x4}], 0x10, 0x3}, 0x94) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40025}, 0xc040454)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYRESOCT=r8], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async, rerun: 64)
unshare(0x62040200) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async, rerun: 64)
sendmsg$NL80211_CMD_CONNECT(r10, 0x0, 0x4010) (async, rerun: 64)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b0000000089f38c3cfc48eb9890000000802110000001000000002000000"], 0x1e) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0)

943.698871ms ago: executing program 0 (id=1919):
syz_init_net_socket$x25(0x9, 0x2, 0x10) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000040), 0xfffffffffffffd39) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000006c0), r1)
sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000019c0)={0x24, r2, 0x41d, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004c04}, 0x40) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@flushpolicy={0x54, 0x1d, 0x200, 0x70bd26, 0x25dfdbfb, "", [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d3, 0x2b}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x3501, 0x2, 0x1, 0x4, 0x6, 0x1ff, 0xff}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x48014}, 0x0) (async)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r4}, 0x59) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5}, @IFLA_MACSEC_SCI={0xc}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async)
sendmsg$802154_dgram(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0xb}}], 0x4000000000002d9, 0x10022, 0x0) (async)
r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
sendfile(r8, r0, 0x0, 0xfff)

844.856903ms ago: executing program 0 (id=1920):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb01001843000000000000400000004000000003000000000000000000000903000000000000000000000105000000080000000100000000000007f7ffffffffffffff0000000300000000030000000200000000000000006100"], 0x0, 0x5b}, 0x28)

844.573943ms ago: executing program 0 (id=1921):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000140)={0x1f, 0x811a, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x2}, 0xe)
connect$bt_l2cap(r2, &(0x7f0000000680)={0x1f, 0x20, @none}, 0xe)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0)
setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f00000000c0)=0x7ff, 0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x22, &(0x7f0000000100)={0x0, 0x989680})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'})

536.75655ms ago: executing program 2 (id=1923):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYRES32], 0x48)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000b40)={'dummy0\x00'})
r2 = socket$inet6(0xa, 0x800, 0x1000002)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x41, &(0x7f0000000240)={0xa, 0x4e20, 0xd60, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)
shutdown(r1, 0x1)
setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000080)=0x59cc, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1200000008000000080000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000688158bb77c17055e0780c766aadb6d2ffbac2100ae3e4", @ANYRES32=0x0, @ANYRES32], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRES64, @ANYRES8=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20fe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[], 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r6, 0x58, &(0x7f0000000300)}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="8021000000800400140003006e65746465767369"], 0x4c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a30000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800a00010071756575650000001c000280060002400ffe009b06000140faff"], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_FLOW={0x8}]}, 0x2c}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, 0x1404, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x8044)
r9 = socket$inet(0x2, 0x2, 0x1)
setsockopt$inet_opts(r9, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
sendmsg$inet(r9, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0xffff, @private=0xa010102}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)="08001efdff00f180", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x400c890)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
socket$inet6_udp(0xa, 0x2, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x90, 0x3, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fffffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xe7d6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}]}, @NFTA_CHAIN_USERDATA={0x53, 0xc, "9a0290d6a401fd82f651cee8fccbad7a68ca1781e5b87db076ef4794e02ca7adfb361e2edff18b72af564e851e97d0cbf4b439c73deaf1d2adfafe7eec896f08ac0ea0168b55fdf24a2e93cd3b38b8"}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}}], {0x14, 0x10}}, 0xe0}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, 0x0, 0x0)

535.951856ms ago: executing program 2 (id=1924):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@map=r1, 0x5, 0x0, 0x2af2, &(0x7f0000000080)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)
r3 = accept4(r0, 0x0, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x4008000)
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="19000000040000000400000002000000000000002166793bb4f2cf1933908dc27234083c60ad2efde8fe48072120907315e17480918d5313e36ffceb016e1ea002c0dd54386cc35557dc97c42a062ed0e5a0222525be4f704657a8a6fb4be65b44dd4464f2bad2e4ab028f57e2803952d2be2b62559e1f286d0a7e67749f0b1ec049a4448e3930824a25bcb9ae9b59526638cc2ece218b90a5fe77c3992276275920561e3c1cbe0ba09117a64cf12614cecb498b2b7581f5bff7e95d0968152915a904a868ea5a92b3f4b4c5", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3}, 0x94)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_OFFSET={0x8}]}}}]}]}], {0x14}}, 0x7c}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r3, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/57, 0x39}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f0000000200)=""/55, 0x37}, {&(0x7f00000003c0)=""/213, 0xd5}, {&(0x7f00000004c0)=""/11, 0xb}, {&(0x7f0000000500)=""/29, 0x1d}], 0x7}, 0x3}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000900)=""/210, 0xd2}], 0x1}}], 0x2, 0x10100, 0x0)
sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180))
getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000005c0), &(0x7f0000000700)=0x8)

376.12006ms ago: executing program 2 (id=1925):
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60241, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket(0x11, 0x3, 0xfffffffd)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000800)=ANY=[@ANYRES8, @ANYRES16=r0], 0xdd12}], 0x1, 0x0, 0x0, 0x4000801}, 0x4000c8c)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)=@ipv4_getnexthop={0x20, 0x6a, 0x705, 0x70bd27, 0x25dfdbff, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x4c084)

375.860152ms ago: executing program 2 (id=1926):
r0 = socket$tipc(0x1e, 0x5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r1, &(0x7f00000009c0)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a1aaf175a9d59559f29c09ff5e337e791be17c1ef703647852fe9e1b3ab3e6cd1c3b84b92c9822e232e0052c33bec0c49ee12b56b36e6c5be956e7791334289cd58966289930fe24f617b6c7821", 0x8f}, {&(0x7f00000002c0)="a01931a77deebe4f", 0x8}, {&(0x7f0000000640)="146d7d1fe23f2a38218e567b79d540f9855f11c272611653b571eaa7f1ae51d8da60a58cf2d3edc698914eaa6fb32bf9bab8b33a477647016ad9de5ce797b335cfd816d72e2cc01b12e54a3ccea2593bb0c99266bd87d0d80cc0b8e7101d736237e3fdf5c353e5625c9484f31d9e073594aa9372e588b79ecccd1926dd9a8b0749431aec47512d0f7623f6dd68c4c9b00e812164ff41514aaf10c9f05dd2627c38f8f4118380d5d3346b5460a87b68e6c58b0c3ba6eec887b885bbab0b0c2af50290034afbe9bdcd10948b465797b87c13c40c81bdc283025a5347ebe44880ae7f03", 0xe2}, {&(0x7f00000004c0)="9b1eb0aed9ba4b", 0x7}], 0x4)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10)
close(r0)

375.267489ms ago: executing program 2 (id=1927):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c40)=@newtaction={0x15f8, 0x30, 0xffff, 0x0, 0x0, {}, [{0x15e4, 0x1, [@m_police={0x158c, 0x1, 0x0, 0x0, {{0xb}, {0x1560, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffff9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0xffffffffffffffff, 0x80000000, 0x6, 0x4, {0x1, 0x2, 0x10, 0x2, 0x3ff, 0x4}, {0x4, 0x2, 0x7fff, 0x5, 0xb, 0x8}, 0x5, 0x8, 0x7fff}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0xc8}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x80, 0x10000000, 0x4, 0x9d6, 0x8, {0x81, 0x0, 0x8, 0x2, 0x7, 0x6}, {0x2, 0x2, 0x280, 0x7fff, 0x5, 0x6}, 0x7, 0x2, 0x3}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x1ff, 0x9, 0x2, 0x5, 0xecd, 0x4, 0x1000, 0x1, 0x6, 0x40, 0x40, 0x3716, 0xfac, 0x8, 0x61a3, 0x9, 0x6, 0x2, 0x6, 0x5e7359b1, 0x80, 0xffff8000, 0x8, 0x3, 0x2b, 0x80, 0x9, 0x7, 0x6b, 0x1, 0x9a71, 0xe, 0x2, 0x6, 0x3a, 0x5, 0x7fff, 0x5ee, 0x1, 0x7fff, 0x10000000, 0x8, 0x2, 0x0, 0x496e, 0xca9, 0x0, 0xfffffffd, 0x5, 0x4, 0x212, 0x0, 0xffff89cc, 0x9, 0x4, 0x0, 0x6, 0xfffffffc, 0x6, 0xf, 0x22f, 0x6, 0x101, 0x5, 0xe74, 0x6, 0xac, 0x4, 0x6, 0x2, 0x9, 0x6, 0x3, 0x7f, 0xfd95, 0x8, 0x4, 0x3, 0x6, 0x4, 0x77, 0x983b, 0xfffffffd, 0x401, 0x5, 0x6, 0x4, 0x1, 0x2, 0x1, 0x5, 0x7fffffff, 0x9, 0x80000000, 0x5, 0x2, 0x4, 0xa8, 0x7, 0x0, 0x6, 0x5, 0x8, 0x5, 0x59, 0x80000000, 0x4, 0x40, 0x3be, 0x8, 0xa, 0x15, 0x1ff, 0x5, 0x7, 0x9, 0x3f, 0x7, 0xc, 0x6, 0x7, 0x80, 0xfffffff2, 0x8, 0xb, 0x1ff, 0x5, 0x8, 0xe, 0x2, 0x6, 0xe0000000, 0xd, 0x80, 0xd48, 0xc, 0xf, 0x18, 0x1, 0x6612, 0x10001, 0x2, 0x8, 0xa000000, 0xdf64, 0x63c7, 0x2, 0x7b, 0x7ff, 0x3, 0x2, 0x9, 0x5, 0x800, 0x4, 0xd66000, 0x7, 0x0, 0x422, 0x1, 0x5218, 0x8, 0x7ff, 0x9, 0x7, 0x9, 0x7f, 0x200, 0x6, 0x1, 0x5, 0x1000, 0x8, 0xfffffff8, 0x8, 0x200, 0x8001, 0x800, 0xc, 0x4, 0xbbe, 0x7, 0x10, 0x6, 0xfffeffff, 0x3, 0x1, 0x48000, 0x1, 0x2, 0x0, 0xa569, 0x1ff, 0x8, 0x9, 0x3, 0x1, 0x10, 0x2, 0xea1, 0x81, 0x3, 0x3, 0x7ff, 0xba7, 0x2, 0x5, 0x1, 0x1000, 0x1, 0x9, 0x5, 0x4, 0x81, 0x8, 0xd, 0x1, 0x6, 0x2, 0xe7, 0xb, 0xb, 0x80000000, 0x2, 0x1, 0x8, 0x9, 0x200, 0x400, 0x8, 0x9, 0x30, 0x15, 0x62, 0x3, 0x3, 0xb4, 0xf, 0x8, 0x5, 0x1f, 0xc3d0, 0x7, 0x3ff, 0x2, 0x1, 0x6, 0x1e, 0x0, 0x8001, 0x982, 0x7fffffff, 0x3, 0xf, 0x5e0000]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0xffffffff, 0xb, 0x1, 0x2, 0x7, 0x2, 0x839, 0xe3, 0x0, 0x8, 0x5, 0x0, 0x6, 0xfffffffb, 0x100, 0x4, 0xffffffc0, 0x1, 0x7, 0x8f7d, 0xffff3526, 0x20, 0x0, 0x741, 0x10000, 0x6, 0xc3, 0x4, 0x2, 0x3, 0x98, 0x2, 0x101, 0x5, 0x3, 0xad, 0x2, 0x9, 0x52, 0xcc, 0x8, 0x6, 0x2, 0xd, 0x2, 0x9, 0xe64, 0x9, 0x2a, 0x3, 0x637b0cc0, 0x4, 0x6, 0x6, 0x1e9, 0xffff5e17, 0x7, 0x3, 0x5, 0x63d, 0x5, 0x9, 0x8001, 0x1, 0x8, 0x91, 0x1, 0x0, 0x6, 0x8000, 0xfffff800, 0x5, 0x3ffc00, 0x101, 0x0, 0x681, 0xf33, 0x9, 0x3, 0x2a82, 0xff, 0x9, 0x25c5, 0x3, 0x3, 0x8, 0x81, 0x9, 0x78, 0x101, 0x1, 0xb2b, 0x7, 0xa, 0x7, 0x0, 0x1, 0xff, 0xa, 0x7f, 0x9, 0xd0a1, 0x2, 0x2, 0x5, 0x5547, 0x3, 0xa, 0x60, 0x1000, 0x7, 0xef, 0x7, 0x7ff, 0x3, 0x7, 0x80000000, 0xd5e4, 0xfffffffe, 0x2, 0x4, 0x3, 0x7, 0x4, 0x8, 0x401, 0xffffffff, 0xa628, 0x9, 0x101, 0x3, 0x9, 0x10, 0xe, 0x3ff, 0x7f, 0x400, 0xfffffe01, 0x2, 0x3, 0x3, 0x4, 0x400, 0x10000, 0x80, 0x2, 0xfffffffe, 0x80, 0x5, 0x2, 0x5, 0x81, 0x0, 0x4, 0x6, 0x10001, 0x1, 0xd1, 0x0, 0x3, 0x10000, 0x56, 0x8, 0xfffffff8, 0x0, 0xfffffff8, 0x1, 0x6, 0x7, 0x7fff, 0x2, 0x7fffffff, 0x1, 0x5, 0x6, 0x0, 0x7fffffff, 0x1, 0xa4e, 0xe6, 0xc3f, 0x1, 0xe, 0x2, 0x4, 0x2, 0x8, 0x5, 0xa6b9, 0x7, 0x10000, 0x7, 0x4, 0x2, 0x3, 0x10000, 0x0, 0x6, 0x1000, 0x401, 0x42fb, 0x7, 0xac, 0xac8, 0x0, 0x4c, 0x48, 0x4, 0x5, 0x5, 0x8, 0x5e83, 0x2c88, 0x5, 0x2, 0xc2c, 0x7, 0x2, 0xb, 0x7, 0xd290, 0x8, 0x800, 0x7fffffff, 0x3208, 0xb, 0x2, 0x47e1, 0x6, 0x6, 0x8, 0x1000, 0x3, 0x10, 0x2c39, 0x8057, 0x3, 0x1, 0xfffff150, 0x7, 0x80000000, 0x9, 0x1, 0x3, 0x0, 0x1, 0x7, 0xf7aa, 0x9, 0x1, 0x6, 0x6, 0xffffffff, 0x7, 0x26]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x100, 0x0, 0x8, 0x9, 0x6, 0x101, 0x4, 0x2, 0x4, 0x200, 0x1, 0x9a2, 0x3, 0xfff, 0x7, 0x7b2, 0xd, 0x6, 0x8, 0x100, 0x2, 0x498, 0x8, 0x5, 0x9, 0x9, 0x80000001, 0x8, 0x7, 0x7, 0x9, 0x5, 0x10001, 0x4, 0x10001, 0x1, 0x5, 0x8b9c, 0xd22, 0x3, 0x8001, 0x9, 0x80, 0x40, 0x8, 0x4, 0x2, 0x6757, 0x100, 0x38c, 0x80, 0x5, 0x2, 0x100, 0x9, 0x80000000, 0x8, 0x7, 0x9, 0xaa, 0x7775, 0x3, 0x800, 0x2, 0x0, 0x6, 0x3, 0xffffffff, 0x7fffffff, 0x0, 0x1, 0x3, 0xb6, 0x80000001, 0x200, 0x56db, 0x0, 0x3, 0x0, 0x8, 0x6, 0x3, 0x0, 0x3, 0x4, 0xfffffff9, 0x7, 0x1, 0x1, 0x7, 0x42769c2a, 0x9, 0x0, 0x4, 0x8, 0x91c1, 0x6, 0x4, 0x7, 0x1000, 0x2, 0x401, 0x65a, 0xcdba, 0x8000, 0x3, 0x0, 0x7ff, 0x7, 0xff, 0x1, 0x10001, 0x9, 0x0, 0x800, 0xfffffff9, 0xd0b0, 0x9c05, 0x5, 0x15, 0x1a, 0x5, 0x80, 0x0, 0x559a, 0xfffffff8, 0x8, 0x1, 0x8000, 0x0, 0x0, 0xff, 0xbea4, 0x40, 0xa0ce, 0x0, 0xae2, 0x4, 0x6, 0x9, 0x3, 0x8d29, 0x7, 0x8001, 0x8, 0x7, 0x1, 0x6, 0x9, 0x1, 0x8, 0x4, 0xfffff843, 0x2, 0x7c, 0x0, 0x9, 0x8, 0x2, 0x7, 0x1, 0x3d7, 0x3, 0x4, 0x3, 0xd34, 0x80000001, 0xe6, 0xb, 0xfd1, 0x1, 0x1ff, 0x6, 0x2, 0x6, 0x6, 0x6, 0x6, 0x7, 0x8, 0x24f, 0x2, 0x401, 0xffff, 0x5, 0x81, 0x8, 0x1, 0x8, 0x9, 0xe, 0x6, 0xffffff7f, 0x3ff, 0x8, 0x1, 0x2, 0xffffffff, 0x4, 0x0, 0x800, 0x6, 0x2, 0x37, 0x0, 0x40000000, 0xe7ee, 0x80, 0x10000, 0x0, 0x3, 0x7, 0x2, 0x400, 0x80, 0x70809b4b, 0x6, 0xfffffff4, 0x7, 0x5, 0x7, 0x7, 0xfffffe01, 0x1, 0x113, 0x7, 0x1f3, 0x81, 0xe, 0x5, 0xf0, 0xb, 0x80, 0x1, 0x5, 0x0, 0x158e, 0x0, 0x5, 0x6, 0x6, 0x13a7, 0xfffffff9, 0x3, 0x2, 0x0, 0x3, 0x7fff, 0x3, 0xa45, 0x5, 0x24e3, 0x46000000, 0x3, 0x5]}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7b7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xa}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x8, 0x0, 0x80000001, 0x9, 0x4a, 0x3, 0x401, 0x1, 0x6, 0x1c7e0, 0x80000000, 0x8, 0x1, 0x3, 0x9, 0x4, 0x3ff, 0xfff, 0x5, 0x9, 0x4, 0x2, 0x2, 0x0, 0x7, 0x6, 0x6, 0x1, 0xb, 0xfffffffb, 0x3, 0x80000000, 0x3ff, 0x5, 0x8, 0x6, 0x9, 0x3ff, 0x4, 0x8000, 0x0, 0x8, 0x1, 0xe842, 0x7fffffff, 0x575, 0x8, 0x2, 0x580, 0xb6, 0x6, 0xfffffff8, 0x3016, 0xe3, 0x6, 0x2, 0x7fffffff, 0x7fffffff, 0x8, 0xd7, 0x5, 0x4, 0x1, 0x5, 0x847, 0x5, 0xfffffff8, 0x1, 0x0, 0xfffffffa, 0x8, 0xfffffff2, 0x8, 0x1000, 0xd43, 0x8001, 0x1, 0x3, 0xfffffffe, 0xd969, 0x9, 0x2, 0x1, 0x8000, 0xb6a, 0xff, 0x10e7e02d, 0x2, 0x80000, 0x3, 0x9, 0xbc3b, 0x5, 0xa6, 0x1000, 0x5, 0x10001, 0xfffffffe, 0x7, 0x80000000, 0x2, 0x3, 0x2, 0x8, 0xffffffff, 0x5, 0x2, 0x9, 0x6, 0x0, 0x2, 0x2, 0x6, 0x7, 0x1, 0x5b51, 0xaa70, 0x4, 0xb, 0xc81, 0xa, 0x100, 0x9, 0x0, 0x1, 0x2, 0x2, 0x7fff, 0x5, 0x9ac, 0x2, 0x1, 0x800, 0x4, 0x9, 0x1, 0x1, 0x2, 0x45, 0x7, 0x6, 0xc850, 0x2c, 0x4, 0x2, 0x7, 0x8, 0x9, 0x80000000, 0x9, 0x80000000, 0xd2b, 0xffff, 0xe33, 0x4, 0x4, 0x3, 0xe, 0x4, 0x3, 0x82, 0xe4d, 0x0, 0x0, 0x4a1, 0x6, 0x80, 0x1, 0x26, 0x9, 0x5b, 0x80000001, 0x2, 0xa, 0x3, 0x1000, 0x0, 0x4, 0x800, 0x262, 0x1db1, 0x0, 0x9, 0xfffffff8, 0x2, 0x7, 0xff, 0x3, 0x3, 0xfffffffb, 0x7fffffff, 0x4, 0xa45, 0x2, 0x2, 0x2, 0x1, 0x81, 0x1, 0x8, 0x9, 0x1b, 0x7f, 0x40, 0x3, 0x9, 0x3, 0x7, 0x0, 0x9, 0x400, 0x8, 0x4, 0xfffffff9, 0xf9, 0x2, 0xbc, 0xfff, 0xe194, 0x7, 0x8, 0xc4a7, 0x0, 0x9, 0x1ff, 0x3, 0xe46, 0x1, 0x22, 0xf, 0x0, 0x3ff, 0x5, 0x0, 0x81, 0x9, 0x800, 0xe, 0xd, 0x9, 0x4, 0x75d6, 0x7ff, 0x40, 0x214a, 0x0, 0x2, 0x8, 0x4, 0x4, 0x5, 0x5, 0xfffffffb, 0x7ff, 0x1]}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0xda}, @TCA_POLICE_RATE64={0xc, 0x8, 0xc2ac}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x0, 0x6, 0x5, 0x7, 0x8000, 0x9, 0x9, 0x3, 0x5, 0x3, 0x9e, 0x5, 0x101, 0x9, 0x5, 0x50, 0x8, 0x33, 0x5, 0x3, 0x7, 0x9, 0xb, 0x7, 0x6, 0x3, 0x1, 0x1, 0x9, 0x1000, 0x2, 0x6, 0x8, 0x23a, 0x3, 0x3, 0xc, 0x3, 0x2, 0x0, 0xaa, 0x4, 0x7, 0x80000000, 0x1, 0x10, 0x3, 0x8, 0x6d2d, 0x4, 0x7fff, 0x3, 0x0, 0x54, 0x200, 0x101, 0x4, 0x100, 0x8, 0x800, 0x2, 0x5041072f, 0x41, 0x200, 0x7, 0x7ff, 0xfff, 0x7, 0x8, 0x8, 0x400, 0x4, 0x5, 0xffffff3b, 0x2, 0x5, 0x2, 0x1, 0x0, 0x2000000, 0x8000, 0x6, 0x8, 0x4, 0x0, 0x1, 0x5, 0x1, 0x4, 0x5, 0x678, 0xbc, 0x8, 0x80, 0xfffffffd, 0x77, 0x40, 0x70d, 0x8, 0x2, 0xffffbc53, 0x1c00, 0x7ff, 0xcb23, 0x100, 0x8, 0x6, 0xe93, 0x7, 0x8, 0xb, 0x0, 0x7, 0x4, 0x436bf33e, 0x9000, 0x4, 0x0, 0xffffff2b, 0x0, 0x1, 0x7, 0x9, 0x3, 0x2, 0x1, 0xffffff21, 0x1000, 0x7f, 0x5, 0x101, 0x3, 0x8000, 0x3, 0x80000000, 0x8, 0xe9c0, 0x2, 0x2, 0x1ff, 0x9, 0x6, 0x6, 0x7f, 0x5, 0x474, 0x3, 0x2e, 0x5, 0x7, 0x0, 0x236, 0x0, 0x7, 0x40, 0x57, 0x4, 0x6, 0x0, 0x3ff, 0x7, 0x0, 0x9, 0x40, 0x3, 0x6, 0x7f, 0x3, 0x2, 0x10, 0xfffffffd, 0x2, 0x7a6a, 0x4, 0xfffffffd, 0x66466844, 0x7, 0x10000, 0x800, 0x2, 0x7, 0x9, 0x4c51, 0x800, 0x10, 0x3ff, 0x9, 0x10001, 0x1, 0x8a, 0x5, 0x1, 0x400, 0x5, 0x2, 0x3, 0x6, 0xce7, 0x0, 0x1ff, 0xe, 0x5, 0x10, 0x2, 0xf8, 0x7, 0x2, 0x215, 0x4, 0x80000000, 0xc, 0x80000001, 0x3ff, 0x6, 0x5, 0x5, 0x0, 0x129c, 0x8, 0xe, 0x1, 0x9, 0x8, 0x60be, 0x9, 0xffffff62, 0x9, 0x80, 0x4, 0x9, 0x9, 0x3, 0x8, 0x9d2a, 0x9, 0x4, 0x6, 0x3, 0x8, 0x7, 0x0, 0xfffffff1, 0x88, 0x1, 0x10, 0x1, 0xfffffffd, 0x1, 0x9, 0x200, 0x3, 0xfffffffe, 0x8a, 0x1, 0x2]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffb5}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0xfa665a81a6d02b4d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x15f8}}, 0x0)

316.869264ms ago: executing program 2 (id=1928):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r3=>0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
write$nci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="408001", @ANYRES64=r3], 0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0xa0, r9, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x7}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="efb3808172f2"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a831b0fdb378"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="5b30ed85130d"}, @NL80211_ATTR_MAC={0xa}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000043}, 0x0)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r12}, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', <r13=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r14=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x1a21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r13}, @IFLA_HSR_SLAVE2={0x8, 0x2, r14}]}}}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0x48}}, 0x0)

214.336533ms ago: executing program 1 (id=1929):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000680)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newtfilter={0x38, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r5, {}, {0xffff}, {0xfff1, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x40)
r6 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0xe, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x2, 0x18001, 0x83}}}}]}, 0x44}}, 0x0)
syz_emit_ethernet(0x5a, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004e00004c0000000000059078ac1414000a0101004414050300000000000000006401010100000000890bceffffffffac141415070200000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0)

137.066934ms ago: executing program 1 (id=1930):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
sendto$packet(0xffffffffffffffff, &(0x7f0000000780), 0x0, 0x20040001, 0x0, 0x0)
r4 = socket(0x1, 0x803, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r4, @ANYRESHEX=r3, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500"], 0x50}}, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'macvlan0\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x10, 0x0, 0x0, 0x400000]}})
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRESOCT=0x0, @ANYRES64=r4, @ANYRESHEX=r3, @ANYRES8=r2], 0x50}}, 0x2)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r7=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000400000008000b0000000000060001000700000048c23f7b50819a1990809d3d3fb0dc8e945fe5adecdbbe4d6ff5094124210cfa85ab47a3b41d"], 0x34}}, 0x20)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2}}, 0x2e)
r10 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080))
connect$unix(r10, &(0x7f0000000140)=@file={0x1, '.\x00'}, 0x6e)
sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x1)
socket$alg(0x26, 0x5, 0x0)

66.639295ms ago: executing program 1 (id=1931):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xf}, {0x6, 0x11, 0x8000}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0)
ioctl$SIOCPNDELRESOURCE(r4, 0x89ef, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lc\x00', 0x10, 0x8, 0xe}, 0x2c)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x0, 0x7f}, 0x2c)
r5 = socket$unix(0x1, 0x2, 0x0)
r6 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000140)=0x10)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r6, 0x0, 0x83, &(0x7f0000000440)={'filter\x00', 0x0, 0x4, 0xc6, [0x6, 0x9, 0x2, 0x4, 0x0, 0x400], 0x5, &(0x7f0000000200)=[{}, {}, {}, {}, {}], &(0x7f0000000340)=""/198}, &(0x7f0000000280)=0x78)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x64, r7, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xfffffffb, 0x73}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nr0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x400b1}, 0x24044884)
close(0x3)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@ipv4_newroute={0x24, 0x18, 0x4, 0x0, 0xfffffffd, {0x2, 0x14, 0x20, 0x0, 0xfc, 0x3, 0xfe, 0x6}, [@RTA_IIF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc801}, 0x4010)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_GET(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b0000190007800800030000000000080002000000000008000300000000000800020000000000080003000000000004"], 0x7c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00'})

0s ago: executing program 0 (id=1932):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet(r1, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)="d6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)='%e', 0x2}], 0x1}}], 0x2, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup(r2, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
mkdirat$cgroup(r2, &(0x7f0000000a00)='syz0\x00', 0x1ff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1d, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x32, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000005001b"], 0x44}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300)=<r6=>0x0, &(0x7f0000000340)=0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{r0}, &(0x7f0000000900), &(0x7f0000000940)='%+9llu \x00'}, 0x20)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@private0, @in6=@ipv4={""/10, ""/2, @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@loopback}}}, &(0x7f0000000380)=0xe8)
getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000580)={@empty}, &(0x7f0000000600)=0xfffffffffffffec4)
sendmsg$nl_route(r5, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="1500030000000000000100009b209279017df26102000000080005000602fa"], 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x24004090)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6)
write(r4, &(0x7f0000000140)="41000200010001", 0x7)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='net_prio.prioidx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
connect$vsock_stream(r9, &(0x7f0000000640)={0x28, 0x0, 0x2711, @host}, 0x10)
sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1e8}}, 0x0)

kernel console output (not intermixed with test programs):

7'.
[  100.542661][ T8147] netlink: 28 bytes leftover after parsing attributes in process `syz.0.647'.
[  100.600410][ T8148] netlink: 44 bytes leftover after parsing attributes in process `syz.0.647'.
[  100.616811][ T5908] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  100.620933][ T5908] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  100.694675][ T8150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.648'.
[  100.701616][ T8150] netlink: 24 bytes leftover after parsing attributes in process `syz.1.648'.
[  101.774880][ T8194] netlink: 52 bytes leftover after parsing attributes in process `syz.2.657'.
[  101.817761][ T8196] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.820602][ T8196] syzkaller0: entered promiscuous mode
[  101.822544][ T8196] syzkaller0: entered allmulticast mode
[  101.862988][ T8196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.659'.
[  101.874592][ T8195] tipc: Resetting bearer <eth:syzkaller0>
[  101.888147][ T8195] tipc: Disabling bearer <eth:syzkaller0>
[  101.903370][ T8203] netlink: 12 bytes leftover after parsing attributes in process `syz.0.661'.
[  101.959216][ T8205] netlink: 24 bytes leftover after parsing attributes in process `syz.1.662'.
[  102.259248][ T8219] netlink: 'syz.1.668': attribute type 10 has an invalid length.
[  102.262726][ T8219] bond0: (slave wlan1): Opening slave failed
[  102.627885][ T8224] macsec1: entered promiscuous mode
[  102.891587][ T8245] netlink: 'syz.2.676': attribute type 12 has an invalid length.
[  102.967373][ T8250] sctp: [Deprecated]: syz.2.677 (pid 8250) Use of int in maxseg socket option.
[  102.967373][ T8250] Use struct sctp_assoc_value instead
[  103.089454][ T8264] netlink: 'syz.2.681': attribute type 1 has an invalid length.
[  103.132181][ T8264] bond2: entered promiscuous mode
[  103.138410][ T8267] sctp: [Deprecated]: syz.0.680 (pid 8267) Use of int in maxseg socket option.
[  103.138410][ T8267] Use struct sctp_assoc_value instead
[  103.140970][ T8264] bond2: entered allmulticast mode
[  103.157758][ T8263] bridge2: entered promiscuous mode
[  103.159947][ T8263] bridge2: entered allmulticast mode
[  103.173955][ T8263] bond2: (slave bridge2): making interface the new active one
[  103.178610][ T8263] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  103.510507][ T8296] _Z`Ԁ@: entered promiscuous mode
[  103.644086][ T8313] team0: Mode "l" not found
[  103.893620][ T8343] team0: Mode "l" not found
[  104.057227][ T8350] validate_nla: 1 callbacks suppressed
[  104.057236][ T8350] netlink: 'syz.0.705': attribute type 1 has an invalid length.
[  104.082896][ T8350] bond8: (slave gretap1): making interface the new active one
[  104.089045][ T8350] bond8: (slave gretap1): Enslaving as an active interface with an up link
[  104.240984][ T8361] team0: No ports can be present during mode change
[  104.625146][ T8387] bond7: (slave vxcan3): Releasing backup interface
[  104.634861][ T8387] vxcan3: left promiscuous mode
[  104.643178][ T8387] bond8: (slave gretap1): Releasing active interface
[  104.739008][ T8399] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  104.755008][ T8399] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.803032][ T8399] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  104.807342][ T8399] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.862835][ T8399] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  104.868053][ T8399] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.877236][ T8411] lo speed is unknown, defaulting to 1000
[  104.879575][ T8411] lo speed is unknown, defaulting to 1000
[  104.883293][ T8411] lo speed is unknown, defaulting to 1000
[  104.891640][ T8411] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  104.916888][ T8399] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  104.921527][ T8399] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.930905][ T8411] lo speed is unknown, defaulting to 1000
[  104.933772][ T8411] lo speed is unknown, defaulting to 1000
[  104.937620][ T8411] lo speed is unknown, defaulting to 1000
[  104.998839][ T5908] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  105.002337][ T5908] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.022128][ T5908] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  105.028078][ T5908] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.050465][ T5855] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  105.053477][ T5855] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.074789][ T5855] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  105.077749][ T5855] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.152398][ T8429] 8021q: adding VLAN 0 to HW filter on device bond9
[  105.170362][ T8429] bond9: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  105.218077][ T8441] bond0: entered promiscuous mode
[  105.222642][ T8441] bond0: entered allmulticast mode
[  105.262078][ T8449] delete_channel: no stack
[  105.266212][   T12] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  105.385395][   T12] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  105.393731][ T8461] syzkaller1: entered promiscuous mode
[  105.396151][ T8461] syzkaller1: entered allmulticast mode
[  105.405731][ T8458] __nla_validate_parse: 18 callbacks suppressed
[  105.405743][ T8458] netlink: 16 bytes leftover after parsing attributes in process `syz.2.737'.
[  106.238429][ T8484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.748'.
[  106.242279][ T8484] netlink: 34 bytes leftover after parsing attributes in process `syz.0.748'.
[  106.310819][ T8489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.750'.
[  106.313884][ T8489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.750'.
[  106.324328][ T8486] syzkaller0: entered promiscuous mode
[  106.326967][ T8486] syzkaller0: entered allmulticast mode
[  106.352549][ T8492] netlink: 'syz.0.751': attribute type 11 has an invalid length.
[  107.330079][ T8504] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  107.342714][ T8505] netlink: 12 bytes leftover after parsing attributes in process `syz.2.755'.
[  107.362487][ T8507] netlink: 16 bytes leftover after parsing attributes in process `syz.1.757'.
[  107.367116][ T8507] netlink: 120 bytes leftover after parsing attributes in process `syz.1.757'.
[  107.370792][ T8507] netlink: 16 bytes leftover after parsing attributes in process `syz.1.757'.
[  107.458134][ T8509] team0: Mode "l" not found
[  107.460516][ T8507] netlink: 88 bytes leftover after parsing attributes in process `syz.1.757'.
[  107.577118][ T8519] IPv6: NLM_F_CREATE should be specified when creating new route
[  108.268530][ T8529] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.272083][ T8529] syzkaller0: entered promiscuous mode
[  108.274476][ T8529] syzkaller0: entered allmulticast mode
[  108.292333][ T8529] tipc: Resetting bearer <eth:syzkaller0>
[  108.293194][ T8531] netlink: 'syz.0.763': attribute type 4 has an invalid length.
[  108.389718][ T8535] netlink: 'syz.1.764': attribute type 8 has an invalid length.
[  108.418994][ T8535] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  108.422796][ T8535] ip6gretap0: entered promiscuous mode
[  108.428343][ T8535] hsr1: entered promiscuous mode
[  108.462350][ T8528] tipc: Resetting bearer <eth:syzkaller0>
[  108.473911][ T8528] tipc: Disabling bearer <eth:syzkaller0>
[  108.600592][ T8544] netlink: 'syz.1.768': attribute type 101 has an invalid length.
[  108.610635][ T8544] erspan0: left allmulticast mode
[  108.620864][ T8544] bond0: left allmulticast mode
[  108.624083][ T8544] tipc: Resetting bearer <eth:team0>
[  108.627500][ T8544] tipc: Resetting bearer <eth:team0>
[  108.631293][ T8544] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  108.638136][ T8545] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  108.652868][ T8549] IPv6: NLM_F_CREATE should be specified when creating new route
[  108.693239][ T8552] sctp: [Deprecated]: syz.1.771 (pid 8552) Use of struct sctp_assoc_value in delayed_ack socket option.
[  108.693239][ T8552] Use struct sctp_sack_info instead
[  109.632732][ T8560] netlink: 'syz.0.773': attribute type 10 has an invalid length.
[  109.636931][ T8560] bond0: (slave wlan1): refused to change device type
[  110.399515][ T5908] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  110.405780][ T5908] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.410342][ T5908] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  110.413436][ T5908] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.431768][ T8614] team0: Mode "l" not found
[  110.433467][ T5908] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  110.437676][ T5908] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.441750][ T5908] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  110.452713][ T5908] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.530275][ T5908] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  110.680666][ T8634] __nla_validate_parse: 17 callbacks suppressed
[  110.680681][ T8634] netlink: 200 bytes leftover after parsing attributes in process `syz.1.790'.
[  110.689012][ T8634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.790'.
[  110.851469][ T8638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.792'.
[  111.457910][ T8652] netlink: 240 bytes leftover after parsing attributes in process `syz.2.795'.
[  111.842731][ T8667] tipc: Resetting bearer <eth:team0>
[  111.885635][ T5892] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  112.045031][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  112.101688][ T8451] IPVS: starting estimator thread 0...
[  112.163818][ T8683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.803'.
[  112.194813][ T8679] IPVS: using max 81 ests per chain, 194400 per kthread
[  112.223854][ T8683] netlink: 28 bytes leftover after parsing attributes in process `syz.1.803'.
[  112.336263][ T8692] netlink: 'syz.0.806': attribute type 23 has an invalid length.
[  112.375897][ T8698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.807'.
[  112.421670][ T8702] netlink: 'syz.2.808': attribute type 29 has an invalid length.
[  112.427840][ T8705] netlink: 'syz.2.808': attribute type 29 has an invalid length.
[  112.431229][ T8705] netlink: 'syz.2.808': attribute type 29 has an invalid length.
[  112.434570][ T8705] netlink: 'syz.2.808': attribute type 29 has an invalid length.
[  112.458243][ T8708] netlink: 'syz.1.809': attribute type 4 has an invalid length.
[  112.473969][ T8708] netlink: 'syz.1.809': attribute type 4 has an invalid length.
[  112.527805][ T5313] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  112.650104][ T8728] netlink: 20 bytes leftover after parsing attributes in process `syz.1.816'.
[  112.723461][ T8733] lo speed is unknown, defaulting to 1000
[  112.841996][ T8742] netlink: 116 bytes leftover after parsing attributes in process `syz.2.821'.
[  112.877105][ T8748] team0: No ports can be present during mode change
[  112.947086][    C0] af_packet: tpacket_rcv: packet too big, clamped from 38 to 4294967286. macoff=82
[  113.009560][ T8755] netlink: 44 bytes leftover after parsing attributes in process `syz.2.825'.
[  113.012627][ T8755] netlink: 'syz.2.825': attribute type 6 has an invalid length.
[  113.015696][ T8755] netlink: 'syz.2.825': attribute type 4 has an invalid length.
[  113.099046][ T8761] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  113.103156][ T8761] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.140243][ T8761] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  113.144456][ T8761] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.188394][ T8761] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  113.191743][ T8761] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.241121][ T8761] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  113.247393][ T8761] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.308315][ T5855] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  113.311576][ T5855] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.322251][ T5855] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  113.327297][ T5855] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.337613][ T5855] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  113.341208][ T5855] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.351326][ T5855] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  113.354977][ T5855] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  113.712053][  T972] IPVS: starting estimator thread 0...
[  113.827610][ T8783] IPVS: using max 80 ests per chain, 192000 per kthread
[  113.971831][ T8805] bond3: (slave bridge3): making interface the new active one
[  113.977718][ T8805] bond3: (slave bridge3): Enslaving as an active interface with an up link
[  114.150991][ T8821] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  114.214490][ T8828] team0: Failed to send port change of device netdevsim0 via netlink (err -105)
[  114.218606][ T8828] team0: Failed to send options change via netlink (err -105)
[  114.221754][ T8828] team0: Port device netdevsim0 added
[  114.291595][ T8835] team0: Mode "l" not found
[  114.301649][ T8832] 8021q: adding VLAN 0 to HW filter on device bond10
[  114.372780][ T8844] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  114.507051][ T8861] team0: Mode "l" not found
[  115.276479][ T8881] syzkaller1: entered promiscuous mode
[  115.279665][ T8881] syzkaller1: entered allmulticast mode
[  115.427885][ T8889] vlan0: entered promiscuous mode
[  115.430954][ T8889] bridge0: entered promiscuous mode
[  115.480773][ T8894] syzkaller1: entered allmulticast mode
[  115.493845][ T8894] syzkaller1: left allmulticast mode
[  115.591769][ T8903] team0: Mode "l" not found
[  115.727552][ T8911] __nla_validate_parse: 12 callbacks suppressed
[  115.727567][ T8911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.869'.
[  116.035708][ T8926] vxcan1: entered allmulticast mode
[  116.037698][ T8926] vxcan1: left allmulticast mode
[  116.100061][ T8926] raw_sendmsg: syz.2.874 forgot to set AF_INET. Fix it!
[  116.226320][ T8932] netlink: 240 bytes leftover after parsing attributes in process `syz.2.876'.
[  116.617984][ T8934] netlink: 20 bytes leftover after parsing attributes in process `syz.0.877'.
[  116.622729][ T8934] netlink: 32 bytes leftover after parsing attributes in process `syz.0.877'.
[  116.626715][ T8934] netlink: 34 bytes leftover after parsing attributes in process `syz.0.877'.
[  116.838925][ T8945] vlan1: entered allmulticast mode
[  116.840913][ T8945] bond0: entered allmulticast mode
[  116.865334][ T8948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.882'.
[  117.098056][ T8959] team0: No ports can be present during mode change
[  117.247582][ T8968] netlink: 20 bytes leftover after parsing attributes in process `syz.2.889'.
[  117.353187][ T8975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.891'.
[  117.599066][ T8991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.896'.
[  117.613505][ T8991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.896'.
[  117.763971][ T8999] validate_nla: 6 callbacks suppressed
[  117.763986][ T8999] netlink: 'syz.1.897': attribute type 4 has an invalid length.
[  117.946732][ T9026] netlink: 'syz.1.905': attribute type 13 has an invalid length.
[  117.949284][ T9026] netlink: 'syz.1.905': attribute type 17 has an invalid length.
[  117.951879][ T9026] lo: entered promiscuous mode
[  117.953622][ T9026] lo: entered allmulticast mode
[  117.959171][ T9026] tunl0: entered promiscuous mode
[  117.960915][ T9026] tunl0: entered allmulticast mode
[  117.963295][ T9026] gre0: entered promiscuous mode
[  117.965496][ T9026] gre0: entered allmulticast mode
[  117.968279][ T9026] gretap0: entered promiscuous mode
[  117.970596][ T9026] gretap0: entered allmulticast mode
[  117.973177][ T9026] erspan0: entered promiscuous mode
[  117.975313][ T9026] erspan0: entered allmulticast mode
[  117.980581][ T9026] ip_vti0: entered promiscuous mode
[  117.982418][ T9026] ip_vti0: entered allmulticast mode
[  117.985337][ T9026] ip6_vti0: entered promiscuous mode
[  117.987166][ T9026] ip6_vti0: entered allmulticast mode
[  117.989614][ T9026] sit0: entered promiscuous mode
[  117.991581][ T9026] sit0: entered allmulticast mode
[  117.993798][ T9026] ip6tnl0: entered promiscuous mode
[  117.996373][ T9026] ip6tnl0: entered allmulticast mode
[  117.998691][ T9026] ip6gre0: entered promiscuous mode
[  118.001469][ T9026] ip6gre0: entered allmulticast mode
[  118.003743][ T9026] ip6gretap0: entered allmulticast mode
[  118.010709][ T9026] bridge0: entered allmulticast mode
[  118.013202][ T9026] vcan0: entered promiscuous mode
[  118.015529][ T9026] vcan0: entered allmulticast mode
[  118.017685][ T9026] bond0: entered allmulticast mode
[  118.020928][ T9026] team0: entered promiscuous mode
[  118.022625][ T9026] team0: entered allmulticast mode
[  118.024586][ T9026] tipc: Resetting bearer <eth:team0>
[  118.027377][ T9026] tipc: Resetting bearer <eth:team0>
[  118.029243][ T9026] !: entered promiscuous mode
[  118.030847][ T9026] !: entered allmulticast mode
[  118.033064][ T9026] nlmon0: entered promiscuous mode
[  118.035394][ T9026] nlmon0: entered allmulticast mode
[  118.037776][ T9026] caif0: entered promiscuous mode
[  118.039488][ T9026] caif0: entered allmulticast mode
[  118.041236][ T9026] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  118.047177][ T9028] vlan0: entered promiscuous mode
[  118.049708][ T9028] veth1: entered promiscuous mode
[  118.052187][ T9028] vlan0: left allmulticast mode
[  118.054394][ T9028] veth1: left allmulticast mode
[  118.101200][ T9038] team0: No ports can be present during mode change
[  118.138294][ T9045] netlink: 'syz.2.911': attribute type 2 has an invalid length.
[  118.144408][ T9045] k*: entered promiscuous mode
[  118.238056][ T9053] lo speed is unknown, defaulting to 1000
[  118.409578][ T9068] team0: Mode "l" not found
[  119.124581][ T9112] team0: Mode "l" not found
[  119.252545][ T9128] netlink: zone id is out of range
[  119.254325][ T9128] netlink: zone id is out of range
[  119.258776][ T9128] netlink: get zone limit has 8 unknown bytes
[  119.296396][ T9134] team0: Mode "l" not found
[  119.309413][ T9137] bridge6: entered promiscuous mode
[  119.312434][ T9137] bridge6: entered allmulticast mode
[  119.356511][ T9139] bridge8: entered allmulticast mode
[  119.460590][ T9159] openvswitch: netlink: EtherType 0 is less than min 600
[  119.512734][ T9162] team0: Mode "l" not found
[  119.647705][ T9174] netlink: 'syz.0.950': attribute type 32 has an invalid length.
[  119.650637][ T9174] (unnamed net_device) (uninitialized): option coupled_control: invalid value (191)
[  119.726564][ T9177] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.729559][ T9177] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  119.732655][ T9177] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  119.843408][ T9191] team0: Mode "l" not found
[  119.890884][ T9203] tipc: Resetting bearer <eth:team0>
[  119.925700][ T9203] team0: left promiscuous mode
[  119.927569][ T9203] team0: left allmulticast mode
[  120.043654][ T9220] netlink: 'syz.1.961': attribute type 11 has an invalid length.
[  120.736406][ T9230] bond0: entered promiscuous mode
[  120.739541][ T9230] bond0: left promiscuous mode
[  120.797567][ T9218] __nla_validate_parse: 18 callbacks suppressed
[  120.797577][ T9218] netlink: 248 bytes leftover after parsing attributes in process `syz.2.963'.
[  120.943783][ T9247] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.971'.
[  120.949356][ T9248] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.971'.
[  121.147689][ T9269] netlink: 'syz.0.978': attribute type 11 has an invalid length.
[  121.150975][ T9269] netlink: 244 bytes leftover after parsing attributes in process `syz.0.978'.
[  121.155170][ T9268] netlink: 'syz.0.978': attribute type 11 has an invalid length.
[  121.158675][ T9268] netlink: 244 bytes leftover after parsing attributes in process `syz.0.978'.
[  121.178911][ T9268] netlink: 'syz.0.978': attribute type 10 has an invalid length.
[  121.182367][ T9269] netlink: 'syz.0.978': attribute type 10 has an invalid length.
[  121.187030][ T9268] batman_adv: batadv0: Adding interface: netdevsim0
[  121.189884][ T9268] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.204145][ T9268] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  121.211234][ T9270] netlink: 'syz.0.978': attribute type 10 has an invalid length.
[  121.217703][ T9270] bond0: (slave wlan1): Opening slave failed
[  121.220736][ T9268] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  121.283145][ T9274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.979'.
[  121.288182][ T9275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.979'.
[  121.292320][ T9274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.979'.
[  121.742962][ T9306] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  121.749587][ T9306] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.756639][ T9311] IPVS: Error connecting to the multicast addr
[  121.787653][ T9306] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  121.792067][ T9306] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.828224][ T9306] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  121.831937][ T9306] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.871675][ T9306] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  121.877622][ T9306] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.939789][ T5855] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  121.943512][ T5855] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  121.959625][ T5855] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  121.978073][ T5855] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  121.989709][ T5855] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  121.999694][ T5855] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.015716][ T5855] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  122.019204][ T5855] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.110939][ T9341] dvmrp6: entered allmulticast mode
[  122.117587][ T9335] dvmrp6: left allmulticast mode
[  122.532862][ T9386] netlink: 20 bytes leftover after parsing attributes in process `syz.0.997'.
[  122.673599][ T9398] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1000'.
[  122.935746][ T9407] team0: Port device netdevsim0 removed
[  123.095815][ T9421] team0: No ports can be present during mode change
[  123.856655][ T9440] tipc: Started in network mode
[  123.858502][ T9440] tipc: Node identity 8e69d6bcbe92, cluster identity 4711
[  123.861437][ T9440] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.867402][ T9440] syzkaller0: entered promiscuous mode
[  123.869259][ T9440] syzkaller0: entered allmulticast mode
[  123.881978][ T9440] tipc: Resetting bearer <eth:syzkaller0>
[  123.925917][ T9442] team0: Mode "l" not found
[  124.019025][ T9446] tipc: Resetting bearer <eth:syzkaller0>
[  124.206439][ T9458] team0: No ports can be present during mode change
[  124.392963][ T9470] lo speed is unknown, defaulting to 1000
[  124.398409][ T9470] lo speed is unknown, defaulting to 1000
[  124.401597][ T9470] lo speed is unknown, defaulting to 1000
[  124.413798][ T9470] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  124.427038][ T9470] lo speed is unknown, defaulting to 1000
[  124.429578][ T9470] lo speed is unknown, defaulting to 1000
[  124.432210][ T9470] lo speed is unknown, defaulting to 1000
[  124.496998][ T9475] smc: net device bond0 applied user defined pnetid SYZ2
[  124.532336][ T9479] team0: No ports can be present during mode change
[  124.633595][ T9483] netlink: 'syz.2.1029': attribute type 10 has an invalid length.
[  124.637734][ T9483] 8021q: adding VLAN 0 to HW filter on device team0
[  124.640738][ T9483] team0: entered promiscuous mode
[  124.854905][ T5893] tipc: Node number set to 821810876
[  124.913998][ T9493] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  124.918107][ T9493] CPU: 0 UID: 0 PID: 9493 Comm: syz.2.1032 Not tainted syzkaller #0 PREEMPT(full) 
[  124.918117][ T9493] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  124.918122][ T9493] Call Trace:
[  124.918125][ T9493]  <TASK>
[  124.918129][ T9493]  dump_stack_lvl+0x189/0x250
[  124.918143][ T9493]  ? __pfx_dump_stack_lvl+0x10/0x10
[  124.918152][ T9493]  ? __pfx__printk+0x10/0x10
[  124.918164][ T9493]  ? kernfs_path_from_node+0x2f/0x290
[  124.918173][ T9493]  ? kernfs_path_from_node+0x250/0x290
[  124.918180][ T9493]  ? kernfs_path_from_node+0x2f/0x290
[  124.918190][ T9493]  sysfs_warn_dup+0x8e/0xa0
[  124.918198][ T9493]  sysfs_do_create_link_sd+0xc0/0x110
[  124.918206][ T9493]  device_add_class_symlinks+0x1cf/0x240
[  124.918216][ T9493]  device_add+0x475/0xb50
[  124.918224][ T9493]  wiphy_register+0x1ba6/0x28d0
[  124.918238][ T9493]  ? __pfx_wiphy_register+0x10/0x10
[  124.918245][ T9493]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  124.918256][ T9493]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  124.918266][ T9493]  ieee80211_register_hw+0x3425/0x4080
[  124.918281][ T9493]  ? ieee80211_register_hw+0x14a1/0x4080
[  124.918294][ T9493]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  124.918305][ T9493]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  124.918319][ T9493]  ? __hrtimer_setup+0x187/0x210
[  124.918326][ T9493]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  124.918337][ T9493]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  124.918358][ T9493]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  124.918366][ T9493]  ? trace_kmalloc+0x1f/0xd0
[  124.918374][ T9493]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  124.918383][ T9493]  ? kstrndup+0xbf/0x160
[  124.918394][ T9493]  hwsim_new_radio_nl+0xea4/0x1b10
[  124.918405][ T9493]  ? __pfx___nla_validate_parse+0x10/0x10
[  124.918420][ T9493]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  124.918434][ T9493]  ? __nla_parse+0x40/0x60
[  124.918445][ T9493]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  124.918458][ T9493]  genl_family_rcv_msg_doit+0x215/0x300
[  124.918469][ T9493]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  124.918483][ T9493]  ? bpf_lsm_capable+0x9/0x20
[  124.918491][ T9493]  ? security_capable+0x7e/0x2e0
[  124.918504][ T9493]  genl_rcv_msg+0x60e/0x790
[  124.918524][ T9493]  ? __pfx_genl_rcv_msg+0x10/0x10
[  124.918533][ T9493]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  124.918549][ T9493]  netlink_rcv_skb+0x208/0x470
[  124.918555][ T9493]  ? __lock_acquire+0xab9/0xd20
[  124.918566][ T9493]  ? __pfx_genl_rcv_msg+0x10/0x10
[  124.918576][ T9493]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  124.918592][ T9493]  ? down_read+0x1ad/0x2e0
[  124.918601][ T9493]  genl_rcv+0x28/0x40
[  124.918610][ T9493]  netlink_unicast+0x82f/0x9e0
[  124.918624][ T9493]  ? __pfx_netlink_unicast+0x10/0x10
[  124.918634][ T9493]  ? netlink_sendmsg+0x642/0xb30
[  124.918641][ T9493]  ? skb_put+0x11b/0x210
[  124.918650][ T9493]  netlink_sendmsg+0x805/0xb30
[  124.918660][ T9493]  ? __pfx_netlink_sendmsg+0x10/0x10
[  124.918669][ T9493]  ? aa_sock_msg_perm+0xf1/0x1d0
[  124.918676][ T9493]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  124.918684][ T9493]  ? __pfx_netlink_sendmsg+0x10/0x10
[  124.918691][ T9493]  __sock_sendmsg+0x21c/0x270
[  124.918701][ T9493]  ____sys_sendmsg+0x505/0x830
[  124.918712][ T9493]  ? __pfx_____sys_sendmsg+0x10/0x10
[  124.918723][ T9493]  ? import_iovec+0x74/0xa0
[  124.918733][ T9493]  ___sys_sendmsg+0x21f/0x2a0
[  124.918742][ T9493]  ? __pfx____sys_sendmsg+0x10/0x10
[  124.918765][ T9493]  ? __fget_files+0x2a/0x420
[  124.918771][ T9493]  ? __fget_files+0x3a0/0x420
[  124.918781][ T9493]  __x64_sys_sendmsg+0x19b/0x260
[  124.918789][ T9493]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  124.918802][ T9493]  ? rcu_is_watching+0x15/0xb0
[  124.918811][ T9493]  ? do_syscall_64+0xbe/0x3b0
[  124.918820][ T9493]  do_syscall_64+0xfa/0x3b0
[  124.918826][ T9493]  ? lockdep_hardirqs_on+0x9c/0x150
[  124.918833][ T9493]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.918839][ T9493]  ? exc_page_fault+0x9f/0xf0
[  124.918846][ T9493]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.918853][ T9493] RIP: 0033:0x7fd5e5f8ebe9
[  124.918860][ T9493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  124.918866][ T9493] RSP: 002b:00007fd5e6d57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  124.918875][ T9493] RAX: ffffffffffffffda RBX: 00007fd5e61c5fa0 RCX: 00007fd5e5f8ebe9
[  124.918881][ T9493] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  124.918885][ T9493] RBP: 00007fd5e6011e19 R08: 0000000000000000 R09: 0000000000000000
[  124.918890][ T9493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  124.918894][ T9493] R13: 00007fd5e61c6038 R14: 00007fd5e61c5fa0 R15: 00007fffa925af68
[  124.918905][ T9493]  </TASK>
[  125.176950][ T9496] team0: Mode "l" not found
[  125.185338][ T9498] netlink: 'syz.2.1033': attribute type 6 has an invalid length.
[  125.190395][ T9498] netlink: 'syz.2.1033': attribute type 12 has an invalid length.
[  125.341135][ T9512] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  125.409240][ T9519] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  125.414079][ T9519] CPU: 1 UID: 0 PID: 9519 Comm: syz.0.1040 Not tainted syzkaller #0 PREEMPT(full) 
[  125.414090][ T9519] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  125.414094][ T9519] Call Trace:
[  125.414099][ T9519]  <TASK>
[  125.414103][ T9519]  dump_stack_lvl+0x189/0x250
[  125.414118][ T9519]  ? __pfx_dump_stack_lvl+0x10/0x10
[  125.414126][ T9519]  ? __pfx__printk+0x10/0x10
[  125.414140][ T9519]  ? kernfs_path_from_node+0x2f/0x290
[  125.414149][ T9519]  ? kernfs_path_from_node+0x250/0x290
[  125.414156][ T9519]  ? kernfs_path_from_node+0x2f/0x290
[  125.414166][ T9519]  sysfs_warn_dup+0x8e/0xa0
[  125.414174][ T9519]  sysfs_do_create_link_sd+0xc0/0x110
[  125.414184][ T9519]  device_add_class_symlinks+0x1cf/0x240
[  125.414193][ T9519]  device_add+0x475/0xb50
[  125.414202][ T9519]  wiphy_register+0x1ba6/0x28d0
[  125.414217][ T9519]  ? __pfx_wiphy_register+0x10/0x10
[  125.414224][ T9519]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  125.414237][ T9519]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  125.414248][ T9519]  ieee80211_register_hw+0x3425/0x4080
[  125.414264][ T9519]  ? ieee80211_register_hw+0x14a1/0x4080
[  125.414276][ T9519]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  125.414286][ T9519]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  125.414302][ T9519]  ? __hrtimer_setup+0x187/0x210
[  125.414308][ T9519]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  125.414319][ T9519]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  125.414340][ T9519]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  125.414348][ T9519]  ? trace_kmalloc+0x1f/0xd0
[  125.414356][ T9519]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  125.414366][ T9519]  ? kstrndup+0xbf/0x160
[  125.414377][ T9519]  hwsim_new_radio_nl+0xea4/0x1b10
[  125.414388][ T9519]  ? __pfx___nla_validate_parse+0x10/0x10
[  125.414404][ T9519]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  125.414419][ T9519]  ? __nla_parse+0x40/0x60
[  125.414430][ T9519]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  125.414444][ T9519]  genl_family_rcv_msg_doit+0x215/0x300
[  125.414455][ T9519]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  125.414469][ T9519]  ? bpf_lsm_capable+0x9/0x20
[  125.414478][ T9519]  ? security_capable+0x7e/0x2e0
[  125.414495][ T9519]  genl_rcv_msg+0x60e/0x790
[  125.414510][ T9519]  ? __pfx_genl_rcv_msg+0x10/0x10
[  125.414518][ T9519]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  125.414533][ T9519]  netlink_rcv_skb+0x208/0x470
[  125.414539][ T9519]  ? __lock_acquire+0xab9/0xd20
[  125.414550][ T9519]  ? __pfx_genl_rcv_msg+0x10/0x10
[  125.414560][ T9519]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  125.414575][ T9519]  ? down_read+0x1ad/0x2e0
[  125.414585][ T9519]  genl_rcv+0x28/0x40
[  125.414594][ T9519]  netlink_unicast+0x82f/0x9e0
[  125.414627][ T9519]  ? __pfx_netlink_unicast+0x10/0x10
[  125.414639][ T9519]  ? netlink_sendmsg+0x642/0xb30
[  125.414644][ T9519]  ? skb_put+0x11b/0x210
[  125.414653][ T9519]  netlink_sendmsg+0x805/0xb30
[  125.414665][ T9519]  ? __pfx_netlink_sendmsg+0x10/0x10
[  125.414673][ T9519]  ? aa_sock_msg_perm+0xf1/0x1d0
[  125.414681][ T9519]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  125.414689][ T9519]  ? __pfx_netlink_sendmsg+0x10/0x10
[  125.414697][ T9519]  __sock_sendmsg+0x21c/0x270
[  125.414709][ T9519]  ____sys_sendmsg+0x505/0x830
[  125.414722][ T9519]  ? __pfx_____sys_sendmsg+0x10/0x10
[  125.414735][ T9519]  ? import_iovec+0x74/0xa0
[  125.414746][ T9519]  ___sys_sendmsg+0x21f/0x2a0
[  125.414757][ T9519]  ? __pfx____sys_sendmsg+0x10/0x10
[  125.414782][ T9519]  ? __fget_files+0x2a/0x420
[  125.414788][ T9519]  ? __fget_files+0x3a0/0x420
[  125.414798][ T9519]  __x64_sys_sendmsg+0x19b/0x260
[  125.414807][ T9519]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  125.414820][ T9519]  ? rcu_is_watching+0x15/0xb0
[  125.414830][ T9519]  ? do_syscall_64+0xbe/0x3b0
[  125.414839][ T9519]  do_syscall_64+0xfa/0x3b0
[  125.414846][ T9519]  ? lockdep_hardirqs_on+0x9c/0x150
[  125.414853][ T9519]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.414859][ T9519]  ? exc_page_fault+0x9f/0xf0
[  125.414867][ T9519]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.414873][ T9519] RIP: 0033:0x7fa0da38ebe9
[  125.414880][ T9519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  125.414887][ T9519] RSP: 002b:00007fa0db230038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  125.414896][ T9519] RAX: ffffffffffffffda RBX: 00007fa0da5c5fa0 RCX: 00007fa0da38ebe9
[  125.414901][ T9519] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  125.414906][ T9519] RBP: 00007fa0da411e19 R08: 0000000000000000 R09: 0000000000000000
[  125.414910][ T9519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  125.414914][ T9519] R13: 00007fa0da5c6038 R14: 00007fa0da5c5fa0 R15: 00007ffcbd8a2be8
[  125.414926][ T9519]  </TASK>
[  126.163952][ T9524] __nla_validate_parse: 12 callbacks suppressed
[  126.163962][ T9524] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1042'.
[  126.335808][ T9536] veth1_to_bond: entered allmulticast mode
[  126.339478][ T9536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1046'.
[  126.343407][ T9537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1046'.
[  126.365195][ T9536] veth1_to_bond (unregistering): left allmulticast mode
[  126.436330][ T9540] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  126.441362][ T9540] CPU: 0 UID: 0 PID: 9540 Comm: syz.2.1047 Not tainted syzkaller #0 PREEMPT(full) 
[  126.441381][ T9540] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  126.441389][ T9540] Call Trace:
[  126.441395][ T9540]  <TASK>
[  126.441402][ T9540]  dump_stack_lvl+0x189/0x250
[  126.441426][ T9540]  ? __pfx_dump_stack_lvl+0x10/0x10
[  126.441442][ T9540]  ? __pfx__printk+0x10/0x10
[  126.441473][ T9540]  ? kernfs_path_from_node+0x2f/0x290
[  126.441510][ T9540]  ? kernfs_path_from_node+0x250/0x290
[  126.441523][ T9540]  ? kernfs_path_from_node+0x2f/0x290
[  126.441540][ T9540]  sysfs_warn_dup+0x8e/0xa0
[  126.441555][ T9540]  sysfs_do_create_link_sd+0xc0/0x110
[  126.441571][ T9540]  device_add_class_symlinks+0x1cf/0x240
[  126.441589][ T9540]  device_add+0x475/0xb50
[  126.441605][ T9540]  wiphy_register+0x1ba6/0x28d0
[  126.441632][ T9540]  ? __pfx_wiphy_register+0x10/0x10
[  126.441645][ T9540]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  126.441669][ T9540]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  126.441689][ T9540]  ieee80211_register_hw+0x3425/0x4080
[  126.441716][ T9540]  ? ieee80211_register_hw+0x14a1/0x4080
[  126.441737][ T9540]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  126.441757][ T9540]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  126.441782][ T9540]  ? __hrtimer_setup+0x187/0x210
[  126.441793][ T9540]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  126.441817][ T9540]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  126.441858][ T9540]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  126.441873][ T9540]  ? trace_kmalloc+0x1f/0xd0
[  126.441887][ T9540]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  126.441905][ T9540]  ? kstrndup+0xbf/0x160
[  126.441927][ T9540]  hwsim_new_radio_nl+0xea4/0x1b10
[  126.441946][ T9540]  ? __pfx___nla_validate_parse+0x10/0x10
[  126.441977][ T9540]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  126.442005][ T9540]  ? __nla_parse+0x40/0x60
[  126.442026][ T9540]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  126.442078][ T9540]  genl_family_rcv_msg_doit+0x215/0x300
[  126.442103][ T9540]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  126.442132][ T9540]  ? bpf_lsm_capable+0x9/0x20
[  126.442148][ T9540]  ? security_capable+0x7e/0x2e0
[  126.442174][ T9540]  genl_rcv_msg+0x60e/0x790
[  126.442195][ T9540]  ? __pfx_genl_rcv_msg+0x10/0x10
[  126.442210][ T9540]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  126.442239][ T9540]  netlink_rcv_skb+0x208/0x470
[  126.442249][ T9540]  ? __lock_acquire+0xab9/0xd20
[  126.442267][ T9540]  ? __pfx_genl_rcv_msg+0x10/0x10
[  126.442284][ T9540]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  126.442312][ T9540]  ? down_read+0x1ad/0x2e0
[  126.442328][ T9540]  genl_rcv+0x28/0x40
[  126.442343][ T9540]  netlink_unicast+0x82f/0x9e0
[  126.442368][ T9540]  ? __pfx_netlink_unicast+0x10/0x10
[  126.442388][ T9540]  ? netlink_sendmsg+0x642/0xb30
[  126.442399][ T9540]  ? skb_put+0x11b/0x210
[  126.442416][ T9540]  netlink_sendmsg+0x805/0xb30
[  126.442436][ T9540]  ? __pfx_netlink_sendmsg+0x10/0x10
[  126.442452][ T9540]  ? aa_sock_msg_perm+0xf1/0x1d0
[  126.442476][ T9540]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  126.442490][ T9540]  ? __pfx_netlink_sendmsg+0x10/0x10
[  126.442504][ T9540]  __sock_sendmsg+0x21c/0x270
[  126.442527][ T9540]  ____sys_sendmsg+0x505/0x830
[  126.442547][ T9540]  ? __pfx_____sys_sendmsg+0x10/0x10
[  126.442570][ T9540]  ? import_iovec+0x74/0xa0
[  126.442588][ T9540]  ___sys_sendmsg+0x21f/0x2a0
[  126.442605][ T9540]  ? __pfx____sys_sendmsg+0x10/0x10
[  126.442650][ T9540]  ? __fget_files+0x2a/0x420
[  126.442661][ T9540]  ? __fget_files+0x3a0/0x420
[  126.442681][ T9540]  __x64_sys_sendmsg+0x19b/0x260
[  126.442697][ T9540]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  126.442719][ T9540]  ? rcu_is_watching+0x15/0xb0
[  126.442736][ T9540]  ? do_syscall_64+0xbe/0x3b0
[  126.442753][ T9540]  do_syscall_64+0xfa/0x3b0
[  126.442765][ T9540]  ? lockdep_hardirqs_on+0x9c/0x150
[  126.442777][ T9540]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.442790][ T9540]  ? exc_page_fault+0x9f/0xf0
[  126.442804][ T9540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.442816][ T9540] RIP: 0033:0x7fd5e5f8ebe9
[  126.442829][ T9540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  126.442839][ T9540] RSP: 002b:00007fd5e6d57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  126.442854][ T9540] RAX: ffffffffffffffda RBX: 00007fd5e61c5fa0 RCX: 00007fd5e5f8ebe9
[  126.442862][ T9540] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  126.442870][ T9540] RBP: 00007fd5e6011e19 R08: 0000000000000000 R09: 0000000000000000
[  126.442877][ T9540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  126.442884][ T9540] R13: 00007fd5e61c6038 R14: 00007fd5e61c5fa0 R15: 00007fffa925af68
[  126.442909][ T9540]  </TASK>
[  126.665232][ T9542] netlink: zone id is out of range
[  126.667417][ T9542] netlink: zone id is out of range
[  126.669555][ T9542] netlink: zone id is out of range
[  126.671655][ T9542] netlink: zone id is out of range
[  126.673774][ T9542] netlink: zone id is out of range
[  126.676363][ T9542] netlink: zone id is out of range
[  126.678938][ T9542] netlink: zone id is out of range
[  126.681142][ T9542] netlink: zone id is out of range
[  126.683338][ T9542] netlink: zone id is out of range
[  126.834330][ T9557] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  126.838738][ T9557] CPU: 0 UID: 0 PID: 9557 Comm: syz.0.1054 Not tainted syzkaller #0 PREEMPT(full) 
[  126.838756][ T9557] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  126.838765][ T9557] Call Trace:
[  126.838771][ T9557]  <TASK>
[  126.838777][ T9557]  dump_stack_lvl+0x189/0x250
[  126.838802][ T9557]  ? __pfx_dump_stack_lvl+0x10/0x10
[  126.838817][ T9557]  ? __pfx__printk+0x10/0x10
[  126.838834][ T9557]  ? kernfs_path_from_node+0x2f/0x290
[  126.838865][ T9557]  ? kernfs_path_from_node+0x250/0x290
[  126.838879][ T9557]  ? kernfs_path_from_node+0x2f/0x290
[  126.838896][ T9557]  sysfs_warn_dup+0x8e/0xa0
[  126.838910][ T9557]  sysfs_do_create_link_sd+0xc0/0x110
[  126.838923][ T9557]  device_add_class_symlinks+0x1cf/0x240
[  126.838939][ T9557]  device_add+0x475/0xb50
[  126.838957][ T9557]  wiphy_register+0x1ba6/0x28d0
[  126.838980][ T9557]  ? __pfx_wiphy_register+0x10/0x10
[  126.838992][ T9557]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  126.839007][ T9557]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  126.839019][ T9557]  ieee80211_register_hw+0x3425/0x4080
[  126.839036][ T9557]  ? ieee80211_register_hw+0x14a1/0x4080
[  126.839071][ T9557]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  126.839083][ T9557]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  126.839098][ T9557]  ? __hrtimer_setup+0x187/0x210
[  126.839106][ T9557]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  126.839118][ T9557]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  126.839141][ T9557]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  126.839150][ T9557]  ? trace_kmalloc+0x1f/0xd0
[  126.839158][ T9557]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  126.839166][ T9557]  ? kstrndup+0xbf/0x160
[  126.839179][ T9557]  hwsim_new_radio_nl+0xea4/0x1b10
[  126.839190][ T9557]  ? __pfx___nla_validate_parse+0x10/0x10
[  126.839215][ T9557]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  126.839239][ T9557]  ? __nla_parse+0x40/0x60
[  126.839256][ T9557]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  126.839276][ T9557]  genl_family_rcv_msg_doit+0x215/0x300
[  126.839297][ T9557]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  126.839321][ T9557]  ? bpf_lsm_capable+0x9/0x20
[  126.839336][ T9557]  ? security_capable+0x7e/0x2e0
[  126.839356][ T9557]  genl_rcv_msg+0x60e/0x790
[  126.839375][ T9557]  ? __pfx_genl_rcv_msg+0x10/0x10
[  126.839390][ T9557]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  126.839416][ T9557]  netlink_rcv_skb+0x208/0x470
[  126.839426][ T9557]  ? __lock_acquire+0xab9/0xd20
[  126.839444][ T9557]  ? __pfx_genl_rcv_msg+0x10/0x10
[  126.839476][ T9557]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  126.839509][ T9557]  ? down_read+0x1ad/0x2e0
[  126.839523][ T9557]  genl_rcv+0x28/0x40
[  126.839535][ T9557]  netlink_unicast+0x82f/0x9e0
[  126.839559][ T9557]  ? __pfx_netlink_unicast+0x10/0x10
[  126.839576][ T9557]  ? netlink_sendmsg+0x642/0xb30
[  126.839587][ T9557]  ? skb_put+0x11b/0x210
[  126.839603][ T9557]  netlink_sendmsg+0x805/0xb30
[  126.839621][ T9557]  ? __pfx_netlink_sendmsg+0x10/0x10
[  126.839634][ T9557]  ? aa_sock_msg_perm+0xf1/0x1d0
[  126.839647][ T9557]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  126.839661][ T9557]  ? __pfx_netlink_sendmsg+0x10/0x10
[  126.839673][ T9557]  __sock_sendmsg+0x21c/0x270
[  126.839693][ T9557]  ____sys_sendmsg+0x505/0x830
[  126.839712][ T9557]  ? __pfx_____sys_sendmsg+0x10/0x10
[  126.839732][ T9557]  ? import_iovec+0x74/0xa0
[  126.839748][ T9557]  ___sys_sendmsg+0x21f/0x2a0
[  126.839762][ T9557]  ? __pfx____sys_sendmsg+0x10/0x10
[  126.839787][ T9557]  ? __fget_files+0x2a/0x420
[  126.839793][ T9557]  ? __fget_files+0x3a0/0x420
[  126.839804][ T9557]  __x64_sys_sendmsg+0x19b/0x260
[  126.839813][ T9557]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  126.839825][ T9557]  ? rcu_is_watching+0x15/0xb0
[  126.839834][ T9557]  ? do_syscall_64+0xbe/0x3b0
[  126.839844][ T9557]  do_syscall_64+0xfa/0x3b0
[  126.839850][ T9557]  ? lockdep_hardirqs_on+0x9c/0x150
[  126.839857][ T9557]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.839864][ T9557]  ? exc_page_fault+0x9f/0xf0
[  126.839871][ T9557]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.839878][ T9557] RIP: 0033:0x7fa0da38ebe9
[  126.839886][ T9557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  126.839893][ T9557] RSP: 002b:00007fa0db230038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  126.839903][ T9557] RAX: ffffffffffffffda RBX: 00007fa0da5c5fa0 RCX: 00007fa0da38ebe9
[  126.839908][ T9557] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  126.839912][ T9557] RBP: 00007fa0da411e19 R08: 0000000000000000 R09: 0000000000000000
[  126.839916][ T9557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  126.839920][ T9557] R13: 00007fa0da5c6038 R14: 00007fa0da5c5fa0 R15: 00007ffcbd8a2be8
[  126.839933][ T9557]  </TASK>
[  126.852370][ T9559] team0: No ports can be present during mode change
[  127.058578][ T9571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1059'.
[  127.127444][   T51] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  127.129061][ T9577] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1062'.
[  127.226866][ T9592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1065'.
[  127.234997][ T9592] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1065'.
[  127.551477][ T9617] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1074'.
[  127.594809][ T8451] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  127.783686][ T9637] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1081'.
[  127.827455][ T9642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1080'.
[  127.847512][ T9642] team0: Port device vlan0 removed
[  127.849616][ T9642] batadv1: left allmulticast mode
[  127.851421][ T9642] batadv1: left promiscuous mode
[  127.853272][ T9642] bridge0: port 1(batadv1) entered disabled state
[  127.858990][ T9642] bond2: (slave bridge2): Releasing backup interface
[  127.862427][ T9642] bond3: (slave bridge3): Releasing active interface
[  127.873428][ T9642] rdma_op ffff888104cea1f0 conn xmit_rdma 0000000000000000
[  127.877600][ T9644] syzkaller1: entered promiscuous mode
[  127.879411][ T9644] syzkaller1: entered allmulticast mode
[  128.568937][ T9686] unsupported nlmsg_type 40
[  128.806376][ T9701] netlink: 'syz.0.1101': attribute type 10 has an invalid length.
[  129.089406][ T9720] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  129.093396][ T9720] CPU: 0 UID: 0 PID: 9720 Comm: syz.0.1107 Not tainted syzkaller #0 PREEMPT(full) 
[  129.093406][ T9720] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  129.093412][ T9720] Call Trace:
[  129.093416][ T9720]  <TASK>
[  129.093419][ T9720]  dump_stack_lvl+0x189/0x250
[  129.093434][ T9720]  ? __pfx_dump_stack_lvl+0x10/0x10
[  129.093442][ T9720]  ? __pfx__printk+0x10/0x10
[  129.093455][ T9720]  ? kernfs_path_from_node+0x2f/0x290
[  129.093463][ T9720]  ? kernfs_path_from_node+0x250/0x290
[  129.093470][ T9720]  ? kernfs_path_from_node+0x2f/0x290
[  129.093479][ T9720]  sysfs_warn_dup+0x8e/0xa0
[  129.093487][ T9720]  sysfs_do_create_link_sd+0xc0/0x110
[  129.093496][ T9720]  device_add_class_symlinks+0x1cf/0x240
[  129.093506][ T9720]  device_add+0x475/0xb50
[  129.093516][ T9720]  wiphy_register+0x1ba6/0x28d0
[  129.093530][ T9720]  ? __pfx_wiphy_register+0x10/0x10
[  129.093537][ T9720]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  129.093549][ T9720]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  129.093560][ T9720]  ieee80211_register_hw+0x3425/0x4080
[  129.093577][ T9720]  ? ieee80211_register_hw+0x14a1/0x4080
[  129.093590][ T9720]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  129.093600][ T9720]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  129.093615][ T9720]  ? __hrtimer_setup+0x187/0x210
[  129.093621][ T9720]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  129.093633][ T9720]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  129.093653][ T9720]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  129.093662][ T9720]  ? trace_kmalloc+0x1f/0xd0
[  129.093669][ T9720]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  129.093678][ T9720]  ? kstrndup+0xbf/0x160
[  129.093689][ T9720]  hwsim_new_radio_nl+0xea4/0x1b10
[  129.093701][ T9720]  ? __pfx___nla_validate_parse+0x10/0x10
[  129.093718][ T9720]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  129.093733][ T9720]  ? __nla_parse+0x40/0x60
[  129.093745][ T9720]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  129.093764][ T9720]  genl_family_rcv_msg_doit+0x215/0x300
[  129.093777][ T9720]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  129.093792][ T9720]  ? bpf_lsm_capable+0x9/0x20
[  129.093801][ T9720]  ? security_capable+0x7e/0x2e0
[  129.093815][ T9720]  genl_rcv_msg+0x60e/0x790
[  129.093827][ T9720]  ? __pfx_genl_rcv_msg+0x10/0x10
[  129.093836][ T9720]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  129.093852][ T9720]  netlink_rcv_skb+0x208/0x470
[  129.093858][ T9720]  ? __lock_acquire+0xab9/0xd20
[  129.093868][ T9720]  ? __pfx_genl_rcv_msg+0x10/0x10
[  129.093878][ T9720]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  129.093893][ T9720]  ? down_read+0x1ad/0x2e0
[  129.093902][ T9720]  genl_rcv+0x28/0x40
[  129.093910][ T9720]  netlink_unicast+0x82f/0x9e0
[  129.093923][ T9720]  ? __pfx_netlink_unicast+0x10/0x10
[  129.093933][ T9720]  ? netlink_sendmsg+0x642/0xb30
[  129.093939][ T9720]  ? skb_put+0x11b/0x210
[  129.093948][ T9720]  netlink_sendmsg+0x805/0xb30
[  129.093958][ T9720]  ? __pfx_netlink_sendmsg+0x10/0x10
[  129.093966][ T9720]  ? aa_sock_msg_perm+0xf1/0x1d0
[  129.093974][ T9720]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  129.093981][ T9720]  ? __pfx_netlink_sendmsg+0x10/0x10
[  129.093988][ T9720]  __sock_sendmsg+0x21c/0x270
[  129.093998][ T9720]  ____sys_sendmsg+0x505/0x830
[  129.094009][ T9720]  ? __pfx_____sys_sendmsg+0x10/0x10
[  129.094044][ T9720]  ? import_iovec+0x74/0xa0
[  129.094056][ T9720]  ___sys_sendmsg+0x21f/0x2a0
[  129.094066][ T9720]  ? __pfx____sys_sendmsg+0x10/0x10
[  129.094089][ T9720]  ? __fget_files+0x2a/0x420
[  129.094096][ T9720]  ? __fget_files+0x3a0/0x420
[  129.094107][ T9720]  __x64_sys_sendmsg+0x19b/0x260
[  129.094116][ T9720]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  129.094129][ T9720]  ? rcu_is_watching+0x15/0xb0
[  129.094138][ T9720]  ? do_syscall_64+0xbe/0x3b0
[  129.094148][ T9720]  do_syscall_64+0xfa/0x3b0
[  129.094154][ T9720]  ? lockdep_hardirqs_on+0x9c/0x150
[  129.094162][ T9720]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.094169][ T9720]  ? exc_page_fault+0x9f/0xf0
[  129.094176][ T9720]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.094182][ T9720] RIP: 0033:0x7fa0da38ebe9
[  129.094190][ T9720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  129.094196][ T9720] RSP: 002b:00007fa0db230038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  129.094204][ T9720] RAX: ffffffffffffffda RBX: 00007fa0da5c5fa0 RCX: 00007fa0da38ebe9
[  129.094209][ T9720] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  129.094213][ T9720] RBP: 00007fa0da411e19 R08: 0000000000000000 R09: 0000000000000000
[  129.094218][ T9720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  129.094221][ T9720] R13: 00007fa0da5c6038 R14: 00007fa0da5c5fa0 R15: 00007ffcbd8a2be8
[  129.094234][ T9720]  </TASK>
[  129.313891][ T9723] netlink: 'syz.0.1108': attribute type 5 has an invalid length.
[  129.328952][ T9722] lo speed is unknown, defaulting to 1000
[  129.732135][ T9756] team0: Mode "l" not found
[  129.804415][ T9771] netlink: 'syz.2.1123': attribute type 1 has an invalid length.
[  129.821558][ T9771] veth9: entered promiscuous mode
[  129.832806][ T9773] tipc: Resetting bearer <eth:syzkaller0>
[  129.835089][ T9773] tipc: Resetting bearer <eth:syzkaller0>
[  129.996817][   T33] audit: type=1107 audit(1756948310.825:4): pid=9790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  130.248530][ T9818] netlink: 'syz.1.1139': attribute type 26 has an invalid length.
[  130.275859][ T9819] lo speed is unknown, defaulting to 1000
[  131.163415][ T9858] netlink: 'syz.0.1149': attribute type 9 has an invalid length.
[  131.168611][ T9858] __nla_validate_parse: 14 callbacks suppressed
[  131.168623][ T9858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1149'.
[  131.178372][ T9858] macvlan1: entered promiscuous mode
[  131.180678][ T9858] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  131.184039][ T9858] macvlan1: entered allmulticast mode
[  131.186799][ T9858] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  131.190462][ T9858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1149'.
[  131.592377][ T9892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1158'.
[  131.639564][ T9892] bond12: (slave vxcan5): The slave device specified does not support setting the MAC address
[  131.645506][ T9892] bond12: (slave vxcan5): Error -95 calling set_mac_address
[  131.687087][ T9899] vlan2: entered promiscuous mode
[  131.688800][ T9899] bond0: entered promiscuous mode
[  131.690700][ T9899] vlan2: entered allmulticast mode
[  131.800833][ T9906] !: renamed from xfrm0
[  131.831411][ T9910] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  131.833727][ T9910] net_ratelimit: 17 callbacks suppressed
[  131.833735][ T9910] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  131.898076][ T9916] netlink: 'syz.0.1165': attribute type 2 has an invalid length.
[  131.952054][ T9922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1167'.
[  132.092266][ T9929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1170'.
[  132.099065][ T9929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1170'.
[  132.160727][ T9934] netlink: 'syz.1.1172': attribute type 3 has an invalid length.
[  132.163872][ T9934] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1172'.
[  132.169198][ T9934] netlink: 'syz.1.1172': attribute type 3 has an invalid length.
[  132.172801][ T9934] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1172'.
[  132.230782][ T9938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1174'.
[  132.276204][ T9942] bond3: (slave ip6gretap1): Releasing active interface
[  132.295638][ T5892] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  132.337356][ T9942] lo speed is unknown, defaulting to 1000
[  132.424886][ T5892] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  132.519963][ T9956] lo speed is unknown, defaulting to 1000
[  132.527508][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.612702][ T9961] netlink: 'syz.1.1181': attribute type 1 has an invalid length.
[  132.615584][ T9961] netlink: 'syz.1.1181': attribute type 3 has an invalid length.
[  132.618189][ T9961] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1181'.
[  132.621206][ T9961] NCSI netlink: No device for ifindex 246
[  132.645651][ T9963] smc: net device bond0 erased user defined pnetid SYZ2
[  142.764974][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  143.606702][ T9986] netlink: 'syz.0.1187': attribute type 1 has an invalid length.
[  143.615688][ T9986] netlink: 'syz.0.1187': attribute type 2 has an invalid length.
[  143.632834][ T9986] k*: entered promiscuous mode
[  143.660477][ T9986] 8021q: adding VLAN 0 to HW filter on device bond0
[  143.668983][ T9986] 8021q: adding VLAN 0 to HW filter on device team0
[  143.672961][ T9986] !: left promiscuous mode
[  143.676997][ T9986] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  143.691667][ T9994] netlink: 'syz.2.1191': attribute type 10 has an invalid length.
[  143.715571][ T9994] 8021q: adding VLAN 0 to HW filter on device team0
[  143.731746][ T9994] netlink: 'syz.2.1191': attribute type 10 has an invalid length.
[  143.739312][ T9994] syz_tun: entered promiscuous mode
[  143.781827][T10003] __nla_validate_parse: 2 callbacks suppressed
[  143.781835][T10003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1194'.
[  143.870268][T10005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1195'.
[  143.873950][T10005] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1195'.
[  144.000759][T10022] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  144.006669][T10022] CPU: 1 UID: 0 PID: 10022 Comm: syz.0.1200 Not tainted syzkaller #0 PREEMPT(full) 
[  144.006686][T10022] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  144.006694][T10022] Call Trace:
[  144.006698][T10022]  <TASK>
[  144.006705][T10022]  dump_stack_lvl+0x189/0x250
[  144.006725][T10022]  ? __pfx_dump_stack_lvl+0x10/0x10
[  144.006739][T10022]  ? __pfx__printk+0x10/0x10
[  144.006758][T10022]  ? kernfs_path_from_node+0x2f/0x290
[  144.006772][T10022]  ? kernfs_path_from_node+0x250/0x290
[  144.006783][T10022]  ? kernfs_path_from_node+0x2f/0x290
[  144.006800][T10022]  sysfs_warn_dup+0x8e/0xa0
[  144.006813][T10022]  sysfs_do_create_link_sd+0xc0/0x110
[  144.006828][T10022]  device_add_class_symlinks+0x1cf/0x240
[  144.006843][T10022]  device_add+0x475/0xb50
[  144.006859][T10022]  wiphy_register+0x1ba6/0x28d0
[  144.006926][T10022]  ? __pfx_wiphy_register+0x10/0x10
[  144.006939][T10022]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  144.006977][T10022]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  144.006998][T10022]  ieee80211_register_hw+0x3425/0x4080
[  144.007026][T10022]  ? ieee80211_register_hw+0x14a1/0x4080
[  144.007046][T10022]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  144.007064][T10022]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  144.007089][T10022]  ? __hrtimer_setup+0x187/0x210
[  144.007100][T10022]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  144.007119][T10022]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  144.007158][T10022]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  144.007175][T10022]  ? trace_kmalloc+0x1f/0xd0
[  144.007188][T10022]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  144.007203][T10022]  ? kstrndup+0xbf/0x160
[  144.007221][T10022]  hwsim_new_radio_nl+0xea4/0x1b10
[  144.007238][T10022]  ? __pfx___nla_validate_parse+0x10/0x10
[  144.007265][T10022]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  144.007289][T10022]  ? __nla_parse+0x40/0x60
[  144.007308][T10022]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  144.007328][T10022]  genl_family_rcv_msg_doit+0x215/0x300
[  144.007348][T10022]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  144.007370][T10022]  ? bpf_lsm_capable+0x9/0x20
[  144.007383][T10022]  ? security_capable+0x7e/0x2e0
[  144.007403][T10022]  genl_rcv_msg+0x60e/0x790
[  144.007421][T10022]  ? __pfx_genl_rcv_msg+0x10/0x10
[  144.007434][T10022]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  144.007458][T10022]  netlink_rcv_skb+0x208/0x470
[  144.007467][T10022]  ? __lock_acquire+0xab9/0xd20
[  144.007483][T10022]  ? __pfx_genl_rcv_msg+0x10/0x10
[  144.007498][T10022]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  144.007520][T10022]  ? down_read+0x1ad/0x2e0
[  144.007536][T10022]  genl_rcv+0x28/0x40
[  144.007549][T10022]  netlink_unicast+0x82f/0x9e0
[  144.007574][T10022]  ? __pfx_netlink_unicast+0x10/0x10
[  144.007592][T10022]  ? netlink_sendmsg+0x642/0xb30
[  144.007609][T10022]  ? skb_put+0x11b/0x210
[  144.007625][T10022]  netlink_sendmsg+0x805/0xb30
[  144.007646][T10022]  ? __pfx_netlink_sendmsg+0x10/0x10
[  144.007661][T10022]  ? aa_sock_msg_perm+0xf1/0x1d0
[  144.007676][T10022]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  144.007690][T10022]  ? __pfx_netlink_sendmsg+0x10/0x10
[  144.007701][T10022]  __sock_sendmsg+0x21c/0x270
[  144.007719][T10022]  ____sys_sendmsg+0x505/0x830
[  144.007735][T10022]  ? __pfx_____sys_sendmsg+0x10/0x10
[  144.007757][T10022]  ? import_iovec+0x74/0xa0
[  144.007774][T10022]  ___sys_sendmsg+0x21f/0x2a0
[  144.007789][T10022]  ? __pfx____sys_sendmsg+0x10/0x10
[  144.007830][T10022]  ? __fget_files+0x2a/0x420
[  144.007840][T10022]  ? __fget_files+0x3a0/0x420
[  144.007858][T10022]  __x64_sys_sendmsg+0x19b/0x260
[  144.007874][T10022]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  144.007924][T10022]  ? rcu_is_watching+0x15/0xb0
[  144.007941][T10022]  ? do_syscall_64+0xbe/0x3b0
[  144.007959][T10022]  do_syscall_64+0xfa/0x3b0
[  144.007969][T10022]  ? lockdep_hardirqs_on+0x9c/0x150
[  144.007979][T10022]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.007990][T10022]  ? exc_page_fault+0x9f/0xf0
[  144.008002][T10022]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.008013][T10022] RIP: 0033:0x7fa0da38ebe9
[  144.008025][T10022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  144.008034][T10022] RSP: 002b:00007fa0db230038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  144.008048][T10022] RAX: ffffffffffffffda RBX: 00007fa0da5c5fa0 RCX: 00007fa0da38ebe9
[  144.008056][T10022] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  144.008065][T10022] RBP: 00007fa0da411e19 R08: 0000000000000000 R09: 0000000000000000
[  144.008072][T10022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  144.008079][T10022] R13: 00007fa0da5c6038 R14: 00007fa0da5c5fa0 R15: 00007ffcbd8a2be8
[  144.008100][T10022]  </TASK>
[  144.061937][T10023] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1199'.
[  144.065420][T10020] vlan0: entered promiscuous mode
[  144.205945][T10020] macvtap0: entered promiscuous mode
[  144.278594][T10029] veth0: entered promiscuous mode
[  144.280585][T10029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1203'.
[  144.306925][T10029] veth0 (unregistering): left promiscuous mode
[  144.373993][T10037] bond5: entered promiscuous mode
[  144.377096][T10037] bond5: entered allmulticast mode
[  144.379086][T10037] 8021q: adding VLAN 0 to HW filter on device bond5
[  144.427846][T10044] lo speed is unknown, defaulting to 1000
[  144.689626][T10066] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1212'.
[  144.781784][T10069] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1213'.
[  144.786520][T10069] netlink: 'syz.2.1213': attribute type 32 has an invalid length.
[  144.788980][T10069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1213'.
[  144.792237][T10069] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  144.846693][T10073] netlink: 'syz.2.1214': attribute type 5 has an invalid length.
[  144.848429][T10072] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1214'.
[  144.850188][T10073] netlink: 'syz.2.1214': attribute type 5 has an invalid length.
[  144.856311][T10072] IPv6: sit3: Disabled Multicast RS
[  144.856853][T10073] netlink: 'syz.2.1214': attribute type 5 has an invalid length.
[  144.859338][T10072] sit3: entered allmulticast mode
[  144.861783][T10073] netlink: 'syz.2.1214': attribute type 5 has an invalid length.
[  144.868666][T10073] netlink: 'syz.2.1214': attribute type 5 has an invalid length.
[  144.927937][T10076] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1215'.
[  145.263358][T10087] ip6tnl1: entered allmulticast mode
[  145.741954][T10124] lo speed is unknown, defaulting to 1000
[  145.897270][T10130] veth1: entered promiscuous mode
[  145.904033][T10130] erspan0: entered allmulticast mode
[  145.967915][T10143] team0: Mode "l" not found
[  146.141350][T10164] openvswitch: netlink: Flow key attr not present in new flow.
[  146.255709][T10170] syzkaller0: entered promiscuous mode
[  146.257972][T10170] syzkaller0: entered allmulticast mode
[  146.282565][T10177] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  146.292953][T10177] CPU: 1 UID: 0 PID: 10177 Comm: syz.0.1248 Not tainted syzkaller #0 PREEMPT(full) 
[  146.292971][T10177] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  146.292978][T10177] Call Trace:
[  146.292984][T10177]  <TASK>
[  146.292990][T10177]  dump_stack_lvl+0x189/0x250
[  146.293012][T10177]  ? __pfx_dump_stack_lvl+0x10/0x10
[  146.293026][T10177]  ? __pfx__printk+0x10/0x10
[  146.293047][T10177]  ? kernfs_path_from_node+0x2f/0x290
[  146.293060][T10177]  ? kernfs_path_from_node+0x250/0x290
[  146.293071][T10177]  ? kernfs_path_from_node+0x2f/0x290
[  146.293087][T10177]  sysfs_warn_dup+0x8e/0xa0
[  146.293100][T10177]  sysfs_do_create_link_sd+0xc0/0x110
[  146.293115][T10177]  device_add_class_symlinks+0x1cf/0x240
[  146.293131][T10177]  device_add+0x475/0xb50
[  146.293147][T10177]  wiphy_register+0x1ba6/0x28d0
[  146.293173][T10177]  ? __pfx_wiphy_register+0x10/0x10
[  146.293185][T10177]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  146.293206][T10177]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  146.293224][T10177]  ieee80211_register_hw+0x3425/0x4080
[  146.293253][T10177]  ? ieee80211_register_hw+0x14a1/0x4080
[  146.293294][T10177]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  146.293314][T10177]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  146.293338][T10177]  ? __hrtimer_setup+0x187/0x210
[  146.293348][T10177]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  146.293369][T10177]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  146.293408][T10177]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  146.293422][T10177]  ? trace_kmalloc+0x1f/0xd0
[  146.293435][T10177]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  146.293450][T10177]  ? kstrndup+0xbf/0x160
[  146.293469][T10177]  hwsim_new_radio_nl+0xea4/0x1b10
[  146.293487][T10177]  ? __pfx___nla_validate_parse+0x10/0x10
[  146.293516][T10177]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  146.293541][T10177]  ? __nla_parse+0x40/0x60
[  146.293560][T10177]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  146.293582][T10177]  genl_family_rcv_msg_doit+0x215/0x300
[  146.293602][T10177]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  146.293626][T10177]  ? bpf_lsm_capable+0x9/0x20
[  146.293643][T10177]  ? security_capable+0x7e/0x2e0
[  146.293664][T10177]  genl_rcv_msg+0x60e/0x790
[  146.293685][T10177]  ? __pfx_genl_rcv_msg+0x10/0x10
[  146.293699][T10177]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  146.293725][T10177]  netlink_rcv_skb+0x208/0x470
[  146.293735][T10177]  ? __lock_acquire+0xab9/0xd20
[  146.293751][T10177]  ? __pfx_genl_rcv_msg+0x10/0x10
[  146.293768][T10177]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  146.293793][T10177]  ? down_read+0x1ad/0x2e0
[  146.293808][T10177]  genl_rcv+0x28/0x40
[  146.293820][T10177]  netlink_unicast+0x82f/0x9e0
[  146.293843][T10177]  ? __pfx_netlink_unicast+0x10/0x10
[  146.293889][T10177]  ? netlink_sendmsg+0x642/0xb30
[  146.293901][T10177]  ? skb_put+0x11b/0x210
[  146.293918][T10177]  netlink_sendmsg+0x805/0xb30
[  146.293939][T10177]  ? __pfx_netlink_sendmsg+0x10/0x10
[  146.293955][T10177]  ? aa_sock_msg_perm+0xf1/0x1d0
[  146.293968][T10177]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  146.293979][T10177]  ? __pfx_netlink_sendmsg+0x10/0x10
[  146.293991][T10177]  __sock_sendmsg+0x21c/0x270
[  146.294010][T10177]  ____sys_sendmsg+0x505/0x830
[  146.294028][T10177]  ? __pfx_____sys_sendmsg+0x10/0x10
[  146.294050][T10177]  ? import_iovec+0x74/0xa0
[  146.294067][T10177]  ___sys_sendmsg+0x21f/0x2a0
[  146.294083][T10177]  ? __pfx____sys_sendmsg+0x10/0x10
[  146.294127][T10177]  ? __fget_files+0x2a/0x420
[  146.294137][T10177]  ? __fget_files+0x3a0/0x420
[  146.294156][T10177]  __x64_sys_sendmsg+0x19b/0x260
[  146.294172][T10177]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  146.294195][T10177]  ? rcu_is_watching+0x15/0xb0
[  146.294211][T10177]  ? do_syscall_64+0xbe/0x3b0
[  146.294228][T10177]  do_syscall_64+0xfa/0x3b0
[  146.294239][T10177]  ? lockdep_hardirqs_on+0x9c/0x150
[  146.294252][T10177]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.294264][T10177]  ? exc_page_fault+0x9f/0xf0
[  146.294284][T10177]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.294295][T10177] RIP: 0033:0x7fa0da38ebe9
[  146.294308][T10177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  146.294318][T10177] RSP: 002b:00007fa0db230038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  146.294333][T10177] RAX: ffffffffffffffda RBX: 00007fa0da5c5fa0 RCX: 00007fa0da38ebe9
[  146.294342][T10177] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  146.294350][T10177] RBP: 00007fa0da411e19 R08: 0000000000000000 R09: 0000000000000000
[  146.294357][T10177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  146.294364][T10177] R13: 00007fa0da5c6038 R14: 00007fa0da5c5fa0 R15: 00007ffcbd8a2be8
[  146.294388][T10177]  </TASK>
[  146.751695][T10194] erspan0: entered promiscuous mode
[  146.753932][T10194] erspan0: left allmulticast mode
[  146.770899][T10194] bond0: left promiscuous mode
[  146.773528][T10194] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.776558][T10194] 8021q: adding VLAN 0 to HW filter on device team0
[  146.783483][T10194] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  146.790361][  T972] lo speed is unknown, defaulting to 1000
[  146.793579][  T972] syz1: Port: 1 Link ACTIVE
[  146.992641][T10203] sctp: [Deprecated]: syz.2.1257 (pid 10203) Use of struct sctp_assoc_value in delayed_ack socket option.
[  146.992641][T10203] Use struct sctp_sack_info instead
[  146.999454][T10204] sctp: [Deprecated]: syz.2.1257 (pid 10204) Use of struct sctp_assoc_value in delayed_ack socket option.
[  146.999454][T10204] Use struct sctp_sack_info instead
[  147.121035][T10208] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20000
[  147.278248][T10216] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  147.726656][T10238] team0: Mode "l" not found
[  147.774900][T10236] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  148.316344][T10279] 8021q: adding VLAN 0 to HW filter on device team0
[  148.319513][T10279] team0: entered promiscuous mode
[  148.321592][T10279] team0: entered allmulticast mode
[  148.324298][T10279] bond0: (slave team0): Enslaving as an active interface with an up link
[  148.331184][T10280] syz_tun: entered promiscuous mode
[  148.333531][T10280] syz_tun: entered allmulticast mode
[  148.338779][T10280] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  148.360377][T10277] bond9: option mode: unable to set because the bond device has slaves
[  149.276774][T10312] __nla_validate_parse: 26 callbacks suppressed
[  149.276783][T10312] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1291'.
[  149.410618][T10314] team0: Mode "l" not found
[  149.580330][T10330] validate_nla: 39 callbacks suppressed
[  149.580344][T10330] netlink: 'syz.2.1298': attribute type 1 has an invalid length.
[  149.627290][T10343] openvswitch: netlink: ufid size 18 bytes exceeds the range (1, 16)
[  149.630685][T10343] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  149.701386][T10345] netlink: 'syz.0.1302': attribute type 83 has an invalid length.
[  149.745750][T10354] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1305'.
[  149.749763][T10354] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1305'.
[  149.759501][T10354] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1305'.
[  149.772918][T10354] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1305'.
[  149.779174][T10357] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1306'.
[  149.841046][T10355] netlink: 164060 bytes leftover after parsing attributes in process `syz.0.1305'.
[  149.841053][T10358] netlink: 164060 bytes leftover after parsing attributes in process `syz.0.1305'.
[  149.923161][T10364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1309'.
[  149.937439][T10366] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  149.942434][T10366] CPU: 1 UID: 0 PID: 10366 Comm: syz.0.1310 Not tainted syzkaller #0 PREEMPT(full) 
[  149.942451][T10366] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  149.942458][T10366] Call Trace:
[  149.942464][T10366]  <TASK>
[  149.942470][T10366]  dump_stack_lvl+0x189/0x250
[  149.942493][T10366]  ? __pfx_dump_stack_lvl+0x10/0x10
[  149.942511][T10366]  ? __pfx__printk+0x10/0x10
[  149.942531][T10366]  ? kernfs_path_from_node+0x2f/0x290
[  149.942543][T10366]  ? kernfs_path_from_node+0x250/0x290
[  149.942554][T10366]  ? kernfs_path_from_node+0x2f/0x290
[  149.942570][T10366]  sysfs_warn_dup+0x8e/0xa0
[  149.942582][T10366]  sysfs_do_create_link_sd+0xc0/0x110
[  149.942596][T10366]  device_add_class_symlinks+0x1cf/0x240
[  149.942613][T10366]  device_add+0x475/0xb50
[  149.942630][T10366]  wiphy_register+0x1ba6/0x28d0
[  149.942656][T10366]  ? __pfx_wiphy_register+0x10/0x10
[  149.942668][T10366]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  149.942690][T10366]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  149.942710][T10366]  ieee80211_register_hw+0x3425/0x4080
[  149.942740][T10366]  ? ieee80211_register_hw+0x14a1/0x4080
[  149.942764][T10366]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  149.942782][T10366]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  149.942808][T10366]  ? __hrtimer_setup+0x187/0x210
[  149.942819][T10366]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  149.942867][T10366]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  149.942908][T10366]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  149.942924][T10366]  ? trace_kmalloc+0x1f/0xd0
[  149.942938][T10366]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  149.942954][T10366]  ? kstrndup+0xbf/0x160
[  149.942975][T10366]  hwsim_new_radio_nl+0xea4/0x1b10
[  149.942994][T10366]  ? __pfx___nla_validate_parse+0x10/0x10
[  149.943019][T10366]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  149.943047][T10366]  ? __nla_parse+0x40/0x60
[  149.943070][T10366]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  149.943091][T10366]  genl_family_rcv_msg_doit+0x215/0x300
[  149.943112][T10366]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  149.943137][T10366]  ? bpf_lsm_capable+0x9/0x20
[  149.943150][T10366]  ? security_capable+0x7e/0x2e0
[  149.943168][T10366]  genl_rcv_msg+0x60e/0x790
[  149.943185][T10366]  ? __pfx_genl_rcv_msg+0x10/0x10
[  149.943200][T10366]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  149.943223][T10366]  netlink_rcv_skb+0x208/0x470
[  149.943233][T10366]  ? __lock_acquire+0xab9/0xd20
[  149.943250][T10366]  ? __pfx_genl_rcv_msg+0x10/0x10
[  149.943266][T10366]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  149.943299][T10366]  ? down_read+0x1ad/0x2e0
[  149.943316][T10366]  genl_rcv+0x28/0x40
[  149.943330][T10366]  netlink_unicast+0x82f/0x9e0
[  149.943357][T10366]  ? __pfx_netlink_unicast+0x10/0x10
[  149.943374][T10366]  ? netlink_sendmsg+0x642/0xb30
[  149.943385][T10366]  ? skb_put+0x11b/0x210
[  149.943400][T10366]  netlink_sendmsg+0x805/0xb30
[  149.943441][T10366]  ? __pfx_netlink_sendmsg+0x10/0x10
[  149.943457][T10366]  ? aa_sock_msg_perm+0xf1/0x1d0
[  149.943471][T10366]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  149.943484][T10366]  ? __pfx_netlink_sendmsg+0x10/0x10
[  149.943498][T10366]  __sock_sendmsg+0x21c/0x270
[  149.943516][T10366]  ____sys_sendmsg+0x505/0x830
[  149.943534][T10366]  ? __pfx_____sys_sendmsg+0x10/0x10
[  149.943554][T10366]  ? import_iovec+0x74/0xa0
[  149.943572][T10366]  ___sys_sendmsg+0x21f/0x2a0
[  149.943586][T10366]  ? __pfx____sys_sendmsg+0x10/0x10
[  149.943626][T10366]  ? __fget_files+0x2a/0x420
[  149.943637][T10366]  ? __fget_files+0x3a0/0x420
[  149.943656][T10366]  __x64_sys_sendmsg+0x19b/0x260
[  149.943673][T10366]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  149.943696][T10366]  ? rcu_is_watching+0x15/0xb0
[  149.943712][T10366]  ? do_syscall_64+0xbe/0x3b0
[  149.943728][T10366]  do_syscall_64+0xfa/0x3b0
[  149.943740][T10366]  ? lockdep_hardirqs_on+0x9c/0x150
[  149.943750][T10366]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.943763][T10366]  ? exc_page_fault+0x9f/0xf0
[  149.943776][T10366]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.943789][T10366] RIP: 0033:0x7fa0da38ebe9
[  149.943801][T10366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  149.943811][T10366] RSP: 002b:00007fa0db230038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  149.943850][T10366] RAX: ffffffffffffffda RBX: 00007fa0da5c5fa0 RCX: 00007fa0da38ebe9
[  149.943859][T10366] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  149.943867][T10366] RBP: 00007fa0da411e19 R08: 0000000000000000 R09: 0000000000000000
[  149.943876][T10366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  149.943883][T10366] R13: 00007fa0da5c6038 R14: 00007fa0da5c5fa0 R15: 00007ffcbd8a2be8
[  149.943906][T10366]  </TASK>
[  150.192785][T10371] tipc: New replicast peer: 255.255.255.255
[  150.196707][T10371] tipc: Enabled bearer <udp:syz2>, priority 10
[  150.301323][T10373] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  150.431239][T10373] netlink: 'syz.0.1312': attribute type 1 has an invalid length.
[  150.434325][T10373] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1312'.
[  150.748989][T10398] pim6reg1: entered promiscuous mode
[  150.750811][T10398] pim6reg1: entered allmulticast mode
[  150.861562][T10402] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  150.864550][T10402] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  150.901952][T10402] 8021q: adding VLAN 0 to HW filter on device bond4
[  150.910187][T10402] team0: Port device bond4 added
[  150.976770][T10405] netlink: 'syz.2.1320': attribute type 1 has an invalid length.
[  150.980352][T10405] netlink: 'syz.2.1320': attribute type 1 has an invalid length.
[  151.091393][T10408] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  151.094887][T10408] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  151.415334][T10424] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  151.419408][T10424] netlink: 'syz.2.1326': attribute type 3 has an invalid length.
[  151.698203][T10454] netlink: 'syz.0.1336': attribute type 7 has an invalid length.
[  151.710865][T10457] bond0: Device is already in use.
[  151.746422][T10460] geneve3: entered promiscuous mode
[  151.748196][T10460] geneve3: entered allmulticast mode
[  151.922276][T10476] ieee802154 phy0 wpan0: encryption failed: -22
[  152.343348][T10497] team0: Mode "l" not found
[  152.364353][T10493] lo speed is unknown, defaulting to 1000
[  153.417172][T10528] hsr_slave_1 (unregistering): left promiscuous mode
[  153.543056][T10536] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20002
[  153.786850][T10556] tc_dump_action: action bad kind
[  153.861696][T10559] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.881630][T10559] syzkaller0: entered promiscuous mode
[  153.883406][T10559] syzkaller0: entered allmulticast mode
[  153.924434][T10558] tipc: Resetting bearer <eth:syzkaller0>
[  154.470992][T10562] __nla_validate_parse: 26 callbacks suppressed
[  154.471008][T10562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1374'.
[  154.914879][ T8451] tipc: Node number set to 468807168
[  154.927813][T10558] tipc: Disabling bearer <eth:syzkaller0>
[  154.939750][T10562] tipc: Resetting bearer <eth:syzkaller0>
[  154.991683][T10574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1378'.
[  154.998885][T10574] netlink: 'syz.0.1378': attribute type 1 has an invalid length.
[  155.001957][T10574] netlink: 'syz.0.1378': attribute type 2 has an invalid length.
[  155.244503][T10604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1387'.
[  155.252074][T10604] batman_adv: batadv0: Adding interface: ipvlan0
[  155.254363][T10604] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.263248][T10604] batman_adv: batadv0: Not using interface ipvlan0 (retrying later): interface not active
[  155.294201][T10609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1388'.
[  155.555666][   T51] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  155.622832][T10637] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1396'.
[  155.627539][T10637] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1396'.
[  155.630998][T10637] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1396'.
[  155.634433][T10637] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1396'.
[  155.842220][T10643] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  155.848924][ T5892] lo speed is unknown, defaulting to 1000
[  155.850948][ T5892] syz1: Port: 1 Link DOWN
[  156.088454][T10646] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  156.093679][T10646] CPU: 1 UID: 0 PID: 10646 Comm: syz.0.1398 Not tainted syzkaller #0 PREEMPT(full) 
[  156.093697][T10646] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  156.093705][T10646] Call Trace:
[  156.093712][T10646]  <TASK>
[  156.093718][T10646]  dump_stack_lvl+0x189/0x250
[  156.093743][T10646]  ? __pfx_dump_stack_lvl+0x10/0x10
[  156.093759][T10646]  ? __pfx__printk+0x10/0x10
[  156.093809][T10646]  ? kernfs_path_from_node+0x2f/0x290
[  156.093823][T10646]  ? kernfs_path_from_node+0x250/0x290
[  156.093836][T10646]  ? kernfs_path_from_node+0x2f/0x290
[  156.093854][T10646]  sysfs_warn_dup+0x8e/0xa0
[  156.093868][T10646]  sysfs_do_create_link_sd+0xc0/0x110
[  156.093885][T10646]  device_add_class_symlinks+0x1cf/0x240
[  156.093901][T10646]  device_add+0x475/0xb50
[  156.093917][T10646]  wiphy_register+0x1ba6/0x28d0
[  156.093944][T10646]  ? __pfx_wiphy_register+0x10/0x10
[  156.093956][T10646]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  156.093979][T10646]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  156.093999][T10646]  ieee80211_register_hw+0x3425/0x4080
[  156.094030][T10646]  ? ieee80211_register_hw+0x14a1/0x4080
[  156.094053][T10646]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  156.094072][T10646]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  156.094096][T10646]  ? __hrtimer_setup+0x187/0x210
[  156.094107][T10646]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  156.094129][T10646]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  156.094168][T10646]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  156.094182][T10646]  ? trace_kmalloc+0x1f/0xd0
[  156.094195][T10646]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  156.094209][T10646]  ? kstrndup+0xbf/0x160
[  156.094230][T10646]  hwsim_new_radio_nl+0xea4/0x1b10
[  156.094247][T10646]  ? __pfx___nla_validate_parse+0x10/0x10
[  156.094276][T10646]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  156.094301][T10646]  ? __nla_parse+0x40/0x60
[  156.094323][T10646]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  156.094347][T10646]  genl_family_rcv_msg_doit+0x215/0x300
[  156.094369][T10646]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  156.094393][T10646]  ? bpf_lsm_capable+0x9/0x20
[  156.094408][T10646]  ? security_capable+0x7e/0x2e0
[  156.094430][T10646]  genl_rcv_msg+0x60e/0x790
[  156.094450][T10646]  ? __pfx_genl_rcv_msg+0x10/0x10
[  156.094465][T10646]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  156.094492][T10646]  netlink_rcv_skb+0x208/0x470
[  156.094521][T10646]  ? __lock_acquire+0xab9/0xd20
[  156.094540][T10646]  ? __pfx_genl_rcv_msg+0x10/0x10
[  156.094557][T10646]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  156.094585][T10646]  ? down_read+0x1ad/0x2e0
[  156.094621][T10646]  genl_rcv+0x28/0x40
[  156.094637][T10646]  netlink_unicast+0x82f/0x9e0
[  156.094664][T10646]  ? __pfx_netlink_unicast+0x10/0x10
[  156.094683][T10646]  ? netlink_sendmsg+0x642/0xb30
[  156.094693][T10646]  ? skb_put+0x11b/0x210
[  156.094710][T10646]  netlink_sendmsg+0x805/0xb30
[  156.094730][T10646]  ? __pfx_netlink_sendmsg+0x10/0x10
[  156.094746][T10646]  ? aa_sock_msg_perm+0xf1/0x1d0
[  156.094761][T10646]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  156.094800][T10646]  ? __pfx_netlink_sendmsg+0x10/0x10
[  156.094815][T10646]  __sock_sendmsg+0x21c/0x270
[  156.094837][T10646]  ____sys_sendmsg+0x505/0x830
[  156.094855][T10646]  ? __pfx_____sys_sendmsg+0x10/0x10
[  156.094878][T10646]  ? import_iovec+0x74/0xa0
[  156.094895][T10646]  ___sys_sendmsg+0x21f/0x2a0
[  156.094912][T10646]  ? __pfx____sys_sendmsg+0x10/0x10
[  156.094955][T10646]  ? __fget_files+0x2a/0x420
[  156.094966][T10646]  ? __fget_files+0x3a0/0x420
[  156.094985][T10646]  __x64_sys_sendmsg+0x19b/0x260
[  156.095002][T10646]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  156.095025][T10646]  ? rcu_is_watching+0x15/0xb0
[  156.095043][T10646]  ? do_syscall_64+0xbe/0x3b0
[  156.095060][T10646]  do_syscall_64+0xfa/0x3b0
[  156.095072][T10646]  ? lockdep_hardirqs_on+0x9c/0x150
[  156.095083][T10646]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.095095][T10646]  ? exc_page_fault+0x9f/0xf0
[  156.095110][T10646]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.095121][T10646] RIP: 0033:0x7fa0da38ebe9
[  156.095134][T10646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  156.095144][T10646] RSP: 002b:00007fa0db230038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  156.095158][T10646] RAX: ffffffffffffffda RBX: 00007fa0da5c5fa0 RCX: 00007fa0da38ebe9
[  156.095167][T10646] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  156.095174][T10646] RBP: 00007fa0da411e19 R08: 0000000000000000 R09: 0000000000000000
[  156.095181][T10646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  156.095188][T10646] R13: 00007fa0da5c6038 R14: 00007fa0da5c5fa0 R15: 00007ffcbd8a2be8
[  156.095211][T10646]  </TASK>
[  156.300226][   T51] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  156.380934][T10648] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1399'.
[  156.482657][T10661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1403'.
[  156.531023][T10665] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  156.536130][T10665] CPU: 0 UID: 0 PID: 10665 Comm: syz.1.1405 Not tainted syzkaller #0 PREEMPT(full) 
[  156.536147][T10665] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  156.536154][T10665] Call Trace:
[  156.536159][T10665]  <TASK>
[  156.536164][T10665]  dump_stack_lvl+0x189/0x250
[  156.536187][T10665]  ? __pfx_dump_stack_lvl+0x10/0x10
[  156.536202][T10665]  ? __pfx__printk+0x10/0x10
[  156.536226][T10665]  ? kernfs_path_from_node+0x2f/0x290
[  156.536248][T10665]  ? kernfs_path_from_node+0x250/0x290
[  156.536261][T10665]  ? kernfs_path_from_node+0x2f/0x290
[  156.536278][T10665]  sysfs_warn_dup+0x8e/0xa0
[  156.536292][T10665]  sysfs_do_create_link_sd+0xc0/0x110
[  156.536305][T10665]  device_add_class_symlinks+0x1cf/0x240
[  156.536321][T10665]  device_add+0x475/0xb50
[  156.536337][T10665]  wiphy_register+0x1ba6/0x28d0
[  156.536366][T10665]  ? __pfx_wiphy_register+0x10/0x10
[  156.536378][T10665]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  156.536398][T10665]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  156.536418][T10665]  ieee80211_register_hw+0x3425/0x4080
[  156.536445][T10665]  ? ieee80211_register_hw+0x14a1/0x4080
[  156.536466][T10665]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  156.536483][T10665]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  156.536504][T10665]  ? __hrtimer_setup+0x187/0x210
[  156.536514][T10665]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  156.536535][T10665]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  156.536573][T10665]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  156.536588][T10665]  ? trace_kmalloc+0x1f/0xd0
[  156.536600][T10665]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  156.536614][T10665]  ? kstrndup+0xbf/0x160
[  156.536635][T10665]  hwsim_new_radio_nl+0xea4/0x1b10
[  156.536653][T10665]  ? __pfx___nla_validate_parse+0x10/0x10
[  156.536681][T10665]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  156.536703][T10665]  ? __nla_parse+0x40/0x60
[  156.536723][T10665]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  156.536745][T10665]  genl_family_rcv_msg_doit+0x215/0x300
[  156.536792][T10665]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  156.536820][T10665]  ? bpf_lsm_capable+0x9/0x20
[  156.536836][T10665]  ? security_capable+0x7e/0x2e0
[  156.536858][T10665]  genl_rcv_msg+0x60e/0x790
[  156.536878][T10665]  ? __pfx_genl_rcv_msg+0x10/0x10
[  156.536891][T10665]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  156.536917][T10665]  netlink_rcv_skb+0x208/0x470
[  156.536927][T10665]  ? __lock_acquire+0xab9/0xd20
[  156.536944][T10665]  ? __pfx_genl_rcv_msg+0x10/0x10
[  156.536962][T10665]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  156.536989][T10665]  ? down_read+0x1ad/0x2e0
[  156.537005][T10665]  genl_rcv+0x28/0x40
[  156.537017][T10665]  netlink_unicast+0x82f/0x9e0
[  156.537042][T10665]  ? __pfx_netlink_unicast+0x10/0x10
[  156.537059][T10665]  ? netlink_sendmsg+0x642/0xb30
[  156.537069][T10665]  ? skb_put+0x11b/0x210
[  156.537083][T10665]  netlink_sendmsg+0x805/0xb30
[  156.537102][T10665]  ? __pfx_netlink_sendmsg+0x10/0x10
[  156.537116][T10665]  ? aa_sock_msg_perm+0xf1/0x1d0
[  156.537127][T10665]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  156.537140][T10665]  ? __pfx_netlink_sendmsg+0x10/0x10
[  156.537152][T10665]  __sock_sendmsg+0x21c/0x270
[  156.537172][T10665]  ____sys_sendmsg+0x505/0x830
[  156.537190][T10665]  ? __pfx_____sys_sendmsg+0x10/0x10
[  156.537210][T10665]  ? import_iovec+0x74/0xa0
[  156.537228][T10665]  ___sys_sendmsg+0x21f/0x2a0
[  156.537252][T10665]  ? __pfx____sys_sendmsg+0x10/0x10
[  156.537297][T10665]  ? __fget_files+0x2a/0x420
[  156.537308][T10665]  ? __fget_files+0x3a0/0x420
[  156.537327][T10665]  __x64_sys_sendmsg+0x19b/0x260
[  156.537344][T10665]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  156.537366][T10665]  ? rcu_is_watching+0x15/0xb0
[  156.537382][T10665]  ? do_syscall_64+0xbe/0x3b0
[  156.537398][T10665]  do_syscall_64+0xfa/0x3b0
[  156.537409][T10665]  ? lockdep_hardirqs_on+0x9c/0x150
[  156.537421][T10665]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.537433][T10665]  ? exc_page_fault+0x9f/0xf0
[  156.537446][T10665]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.537457][T10665] RIP: 0033:0x7f6b1918ebe9
[  156.537469][T10665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  156.537480][T10665] RSP: 002b:00007f6b19fab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  156.537493][T10665] RAX: ffffffffffffffda RBX: 00007f6b193c5fa0 RCX: 00007f6b1918ebe9
[  156.537501][T10665] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  156.537509][T10665] RBP: 00007f6b19211e19 R08: 0000000000000000 R09: 0000000000000000
[  156.537516][T10665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  156.537523][T10665] R13: 00007f6b193c6038 R14: 00007f6b193c5fa0 R15: 00007ffef0f8dae8
[  156.537546][T10665]  </TASK>
[  156.797009][T10668] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  156.991979][T10678] lo speed is unknown, defaulting to 1000
[  157.488997][T10691] [SRW: renamed from lo
[  157.761876][T10707] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  157.766077][T10707] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  157.773881][T10707] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  158.785969][T10751] sctp: [Deprecated]: syz.0.1430 (pid 10751) Use of int in max_burst socket option.
[  158.785969][T10751] Use struct sctp_assoc_value instead
[  158.795382][T10752] sctp: [Deprecated]: syz.0.1430 (pid 10752) Use of int in max_burst socket option.
[  158.795382][T10752] Use struct sctp_assoc_value instead
[  158.939729][T10759] netlink: 'syz.0.1432': attribute type 4 has an invalid length.
[  159.272457][T10782] tipc: Resetting bearer <eth:syzkaller0>
[  159.312667][T10785] vlan0: entered promiscuous mode
[  159.315201][T10785] vlan0: entered allmulticast mode
[  160.102263][T10809] __nla_validate_parse: 8 callbacks suppressed
[  160.102277][T10809] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1446'.
[  160.144889][T10813] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1447'.
[  160.436972][T10823] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1450'.
[  160.694298][T10831] netlink: 'syz.1.1454': attribute type 9 has an invalid length.
[  160.947408][T10841] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1457'.
[  160.959542][T10841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1457'.
[  161.093403][T10850] netlink: 'syz.2.1460': attribute type 1 has an invalid length.
[  161.097380][T10850] netlink: 'syz.2.1460': attribute type 1 has an invalid length.
[  161.208295][T10865] netlink: 'syz.1.1464': attribute type 1 has an invalid length.
[  161.247304][T10865] 8021q: adding VLAN 0 to HW filter on device bond5
[  161.281557][T10865] bond5: (slave veth7): Enslaving as an active interface with a down link
[  161.303241][T10865] 8021q: adding VLAN 0 to HW filter on device batadv1
[  161.309665][T10865] bond5: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  161.379312][T10879] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1468'.
[  161.468204][T10888] team0: Device gtp1 is up. Set it down before adding it as a team port
[  161.514002][T10890] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1471'.
[  161.617315][T10902] netlink: 'syz.1.1475': attribute type 1 has an invalid length.
[  161.641751][T10902] 8021q: adding VLAN 0 to HW filter on device bond6
[  161.762120][T10911] team0: Port device bond4 removed
[  161.770072][T10911] batman_adv: batadv0: Removing interface: ipvlan0
[  161.775830][   T51] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  161.781959][T10911] bond5: (slave veth7): Releasing active interface
[  161.819486][T10911] team0: Mode changed to "loadbalance"
[  162.064465][T10941] netlink: 'syz.1.1486': attribute type 1 has an invalid length.
[  162.068467][T10941] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1486'.
[  162.073080][T10941] netlink: 'syz.1.1486': attribute type 1 has an invalid length.
[  162.078364][T10941] netlink: 'syz.1.1486': attribute type 2 has an invalid length.
[  162.136424][T10947] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1489'.
[  162.139424][T10947] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1489'.
[  162.153059][T10947] bond7: entered promiscuous mode
[  162.156264][T10947] 8021q: adding VLAN 0 to HW filter on device bond7
[  162.229360][T10947] bond7 (unregistering): Released all slaves
[  162.282342][T10957] team0: Mode "l" not found
[  162.312024][T10960] : renamed from wg2 (while UP)
[  162.331302][T10963] dummy0: entered promiscuous mode
[  162.334016][T10963] macsec3: entered promiscuous mode
[  162.338153][T10963] dummy0: left promiscuous mode
[  162.349523][ T8451] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  162.439364][T10971] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  162.443287][T10971] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  162.500182][T10978] syzkaller1: entered promiscuous mode
[  162.502197][T10978] syzkaller1: entered allmulticast mode
[  162.510064][T10978] syzkaller1: left promiscuous mode
[  162.511974][T10978] syzkaller1: left allmulticast mode
[  162.577287][T10982] team0: Mode "l" not found
[  162.808359][T10995] netlink: 'syz.0.1503': attribute type 7 has an invalid length.
[  162.814242][T10995] netlink: 'syz.0.1503': attribute type 1 has an invalid length.
[  162.839081][T10995] 8021q: adding VLAN 0 to HW filter on device bond13
[  162.852983][T10995] bond13: (slave erspan1): making interface the new active one
[  162.859421][T10995] bond13: (slave erspan1): Enslaving as an active interface with an up link
[  163.353059][T11032] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  164.391810][T11072] team0: Mode "l" not found
[  164.394168][T11077] bond0: Device is already in use.
[  164.714460][T11106] team0: Mode "l" not found
[  165.262073][T11139] __nla_validate_parse: 12 callbacks suppressed
[  165.262084][T11139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1545'.
[  165.405792][T11142] syzkaller1: entered promiscuous mode
[  165.408124][T11142] syzkaller1: entered allmulticast mode
[  165.457402][T11145] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1547'.
[  166.096283][T11158] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1550'.
[  166.208317][T11160] team0: Mode "l" not found
[  166.261231][T11163] lo speed is unknown, defaulting to 1000
[  166.320849][T11167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1553'.
[  166.481146][T11177] netlink: 788 bytes leftover after parsing attributes in process `syz.2.1556'.
[  166.609984][T11193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1561'.
[  166.679444][T11198] validate_nla: 6 callbacks suppressed
[  166.679457][T11198] netlink: 'syz.1.1563': attribute type 1 has an invalid length.
[  166.782661][T11206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1564'.
[  166.863487][T11209] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1567'.
[  166.921015][T11214] netlink: 'syz.0.1569': attribute type 4 has an invalid length.
[  167.058061][T11226] netlink: 'syz.0.1573': attribute type 10 has an invalid length.
[  167.068757][T11226] netlink: 'syz.0.1573': attribute type 10 has an invalid length.
[  167.077858][T11226] bond9: option mode: unable to set because the bond device has slaves
[  167.117337][T11224] lo speed is unknown, defaulting to 1000
[  167.202560][T11230] lo speed is unknown, defaulting to 1000
[  167.502177][T11239] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1576'.
[  167.506281][T11240] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1576'.
[  167.652015][T11251] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  167.657378][T11252] syzkaller0: entered promiscuous mode
[  167.660010][T11252] syzkaller0: entered allmulticast mode
[  167.696839][T11251] tipc: Resetting bearer <eth:syzkaller0>
[  167.726190][T11251] tipc: Disabling bearer <eth:syzkaller0>
[  167.730605][T11258] netlink: 'syz.0.1580': attribute type 12 has an invalid length.
[  167.759020][T11263] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  167.763937][T11263] CPU: 0 UID: 0 PID: 11263 Comm: syz.1.1582 Not tainted syzkaller #0 PREEMPT(full) 
[  167.763948][T11263] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  167.763953][T11263] Call Trace:
[  167.763956][T11263]  <TASK>
[  167.763960][T11263]  dump_stack_lvl+0x189/0x250
[  167.763974][T11263]  ? __pfx_dump_stack_lvl+0x10/0x10
[  167.763983][T11263]  ? __pfx__printk+0x10/0x10
[  167.763995][T11263]  ? kernfs_path_from_node+0x2f/0x290
[  167.764005][T11263]  ? kernfs_path_from_node+0x250/0x290
[  167.764012][T11263]  ? kernfs_path_from_node+0x2f/0x290
[  167.764021][T11263]  sysfs_warn_dup+0x8e/0xa0
[  167.764030][T11263]  sysfs_do_create_link_sd+0xc0/0x110
[  167.764039][T11263]  device_add_class_symlinks+0x1cf/0x240
[  167.764048][T11263]  device_add+0x475/0xb50
[  167.764057][T11263]  wiphy_register+0x1ba6/0x28d0
[  167.764074][T11263]  ? __pfx_wiphy_register+0x10/0x10
[  167.764081][T11263]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  167.764096][T11263]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  167.764112][T11263]  ieee80211_register_hw+0x3425/0x4080
[  167.764142][T11263]  ? ieee80211_register_hw+0x14a1/0x4080
[  167.764164][T11263]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  167.764182][T11263]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  167.764205][T11263]  ? __hrtimer_setup+0x187/0x210
[  167.764217][T11263]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  167.764234][T11263]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  167.764256][T11263]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  167.764265][T11263]  ? trace_kmalloc+0x1f/0xd0
[  167.764274][T11263]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  167.764284][T11263]  ? kstrndup+0xbf/0x160
[  167.764296][T11263]  hwsim_new_radio_nl+0xea4/0x1b10
[  167.764307][T11263]  ? __pfx___nla_validate_parse+0x10/0x10
[  167.764323][T11263]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  167.764337][T11263]  ? __nla_parse+0x40/0x60
[  167.764348][T11263]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  167.764360][T11263]  genl_family_rcv_msg_doit+0x215/0x300
[  167.764372][T11263]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  167.764389][T11263]  ? bpf_lsm_capable+0x9/0x20
[  167.764397][T11263]  ? security_capable+0x7e/0x2e0
[  167.764409][T11263]  genl_rcv_msg+0x60e/0x790
[  167.764420][T11263]  ? __pfx_genl_rcv_msg+0x10/0x10
[  167.764428][T11263]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  167.764442][T11263]  netlink_rcv_skb+0x208/0x470
[  167.764449][T11263]  ? __lock_acquire+0xab9/0xd20
[  167.764459][T11263]  ? __pfx_genl_rcv_msg+0x10/0x10
[  167.764467][T11263]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  167.764481][T11263]  ? down_read+0x1ad/0x2e0
[  167.764490][T11263]  genl_rcv+0x28/0x40
[  167.764497][T11263]  netlink_unicast+0x82f/0x9e0
[  167.764511][T11263]  ? __pfx_netlink_unicast+0x10/0x10
[  167.764522][T11263]  ? netlink_sendmsg+0x642/0xb30
[  167.764528][T11263]  ? skb_put+0x11b/0x210
[  167.764537][T11263]  netlink_sendmsg+0x805/0xb30
[  167.764548][T11263]  ? __pfx_netlink_sendmsg+0x10/0x10
[  167.764556][T11263]  ? aa_sock_msg_perm+0xf1/0x1d0
[  167.764563][T11263]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  167.764570][T11263]  ? __pfx_netlink_sendmsg+0x10/0x10
[  167.764577][T11263]  __sock_sendmsg+0x21c/0x270
[  167.764588][T11263]  ____sys_sendmsg+0x505/0x830
[  167.764617][T11263]  ? __pfx_____sys_sendmsg+0x10/0x10
[  167.764638][T11263]  ? import_iovec+0x74/0xa0
[  167.764677][T11263]  ___sys_sendmsg+0x21f/0x2a0
[  167.764697][T11263]  ? __pfx____sys_sendmsg+0x10/0x10
[  167.764737][T11263]  ? __fget_files+0x2a/0x420
[  167.764748][T11263]  ? __fget_files+0x3a0/0x420
[  167.764765][T11263]  __x64_sys_sendmsg+0x19b/0x260
[  167.764780][T11263]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  167.764802][T11263]  ? rcu_is_watching+0x15/0xb0
[  167.764816][T11263]  ? do_syscall_64+0xbe/0x3b0
[  167.764832][T11263]  do_syscall_64+0xfa/0x3b0
[  167.764843][T11263]  ? lockdep_hardirqs_on+0x9c/0x150
[  167.764856][T11263]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.764868][T11263]  ? exc_page_fault+0x9f/0xf0
[  167.764883][T11263]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.764894][T11263] RIP: 0033:0x7f6b1918ebe9
[  167.764906][T11263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  167.764917][T11263] RSP: 002b:00007f6b19fab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  167.764931][T11263] RAX: ffffffffffffffda RBX: 00007f6b193c5fa0 RCX: 00007f6b1918ebe9
[  167.764941][T11263] RDX: 00000000000003e4 RSI: 0000200000000040 RDI: 0000000000000004
[  167.764949][T11263] RBP: 00007f6b19211e19 R08: 0000000000000000 R09: 0000000000000000
[  167.764956][T11263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  167.764964][T11263] R13: 00007f6b193c6038 R14: 00007f6b193c5fa0 R15: 00007ffef0f8dae8
[  167.764987][T11263]  </TASK>
[  168.016625][T11271] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  168.017112][T11272] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  168.087572][T11282] team0: Mode "l" not found
[  168.112871][T11287] syzkaller1: entered promiscuous mode
[  168.115437][T11287] syzkaller1: entered allmulticast mode
[  168.212173][T11296] geneve2: left promiscuous mode
[  168.225016][T11296] veth7: left promiscuous mode
[  168.228171][T11296] macsec1: left promiscuous mode
[  168.230742][T11296] bond2: left promiscuous mode
[  168.233555][T11296] bridge2: left promiscuous mode
[  168.248515][T11296] bond5: left promiscuous mode
[  168.262717][T11296] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  168.464105][T11319] netlink: 'syz.0.1598': attribute type 6 has an invalid length.
[  168.535792][T11330] pimreg: entered allmulticast mode
[  168.539188][T11330] pimreg: left allmulticast mode
[  168.550092][T11325] netlink: 'syz.0.1601': attribute type 1 has an invalid length.
[  168.583621][T11325] 8021q: adding VLAN 0 to HW filter on device bond14
[  168.727413][T11325] bond14 (unregistering): Released all slaves
[  169.493558][T11421] lo: left promiscuous mode
[  169.495854][T11421] lo: left allmulticast mode
[  169.500030][T11421] tunl0: left promiscuous mode
[  169.501986][T11421] tunl0: left allmulticast mode
[  169.508733][T11421] gre0: left promiscuous mode
[  169.510702][T11421] gre0: left allmulticast mode
[  169.530697][T11421] gretap0: left promiscuous mode
[  169.537388][T11421] gretap0: left allmulticast mode
[  169.547604][T11421] erspan0: left promiscuous mode
[  169.549785][T11421] erspan0: left allmulticast mode
[  169.554297][T11421] ip_vti0: left promiscuous mode
[  169.556412][T11421] ip_vti0: left allmulticast mode
[  169.560111][T11421] ip6_vti0: left promiscuous mode
[  169.561848][T11421] ip6_vti0: left allmulticast mode
[  169.567604][T11421] sit0: left promiscuous mode
[  169.569569][T11421] sit0: left allmulticast mode
[  169.576203][T11421] ip6tnl0: left promiscuous mode
[  169.577949][T11421] ip6tnl0: left allmulticast mode
[  169.582521][T11421] ip6gre0: left promiscuous mode
[  169.584299][T11421] ip6gre0: left allmulticast mode
[  169.589420][T11421] ip6gretap0: left allmulticast mode
[  169.594176][T11421] bridge0: left allmulticast mode
[  169.598341][T11421] vcan0: left promiscuous mode
[  169.600992][T11421] vcan0: left allmulticast mode
[  169.609262][T11421] !: left promiscuous mode
[  169.611058][T11421] !: left allmulticast mode
[  169.618224][T11421] nlmon0: left promiscuous mode
[  169.620034][T11421] nlmon0: left allmulticast mode
[  169.622698][T11421] caif0: left promiscuous mode
[  169.625727][T11421] caif0: left allmulticast mode
[  169.733323][T11421] veth3: left promiscuous mode
[  169.765074][T11421] ip6gre1: left allmulticast mode
[  169.773542][T11421] bond2: left promiscuous mode
[  169.775488][T11421] bond2: left allmulticast mode
[  169.783448][T11421] geneve2: left promiscuous mode
[  169.791732][T11421] veth5: left promiscuous mode
[  169.795069][T11421] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  169.797536][T11421] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  169.800310][T11421] hsr1: left promiscuous mode
[  169.802282][T11421] bridge8: left allmulticast mode
[  169.817212][T11421] ip6tnl1: left allmulticast mode
[  169.821890][T11421] geneve3: left promiscuous mode
[  169.824233][T11421] geneve3: left allmulticast mode
[  169.832380][T11421] vlan0: left promiscuous mode
[  169.838529][T11421] vlan0: left allmulticast mode
[  169.840880][T11421] bond0: left allmulticast mode
[  169.848063][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  169.851243][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  169.854226][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  169.857280][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  169.862203][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  169.867314][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  169.872139][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  169.877851][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  170.040126][T11430] bond0: Device is already in use.
[  170.332161][T11474] netlink: 'syz.2.1638': attribute type 2 has an invalid length.
[  170.336156][T11474] __nla_validate_parse: 8 callbacks suppressed
[  170.336164][T11474] netlink: 4856 bytes leftover after parsing attributes in process `syz.2.1638'.
[  170.343042][T11474] netem: incorrect gi model size
[  170.346713][T11474] netem: change failed
[  170.376997][T11476] netlink: 'syz.2.1639': attribute type 4 has an invalid length.
[  170.415414][T11480] netlink: 'syz.0.1641': attribute type 5 has an invalid length.
[  170.448674][T11484] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  170.453124][T11485] tipc: Resetting bearer <eth:syzkaller0>
[  170.493887][T11490] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1642'.
[  170.667906][T11503] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1647'.
[  170.749122][T11511] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1649'.
[  170.752998][T11511] bond9: entered promiscuous mode
[  170.756044][T11511] ip6gretap2: entered promiscuous mode
[  170.767329][T11511] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  170.771533][T11511] macvlan2: entered promiscuous mode
[  170.774345][T11511] bond9: (slave macvlan2): Enslaving as a backup interface with an up link
[  170.783953][T11512] bond9: (slave macvlan3): Error -98 calling set_mac_address
[  171.113549][T11521] team0: Mode "l" not found
[  171.296677][T11528] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1655'.
[  171.353802][T11531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1656'.
[  171.742662][T11533] tipc: Can't bind to reserved service type 2
[  171.747135][T11534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1657'.
[  171.751025][T11534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1657'.
[  171.840971][T11543] validate_nla: 3 callbacks suppressed
[  171.840986][T11543] netlink: 'syz.0.1659': attribute type 1 has an invalid length.
[  171.867478][T11543] 8021q: adding VLAN 0 to HW filter on device bond14
[  171.884107][T11543] bond14: (slave veth5): Enslaving as an active interface with a down link
[  171.893992][T11543] 8021q: adding VLAN 0 to HW filter on device batadv1
[  171.897223][T11543] bond14: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  172.067962][T11551] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1661'.
[  172.086784][T11550] syzkaller1: tun_chr_ioctl cmd 1074025677
[  172.089611][T11550] syzkaller1: linktype set to 778
[  172.097711][T11550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1662'.
[  172.603278][    C1] vcan0: j1939_tp_rxtimer: 0xffff888107708000: rx timeout, send abort
[  172.869044][T11554] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  172.987692][T11567] nbd: socks must be embedded in a SOCK_ITEM attr
[  173.106908][    C1] vcan0: j1939_tp_rxtimer: 0xffff888107708000: abort rx timeout. Force session deactivation
[  173.423235][T11588] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  173.440731][T11594] lo speed is unknown, defaulting to 1000
[  173.870445][T11611] netlink: 'syz.2.1678': attribute type 4 has an invalid length.
[  173.908973][T11613] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  173.912170][T11613] syzkaller0: entered promiscuous mode
[  173.915281][T11613] syzkaller0: entered allmulticast mode
[  173.935884][T11613] tipc: Resetting bearer <eth:syzkaller0>
[  173.942507][T11612] tipc: Resetting bearer <eth:syzkaller0>
[  173.955268][T11612] tipc: Disabling bearer <eth:syzkaller0>
[  174.056407][T11617] batadv_slave_0: entered promiscuous mode
[  174.078931][T11617] batadv_slave_0: left promiscuous mode
[  174.100793][T11621] netlink: 'syz.1.1682': attribute type 1 has an invalid length.
[  174.108391][T11621] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  174.164460][ T8451] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  174.173536][ T8451] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  174.179294][ T8451] hid-generic 0005:16BF:5505.0001: item fetching failed at offset 7/9
[  174.183315][ T8451] hid-generic 0005:16BF:5505.0001: probe with driver hid-generic failed with error -22
[  174.266470][T11637] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  174.276823][T11637] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  174.511636][T11668] netlink: 'syz.2.1699': attribute type 1 has an invalid length.
[  174.559729][T11668] 8021q: adding VLAN 0 to HW filter on device bond8
[  174.563797][T11668] bond7: (slave bond8): making interface the new active one
[  174.568011][T11668] bond7: (slave bond8): Enslaving as an active interface with an up link
[  174.610024][T11668] bond7: (slave gretap2): Enslaving as a backup interface with an up link
[  174.618216][T11668] 8021q: adding VLAN 0 to HW filter on device bond7
[  174.655314][T11674] IPv6: Can't replace route, no match found
[  174.802096][ T5845] Bluetooth: hci2: link tx timeout
[  174.805431][ T5845] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  174.843370][T11694] netlink: 'syz.1.1708': attribute type 1 has an invalid length.
[  174.847801][T11694] netlink: 'syz.1.1708': attribute type 3 has an invalid length.
[  174.851241][T11694] netlink: 'syz.1.1708': attribute type 3 has an invalid length.
[  175.239625][T11713] bond7: (slave bond8): Releasing backup interface
[  175.242408][T11713] bond7: (slave bond8): the permanent HWaddr of slave - 0a:0c:e1:34:2e:9a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  175.251941][T11713] bond7: (slave gretap2): making interface the new active one
[  175.260848][T11713] bond7: (slave gretap2): Releasing backup interface
[  175.723800][T11740] team0: Mode "l" not found
[  175.747426][T11743] : renamed from lo
[  176.230608][T11756] __nla_validate_parse: 12 callbacks suppressed
[  176.230623][T11756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1731'.
[  176.576716][T11742] delete_channel: no stack
[  176.844850][ T5845] Bluetooth: hci2: command 0x040f tx timeout
[  176.950614][T11798] netlink: 'syz.2.1744': attribute type 13 has an invalid length.
[  176.953225][T11798] netlink: 'syz.2.1744': attribute type 17 has an invalid length.
[  176.981395][T11798] 8021q: adding VLAN 0 to HW filter on device team0
[  176.985100][T11798] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  176.990241][ T8451]  speed is unknown, defaulting to 1000
[  176.992270][ T8451] syz1: Port: 1 Link ACTIVE
[  177.002607][T11798] netlink: 'syz.2.1744': attribute type 13 has an invalid length.
[  177.233038][T11808] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1747'.
[  177.592525][T11818] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1751'.
[  177.640992][T11820] team0: Mode "l" not found
[  177.675907][T11823] netlink: 'syz.1.1753': attribute type 11 has an invalid length.
[  177.678775][T11823] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1753'.
[  177.917092][T11828] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  177.919838][T11828] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  177.976331][T11832] netlink: 212316 bytes leftover after parsing attributes in process `syz.1.1757'.
[  178.100208][T11845] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1761'.
[  178.112681][T11846] smc: net device bond0 applied user defined pnetid SYZ2
[  178.190608][T11853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1764'.
[  178.198109][T11853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1764'.
[  178.212517][T11853] team0: Mode changed to "broadcast"
[  179.177495][T11862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1768'.
[  179.180673][T11862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1768'.
[  179.340852][T11872] tun0: tun_chr_ioctl cmd 1074025675
[  179.343161][T11872] tun0: persist enabled
[  179.345437][T11872] tun0: tun_chr_ioctl cmd 1074025675
[  179.347302][T11872] tun0: persist enabled
[  180.472521][T11891] netlink: 'syz.1.1778': attribute type 10 has an invalid length.
[  180.571920][T11901] sctp: [Deprecated]: syz.1.1782 (pid 11901) Use of struct sctp_assoc_value in delayed_ack socket option.
[  180.571920][T11901] Use struct sctp_sack_info instead
[  180.688718][ T5846] Bluetooth: hci1: command 0x0406 tx timeout
[  180.807564][T11930] _Z`Ԁ@: entered promiscuous mode
[  181.006967][T11949] team0: Mode "l" not found
[  181.162528][T11961] bpq0: entered promiscuous mode
[  181.232005][T11967] team0: Mode "l" not found
[  181.393166][T11977]  speed is unknown, defaulting to 1000
[  181.539737][T11983] __nla_validate_parse: 8 callbacks suppressed
[  181.539746][T11983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1812'.
[  181.638753][T11988] netlink: 'syz.1.1813': attribute type 1 has an invalid length.
[  181.749852][T11991] team0: Mode "l" not found
[  181.860132][T12001] netlink: 67 bytes leftover after parsing attributes in process `syz.2.1818'.
[  181.905804][T12001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1818'.
[  181.908712][T12001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1818'.
[  182.078846][T12013] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1821'.
[  182.109115][T12013] bridge4: port 1(veth11) entered blocking state
[  182.114338][T12013] bridge4: port 1(veth11) entered disabled state
[  182.117225][T12013] veth11: entered allmulticast mode
[  182.120564][T12013] veth11: entered promiscuous mode
[  182.125233][T12013] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1821'.
[  182.824420][T12041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1831'.
[  182.909837][T12051] ip6gre3: entered allmulticast mode
[  183.045330][   T33] audit: type=1804 audit(1756948363.875:5): pid=12065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1840" name="/newroot/651/cgroup.controllers" dev="tmpfs" ino=3324 res=1 errno=0
[  183.053846][   T33] audit: type=1800 audit(1756948363.875:6): pid=12065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1840" name="cgroup.controllers" dev="tmpfs" ino=3324 res=0 errno=0
[  183.061883][   T33] audit: type=1800 audit(1756948363.875:7): pid=12065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1840" name="cgroup.controllers" dev="tmpfs" ino=3324 res=0 errno=0
[  183.083483][T12068] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1841'.
[  183.358241][T12094] netlink: 'syz.1.1846': attribute type 4 has an invalid length.
[  183.367322][T12094] netlink: 'syz.1.1846': attribute type 4 has an invalid length.
[  183.384493][ T5872] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  183.388620][ T5872] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  183.391544][ T5872] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  183.395949][ T5872] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  183.399386][T12093] netlink: 'syz.0.1847': attribute type 2 has an invalid length.
[  184.172492][T12102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1850'.
[  184.222388][T12110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1853'.
[  184.282898][T12121] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  184.384208][T12136] vlan0: entered allmulticast mode
[  184.387497][T12136] bridge_slave_0: entered allmulticast mode
[  184.455308][T12139]  speed is unknown, defaulting to 1000
[  184.670263][T12158] team0: Mode "l" not found
[  184.806407][T12169]  speed is unknown, defaulting to 1000
[  185.407162][T12217] netlink: 'syz.2.1884': attribute type 1 has an invalid length.
[  185.433200][T12217] 8021q: adding VLAN 0 to HW filter on device bond9
[  185.475767][T12217] bond9: (slave veth13): Enslaving as an active interface with a down link
[  185.487455][T12217] gretap3: entered promiscuous mode
[  185.492012][T12217] bond9: (slave gretap3): making interface the new active one
[  185.497737][T12217] bond9: (slave gretap3): Enslaving as an active interface with an up link
[  185.530605][T12217] macvlan2: entered promiscuous mode
[  185.532889][T12217] macvlan2: entered allmulticast mode
[  185.538593][T12217] bond9: entered promiscuous mode
[  185.541285][T12217] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  185.549666][T12217] bond9: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  185.557327][T12217] bond9: left promiscuous mode
[  185.881094][T12261] team0: Mode "l" not found
[  185.904132][T12266] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  185.910102][T12266] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  186.040193][T12278] vti1: entered promiscuous mode
[  186.097533][T12286] bond0: (slave syz_tun): Releasing backup interface
[  186.103202][T12286] syz_tun: left promiscuous mode
[  186.106560][T12286] syz_tun: left allmulticast mode
[  186.111013][T12286] bond0: (slave team0): Releasing backup interface
[  186.118000][T12286] team0: left allmulticast mode
[  186.120415][T12286] batman_adv: batadv0: Removing interface: netdevsim0
[  186.123480][T12286] tipc: Resetting bearer <eth:syzkaller0>
[  186.128407][T12286] bond9: (slave ip6gretap2): Removing an active aggregator
[  186.131518][T12286] bond9: (slave ip6gretap2): Releasing backup interface
[  186.133964][T12286] bond9: (slave ip6gretap2): the permanent HWaddr of slave - 8a:a3:f8:92:44:aa - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  186.142246][T12286] ip6gretap2: left promiscuous mode
[  186.147320][T12286] bond13: (slave erspan1): Releasing active interface
[  186.153019][T12286] bond9: (slave macvlan2): Releasing backup interface
[  186.156465][T12286] macvlan2: left promiscuous mode
[  186.161542][T12286] bond14: (slave veth5): Releasing active interface
[  186.169043][T12288] team0: Mode changed to "broadcast"
[  186.178894][T12286] tipc: Enabled bearer <eth:team0>, priority 0
[  186.247327][T12295] netlink: 'syz.1.1912': attribute type 4 has an invalid length.
[  186.332997][T12299]  speed is unknown, defaulting to 1000
[  186.597878][T12310] __nla_validate_parse: 17 callbacks suppressed
[  186.597895][T12310] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1917'.
[  186.840231][T12325] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1921'.
[  186.851135][T12325] 8021q: adding VLAN 0 to HW filter on device bond0
[  186.859153][T12325] bond0: (slave rose0): Enslaving as an active interface with an up link
[  186.953230][T12332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1922'.
[  187.061580][T12341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1923'.
[  187.397875][T12366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1929'.
[  187.422771][T12366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1929'.
[  187.658070][T12379] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  187.664199][T12379] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1932'.
[  187.668317][T12379] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1932'.
[  187.678533][    C1] ==================================================================
[  187.681425][    C1] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  187.684280][    C1] Write of size 8 at addr ffff888106667ab0 by task syz.0.1932/12379
[  187.688406][    C1] 
[  187.689444][    C1] CPU: 1 UID: 0 PID: 12379 Comm: syz.0.1932 Not tainted syzkaller #0 PREEMPT(full) 
[  187.689459][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  187.689466][    C1] Call Trace:
[  187.689495][    C1]  <IRQ>
[  187.689501][    C1]  dump_stack_lvl+0x189/0x250
[  187.689519][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  187.689532][    C1]  ? rcu_is_watching+0x15/0xb0
[  187.689541][    C1]  ? __kasan_check_byte+0x12/0x40
[  187.689554][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  187.689564][    C1]  ? rcu_is_watching+0x15/0xb0
[  187.689573][    C1]  ? lock_release+0x4b/0x3e0
[  187.689586][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  187.689599][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  187.689611][    C1]  print_report+0xca/0x240
[  187.689621][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  187.689630][    C1]  kasan_report+0x118/0x150
[  187.689642][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  187.689653][    C1]  __xfrm_state_delete+0x696/0xca0
[  187.689668][    C1]  xfrm_timer_handler+0x18f/0xa00
[  187.689681][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  187.689689][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  187.689707][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  187.689718][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  187.689734][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  187.689752][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  187.689763][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  187.689775][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  187.689793][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  187.689804][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  187.689818][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  187.689830][    C1]  handle_softirqs+0x286/0x870
[  187.689842][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  187.689854][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  187.689867][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  187.689881][    C1]  __irq_exit_rcu+0xca/0x1f0
[  187.689892][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  187.689904][    C1]  irq_exit_rcu+0x9/0x30
[  187.689914][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  187.689931][    C1]  </IRQ>
[  187.689935][    C1]  <TASK>
[  187.689939][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  187.689952][    C1] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x37/0x90
[  187.689968][    C1] Code: 08 a0 a0 92 65 8b 15 a8 ef e0 10 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 57 83 b9 3c 16 00 00 00 74 4e 8b 91 18 16 00 00 <83> fa 03 75 43 48 8b 91 20 16 00 00 44 8b 89 1c 16 00 00 49 c1 e1
[  187.689978][    C1] RSP: 0018:ffffc90007d27348 EFLAGS: 00000246
[  187.689990][    C1] RAX: ffffffff822e4a0d RBX: 1ffffd4000848e31 RCX: ffff888029eb0000
[  187.689999][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  187.690006][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff822e636a
[  187.690013][    C1] R10: dffffc0000000000 R11: fffff94000848e31 R12: ffffea00042471b0
[  187.690022][    C1] R13: ffffea0004247180 R14: 0000000000000001 R15: 0000000000000000
[  187.690032][    C1]  ? pfn_valid+0xba/0x490
[  187.690046][    C1]  ? page_table_check_clear+0x12d/0x700
[  187.690064][    C1]  page_table_check_clear+0x12d/0x700
[  187.690079][    C1]  ? vm_normal_page+0xb7/0x210
[  187.690091][    C1]  unmap_page_range+0x3445/0x4370
[  187.690117][    C1]  ? __pfx_unmap_page_range+0x10/0x10
[  187.690130][    C1]  ? mas_find+0xb0e/0xd30
[  187.690140][    C1]  ? unmap_vmas+0x144/0x580
[  187.690158][    C1]  unmap_vmas+0x399/0x580
[  187.690169][    C1]  ? __pfx_unmap_vmas+0x10/0x10
[  187.690186][    C1]  exit_mmap+0x248/0xb50
[  187.690201][    C1]  ? uprobe_clear_state+0x20f/0x290
[  187.690212][    C1]  ? __pfx_exit_mmap+0x10/0x10
[  187.690220][    C1]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  187.690228][    C1]  ? __pfx_exit_aio+0x10/0x10
[  187.690239][    C1]  ? uprobe_clear_state+0x274/0x290
[  187.690246][    C1]  __mmput+0x118/0x420
[  187.690253][    C1]  exit_mm+0x1da/0x2c0
[  187.690262][    C1]  ? __pfx_exit_mm+0x10/0x10
[  187.690269][    C1]  ? rcu_is_watching+0x15/0xb0
[  187.690276][    C1]  do_exit+0x648/0x2300
[  187.690285][    C1]  ? cgroup_freezing+0x20/0x350
[  187.690293][    C1]  ? __pfx_do_exit+0x10/0x10
[  187.690301][    C1]  ? cgroup_freezing+0x20/0x350
[  187.690308][    C1]  ? cgroup_freezing+0x20/0x350
[  187.690316][    C1]  do_group_exit+0x21c/0x2d0
[  187.690323][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  187.690330][    C1]  get_signal+0x1286/0x1340
[  187.690339][    C1]  arch_do_signal_or_restart+0x9a/0x750
[  187.690350][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  187.690361][    C1]  ? exit_to_user_mode_loop+0x40/0x110
[  187.690371][    C1]  exit_to_user_mode_loop+0x75/0x110
[  187.690379][    C1]  do_syscall_64+0x2bd/0x3b0
[  187.690386][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  187.690391][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.690397][    C1]  ? exc_page_fault+0x9f/0xf0
[  187.690403][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.690410][    C1] RIP: 0033:0x7fa0da38ebe9
[  187.690416][    C1] Code: Unable to access opcode bytes at 0x7fa0da38ebbf.
[  187.690419][    C1] RSP: 002b:00007fa0db2300e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  187.690426][    C1] RAX: fffffffffffffe00 RBX: 00007fa0da5c5fa8 RCX: 00007fa0da38ebe9
[  187.690431][    C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa0da5c5fa8
[  187.690435][    C1] RBP: 00007fa0da5c5fa0 R08: 0000000000000000 R09: 0000000000000000
[  187.690439][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  187.690443][    C1] R13: 00007fa0da5c6038 R14: 00007ffcbd8a2b00 R15: 00007ffcbd8a2be8
[  187.690450][    C1]  </TASK>
[  187.690452][    C1] 
[  187.895587][    C1] Allocated by task 9672:
[  187.897461][    C1]  kasan_save_track+0x3e/0x80
[  187.899545][    C1]  __kasan_slab_alloc+0x6c/0x80
[  187.901550][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  187.903770][    C1]  xfrm_state_alloc+0x24/0x2f0
[  187.905733][    C1]  __find_acq_core+0x8a7/0x1c00
[  187.907752][    C1]  xfrm_find_acq+0x78/0xa0
[  187.909673][    C1]  xfrm_alloc_userspi+0x6b3/0xc90
[  187.911820][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  187.913895][    C1]  netlink_rcv_skb+0x208/0x470
[  187.915864][    C1]  xfrm_netlink_rcv+0x79/0x90
[  187.917820][    C1]  netlink_unicast+0x82f/0x9e0
[  187.919826][    C1]  netlink_sendmsg+0x805/0xb30
[  187.921800][    C1]  __sock_sendmsg+0x21c/0x270
[  187.923827][    C1]  ____sys_sendmsg+0x505/0x830
[  187.925824][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  187.927787][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  187.929874][    C1]  do_syscall_64+0xfa/0x3b0
[  187.931795][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.934180][    C1] 
[  187.935166][    C1] Freed by task 51:
[  187.936726][    C1]  kasan_save_track+0x3e/0x80
[  187.938610][    C1]  kasan_save_free_info+0x46/0x50
[  187.940671][    C1]  __kasan_slab_free+0x5b/0x80
[  187.942587][    C1]  kmem_cache_free+0x18f/0x400
[  187.944502][    C1]  xfrm_state_gc_task+0x52d/0x6b0
[  187.946529][    C1]  process_scheduled_works+0xae1/0x17b0
[  187.948802][    C1]  worker_thread+0x8a0/0xda0
[  187.950801][    C1]  kthread+0x711/0x8a0
[  187.952545][    C1]  ret_from_fork+0x3fc/0x770
[  187.954455][    C1]  ret_from_fork_asm+0x1a/0x30
[  187.956549][    C1] 
[  187.957578][    C1] The buggy address belongs to the object at ffff888106667a80
[  187.957578][    C1]  which belongs to the cache xfrm_state of size 928
[  187.963176][    C1] The buggy address is located 48 bytes inside of
[  187.963176][    C1]  freed 928-byte region [ffff888106667a80, ffff888106667e20)
[  187.968740][    C1] 
[  187.969743][    C1] The buggy address belongs to the physical page:
[  187.972379][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888106664900 pfn:0x106664
[  187.976524][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  187.979930][    C1] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  187.983063][    C1] page_type: f5(slab)
[  187.984702][    C1] raw: 057ff00000000040 ffff888104c95b40 dead000000000122 0000000000000000
[  187.988060][    C1] raw: ffff888106664900 00000000800e000b 00000000f5000000 0000000000000000
[  187.991622][    C1] head: 057ff00000000040 ffff888104c95b40 dead000000000122 0000000000000000
[  187.995217][    C1] head: ffff888106664900 00000000800e000b 00000000f5000000 0000000000000000
[  187.998678][    C1] head: 057ff00000000002 ffffea0004199901 00000000ffffffff 00000000ffffffff
[  188.002026][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  188.005550][    C1] page dumped because: kasan: bad access detected
[  188.008092][    C1] page_owner tracks the page as allocated
[  188.010421][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7554, tgid 7548 (syz.1.486), ts 90117621045, free_ts 56751561373
[  188.018202][    C1]  post_alloc_hook+0x240/0x2a0
[  188.020260][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  188.022567][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  188.025007][    C1]  alloc_pages_mpol+0x232/0x4a0
[  188.027103][    C1]  allocate_slab+0x8a/0x370
[  188.029028][    C1]  ___slab_alloc+0xbeb/0x1410
[  188.030866][    C1]  kmem_cache_alloc_noprof+0x283/0x3c0
[  188.033190][    C1]  xfrm_state_alloc+0x24/0x2f0
[  188.035159][    C1]  xfrm_state_find+0x37d4/0x5400
[  188.037234][    C1]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  188.039861][    C1]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  188.042137][    C1]  xfrm_lookup_route+0x3c/0x1c0
[  188.044246][    C1]  udp_sendmsg+0x142e/0x2170
[  188.046232][    C1]  __sock_sendmsg+0x19c/0x270
[  188.048229][    C1]  ____sys_sendmsg+0x52d/0x830
[  188.050268][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  188.052313][    C1] page last free pid 5843 tgid 5843 stack trace:
[  188.054991][    C1]  __free_frozen_pages+0xbc4/0xd30
[  188.057203][    C1]  __slab_free+0x303/0x3c0
[  188.059150][    C1]  qlist_free_all+0x97/0x140
[  188.061126][    C1]  kasan_quarantine_reduce+0x148/0x160
[  188.063440][    C1]  __kasan_slab_alloc+0x22/0x80
[  188.065498][    C1]  __kmalloc_cache_noprof+0x1be/0x3d0
[  188.067720][    C1]  netdevice_event+0x3a1/0x8a0
[  188.069789][    C1]  notifier_call_chain+0x1b6/0x3e0
[  188.071923][    C1]  __dev_notify_flags+0x18d/0x2e0
[  188.074042][    C1]  netif_change_flags+0xe8/0x1a0
[  188.076168][    C1]  do_setlink+0xc55/0x41c0
[  188.078079][    C1]  rtnl_newlink+0x160b/0x1c70
[  188.080030][    C1]  rtnetlink_rcv_msg+0x7cf/0xb70
[  188.082141][    C1]  netlink_rcv_skb+0x208/0x470
[  188.084176][    C1]  netlink_unicast+0x82f/0x9e0
[  188.086247][    C1]  netlink_sendmsg+0x805/0xb30
[  188.088305][    C1] 
[  188.089380][    C1] Memory state around the buggy address:
[  188.091809][    C1]  ffff888106667980: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  188.095123][    C1]  ffff888106667a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  188.098125][    C1] >ffff888106667a80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  188.101322][    C1]                                      ^
[  188.103720][    C1]  ffff888106667b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  188.107044][    C1]  ffff888106667b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  188.110434][    C1] ==================================================================
[  188.114196][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  188.117255][    C1] CPU: 1 UID: 0 PID: 12379 Comm: syz.0.1932 Not tainted syzkaller #0 PREEMPT(full) 
[  188.121122][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  188.125243][    C1] Call Trace:
[  188.126681][    C1]  <IRQ>
[  188.127914][    C1]  dump_stack_lvl+0x99/0x250
[  188.129890][    C1]  ? __asan_memcpy+0x40/0x70
[  188.131792][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  188.133992][    C1]  ? __pfx__printk+0x10/0x10
[  188.135995][    C1]  vpanic+0x281/0x750
[  188.137745][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  188.140010][    C1]  ? __pfx_vpanic+0x10/0x10
[  188.141965][    C1]  ? irqentry_exit+0x74/0x90
[  188.143904][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  188.146122][    C1]  panic+0xb9/0xc0
[  188.147732][    C1]  ? __pfx_panic+0x10/0x10
[  188.149637][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  188.152156][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  188.154790][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  188.157031][    C1]  check_panic_on_warn+0x89/0xb0
[  188.159107][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  188.161339][    C1]  end_report+0x78/0x160
[  188.163148][    C1]  kasan_report+0x129/0x150
[  188.165029][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  188.167181][    C1]  __xfrm_state_delete+0x696/0xca0
[  188.169387][    C1]  xfrm_timer_handler+0x18f/0xa00
[  188.171582][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  188.173932][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  188.176496][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  188.178756][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  188.181319][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  188.184070][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  188.186532][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  188.188883][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  188.191065][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  188.193457][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  188.195894][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  188.198111][    C1]  handle_softirqs+0x286/0x870
[  188.199822][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  188.201507][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  188.203701][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  188.205919][    C1]  __irq_exit_rcu+0xca/0x1f0
[  188.207938][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  188.210179][    C1]  irq_exit_rcu+0x9/0x30
[  188.212022][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  188.214455][    C1]  </IRQ>
[  188.215753][    C1]  <TASK>
[  188.217039][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  188.219615][    C1] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x37/0x90
[  188.222551][    C1] Code: 08 a0 a0 92 65 8b 15 a8 ef e0 10 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 57 83 b9 3c 16 00 00 00 74 4e 8b 91 18 16 00 00 <83> fa 03 75 43 48 8b 91 20 16 00 00 44 8b 89 1c 16 00 00 49 c1 e1
[  188.230439][    C1] RSP: 0018:ffffc90007d27348 EFLAGS: 00000246
[  188.232944][    C1] RAX: ffffffff822e4a0d RBX: 1ffffd4000848e31 RCX: ffff888029eb0000
[  188.236258][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  188.239498][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff822e636a
[  188.242403][    C1] R10: dffffc0000000000 R11: fffff94000848e31 R12: ffffea00042471b0
[  188.245585][    C1] R13: ffffea0004247180 R14: 0000000000000001 R15: 0000000000000000
[  188.248821][    C1]  ? pfn_valid+0xba/0x490
[  188.250687][    C1]  ? page_table_check_clear+0x12d/0x700
[  188.252961][    C1]  page_table_check_clear+0x12d/0x700
[  188.255143][    C1]  ? vm_normal_page+0xb7/0x210
[  188.257042][    C1]  unmap_page_range+0x3445/0x4370
[  188.259122][    C1]  ? __pfx_unmap_page_range+0x10/0x10
[  188.261381][    C1]  ? mas_find+0xb0e/0xd30
[  188.263115][    C1]  ? unmap_vmas+0x144/0x580
[  188.264958][    C1]  unmap_vmas+0x399/0x580
[  188.266737][    C1]  ? __pfx_unmap_vmas+0x10/0x10
[  188.268756][    C1]  exit_mmap+0x248/0xb50
[  188.270546][    C1]  ? uprobe_clear_state+0x20f/0x290
[  188.272710][    C1]  ? __pfx_exit_mmap+0x10/0x10
[  188.274744][    C1]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  188.277177][    C1]  ? __pfx_exit_aio+0x10/0x10
[  188.279198][    C1]  ? uprobe_clear_state+0x274/0x290
[  188.281387][    C1]  __mmput+0x118/0x420
[  188.283190][    C1]  exit_mm+0x1da/0x2c0
[  188.284910][    C1]  ? __pfx_exit_mm+0x10/0x10
[  188.286801][    C1]  ? rcu_is_watching+0x15/0xb0
[  188.288771][    C1]  do_exit+0x648/0x2300
[  188.290552][    C1]  ? cgroup_freezing+0x20/0x350
[  188.292574][    C1]  ? __pfx_do_exit+0x10/0x10
[  188.294503][    C1]  ? cgroup_freezing+0x20/0x350
[  188.296504][    C1]  ? cgroup_freezing+0x20/0x350
[  188.298554][    C1]  do_group_exit+0x21c/0x2d0
[  188.300498][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  188.302674][    C1]  get_signal+0x1286/0x1340
[  188.304579][    C1]  arch_do_signal_or_restart+0x9a/0x750
[  188.306843][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  188.309373][    C1]  ? exit_to_user_mode_loop+0x40/0x110
[  188.311651][    C1]  exit_to_user_mode_loop+0x75/0x110
[  188.313836][    C1]  do_syscall_64+0x2bd/0x3b0
[  188.315653][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  188.317795][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.320308][    C1]  ? exc_page_fault+0x9f/0xf0
[  188.322270][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.324805][    C1] RIP: 0033:0x7fa0da38ebe9
[  188.326661][    C1] Code: Unable to access opcode bytes at 0x7fa0da38ebbf.
[  188.329484][    C1] RSP: 002b:00007fa0db2300e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  188.332878][    C1] RAX: fffffffffffffe00 RBX: 00007fa0da5c5fa8 RCX: 00007fa0da38ebe9
[  188.336143][    C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa0da5c5fa8
[  188.339422][    C1] RBP: 00007fa0da5c5fa0 R08: 0000000000000000 R09: 0000000000000000
[  188.342741][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  188.345985][    C1] R13: 00007fa0da5c6038 R14: 00007ffcbd8a2b00 R15: 00007ffcbd8a2be8
[  188.349248][    C1]  </TASK>
[  188.351296][    C1] Kernel Offset: disabled
[  188.353146][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
01:12:48  Registers:
info registers vcpu 0

CPU#0
RAX=3306fd65de38e100 RBX=ffffffff819683c8 RCX=3306fd65de38e100 RDX=0000000000000001
RSI=ffffffff8d9b907c RDI=ffffffff8be33800 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38a30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7a33f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8616000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3a9f70 CR3=000000003d7b8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0030766461746162
XMM02=00000008000003b7 fffffff800000207 XMM03=0000000100000085 00000000000004b7
XMM04=9500000001000000 8500000000000004 XMM05=b700000008000003 b7fffffff8000002
XMM06=07000000000000a2 bf00000000fff88a XMM07=7b00000000000008 b700000000000000
XMM08=0000000000000000 00007fd5e6012ee7 XMM09=0000000000000000 00007fd5e6012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000002e RBX=000000000000002e RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001e03b0
R8 =ffff888106548237 R9 =1ffff11020ca9046 R10=dffffc0000000000 R11=ffffffff854f3d80
R12=dffffc0000000000 R13=ffffffff99aff90e R14=ffffffff99df4420 R15=0000000000000000
RIP=ffffffff854f3dfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa0db2306c0 ffffffff 00c00000
GS =0000 ffff8881a3c16000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=0000000027fe0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fd5e6012e53
XMM06=0000000000000000 00007fd5e6012e4d XMM07=0000000000000000 00007fd5e6012e61
XMM08=0000000000000000 00007fd5e6012ee7 XMM09=0000000000000000 00007fd5e6012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
