last executing test programs:

1.379609315s ago: executing program 0 (id=4630):
socket$packet(0x11, 0x3, 0x300)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x8, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x8801, 0x71c42}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x14008005}, 0x20008090)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="3bcbdb0fcfa026557d2ea2b0fa34b7b3ddf4e60fe678186210e935989ea66d3c5479ca82428e90b96b3635a98e39939ef5109511d949224164c044f18fb4d64db5c0404f01b99fba50263ee03e82a28fcd751660b0cab68a62a8b6eac29946c988fc747092d35e9352d8442feece96b4ee481cf95a8feb6ec3d6e5cff03f59eb97136d7cb400c1d0ed4ed9b83090abb113aa4e9260695700"/166, 0xa6}, {&(0x7f0000000980)="742f311a83a225186454bcfd09e48b60d703de616d0e6f11523b39000158bc", 0x1f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000b00)="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", 0x529}], 0x1}}], 0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

688.933025ms ago: executing program 1 (id=4636):
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8)
r0 = accept(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000011c40)=[{{0x0, 0x0, &(0x7f00000070c0)=[{&(0x7f0000005f40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8040)
sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xb8, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x375b}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8001}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000011}, 0x4004050)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x4000804)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r1, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x8929, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x1, 0x1, 0x201}, 0x14}}, 0x4000040)
sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000130a01020000000000000000020000000800eb3f00000003"], 0x1c}}, 0x24004050)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_devices(r6, 0x0, 0x2, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r7}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80)
socket$nl_generic(0x10, 0x3, 0x10)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8004)

587.858483ms ago: executing program 1 (id=4637):
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x0, 0x0, 0x2000000, 0x0, 0x1}}) (async)
r2 = socket(0x1d, 0x2, 0x6)
bind$inet(r2, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r5, 0xfffffffc) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async)
r11 = accept4(r10, 0x0, 0x0, 0x0)
recvmmsg(r11, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2061, 0x0) (async)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
pipe(&(0x7f0000000600)) (async)
pipe(&(0x7f0000000500)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
close(r12) (async)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x20}}, 0x0)
recvmmsg$unix(r4, &(0x7f0000001d40)=[{{0x0, 0x5a, 0x0}}], 0x40001ec, 0x102, 0x0)
writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000300)='X\x00\x00\x00', 0x4}], 0x1)

521.245478ms ago: executing program 1 (id=4639):
r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x1c)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'pimreg1\x00', {0x2, 0x64, @empty}})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x880)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r1, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "102b941dfd54207bda4e7fe2a9"}, @NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0xa, 0xa, "01efba2e3493"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040}, 0x28008485)
r4 = accept4$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @private}, &(0x7f00000003c0)=0x10, 0x80800)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000400)=0x81, 0x4)
ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000440))
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000480)={0x5, 0x0, 0x4, 0x3, 0x1, 0x3, 0x26, 0x7f, 0xfc, 0x73, 0xdb, 0xab, 0x4, 0x1}, 0xe)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x80, r1, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffff9}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x10000}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10000}]]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}}, 0x0)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x4, [@union={0x3, 0x4, 0x0, 0x5, 0x1, 0x8001, [{0x6, 0x0, 0xe36}, {0xa, 0x0, 0x2}, {0x7, 0x4, 0x8}, {0xb, 0x4, 0x4}]}, @enum={0x5, 0x4, 0x0, 0x6, 0x4, [{0x4, 0x390}, {0x2, 0x72}, {0xd, 0x9}, {0x7, 0x9}]}, @func={0x8, 0x0, 0x0, 0xc, 0x5}, @fwd={0x2}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x7}, {0x4, 0x2}, {0xe, 0x4}]}]}, {0x0, [0x61, 0x0]}}, &(0x7f00000007c0)=""/79, 0xc0, 0x4f, 0x1, 0xfff}, 0x28)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x11, 0x6, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @jmp={0x5, 0x0, 0x0, 0xb, 0x0, 0x8, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000900)='GPL\x00', 0x2, 0x1000, &(0x7f0000000940)=""/4096, 0x40f00, 0x8, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001940)={0x4, 0xf, 0x3ff, 0x3}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000001980)=[0x1, 0x1, 0x1], &(0x7f00000019c0)=[{0x3, 0x4, 0xe, 0x8}, {0x0, 0x5, 0x9, 0x9}, {0x4, 0x1, 0xb, 0xa}, {0x0, 0x5, 0x6, 0x4}, {0x3, 0x1, 0xd, 0x3}, {0x7fff, 0x5, 0xd, 0xc}, {0x1, 0x3, 0xe, 0x4}, {0x2, 0x1, 0x10, 0x7}]}, 0x94)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b00)={&(0x7f0000000880)='btrfs_set_extent_bit\x00', r7, 0x0, 0x7ff}, 0x18)
socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000001b40)={<r9=>0x0, 0x1000, "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"}, &(0x7f0000002b80)=0x1008)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000002bc0)=r9, 0x4)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002c40), r3)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000002c80)={'batadv0\x00', <r11=>0x0})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000002d80)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002cc0)={0x58, r10, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffff9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x4000)
ioctl$FIOCLEX(r5, 0x5451)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002e40)={{0xffffffffffffffff, <r12=>0xffffffffffffffff}, &(0x7f0000002dc0), &(0x7f0000002e00)=r7}, 0x20)
r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000003040)=@generic={&(0x7f0000003000)='./file0\x00', 0x0, 0x8}, 0x18)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000003080)={0x1, <r14=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003180)={0x6, 0xd, &(0x7f0000002e80)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r12}}, @cb_func, @cb_func={0x18, 0x9, 0x4, 0x0, 0x7}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x5}], &(0x7f0000002f00)='GPL\x00', 0x2, 0x43, &(0x7f0000002f40)=""/67, 0x40f00, 0x4, '\x00', r11, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002fc0)={0x0, 0x9, 0x10, 0x3}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000030c0)=[r13, r14], &(0x7f0000003100)=[{0x5, 0x1, 0x6, 0xc}, {0x4, 0x1, 0xd, 0x7}, {0x3, 0x4, 0x0, 0xb}, {0x2, 0x5, 0x5, 0x5}, {0x1, 0x3, 0xc, 0x8}, {0x3, 0x1, 0xe, 0xd}, {0x0, 0x1, 0x1, 0xc}, {0x2, 0x4, 0x1, 0x9}], 0x10, 0x7}, 0x94)
r15 = accept$packet(r8, &(0x7f0000003240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000003280)=0x14)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r15, 0xf507, 0x0)

520.514671ms ago: executing program 0 (id=4640):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x100080c1) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cgroup.clone_children\x00', 0x2, 0x0)
write$cgroup_int(r3, &(0x7f0000000200)=0x3f87, 0x12) (async)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r1, &(0x7f0000000100)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x300, 0x0, 0x28, 0x0, @gue={{0x2}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099b"}}}}}}}, 0x4e)
writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000180)="303fdf", 0x3}, {0x0}, {0x0}, {0x0}], 0x4)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000080)={0x3, 'hsr0\x00', {0x9}, 0x2})

459.419694ms ago: executing program 1 (id=4641):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000cbd701004f7ffff04000000080009"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0), 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
ioctl(r0, 0xffff, &(0x7f0000000480)="d42e18a24437990594fb650d958aa18a1e47519c82e8a825d5b09386d504854f1abd3f2a538aad1caf42c5b93f008e9443c205667913fcd8cec9e2aae1fd8e8080d51004fe39116cd995df1e77e07e5688b5b2adbd3707c6bceebdf8e95f8a9307599c9c1d218d3dc54f275adb61b304bece6438d85cce5251814d90f7adf4f6fb989d4de61bea28c377f16bd962116eb0eab85818f4a9")
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c)
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket(0xa, 0x3, 0x3a)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000fbdbdf2505000000200001800d"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)
connect$can_bcm(r5, &(0x7f00000000c0), 0x10)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r5], 0x448}}, 0x0)
sendmmsg$inet(r5, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x20, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000804)

458.043211ms ago: executing program 2 (id=4642):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222}, 0x94)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1200000007002000040000000200000000000000", @ANYRES32, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) (async)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xffffff24, 0x0, &(0x7f0000000000)='%', 0x0, 0xd03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)
setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000180), 0x4)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockopt$rose(r5, 0x104, 0x0, 0x0, &(0x7f0000000300)) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r2}, &(0x7f0000000700), &(0x7f0000000740)=r3}, 0x20)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'hsr0\x00', <r7=>0x0})
bind$packet(r6, &(0x7f0000000200)={0x11, 0x2, r7, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x14) (async)
setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x3}, 0x1c) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) (async)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58)
r10 = accept4(r9, 0x0, 0x0, 0x0) (async)
pipe(&(0x7f00000045c0)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
vmsplice(r12, &(0x7f0000000080)=[{&(0x7f00000015c0)='5', 0x1}, {&(0x7f00000000c0)="57a015", 0x3}], 0x2, 0x7)
splice(r11, 0x0, r10, 0x0, 0x8000, 0x9)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)

378.136338ms ago: executing program 2 (id=4643):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0)
sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048040}, 0x10000000)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
mmap(&(0x7f0000673000/0x4000)=nil, 0x4000, 0x9, 0x4010, r2, 0x45767000)
r3 = socket$kcm(0x29, 0x5, 0x0)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2})
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r4, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r5 = socket(0x40000000015, 0x5, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000003000)=ANY=[@ANYBLOB="300000000706010200000000000000000a00000405000100077a"], 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @rand_addr=0x64010101}, 0xb)
r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000080)={'syztnl0\x00', <r8=>0x0, 0x6, 0x0, 0xd1, 0x2, 0x40, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x1, 0x9, 0xc1}})
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r5)
getsockname$packet(r7, &(0x7f0000000400)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r7, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r11=>0x0}}, 0x10)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xc8, r9, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000010}, 0x6000004)
r12 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r12, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet(r12, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r12, 0x11e, 0x14, &(0x7f0000000080)=0x2, 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x0, '\x00', r8, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x50)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0)
setsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f0000000240), 0x4)
write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef)
getsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, 0x0, &(0x7f00000012c0))

376.912917ms ago: executing program 1 (id=4644):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0)
sendmsg$rds(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000240)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f800000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd0000000c000100080c100000000000", 0x54}, {&(0x7f0000000340)="86d0", 0x2}, {&(0x7f00000004c0)="875d", 0x2}], 0x3)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10)
sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
recvmmsg(r2, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10001, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
socket$rds(0x15, 0x5, 0x0) (async)
getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) (async)
sendmsg$rds(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
socket$netlink(0x10, 0x3, 0x8000000004) (async)
writev(r3, &(0x7f0000000240)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f800000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd0000000c000100080c100000000000", 0x54}, {&(0x7f0000000340)="86d0", 0x2}, {&(0x7f00000004c0)="875d", 0x2}], 0x3) (async)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) (async)
sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) (async)
recvmmsg(r2, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10001, 0x0) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) (async)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
close(0x4) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) (async)

376.49458ms ago: executing program 0 (id=4645):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={<r1=>r0, 0x6, 0xe, 0x3})
setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000500)=@gcm_256={{0x304}, "b8f4dd707dde959f", "532a18cbe0d266062f76263a3db5d022e1ee14dac3e8cc7040de2f2883ff9dc3", "7f2964e2", "b7ff67e9754042b8"}, 0x38)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"/361], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x202, @loopback, 0x4}, 0x1c)
r4 = socket$rds(0x15, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={r0, 0x6, 0xe, 0x3}) (async)
setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000500)=@gcm_256={{0x304}, "b8f4dd707dde959f", "532a18cbe0d266062f76263a3db5d022e1ee14dac3e8cc7040de2f2883ff9dc3", "7f2964e2", "b7ff67e9754042b8"}, 0x38) (async)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"/361], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x202, @loopback, 0x4}, 0x1c) (async)
socket$rds(0x15, 0x5, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) (async)

279.595003ms ago: executing program 2 (id=4646):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000000414010028bd709588b90000"], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x8044)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0xd1383000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x1000)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0xfffff000)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r4, 0x0, 0x7fffffffffffffff}, 0x18)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x1e)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e03558545115509e1c34caab9", "59f7766d", "5e33931677e0f2d7"}, 0x28)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
bind$packet(r6, &(0x7f0000000100)={0x11, 0x3, 0x0, 0x1, 0x3, 0x6, @random="ba5de643b791"}, 0x14)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "ba28597967d1b54c", "9712b0d86846b5ecc522bc6f13a6e30c", "ea0292da", "9e87dc79f4c04982"}, 0x28)
sendto$inet6(r5, &(0x7f0000000280)='S', 0x1, 0x8000, 0x0, 0x0)
close(r5)

278.125518ms ago: executing program 0 (id=4647):
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x32, 0xffffffffffffffff, 0x3000) (async)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x14, r3, 0x1, 0x0, 0x2000, {0x49}}, 0x14}}, 0x0) (async, rerun: 32)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) (async, rerun: 32)
unshare(0x26020480)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async, rerun: 64)
r5 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64)
setsockopt$inet6_int(r5, 0x29, 0x42, &(0x7f0000000200)=0xc779, 0x4) (async)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r5, 0x852ac000) (async)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) (async)
sendto$inet6(r5, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x627bcafb}, 0x1c)
setsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000040)=0x8, 0x4)
socket(0x2c, 0x3, 0x4) (async)
recvmmsg(r5, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x100e}, 0x7ffffffe}], 0x1, 0x40002000, 0x0)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r7, 0x84, 0x4, 0x0, &(0x7f0000000080))
r8 = socket$alg(0x26, 0x5, 0x0)
ppoll(&(0x7f00000001c0)=[{r4, 0x258}, {r1, 0x1}, {r6, 0x135a}, {r1, 0x2000}, {r7, 0x8000}, {r8, 0xc010}], 0x6, &(0x7f0000000200), &(0x7f0000000240)={[0x5]}, 0x8)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x6, 0x10}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r9, 0x0, 0x0}, 0x20) (async, rerun: 32)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32)
r11 = socket$packet(0x11, 0x3, 0x300)
bind(r11, &(0x7f0000000600)=@pppoe={0x18, 0x0, {0x1, @remote, 'geneve0\x00'}}, 0x80)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x14, r10, 0x100, 0x3, 0x0, {0x23}}, 0x14}, 0x1, 0x0, 0x0, 0x4004085}, 0x48084) (async)
getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f00000012c0)) (async)
setsockopt$inet6_int(r0, 0x29, 0x50, &(0x7f0000000080)=0x5a0a, 0x4)

275.46513ms ago: executing program 2 (id=4648):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a300000000020000000030a01010000000000000000010000000900010073797a300000000068000000060a010400000000000000000104000008000b40000000004c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000140001800c000100626974776973650004000280140000001100010000000000000000000700000a39467fa9feb2effae3adce2e0db4e69879a993"], 0xd0}}, 0x0)
r0 = socket(0x11, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000c00010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000001e0a01020000000000000000010000000900020073797a32001400003400038030000080090006400000000024000b8020000180070001006374000014000280080001400000000008000240000000000900010073797a30"], 0xe4}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x8800)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02010310012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x10)

219.680994ms ago: executing program 0 (id=4649):
r0 = socket$xdp(0x2c, 0x3, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x6, 0x8012, r0, 0x0) (async)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x6, 0x8012, r0, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @remote, @void, {@canfd={0xd, {{0x3, 0x0, 0x1, 0x1}, 0x31, 0x1, 0x0, 0x0, "57ab897ca49cdd519ac29a160490bf974d62abd9b78ac244e1c46f4a7e567de4a06cfbc2ed71841356bcf119dd015a1df2bbac89a21d1f13d3804e56153d4ba5"}}}}, 0x0)
socket$alg(0x26, 0x5, 0x0) (async)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYBLOB="95f8482d21e665f9379c77a320f30b4b2941626fc80dc3d8df9c2038b318327f93ad758d8ab0cbe97a6cbc1af7e76b894f107500dce93397878945535af0d131b831e0b1839bb6fb70e75026e46f5dc7cfbdb23563be83cc44a0e17f4a96d714"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x60}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)

218.834948ms ago: executing program 2 (id=4650):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "1aecb11937c35009", "0f7fe0dea404f9d1d3ed23680c22d5df", "ea010354", "7c450b9766ae9dda"}, 0x28)
sendmsg$inet(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)="6e37cff5", 0x4}], 0x1}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_256={{0x304}, "bdf794fb17c277d7", "df0d4b522148ed5d6436af05bc5e65961f0e3e5e5fb21e33cde7758219ba0fe4", "2e44a9ab", "b6c21b179a6ccc82"}, 0x38)
recvfrom$inet6(r0, &(0x7f0000000100)=""/19, 0xff1, 0x40, 0x0, 0x0)

9.567127ms ago: executing program 0 (id=4651):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x6a040000)
socket(0x8, 0x3, 0x0)
socket$kcm(0x2, 0x1, 0x84)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001980)=[{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000680)="c4506ee0e338209d46b2c943649f04a05f8a5ee3c1235272e5dd3fea7a16edce5995b5d2bf0577f9b4911b7ce412246ab265e1c6ab9cd724dd1044c5d8d5ac171827ef0e00516aa2e7a0e1580491267e2ccc92db6dc995b3d74f18bd6a31efd4c1e70da92f48dede22940d4e5d55397e0924fbd1e22034ce", 0x78}], 0x1, 0x0, 0x30, 0x4085}], 0x1, 0x40440c1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9000000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000020000000008001b0000000000680016805400018028000100"], 0x90}}, 0x0)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r4 = accept(r1, 0x0, 0x0)
write$bt_hci(0xffffffffffffffff, 0x0, 0x6)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0)
unshare(0x0)
sendmmsg$inet_sctp(r4, &(0x7f0000001940)=[{&(0x7f00000001c0)=@in={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000200)="05b342400d7a027bb2a96f3fa4b7b14d93adf053a90956fe11e8349e31992ee1a29f174e834c0037f3a576f01325c687f482f0a58652399065511f3dcdecf3997577e696451aa01606d4f535dc2782ac446a27f05bf1e4a8928bf20d80871236351ff1c0d4f0642cdeed1d8f4fd48e67da4de527568efbedad274175a4a3ecb61b350505a73082eae64e", 0x8a}, {&(0x7f0000000340)}, {&(0x7f0000000480)="cef20cdfebde59ffe6c0aeabed716ef4121c189cf2ac247cbc5d9fb50d39a894f12647d9d04d4b67e06c1af499f0db68c7cc2519940184299a988c1b360a69d76f374521d517c98bfcae1f0ad9896c4f9e85c8374c1716be3fee6370037b27aab825f3a880ca82f99a713c31e3de0f4346995194269bef9b3b", 0x79}], 0x3, 0x0, 0x0, 0x44010}, {&(0x7f0000000600)=@in={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48880}, {0x0, 0x0, &(0x7f00000018c0), 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="18000000000000008400000007000000ffffffff00001a00180000000000000084000000070000000a01010200000000"], 0x30, 0x40}], 0x3, 0x4000c45)

881.034µs ago: executing program 2 (id=4652):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x2, 0xe, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x922, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xb15e}}]}, 0x50}}, 0x4)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb00182", 0xb}], 0x1}}], 0x1, 0x20008000)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c56100000000000000000000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCDELDLCI(r4, 0x8981, &(0x7f0000000400)={'netpci0\x00', 0x4})
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000005c21dcd8443a31a07000000100000000000000e0300000000000000040000000000001203000000010000000000001010000000060000effe0fb20804000000080000000000000b0300000000000061516100"], &(0x7f0000000180)=""/25, 0x5f, 0x19, 0x0, 0x7}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x31, 0x80000001, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x0, 0x4}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3b, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x4000000)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x4, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', <r9=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x19, r9, 0x1, 0xb, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14)

0s ago: executing program 1 (id=4653):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000181421f7"], 0x20}, 0x1, 0x0, 0x0, 0x20040001}, 0x20000082)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r2, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000a80)={0x3ff, 0x2, 0x2, 0xfd06739, 0x5, 0x0, [{0x5, 0x0, 0x2, '\x00', 0x604}, {0x1, 0x5, 0xc, '\x00', 0x2004}, {0x0, 0xffffffffffff9335, 0x80000001, '\x00', 0x800}, {0x3, 0xff, 0xc}, {0x1, 0x2, 0x8000, '\x00', 0x1000}]})
setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], 0x0, 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r5, r5, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r7, 0xffffffffffffffff, 0x24}, 0xc)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000000000000000600d5b27bfdcf08bd9c15915eb050b4000008000300", @ANYRES32=r10, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r10, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800359c8063ce113f9049b200000000"], 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="500000080211000064000100010882848b960c12182400"/46], 0x2e)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0)

kernel console output (not intermixed with test programs):

pe 5 has an invalid length.
[  316.439762][T18183] lo speed is unknown, defaulting to 1000
[  316.445447][T18183] syzkaller0 speed is unknown, defaulting to 1000
[  316.503981][T18187] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  316.512544][T18187] syzkaller0: entered promiscuous mode
[  316.514827][T18187] syzkaller0: entered allmulticast mode
[  316.648350][T18182] tipc: Resetting bearer <eth:syzkaller0>
[  316.683951][T18182] tipc: Disabling bearer <eth:syzkaller0>
[  316.720431][T18210] siw: device registration error -23
[  316.750670][T18212] __nla_validate_parse: 15 callbacks suppressed
[  316.750795][T18212] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3306'.
[  327.406782][T18238] can: request_module (can-proto-0) failed.
[  327.487270][T18251] netlink: 'syz.0.3316': attribute type 13 has an invalid length.
[  327.490592][T18251] netlink: 'syz.0.3316': attribute type 17 has an invalid length.
[  327.524527][T18251] 8021q: adding VLAN 0 to HW filter on device bond0
[  327.549732][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  327.573547][T18251] 8021q: adding VLAN 0 to HW filter on device team0
[  327.576498][T18251] tipc: Resetting bearer <ib:team0>
[  327.578942][T18251] tipc: Resetting bearer <ib:team0>
[  327.584287][T18251] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  327.598059][T18251] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  327.856503][T18269] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3322'.
[  327.869305][T18269] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3322'.
[  327.876600][T18269] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3322'.
[  327.880528][T18269] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3322'.
[  327.949913][ T5874] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  327.955359][ T5874] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  327.973213][T18272] lo speed is unknown, defaulting to 1000
[  327.977240][T18272] syzkaller0 speed is unknown, defaulting to 1000
[  328.265914][T18293] tipc: Resetting bearer <ib:team0>
[  328.271449][T18293] team0: Unable to change to the same mode the team is in
[  328.289677][T16258] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  328.370108][T18306] lo speed is unknown, defaulting to 1000
[  328.374005][T18306] syzkaller0 speed is unknown, defaulting to 1000
[  328.425828][T18314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3332'.
[  328.498473][T18316] lo speed is unknown, defaulting to 1000
[  328.503019][T18316] syzkaller0 speed is unknown, defaulting to 1000
[  328.823727][T18341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3338'.
[  328.826522][T18341] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3338'.
[  328.837468][T18341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3338'.
[  328.847442][T18341] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3338'.
[  328.847699][T16258] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  328.850861][T18341] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3338'.
[  328.863934][T18341] netlink: 'syz.2.3338': attribute type 16 has an invalid length.
[  328.866811][T18341] netlink: 'syz.2.3338': attribute type 17 has an invalid length.
[  328.881383][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  328.923052][T18344] IPv6: NLM_F_REPLACE set, but no existing node found!
[  328.971484][T18341] tipc: Resetting bearer <eth:syz_tun>
[  328.989344][T18341] tipc: Resetting bearer <eth:team0>
[  329.200696][T18366] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  329.204731][T18365] IPVS: stopping backup sync thread 18366 ...
[  329.465320][T18390] lo speed is unknown, defaulting to 1000
[  329.470231][T18390] syzkaller0 speed is unknown, defaulting to 1000
[  329.697173][T18407] lo speed is unknown, defaulting to 1000
[  329.701440][T18407] syzkaller0 speed is unknown, defaulting to 1000
[  329.975072][T18423] sctp: [Deprecated]: syz.1.3360 (pid 18423) Use of int in maxseg socket option.
[  329.975072][T18423] Use struct sctp_assoc_value instead
[  329.981721][T18424] sctp: [Deprecated]: syz.1.3360 (pid 18424) Use of int in maxseg socket option.
[  329.981721][T18424] Use struct sctp_assoc_value instead
[  329.991656][T18423] syzkaller1: entered promiscuous mode
[  329.993610][T18423] syzkaller1: entered allmulticast mode
[  330.207954][T18437] netlink: 'syz.1.3364': attribute type 32 has an invalid length.
[  330.411729][T18451] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  330.482725][T18456] lo speed is unknown, defaulting to 1000
[  330.486889][T18456] syzkaller0 speed is unknown, defaulting to 1000
[  330.516157][T18455] netlink: 'syz.0.3367': attribute type 1 has an invalid length.
[  330.990716][T18481] netlink: 'syz.2.3375': attribute type 1 has an invalid length.
[  331.008116][T18480] bond9: entered promiscuous mode
[  331.011333][T18480] bond9: entered allmulticast mode
[  331.013449][T18480] 8021q: adding VLAN 0 to HW filter on device bond9
[  331.024884][T18480] bridge9: entered promiscuous mode
[  331.027356][T18480] bridge9: entered allmulticast mode
[  331.030148][T18480] bond9: (slave bridge9): Enslaving as a backup interface with an up link
[  331.093579][T18488] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  331.119190][ T5874] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  331.202559][T18498] siw: device registration error -23
[  331.214265][T18498] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  331.233430][ T5695] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  331.325541][T18511] netlink: 'syz.2.3386': attribute type 1 has an invalid length.
[  331.383018][T18515] netlink: 'syz.2.3386': attribute type 13 has an invalid length.
[  331.386553][T18515] netlink: 'syz.2.3386': attribute type 17 has an invalid length.
[  331.450772][T18515] 8021q: adding VLAN 0 to HW filter on device bond0
[  331.453788][T18515] 8021q: adding VLAN 0 to HW filter on device team0
[  331.456829][T18515] tipc: Resetting bearer <eth:team0>
[  331.461941][T18515] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  331.495590][T18518] lo speed is unknown, defaulting to 1000
[  331.510068][T18518] syzkaller0 speed is unknown, defaulting to 1000
[  331.570416][T18515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  331.738161][T18535] siw: device registration error -23
[  331.746600][T18535] tipc: Bearer <eth:syzkaller0>: already 2 bearers with priority 0
[  331.750741][T18535] tipc: Enabling of bearer <eth:syzkaller0> rejected, cannot adjust to lower
[  331.786105][T18537] wg1: entered promiscuous mode
[  331.796856][T18537] lo speed is unknown, defaulting to 1000
[  331.803074][T18537] syzkaller0 speed is unknown, defaulting to 1000
[  331.979433][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  332.250971][T18559] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  332.258060][T18559] tipc: Resetting bearer <ib:team0>
[  332.260385][T18559] tipc: Resetting bearer <ib:team0>
[  332.263354][T18559] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  332.271645][T18558] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  332.279372][ T5896] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  332.314384][T18565] lo speed is unknown, defaulting to 1000
[  332.318557][T18565] syzkaller0 speed is unknown, defaulting to 1000
[  332.484692][T18575] lo speed is unknown, defaulting to 1000
[  332.488539][T18575] syzkaller0 speed is unknown, defaulting to 1000
[  332.617693][ T5874] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  332.623372][ T5874] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  332.742936][T18594] validate_nla: 1 callbacks suppressed
[  332.742947][T18594] netlink: 'syz.2.3411': attribute type 13 has an invalid length.
[  332.746701][T18596] sch_tbf: peakrate 7 is lower than or equals to rate 19 !
[  332.747692][T18594] netlink: 'syz.2.3411': attribute type 17 has an invalid length.
[  332.764632][T18594] tipc: Resetting bearer <eth:team0>
[  332.767063][T18594] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  332.839162][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  332.991911][T18607] lo speed is unknown, defaulting to 1000
[  333.005886][T18607] syzkaller0 speed is unknown, defaulting to 1000
[  333.029353][ T1270] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  333.138604][T18612] __nla_validate_parse: 26 callbacks suppressed
[  333.138622][T18612] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3415'.
[  333.253794][T18619] lo speed is unknown, defaulting to 1000
[  333.258110][T18619] syzkaller0 speed is unknown, defaulting to 1000
[  333.367965][T18619] IPVS: Unknown mcast interface: hsr0
[  334.122413][T18635] lo speed is unknown, defaulting to 1000
[  334.134883][T18635] syzkaller0 speed is unknown, defaulting to 1000
[  334.307568][T18655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3425'.
[  334.312275][T18655] netlink: 312 bytes leftover after parsing attributes in process `syz.0.3425'.
[  334.316570][T18655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3425'.
[  334.326829][T18661] lo speed is unknown, defaulting to 1000
[  334.335929][T18661] syzkaller0 speed is unknown, defaulting to 1000
[  334.345429][T18658] lo speed is unknown, defaulting to 1000
[  334.361908][T18655] lo speed is unknown, defaulting to 1000
[  334.366497][T18658] syzkaller0 speed is unknown, defaulting to 1000
[  334.383227][T18655] syzkaller0 speed is unknown, defaulting to 1000
[  335.039142][T18686] lo speed is unknown, defaulting to 1000
[  335.043422][T18686] syzkaller0 speed is unknown, defaulting to 1000
[  335.650036][T18703] lo speed is unknown, defaulting to 1000
[  335.653261][T18704] lo speed is unknown, defaulting to 1000
[  335.654887][T18703] syzkaller0 speed is unknown, defaulting to 1000
[  335.666863][T18704] syzkaller0 speed is unknown, defaulting to 1000
[  335.825297][T18708] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3437'.
[  335.917836][T18718] netlink: 'syz.1.3440': attribute type 32 has an invalid length.
[  335.926565][T18715] lo speed is unknown, defaulting to 1000
[  335.930507][T18715] syzkaller0 speed is unknown, defaulting to 1000
[  336.036699][T18728] lo speed is unknown, defaulting to 1000
[  336.044396][T18728] syzkaller0 speed is unknown, defaulting to 1000
[  336.148884][T18740] tipc: Resetting bearer <ib:team0>
[  336.175436][T18749] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3447'.
[  336.236272][T18750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3447'.
[  336.238004][T18757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3447'.
[  336.260500][   T55] block nbd6: Receive control failed (result -107)
[  336.278403][T18750] hsr_slave_1 (unregistering): left promiscuous mode
[  336.299681][T18754] nbd6: detected capacity change from 0 to 32
[  336.378912][T18764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3451'.
[  336.397039][T18764] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3451'.
[  336.405365][T18764] netlink: 'syz.1.3451': attribute type 16 has an invalid length.
[  336.419913][T18764] netlink: 'syz.1.3451': attribute type 17 has an invalid length.
[  336.428252][T18764] netlink: 'syz.1.3451': attribute type 27 has an invalid length.
[  336.574844][T18767] lo speed is unknown, defaulting to 1000
[  336.584522][T18767] syzkaller0 speed is unknown, defaulting to 1000
[  336.611401][T18768] sctp: [Deprecated]: syz.2.3453 (pid 18768) Use of int in max_burst socket option deprecated.
[  336.611401][T18768] Use struct sctp_assoc_value instead
[  337.230624][T18787] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  337.237038][T18787] syzkaller0: entered promiscuous mode
[  337.239455][T18787] syzkaller0: entered allmulticast mode
[  337.243973][T18787] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) !
[  337.255809][T18787] tipc: Resetting bearer <eth:syzkaller0>
[  337.262072][T18786] tipc: Resetting bearer <eth:syzkaller0>
[  337.270967][T18786] tipc: Disabling bearer <eth:syzkaller0>
[  337.510680][T18802] lo speed is unknown, defaulting to 1000
[  337.517051][T18802] syzkaller0 speed is unknown, defaulting to 1000
[  337.892125][T18823] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  337.916901][T18815] sctp: [Deprecated]: syz.1.3466 (pid 18815) Use of int in max_burst socket option.
[  337.916901][T18815] Use struct sctp_assoc_value instead
[  337.924930][T18828] lo speed is unknown, defaulting to 1000
[  337.929037][T18828] syzkaller0 speed is unknown, defaulting to 1000
[  337.993543][T18834] lo speed is unknown, defaulting to 1000
[  337.997783][T18834] syzkaller0 speed is unknown, defaulting to 1000
[  338.128271][T18838] netlink: 'syz.2.3472': attribute type 1 has an invalid length.
[  339.420746][T18856] syzkaller1: entered promiscuous mode
[  339.423019][T18856] syzkaller1: entered allmulticast mode
[  339.806943][T18885] lo speed is unknown, defaulting to 1000
[  339.825390][T18885] syzkaller0 speed is unknown, defaulting to 1000
[  339.850794][T18886] netlink: 'syz.2.3486': attribute type 5 has an invalid length.
[  339.918562][ T1270] IPVS: starting estimator thread 0...
[  340.011471][T18892] IPVS: using max 52 ests per chain, 124800 per kthread
[  340.807255][   T12] IPVS: stop unused estimator thread 0...
[  340.954882][T18930] __nla_validate_parse: 8 callbacks suppressed
[  340.954892][T18930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3498'.
[  341.057441][T18936] lo speed is unknown, defaulting to 1000
[  341.065924][T18936] syzkaller0 speed is unknown, defaulting to 1000
[  341.105765][T18942] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3501'.
[  341.447570][T18970] lo speed is unknown, defaulting to 1000
[  341.453331][T18973] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3510'.
[  341.455490][T18970] syzkaller0 speed is unknown, defaulting to 1000
[  341.573006][T18970] IPVS: Unknown mcast interface: hsr0
[  341.634523][T18984] lo speed is unknown, defaulting to 1000
[  341.712187][T18984] syzkaller0 speed is unknown, defaulting to 1000
[  341.757231][T18989] netlink: 'syz.1.3517': attribute type 3 has an invalid length.
[  341.771605][T18989] syz_tun: entered allmulticast mode
[  341.810081][T18989] siw: device registration error -23
[  341.850317][T18996] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3518'.
[  341.868181][T18988] syz_tun: left allmulticast mode
[  342.165576][T19023] siw: device registration error -23
[  342.264600][T19034] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  342.266983][T19029] lo speed is unknown, defaulting to 1000
[  342.276387][T19035] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3529'.
[  342.280705][T19035] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3529'.
[  342.286507][T19035] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3529'.
[  342.292191][T19035] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3529'.
[  342.297712][T19035] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3529'.
[  342.304399][T19029] syzkaller0 speed is unknown, defaulting to 1000
[  342.308028][T19033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3529'.
[  342.312796][T19031] siw: device registration error -23
[  342.432469][T19042] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  342.448479][T19041] lo speed is unknown, defaulting to 1000
[  342.457686][T19041] syzkaller0 speed is unknown, defaulting to 1000
[  342.608739][T19052] siw: device registration error -23
[  342.701323][T19068] netlink: 'syz.1.3539': attribute type 1 has an invalid length.
[  342.732580][T19068] bond7: entered promiscuous mode
[  342.734793][T19068] bond7: entered allmulticast mode
[  342.736978][T19068] 8021q: adding VLAN 0 to HW filter on device bond7
[  342.742112][T19064] netlink: 'syz.0.3538': attribute type 13 has an invalid length.
[  342.749878][T19064] netlink: 'syz.0.3538': attribute type 17 has an invalid length.
[  342.754746][T19068] bridge7: entered promiscuous mode
[  342.757452][T19068] bridge7: entered allmulticast mode
[  342.761259][T19068] bond7: (slave bridge7): Enslaving as a backup interface with an up link
[  342.785682][T19064] 8021q: adding VLAN 0 to HW filter on device bond0
[  342.789776][T19064] 8021q: adding VLAN 0 to HW filter on device team0
[  342.792795][T19064] tipc: Resetting bearer <ib:team0>
[  342.795110][T19064] tipc: Resetting bearer <ib:team0>
[  342.802277][T19064] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  342.819511][ T5896] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  342.832915][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  342.836251][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  342.842174][ T5874] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  342.851019][ T5896] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  342.959214][ T5874] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  342.964848][T19086] netlink: 'syz.1.3541': attribute type 21 has an invalid length.
[  342.993750][T19089] lo speed is unknown, defaulting to 1000
[  342.998597][T19089] syzkaller0 speed is unknown, defaulting to 1000
[  343.112397][T19092] lo speed is unknown, defaulting to 1000
[  343.128721][T19092] syzkaller0 speed is unknown, defaulting to 1000
[  343.558712][T19123] siw: device registration error -23
[  343.572512][T19123] tipc: Bearer <eth:syzkaller0>: already 2 bearers with priority 0
[  343.576418][T19123] tipc: Enabling of bearer <eth:syzkaller0> rejected, cannot adjust to lower
[  343.625057][T19129] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  343.740594][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  343.830561][T19147] lo speed is unknown, defaulting to 1000
[  343.837081][T19147] syzkaller0 speed is unknown, defaulting to 1000
[  343.912257][T19149] lo speed is unknown, defaulting to 1000
[  343.923465][T19145] lo speed is unknown, defaulting to 1000
[  343.966619][T19153] netlink: 'syz.2.3564': attribute type 12 has an invalid length.
[  343.970758][T19153] netlink: 'syz.2.3564': attribute type 14 has an invalid length.
[  344.007977][T19149] syzkaller0 speed is unknown, defaulting to 1000
[  344.015844][T19145] syzkaller0 speed is unknown, defaulting to 1000
[  344.469901][   T61] block nbd3: Possible stuck request ffff888020380000: control (read@0,1024B). Runtime 90 seconds
[  344.473400][   T61] block nbd3: Possible stuck request ffff888020380200: control (read@1024,1024B). Runtime 90 seconds
[  344.476904][   T61] block nbd3: Possible stuck request ffff888020380400: control (read@2048,1024B). Runtime 90 seconds
[  344.481653][   T61] block nbd3: Possible stuck request ffff888020380600: control (read@3072,1024B). Runtime 90 seconds
[  344.693617][T19194] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  344.696219][T19194] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  344.750618][T19198] netlink: 'syz.0.3577': attribute type 3 has an invalid length.
[  344.763793][T19198] pim6reg: entered allmulticast mode
[  344.771040][T19198] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  344.786022][T19198] tipc: Resetting bearer <ib:team0>
[  344.788330][T19198] tipc: Resetting bearer <ib:team0>
[  344.795814][T19198] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  344.806397][T19197] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  344.810409][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  344.875101][T19205] siw: device registration error -23
[  344.881368][T19205] tipc: Bearer <eth:syzkaller0>: already 2 bearers with priority 0
[  344.884041][T19205] tipc: Enabling of bearer <eth:syzkaller0> rejected, cannot adjust to lower
[  344.962130][T19212] netlink: 'syz.0.3582': attribute type 41 has an invalid length.
[  345.110685][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  345.169900][T19234] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  345.201156][ T5695] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  345.204633][ T5695] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  345.375248][T19247] lo speed is unknown, defaulting to 1000
[  345.380723][T19247] syzkaller0 speed is unknown, defaulting to 1000
[  345.436046][T19247] netlink: 'syz.2.3592': attribute type 10 has an invalid length.
[  345.514993][T19268] netlink: 'syz.2.3597': attribute type 1 has an invalid length.
[  345.580384][T19272] bond10: entered promiscuous mode
[  345.582114][T19272] bond10: entered allmulticast mode
[  345.584007][T19272] 8021q: adding VLAN 0 to HW filter on device bond10
[  345.594951][T19268] bridge10: entered promiscuous mode
[  345.597232][T19268] bridge10: entered allmulticast mode
[  345.600868][T19268] bond10: (slave bridge10): Enslaving as a backup interface with an up link
[  345.610181][T19270] lo speed is unknown, defaulting to 1000
[  345.616615][T19270] syzkaller0 speed is unknown, defaulting to 1000
[  345.689981][   T12] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  345.800990][   T12] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  346.069352][ T5896] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  346.297617][T19298] __nla_validate_parse: 26 callbacks suppressed
[  346.297631][T19298] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3604'.
[  346.305019][T19299] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3604'.
[  346.520183][T19308] netlink: 'syz.2.3606': attribute type 1 has an invalid length.
[  347.272978][T19328] lo speed is unknown, defaulting to 1000
[  347.277156][T19328] syzkaller0 speed is unknown, defaulting to 1000
[  347.409427][T19346] netlink: 'syz.1.3615': attribute type 4 has an invalid length.
[  347.504828][T19346] netlink: 'syz.1.3615': attribute type 10 has an invalid length.
[  347.515370][T19348] lo speed is unknown, defaulting to 1000
[  347.519821][T19348] syzkaller0 speed is unknown, defaulting to 1000
[  347.628558][T19363] netlink: 'syz.0.3616': attribute type 1 has an invalid length.
[  347.633784][T19363] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3616'.
[  347.652850][T19362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3621'.
[  347.655985][T19362] openvswitch: netlink: Flow actions attr not present in new flow.
[  347.683673][T19365] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  347.694113][T19365] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  347.697819][T19365] syzkaller0: entered promiscuous mode
[  347.700749][T19365] syzkaller0: entered allmulticast mode
[  347.716117][T19365] tipc: Resetting bearer <eth:syzkaller0>
[  347.721596][T19364] tipc: Resetting bearer <eth:syzkaller0>
[  347.733065][T19364] tipc: Disabling bearer <eth:syzkaller0>
[  347.867735][T19375] lo speed is unknown, defaulting to 1000
[  347.875142][T19375] syzkaller0 speed is unknown, defaulting to 1000
[  347.912471][T19378] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3626'.
[  348.007430][T19386] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  348.026142][T19388] lo speed is unknown, defaulting to 1000
[  348.036233][T19388] syzkaller0 speed is unknown, defaulting to 1000
[  348.078758][T19391] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3632'.
[  348.165575][T19401] lo speed is unknown, defaulting to 1000
[  348.172591][T19401] syzkaller0 speed is unknown, defaulting to 1000
[  348.496958][T19431] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  348.500644][T19431] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  348.530816][T19435] lo speed is unknown, defaulting to 1000
[  348.535352][T19435] syzkaller0 speed is unknown, defaulting to 1000
[  348.613054][T19442] netlink: 348 bytes leftover after parsing attributes in process `syz.2.3648'.
[  348.681867][T19449] lo speed is unknown, defaulting to 1000
[  348.686515][T19449] syzkaller0 speed is unknown, defaulting to 1000
[  348.741486][T19453] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3651'.
[  348.745308][T19453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3651'.
[  348.799600][T19459] siw: device registration error -23
[  348.866381][T19468] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  348.915168][T19470] lo speed is unknown, defaulting to 1000
[  348.932954][T19472] tipc: Resetting bearer <eth:syz_tun>
[  348.938681][T19472] tipc: Resetting bearer <eth:team0>
[  348.962988][T19473] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3655'.
[  348.966783][T19470] syzkaller0 speed is unknown, defaulting to 1000
[  349.179148][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  349.764529][T19487] batadv0: entered promiscuous mode
[  349.766778][T19487] batadv0: entered allmulticast mode
[  349.987397][T19494] lo speed is unknown, defaulting to 1000
[  349.995676][T19494] syzkaller0 speed is unknown, defaulting to 1000
[  350.036180][T19498] validate_nla: 1 callbacks suppressed
[  350.036189][T19498] netlink: 'syz.2.3662': attribute type 24 has an invalid length.
[  350.044030][T19498] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[  350.047572][T19498] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[  350.120692][T19503] lo speed is unknown, defaulting to 1000
[  350.125053][T19503] syzkaller0 speed is unknown, defaulting to 1000
[  350.253956][T19513] netlink: 'syz.2.3665': attribute type 5 has an invalid length.
[  350.268566][T19512] lo speed is unknown, defaulting to 1000
[  350.277505][T19512] syzkaller0 speed is unknown, defaulting to 1000
[  350.398472][T19520] netlink: 'syz.0.3667': attribute type 13 has an invalid length.
[  350.399969][T19518] netlink: 'syz.1.3666': attribute type 16 has an invalid length.
[  350.402489][T19520] netlink: 'syz.0.3667': attribute type 17 has an invalid length.
[  350.404491][T19518] netlink: 'syz.1.3666': attribute type 17 has an invalid length.
[  350.408450][T19520] tipc: Resetting bearer <ib:team0>
[  350.429311][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  350.633241][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  350.768296][T19551] lo speed is unknown, defaulting to 1000
[  350.775637][T19551] syzkaller0 speed is unknown, defaulting to 1000
[  350.811778][T19555] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  350.836979][T19555] siw: device registration error -23
[  350.894773][T19563] netem: incorrect gi model size
[  350.896787][T19563] netem: change failed
[  351.034113][T19574] openvswitch: netlink: Tunnel attr 9 has unexpected len 6 expected 2
[  351.101084][T19576] syz.0.3686 uses old SIOCAX25GETINFO
[  351.216419][T19588] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  351.243649][T19593] syzkaller1: entered promiscuous mode
[  351.245694][T19593] syzkaller1: entered allmulticast mode
[  351.424018][T19599] lo speed is unknown, defaulting to 1000
[  351.428723][T19599] syzkaller0 speed is unknown, defaulting to 1000
[  351.570543][T19607] __nla_validate_parse: 14 callbacks suppressed
[  351.570554][T19607] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3694'.
[  351.635758][T19609] netlink: 'syz.1.3695': attribute type 2 has an invalid length.
[  351.638778][T19609] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3695'.
[  351.648859][T19614] siw: device registration error -23
[  351.652473][T19614] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3697'.
[  351.659348][T19614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3697'.
[  351.680632][T19614] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  351.692769][T19618] siw: device registration error -23
[  351.696022][T19618] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3698'.
[  351.699145][T19618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3698'.
[  351.704689][T19618] tipc: Bearer <eth:syzkaller0>: already 2 bearers with priority 0
[  351.707395][T19618] tipc: Enabling of bearer <eth:syzkaller0> rejected, cannot adjust to lower
[  351.737475][T19623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3699'.
[  351.934893][T19641] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3705'.
[  351.938665][T19641] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3705'.
[  352.009199][T19641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3705'.
[  352.397256][T19675] lo speed is unknown, defaulting to 1000
[  352.402913][T19675] syzkaller0 speed is unknown, defaulting to 1000
[  352.647547][T19681] netlink: 'syz.1.3716': attribute type 10 has an invalid length.
[  352.653187][T19681] team0: Port device geneve0 added
[  352.655423][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  352.661281][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  352.665168][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  352.668347][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  353.608090][T19729] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  354.003865][T19737] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  354.046172][T19739] lo speed is unknown, defaulting to 1000
[  354.054123][T19739] syzkaller0 speed is unknown, defaulting to 1000
[  354.082943][T19740] netlink: 'syz.2.3732': attribute type 5 has an invalid length.
[  354.145134][ T1270] IPVS: starting estimator thread 0...
[  354.249745][T19742] IPVS: using max 42 ests per chain, 100800 per kthread
[  354.427808][   T13] IPVS: stop unused estimator thread 0...
[  354.452351][T19752] lo speed is unknown, defaulting to 1000
[  354.458583][T19752] syzkaller0 speed is unknown, defaulting to 1000
[  354.549232][T19754] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  354.843913][T19781] lo speed is unknown, defaulting to 1000
[  354.848175][T19781] syzkaller0 speed is unknown, defaulting to 1000
[  354.931003][T19788] lo speed is unknown, defaulting to 1000
[  354.935026][T19788] syzkaller0 speed is unknown, defaulting to 1000
[  354.957043][T19789] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  355.087988][T19801] lo speed is unknown, defaulting to 1000
[  355.095379][T19801] syzkaller0 speed is unknown, defaulting to 1000
[  355.416337][T19814] netlink: 'syz.0.3752': attribute type 13 has an invalid length.
[  355.420999][T19814] netlink: 'syz.0.3752': attribute type 17 has an invalid length.
[  355.431029][T19814] tipc: Resetting bearer <ib:team0>
[  355.433227][T19814] tipc: Resetting bearer <ib:team0>
[  355.436588][T19814] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  355.462070][T16258] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  355.649483][T19831] lo speed is unknown, defaulting to 1000
[  355.654066][T19831] syzkaller0 speed is unknown, defaulting to 1000
[  355.954268][T19851] lo speed is unknown, defaulting to 1000
[  355.960624][T19851] syzkaller0 speed is unknown, defaulting to 1000
[  356.002607][T19852] netlink: 'syz.2.3757': attribute type 1 has an invalid length.
[  356.160991][T19864] syzkaller1: entered promiscuous mode
[  356.163449][T19864] syzkaller1: entered allmulticast mode
[  356.219459][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  356.299515][ T5695] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  356.303360][ T5695] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  356.502930][T19872] bond9: (slave bridge9): Removing an active aggregator
[  356.506661][T19872] bond9: (slave bridge9): Releasing backup interface
[  356.510399][T19872] bridge9: left promiscuous mode
[  356.512694][T19872] bridge9: left allmulticast mode
[  356.515901][T19872] bond10: (slave bridge10): Removing an active aggregator
[  356.521373][T19872] bond10: (slave bridge10): Releasing backup interface
[  356.524248][T19872] bridge10: left promiscuous mode
[  356.526397][T19872] bridge10: left allmulticast mode
[  356.530727][T19872] team0: Unable to change to the same mode the team is in
[  356.533791][T19872] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  356.537283][T19872] netlink: 'syz.2.3762': attribute type 1 has an invalid length.
[  356.541303][T19872] netlink: 'syz.2.3762': attribute type 2 has an invalid length.
[  356.629336][ T5896] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  356.642790][T19880] __nla_validate_parse: 12 callbacks suppressed
[  356.642800][T19880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3765'.
[  356.727089][T19882] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3766'.
[  356.738291][T19883] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3766'.
[  356.772929][T19889] siw: device registration error -23
[  356.775933][T19889] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3768'.
[  356.780527][T19889] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3768'.
[  356.785072][T19889] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3768'.
[  356.788581][T19889] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  356.902574][T19897] team0: Unable to change to the same mode the team is in
[  356.905648][T19897] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  356.910883][T19897] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3772'.
[  356.914751][T19897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3772'.
[  356.961860][T19905] netlink: 'syz.1.3774': attribute type 5 has an invalid length.
[  356.987051][T19912] netlink: 'syz.1.3776': attribute type 12 has an invalid length.
[  357.071601][T19917] lo speed is unknown, defaulting to 1000
[  357.078635][T19917] syzkaller0 speed is unknown, defaulting to 1000
[  357.134563][T19923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3781'.
[  357.177406][T19931] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3783'.
[  357.204689][T19934] lo speed is unknown, defaulting to 1000
[  357.210476][T19934] syzkaller0 speed is unknown, defaulting to 1000
[  357.638416][T19977] lo speed is unknown, defaulting to 1000
[  357.644603][T19977] syzkaller0 speed is unknown, defaulting to 1000
[  357.832234][T19987] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  358.307768][T20007] lo speed is unknown, defaulting to 1000
[  358.314236][T20007] syzkaller0 speed is unknown, defaulting to 1000
[  358.405519][T20011] 8021q: adding VLAN 0 to HW filter on device bond0
[  358.408241][T20011] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  358.415510][ T5896] lo speed is unknown, defaulting to 1000
[  358.418143][ T5896] syz2: Port: 1 Link ACTIVE
[  358.492907][T20014] lo speed is unknown, defaulting to 1000
[  358.499081][T20014] syzkaller0 speed is unknown, defaulting to 1000
[  358.646609][T20021] IPVS: Unknown mcast interface: pimreg0
[  358.863025][T20029] lo speed is unknown, defaulting to 1000
[  358.915064][T20029] syzkaller0 speed is unknown, defaulting to 1000
[  358.918762][T20036] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  358.961220][T20040] IPVS: set_ctl: invalid protocol: 41 100.1.1.0:20004
[  359.112986][T20050] lo speed is unknown, defaulting to 1000
[  359.116120][T20052] lo speed is unknown, defaulting to 1000
[  359.117333][T20050] syzkaller0 speed is unknown, defaulting to 1000
[  359.127034][T20052] syzkaller0 speed is unknown, defaulting to 1000
[  359.279319][T20058] netlink: 'syz.1.3817': attribute type 13 has an invalid length.
[  359.282345][T20058] netlink: 'syz.1.3817': attribute type 17 has an invalid length.
[  359.305231][T20058] 8021q: adding VLAN 0 to HW filter on device team0
[  359.311183][T20058] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  359.378551][T20063] lo speed is unknown, defaulting to 1000
[  359.385229][T20063] syzkaller0 speed is unknown, defaulting to 1000
[  359.416888][T20063] netlink: 'syz.1.3818': attribute type 5 has an invalid length.
[  359.421413][   T47] IPVS: starting estimator thread 0...
[  359.450163][T20068] lo speed is unknown, defaulting to 1000
[  359.454714][T20068] syzkaller0 speed is unknown, defaulting to 1000
[  359.509261][T20065] IPVS: using max 48 ests per chain, 115200 per kthread
[  359.573870][T20072] syzkaller0: entered promiscuous mode
[  359.576716][T20072] syzkaller0: entered allmulticast mode
[  359.705649][T20082] 8021q: adding VLAN 0 to HW filter on device bond0
[  359.718956][T20082] bond0: (slave rose0): Enslaving as an active interface with an up link
[  359.732759][ T5695] IPVS: stop unused estimator thread 0...
[  359.764234][T20088] siw: device registration error -23
[  360.043717][   T47] lo speed is unknown, defaulting to 1000
[  360.046399][   T47] syz2: Port: 1 Link DOWN
[  360.052837][   T47] lo speed is unknown, defaulting to 1000
[  360.055527][   T47] syz2: Port: 1 Link ACTIVE
[  360.093121][T20115] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  360.100444][T20114] tipc: Disabling bearer <eth:syzkaller0>
[  360.341344][T20131] tipc: Resetting bearer <eth:team0>
[  360.350845][T20132] IPv6: NLM_F_REPLACE set, but no existing node found!
[  360.361794][T16258] lo speed is unknown, defaulting to 1000
[  360.362157][ T5695] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  360.364314][T16258] syz2: Port: 1 Link DOWN
[  360.371604][ T5695] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  360.374886][ T5695] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  360.377759][ T5695] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  360.581440][T20134] lo speed is unknown, defaulting to 1000
[  360.585956][T20134] syzkaller0 speed is unknown, defaulting to 1000
[  360.699263][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  360.742811][T20141] tipc: Resetting bearer <ib:team0>
[  360.873365][T20145] tipc: Invalid UDP bearer configuration
[  360.873406][T20145] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  360.966164][T20157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  361.118387][T20162] lo speed is unknown, defaulting to 1000
[  361.125488][T20162] syzkaller0 speed is unknown, defaulting to 1000
[  361.158832][T20163] validate_nla: 5 callbacks suppressed
[  361.158842][T20163] netlink: 'syz.1.3840': attribute type 5 has an invalid length.
[  361.672536][T20185] lo speed is unknown, defaulting to 1000
[  361.676835][T20185] syzkaller0 speed is unknown, defaulting to 1000
[  361.701037][T20181] veth0_to_bridge: left promiscuous mode
[  361.703211][T20181] veth0_to_bridge: left allmulticast mode
[  361.706495][T20181] vlan0: left promiscuous mode
[  361.709371][T20181] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[  361.713735][T20181] vlan2: left allmulticast mode
[  361.715825][T20181] dummy0: left allmulticast mode
[  361.717983][T20181] bond6: left promiscuous mode
[  361.719861][T20181] bridge6: left promiscuous mode
[  361.721603][T20181] bond6: left allmulticast mode
[  361.723286][T20181] bridge6: left allmulticast mode
[  361.725338][T20181] bond7: left promiscuous mode
[  361.726950][T20181] bridge7: left promiscuous mode
[  361.728643][T20181] bond7: left allmulticast mode
[  361.730519][T20181] bridge7: left allmulticast mode
[  361.755473][T20182] delete_channel: no stack
[  361.807064][T20193] nbd: must specify a size in bytes for the device
[  361.918920][T20209] lo speed is unknown, defaulting to 1000
[  361.926089][T20213] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  361.932635][T20209] syzkaller0 speed is unknown, defaulting to 1000
[  361.938376][T20213] syzkaller0: entered promiscuous mode
[  361.940850][T20213] syzkaller0: entered allmulticast mode
[  361.976453][T20214] netlink: 'syz.0.3854': attribute type 1 has an invalid length.
[  361.979485][T20214] __nla_validate_parse: 17 callbacks suppressed
[  361.979492][T20214] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3854'.
[  362.114654][T20228] netlink: 'syz.0.3859': attribute type 3 has an invalid length.
[  362.122957][T20228] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  362.147192][T20228] 8021q: adding VLAN 0 to HW filter on device bond0
[  362.152413][T20228] 8021q: adding VLAN 0 to HW filter on device team0
[  362.155456][T20228] tipc: Resetting bearer <ib:team0>
[  362.157855][T20228] tipc: Resetting bearer <ib:team0>
[  362.162646][T20228] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  362.179629][ T5314] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  362.194516][T20227] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  362.272065][T20232] lo speed is unknown, defaulting to 1000
[  362.278043][T20232] syzkaller0 speed is unknown, defaulting to 1000
[  362.592736][T20264] lo speed is unknown, defaulting to 1000
[  362.597512][T20264] syzkaller0 speed is unknown, defaulting to 1000
[  362.658853][T20264] macsec0: entered promiscuous mode
[  362.661518][T20264] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  362.666338][T20264] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  362.669616][ T5314] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  362.970590][T20298] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20004
[  363.182743][T20316] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3883'.
[  363.188860][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  363.497555][T20328] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  363.567057][T20330] lo speed is unknown, defaulting to 1000
[  363.578077][T20330] syzkaller0 speed is unknown, defaulting to 1000
[  363.727646][T20334] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3888'.
[  364.226176][ T5695] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  364.235206][ T5695] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  364.335954][T20364] lo speed is unknown, defaulting to 1000
[  364.346312][T20364] syzkaller0 speed is unknown, defaulting to 1000
[  364.381102][ T5314] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  364.386973][T20368] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3898'.
[  364.463423][T20373] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3900'.
[  364.596508][T20380] lo speed is unknown, defaulting to 1000
[  364.626753][T20380] syzkaller0 speed is unknown, defaulting to 1000
[  364.847217][T20389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3903'.
[  364.851614][T20389] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  364.892453][T20391] lo speed is unknown, defaulting to 1000
[  364.898781][T20391] syzkaller0 speed is unknown, defaulting to 1000
[  364.948498][T20391] netlink: 'syz.2.3904': attribute type 5 has an invalid length.
[  364.953274][ T5314] IPVS: starting estimator thread 0...
[  365.049816][T20395] IPVS: using max 80 ests per chain, 192000 per kthread
[  365.205234][   T13] IPVS: stop unused estimator thread 0...
[  365.487486][T20428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3914'.
[  365.492705][T20428] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3914'.
[  365.505477][T20428] lo speed is unknown, defaulting to 1000
[  365.510085][T20428] syzkaller0 speed is unknown, defaulting to 1000
[  365.589687][T20431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3915'.
[  365.593121][T20431] netlink: 'syz.1.3915': attribute type 20 has an invalid length.
[  365.602105][ T5695] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  365.606549][ T5695] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  365.610711][ T5695] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  365.615443][ T5695] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  365.667565][T20438] lo speed is unknown, defaulting to 1000
[  365.686444][T20439] lo speed is unknown, defaulting to 1000
[  365.720405][T20439] syzkaller0 speed is unknown, defaulting to 1000
[  365.727226][T20438] syzkaller0 speed is unknown, defaulting to 1000
[  365.902631][T20455] lo speed is unknown, defaulting to 1000
[  365.913601][T20455] syzkaller0 speed is unknown, defaulting to 1000
[  366.011621][T20455] IPVS: Unknown mcast interface: hsr0
[  366.099475][T20470] netlink: 'syz.2.3921': attribute type 13 has an invalid length.
[  366.102082][T20470] netlink: 'syz.2.3921': attribute type 17 has an invalid length.
[  366.116828][T20470] 8021q: adding VLAN 0 to HW filter on device bond0
[  366.120894][T20470] 8021q: adding VLAN 0 to HW filter on device team0
[  366.123781][T20470] tipc: Resetting bearer <eth:team0>
[  366.126095][T20470] tipc: Resetting bearer <eth:team0>
[  366.130159][T20470] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  366.160087][T20470] lo speed is unknown, defaulting to 1000
[  366.165447][T20470] syzkaller0 speed is unknown, defaulting to 1000
[  366.206525][T20470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3921'.
[  366.211489][T20470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  366.216445][T20470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  367.025059][T20496] __nla_validate_parse: 1 callbacks suppressed
[  367.025070][T20496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3929'.
[  367.182169][T20504] netlink: 'syz.1.3932': attribute type 5 has an invalid length.
[  367.192402][T20503] lo speed is unknown, defaulting to 1000
[  367.197632][T20503] syzkaller0 speed is unknown, defaulting to 1000
[  367.237062][T20509] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  367.269729][T20509] tipc: Resetting bearer <ib:team0>
[  367.274485][T20509] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  367.282376][T20508] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  367.289826][ T5897] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  367.308503][T20512] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3934'.
[  367.473524][T20520] tipc: Resetting bearer <eth:team0>
[  367.481643][T20520] team0: Unable to change to the same mode the team is in
[  367.485207][T20520] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  367.488940][T20520] netlink: 'syz.2.3936': attribute type 1 has an invalid length.
[  367.499348][T20520] netlink: 'syz.2.3936': attribute type 2 has an invalid length.
[  367.506200][T20524] lo speed is unknown, defaulting to 1000
[  367.525179][T20524] syzkaller0 speed is unknown, defaulting to 1000
[  367.752479][T20528] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3937'.
[  367.814282][T20545] netlink: 'syz.0.3941': attribute type 1 has an invalid length.
[  367.927554][T20553] lo speed is unknown, defaulting to 1000
[  367.937209][T20553] syzkaller0 speed is unknown, defaulting to 1000
[  367.972074][T20559] lo speed is unknown, defaulting to 1000
[  367.980201][T16258] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  367.987190][T20559] syzkaller0 speed is unknown, defaulting to 1000
[  367.993595][T20557] lo speed is unknown, defaulting to 1000
[  368.004617][T20557] syzkaller0 speed is unknown, defaulting to 1000
[  368.027582][T20553] IPVS: Unknown mcast interface: hsr0
[  368.371200][T20574] lo speed is unknown, defaulting to 1000
[  368.377353][T20574] syzkaller0 speed is unknown, defaulting to 1000
[  368.539145][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  368.926656][T20603] delete_channel: no stack
[  369.024633][T20619] siw: device registration error -23
[  369.031250][T20619] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3960'.
[  369.057906][T20623] netlink: 'syz.2.3958': attribute type 3 has an invalid length.
[  369.067969][T20622] lo speed is unknown, defaulting to 1000
[  369.073098][T20622] syzkaller0 speed is unknown, defaulting to 1000
[  369.255782][T20628] lo speed is unknown, defaulting to 1000
[  369.260850][T20628] syzkaller0 speed is unknown, defaulting to 1000
[  369.327632][T20633] lo speed is unknown, defaulting to 1000
[  369.359986][T20633] syzkaller0 speed is unknown, defaulting to 1000
[  369.366735][T20632] lo speed is unknown, defaulting to 1000
[  369.451950][T20632] syzkaller0 speed is unknown, defaulting to 1000
[  369.780918][T20640] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  369.784306][T20640] CPU: 0 UID: 0 PID: 20640 Comm: syz.2.3966 Not tainted syzkaller #0 PREEMPT(full) 
[  369.784323][T20640] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  369.784330][T20640] Call Trace:
[  369.784336][T20640]  <TASK>
[  369.784342][T20640]  dump_stack_lvl+0x189/0x250
[  369.784366][T20640]  ? __pfx_dump_stack_lvl+0x10/0x10
[  369.784382][T20640]  ? __pfx__printk+0x10/0x10
[  369.784404][T20640]  ? kernfs_path_from_node+0x2f/0x290
[  369.784419][T20640]  ? kernfs_path_from_node+0x250/0x290
[  369.784431][T20640]  ? kernfs_path_from_node+0x2f/0x290
[  369.784449][T20640]  sysfs_warn_dup+0x8e/0xa0
[  369.784463][T20640]  sysfs_do_create_link_sd+0xc0/0x110
[  369.784478][T20640]  device_add_class_symlinks+0x1cf/0x240
[  369.784495][T20640]  device_add+0x475/0xb50
[  369.784510][T20640]  wiphy_register+0x1ba6/0x28d0
[  369.784538][T20640]  ? __pfx_wiphy_register+0x10/0x10
[  369.784550][T20640]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  369.784573][T20640]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  369.784594][T20640]  ieee80211_register_hw+0x3484/0x4100
[  369.784624][T20640]  ? ieee80211_register_hw+0x1431/0x4100
[  369.784649][T20640]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  369.784667][T20640]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  369.784692][T20640]  ? __hrtimer_setup+0x187/0x210
[  369.784703][T20640]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  369.784724][T20640]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  369.784772][T20640]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  369.784788][T20640]  ? trace_kmalloc+0x1f/0xd0
[  369.784803][T20640]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  369.784818][T20640]  ? kstrndup+0xbf/0x160
[  369.784840][T20640]  hwsim_new_radio_nl+0xea4/0x1b10
[  369.784859][T20640]  ? __pfx___nla_validate_parse+0x10/0x10
[  369.784889][T20640]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  369.784915][T20640]  ? __nla_parse+0x40/0x60
[  369.784930][T20640]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  369.784954][T20640]  genl_family_rcv_msg_doit+0x215/0x300
[  369.784977][T20640]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  369.785030][T20640]  ? bpf_lsm_capable+0x9/0x20
[  369.785048][T20640]  ? security_capable+0x7e/0x2e0
[  369.785072][T20640]  genl_rcv_msg+0x60e/0x790
[  369.785093][T20640]  ? __pfx_genl_rcv_msg+0x10/0x10
[  369.785109][T20640]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  369.785136][T20640]  netlink_rcv_skb+0x208/0x470
[  369.785147][T20640]  ? __lock_acquire+0xab9/0xd20
[  369.785165][T20640]  ? __pfx_genl_rcv_msg+0x10/0x10
[  369.785182][T20640]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  369.785210][T20640]  ? down_read+0x1ad/0x2e0
[  369.785226][T20640]  genl_rcv+0x28/0x40
[  369.785240][T20640]  netlink_unicast+0x82f/0x9e0
[  369.785266][T20640]  ? __pfx_netlink_unicast+0x10/0x10
[  369.785285][T20640]  ? netlink_sendmsg+0x642/0xb30
[  369.785296][T20640]  ? skb_put+0x11b/0x210
[  369.785312][T20640]  netlink_sendmsg+0x805/0xb30
[  369.785333][T20640]  ? __pfx_netlink_sendmsg+0x10/0x10
[  369.785349][T20640]  ? aa_sock_msg_perm+0xf1/0x1d0
[  369.785363][T20640]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  369.785375][T20640]  ? __pfx_netlink_sendmsg+0x10/0x10
[  369.785390][T20640]  __sock_sendmsg+0x21c/0x270
[  369.785410][T20640]  ____sys_sendmsg+0x505/0x830
[  369.785429][T20640]  ? __pfx_____sys_sendmsg+0x10/0x10
[  369.785451][T20640]  ? import_iovec+0x74/0xa0
[  369.785469][T20640]  ___sys_sendmsg+0x21f/0x2a0
[  369.785485][T20640]  ? __pfx____sys_sendmsg+0x10/0x10
[  369.785530][T20640]  ? __fget_files+0x2a/0x420
[  369.785541][T20640]  ? __fget_files+0x3a0/0x420
[  369.785560][T20640]  __x64_sys_sendmsg+0x19b/0x260
[  369.785577][T20640]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  369.785600][T20640]  ? rcu_is_watching+0x15/0xb0
[  369.785617][T20640]  ? do_syscall_64+0xbe/0x3b0
[  369.785634][T20640]  do_syscall_64+0xfa/0x3b0
[  369.785646][T20640]  ? lockdep_hardirqs_on+0x9c/0x150
[  369.785658][T20640]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.785669][T20640]  ? exc_page_fault+0x9f/0xf0
[  369.785683][T20640]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.785694][T20640] RIP: 0033:0x7f19b318ebe9
[  369.785706][T20640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  369.785718][T20640] RSP: 002b:00007f19b13f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  369.785741][T20640] RAX: ffffffffffffffda RBX: 00007f19b33c5fa0 RCX: 00007f19b318ebe9
[  369.785750][T20640] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  369.785758][T20640] RBP: 00007f19b3211e19 R08: 0000000000000000 R09: 0000000000000000
[  369.785766][T20640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  369.785773][T20640] R13: 00007f19b33c6038 R14: 00007f19b33c5fa0 R15: 00007ffe015c2438
[  369.785798][T20640]  </TASK>
[  370.021835][T20653] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  370.027413][T20653] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3969'.
[  370.088531][T20658] lo speed is unknown, defaulting to 1000
[  370.092770][T20658] syzkaller0 speed is unknown, defaulting to 1000
[  370.097654][T20664] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3970'.
[  370.102751][T20664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3970'.
[  370.222079][T20669] lo speed is unknown, defaulting to 1000
[  370.230731][T20669] syzkaller0 speed is unknown, defaulting to 1000
[  370.530307][T20682] lo speed is unknown, defaulting to 1000
[  370.534180][T20682] syzkaller0 speed is unknown, defaulting to 1000
[  370.929533][T20711] netlink: 'syz.1.3984': attribute type 13 has an invalid length.
[  370.933223][T20711] netlink: 'syz.1.3984': attribute type 17 has an invalid length.
[  370.981406][T20711] 8021q: adding VLAN 0 to HW filter on device bond0
[  370.985971][T20711] 8021q: adding VLAN 0 to HW filter on device team0
[  370.992424][T20711] tipc: Resetting bearer <eth:team0>
[  370.996129][T20711] tipc: Resetting bearer <eth:team0>
[  371.001895][T20711] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  371.008363][ T5314] lo speed is unknown, defaulting to 1000
[  371.011126][ T5314] syz2: Port: 1 Link ACTIVE
[  371.120350][T20718] lo speed is unknown, defaulting to 1000
[  371.124362][T20718] syzkaller0 speed is unknown, defaulting to 1000
[  371.127722][T20720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3987'.
[  371.131216][T20720] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3987'.
[  371.180971][T20718] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  371.200623][T20724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3988'.
[  371.538239][T20762] bridge: RTM_NEWNEIGH with invalid state 0x2c
[  371.554201][T20764] siw: device registration error -23
[  371.684723][T20781] lo speed is unknown, defaulting to 1000
[  371.693944][T20781] syzkaller0 speed is unknown, defaulting to 1000
[  371.897628][T20788] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  371.908723][T20788] siw: device registration error -23
[  371.974445][T20796] lo speed is unknown, defaulting to 1000
[  371.978890][T20796] syzkaller0 speed is unknown, defaulting to 1000
[  372.110091][T20804] netlink: 'syz.1.4007': attribute type 4 has an invalid length.
[  372.110661][T20805] netlink: 'syz.1.4007': attribute type 4 has an invalid length.
[  372.122319][ T1270] lo speed is unknown, defaulting to 1000
[  372.126746][T16258] lo speed is unknown, defaulting to 1000
[  372.149619][T20804] netlink: 'syz.1.4007': attribute type 142 has an invalid length.
[  372.283058][T20812] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  372.726641][T20819] __nla_validate_parse: 4 callbacks suppressed
[  372.726656][T20819] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4012'.
[  372.822231][T20823] can: request_module (can-proto-0) failed.
[  372.825265][T20823] openvswitch: netlink: IP tunnel dst address not specified
[  372.866900][T20823] lo speed is unknown, defaulting to 1000
[  372.874985][T20823] syzkaller0 speed is unknown, defaulting to 1000
[  373.057881][T20830] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  373.069423][T20830] CPU: 1 UID: 0 PID: 20830 Comm: syz.1.4015 Not tainted syzkaller #0 PREEMPT(full) 
[  373.069442][T20830] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  373.069449][T20830] Call Trace:
[  373.069454][T20830]  <TASK>
[  373.069459][T20830]  dump_stack_lvl+0x189/0x250
[  373.069480][T20830]  ? __pfx_dump_stack_lvl+0x10/0x10
[  373.069493][T20830]  ? __pfx__printk+0x10/0x10
[  373.069511][T20830]  ? kernfs_path_from_node+0x2f/0x290
[  373.069524][T20830]  ? kernfs_path_from_node+0x250/0x290
[  373.069535][T20830]  ? kernfs_path_from_node+0x2f/0x290
[  373.069550][T20830]  sysfs_warn_dup+0x8e/0xa0
[  373.069564][T20830]  sysfs_do_create_link_sd+0xc0/0x110
[  373.069579][T20830]  device_add_class_symlinks+0x1cf/0x240
[  373.069595][T20830]  device_add+0x475/0xb50
[  373.069610][T20830]  wiphy_register+0x1ba6/0x28d0
[  373.069659][T20830]  ? __pfx_wiphy_register+0x10/0x10
[  373.069671][T20830]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  373.069693][T20830]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  373.069722][T20830]  ieee80211_register_hw+0x3484/0x4100
[  373.069749][T20830]  ? ieee80211_register_hw+0x1431/0x4100
[  373.069771][T20830]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  373.069791][T20830]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  373.069815][T20830]  ? __hrtimer_setup+0x187/0x210
[  373.069826][T20830]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  373.069853][T20830]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  373.069891][T20830]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  373.069907][T20830]  ? trace_kmalloc+0x1f/0xd0
[  373.069921][T20830]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  373.069937][T20830]  ? kstrndup+0xbf/0x160
[  373.069982][T20830]  hwsim_new_radio_nl+0xea4/0x1b10
[  373.070003][T20830]  ? __pfx___nla_validate_parse+0x10/0x10
[  373.070032][T20830]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  373.070058][T20830]  ? __nla_parse+0x40/0x60
[  373.070072][T20830]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  373.070096][T20830]  genl_family_rcv_msg_doit+0x215/0x300
[  373.070117][T20830]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  373.070151][T20830]  ? bpf_lsm_capable+0x9/0x20
[  373.070168][T20830]  ? security_capable+0x7e/0x2e0
[  373.070191][T20830]  genl_rcv_msg+0x60e/0x790
[  373.070211][T20830]  ? __pfx_genl_rcv_msg+0x10/0x10
[  373.070227][T20830]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  373.070253][T20830]  netlink_rcv_skb+0x208/0x470
[  373.070263][T20830]  ? __lock_acquire+0xab9/0xd20
[  373.070280][T20830]  ? __pfx_genl_rcv_msg+0x10/0x10
[  373.070297][T20830]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  373.070325][T20830]  ? down_read+0x1ad/0x2e0
[  373.070340][T20830]  genl_rcv+0x28/0x40
[  373.070355][T20830]  netlink_unicast+0x82f/0x9e0
[  373.070378][T20830]  ? __pfx_netlink_unicast+0x10/0x10
[  373.070397][T20830]  ? netlink_sendmsg+0x642/0xb30
[  373.070407][T20830]  ? skb_put+0x11b/0x210
[  373.070424][T20830]  netlink_sendmsg+0x805/0xb30
[  373.070444][T20830]  ? __pfx_netlink_sendmsg+0x10/0x10
[  373.070459][T20830]  ? aa_sock_msg_perm+0xf1/0x1d0
[  373.070472][T20830]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  373.070485][T20830]  ? __pfx_netlink_sendmsg+0x10/0x10
[  373.070499][T20830]  __sock_sendmsg+0x21c/0x270
[  373.070518][T20830]  ____sys_sendmsg+0x505/0x830
[  373.070537][T20830]  ? __pfx_____sys_sendmsg+0x10/0x10
[  373.070559][T20830]  ? import_iovec+0x74/0xa0
[  373.070577][T20830]  ___sys_sendmsg+0x21f/0x2a0
[  373.070593][T20830]  ? __pfx____sys_sendmsg+0x10/0x10
[  373.070635][T20830]  ? __fget_files+0x2a/0x420
[  373.070647][T20830]  ? __fget_files+0x3a0/0x420
[  373.070666][T20830]  __x64_sys_sendmsg+0x19b/0x260
[  373.070683][T20830]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  373.070705][T20830]  ? rcu_is_watching+0x15/0xb0
[  373.070722][T20830]  ? do_syscall_64+0xbe/0x3b0
[  373.070739][T20830]  do_syscall_64+0xfa/0x3b0
[  373.070751][T20830]  ? lockdep_hardirqs_on+0x9c/0x150
[  373.070763][T20830]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  373.070775][T20830]  ? exc_page_fault+0x9f/0xf0
[  373.070788][T20830]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  373.070801][T20830] RIP: 0033:0x7fbe26b8ebe9
[  373.070812][T20830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  373.070821][T20830] RSP: 002b:00007fbe27ada038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  373.070835][T20830] RAX: ffffffffffffffda RBX: 00007fbe26dc5fa0 RCX: 00007fbe26b8ebe9
[  373.070845][T20830] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  373.070858][T20830] RBP: 00007fbe26c11e19 R08: 0000000000000000 R09: 0000000000000000
[  373.070866][T20830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  373.070872][T20830] R13: 00007fbe26dc6038 R14: 00007fbe26dc5fa0 R15: 00007ffc7c836598
[  373.070894][T20830]  </TASK>
[  373.370369][T20839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4018'.
[  373.410832][T20843] siw: device registration error -23
[  373.414711][T20843] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4020'.
[  373.418447][T20843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4020'.
[  373.448173][T20843] tipc: Bearer <eth:syzkaller0>: already 2 bearers with priority 0
[  373.451728][T20843] tipc: Enabling of bearer <eth:syzkaller0> rejected, cannot adjust to lower
[  373.491266][T20846] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4021'.
[  373.578349][T20855] netlink: 'syz.0.4024': attribute type 2 has an invalid length.
[  373.587624][T20855] tipc: Resetting bearer <ib:team0>
[  373.590285][T20855] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  373.608686][T20853] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4023'.
[  373.614180][T20853] netlink: 252 bytes leftover after parsing attributes in process `syz.2.4023'.
[  373.618351][T20853] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4023'.
[  373.619724][ T1270] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  373.622578][T20853] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4023'.
[  373.635217][T20858] netlink: 'syz.0.4025': attribute type 3 has an invalid length.
[  373.831686][T20868] siw: device registration error -23
[  373.834872][T20869] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4028'.
[  373.929543][ T1270] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  374.127171][T20885] lo speed is unknown, defaulting to 1000
[  374.134311][T20885] syzkaller0 speed is unknown, defaulting to 1000
[  374.539916][   T61] block nbd3: Possible stuck request ffff888020380000: control (read@0,1024B). Runtime 120 seconds
[  374.544020][   T61] block nbd3: Possible stuck request ffff888020380200: control (read@1024,1024B). Runtime 120 seconds
[  374.548555][   T61] block nbd3: Possible stuck request ffff888020380400: control (read@2048,1024B). Runtime 120 seconds
[  374.553163][   T61] block nbd3: Possible stuck request ffff888020380600: control (read@3072,1024B). Runtime 120 seconds
[  375.069386][T20917] netlink: 'syz.0.4041': attribute type 13 has an invalid length.
[  375.072150][T20917] netlink: 'syz.0.4041': attribute type 17 has an invalid length.
[  375.084235][T20917] tipc: Resetting bearer <ib:team0>
[  375.086349][T20917] tipc: Resetting bearer <ib:team0>
[  375.090216][T20917] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  375.109478][ T1270] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  375.115087][T20917] lo speed is unknown, defaulting to 1000
[  375.120016][T20917] syzkaller0 speed is unknown, defaulting to 1000
[  375.183482][T20918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  375.193042][T20917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  375.193478][T20921] lo speed is unknown, defaulting to 1000
[  375.206922][T20921] syzkaller0 speed is unknown, defaulting to 1000
[  375.364742][T20927] netlink: 'syz.1.4043': attribute type 13 has an invalid length.
[  375.370516][T20927] netlink: 'syz.1.4043': attribute type 17 has an invalid length.
[  375.403050][T20927] tipc: Resetting bearer <eth:team0>
[  375.410196][T20927] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  375.514217][T20932] netlink: 'syz.2.4045': attribute type 1 has an invalid length.
[  375.545303][T20933] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  375.646751][T20935] sit0: entered promiscuous mode
[  375.656559][T20935] netlink: 'syz.2.4046': attribute type 1 has an invalid length.
[  375.679423][ T1270] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  376.126879][T20963] netlink: 'syz.2.4053': attribute type 13 has an invalid length.
[  376.127446][T20964] netlink: 'syz.2.4053': attribute type 13 has an invalid length.
[  376.131302][T20963] sit0: left promiscuous mode
[  376.142434][T20963] tipc: Resetting bearer <eth:team0>
[  376.144755][T20963] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  376.152836][T20964] tipc: Resetting bearer <eth:team0>
[  376.156095][T20964] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  376.162979][ T5695] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  376.166530][ T5695] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  376.336868][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  376.553174][T20982] tipc: Resetting bearer <eth:team0>
[  376.555665][T20982] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  376.595805][T20985] syzkaller0: entered promiscuous mode
[  376.597679][T20985] syzkaller0: entered allmulticast mode
[  376.753271][T20988] lo speed is unknown, defaulting to 1000
[  376.762264][T20988] syzkaller0 speed is unknown, defaulting to 1000
[  377.020135][T20995] lo speed is unknown, defaulting to 1000
[  377.047874][T20995] syzkaller0 speed is unknown, defaulting to 1000
[  377.131335][T21002] lo speed is unknown, defaulting to 1000
[  377.135839][T21002] syzkaller0 speed is unknown, defaulting to 1000
[  377.166334][T21001] lo speed is unknown, defaulting to 1000
[  377.177699][T21001] syzkaller0 speed is unknown, defaulting to 1000
[  377.254648][T21001] IPVS: Unknown mcast interface: hsr0
[  377.572622][   T55] block nbd7: Receive control failed (result -107)
[  377.609319][T21022] nbd7: detected capacity change from 0 to 32
[  377.977670][T21028] __nla_validate_parse: 16 callbacks suppressed
[  377.977680][T21028] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4068'.
[  378.014388][T21025] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  378.029159][T21025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4067'.
[  378.041784][T21031] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4069'.
[  378.093100][T21033] lo speed is unknown, defaulting to 1000
[  378.096976][T21033] syzkaller0 speed is unknown, defaulting to 1000
[  378.258310][T21037] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4070'.
[  378.907398][T21042] tipc: Resetting bearer <eth:team0>
[  378.934017][ T5314] lo speed is unknown, defaulting to 1000
[  378.934724][ T5874] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  378.939679][ T5874] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  378.946822][ T5314] syz2: Port: 1 Link DOWN
[  379.017614][ T5874] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  379.035495][ T5874] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  379.158936][T21052] lo speed is unknown, defaulting to 1000
[  379.163335][T21052] syzkaller0 speed is unknown, defaulting to 1000
[  379.304533][T21056] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4076'.
[  379.317583][T21059] validate_nla: 6 callbacks suppressed
[  379.317597][T21059] netlink: 'syz.2.4077': attribute type 5 has an invalid length.
[  379.331633][T21058] lo speed is unknown, defaulting to 1000
[  379.402979][T21058] syzkaller0 speed is unknown, defaulting to 1000
[  379.405865][T21065] netlink: 'syz.0.4079': attribute type 1 has an invalid length.
[  379.578343][T21091] tipc: Resetting bearer <ib:team0>
[  379.668200][T21096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4083'.
[  379.677708][T21096] siw: device registration error -23
[  379.739771][T21098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4084'.
[  379.991015][T21121] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  380.236607][T21130] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4091'.
[  380.555444][T21137] IPVS: set_ctl: invalid protocol: 136 172.20.20.26:20002
[  380.945106][T21160] lo speed is unknown, defaulting to 1000
[  380.953057][T21160] syzkaller0 speed is unknown, defaulting to 1000
[  380.987504][T21161] netlink: 'syz.1.4099': attribute type 5 has an invalid length.
[  380.993158][T21161] IPVS: ip_vs_add_dest(): server weight less than zero
[  381.039171][T21164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4100'.
[  381.213713][T21174] lo speed is unknown, defaulting to 1000
[  381.219470][T21174] syzkaller0 speed is unknown, defaulting to 1000
[  381.233971][T21179] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  381.499347][T21193] lo speed is unknown, defaulting to 1000
[  381.505601][T21193] syzkaller0 speed is unknown, defaulting to 1000
[  381.537727][T21198] lo speed is unknown, defaulting to 1000
[  381.573729][T21198] syzkaller0 speed is unknown, defaulting to 1000
[  381.713705][T21205] syzkaller1: entered promiscuous mode
[  381.716179][T21205] syzkaller1: entered allmulticast mode
[  382.007181][T21227] lo speed is unknown, defaulting to 1000
[  382.016803][T21227] syzkaller0 speed is unknown, defaulting to 1000
[  382.145326][T21230] lo speed is unknown, defaulting to 1000
[  382.161174][T21233] macsec0: entered promiscuous mode
[  382.163450][T21233] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  382.172694][T21233] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  382.212039][T21230] syzkaller0 speed is unknown, defaulting to 1000
[  382.242216][T21232] lo speed is unknown, defaulting to 1000
[  382.254506][T21232] syzkaller0 speed is unknown, defaulting to 1000
[  382.492596][T21252] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  382.559348][T21260] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4130'.
[  382.664593][T21269] lo speed is unknown, defaulting to 1000
[  382.667625][T21266] syz_tun: entered allmulticast mode
[  382.678392][T21269] syzkaller0 speed is unknown, defaulting to 1000
[  382.687387][T21265] syz_tun: left allmulticast mode
[  382.731624][T21278] netlink: 'syz.1.4135': attribute type 3 has an invalid length.
[  382.776431][T21278] syz_tun: entered allmulticast mode
[  382.781535][T21278] siw: device registration error -23
[  382.785056][T21276] syz_tun: left allmulticast mode
[  382.883298][T21299] siw: device registration error -23
[  383.087670][T21319] sctp: [Deprecated]: syz.2.4145 (pid 21319) Use of struct sctp_assoc_value in delayed_ack socket option.
[  383.087670][T21319] Use struct sctp_sack_info instead
[  383.200003][T21323] __nla_validate_parse: 2 callbacks suppressed
[  383.200013][T21323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4146'.
[  383.208666][T21323] 8021q: adding VLAN 0 to HW filter on device ipvlan1
[  383.367310][T21326] lo speed is unknown, defaulting to 1000
[  383.372418][T21326] syzkaller0 speed is unknown, defaulting to 1000
[  383.910621][T21344] lo speed is unknown, defaulting to 1000
[  383.915253][T21344] syzkaller0 speed is unknown, defaulting to 1000
[  383.963016][T21347] netlink: 'syz.2.4152': attribute type 5 has an invalid length.
[  384.109400][T21349] lo speed is unknown, defaulting to 1000
[  384.114097][T21349] syzkaller0 speed is unknown, defaulting to 1000
[  384.260444][T21359] lo speed is unknown, defaulting to 1000
[  384.282268][T21359] syzkaller0 speed is unknown, defaulting to 1000
[  384.358718][T21362] tipc: Bearer <eth:syzkaller0>: already 2 bearers with priority 0
[  384.364704][T21362] tipc: Enabling of bearer <eth:syzkaller0> rejected, cannot adjust to lower
[  384.402887][T21362] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  384.645134][T21368] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4157'.
[  384.648185][T21368] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4157'.
[  384.657703][T21368] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4157'.
[  384.661602][T21368] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4157'.
[  384.721177][T21370] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4158'.
[  384.917447][T21375] netlink: 'syz.2.4159': attribute type 1 has an invalid length.
[  384.920239][T21375] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4159'.
[  385.483519][T21390] lo speed is unknown, defaulting to 1000
[  385.488072][T21390] syzkaller0 speed is unknown, defaulting to 1000
[  385.727121][T21405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4164'.
[  386.319824][T21411] lo speed is unknown, defaulting to 1000
[  386.326710][T21411] syzkaller0 speed is unknown, defaulting to 1000
[  386.399808][T21422] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  386.594721][T21443] netlink: 'syz.0.4173': attribute type 1 has an invalid length.
[  386.598497][T21439] netlink: 'syz.2.4172': attribute type 1 has an invalid length.
[  386.603374][T21443] netlink: 180 bytes leftover after parsing attributes in process `syz.0.4173'.
[  386.692940][T21445] lo speed is unknown, defaulting to 1000
[  386.700442][T21445] syzkaller0 speed is unknown, defaulting to 1000
[  386.749122][T21452] netlink: 'syz.2.4177': attribute type 10 has an invalid length.
[  386.871251][T21462] netlink: 'syz.1.4180': attribute type 21 has an invalid length.
[  386.874254][T21462] netlink: 'syz.1.4180': attribute type 22 has an invalid length.
[  386.877751][T21462] netlink: 'syz.1.4180': attribute type 23 has an invalid length.
[  386.886589][T21462] netlink: 'syz.1.4180': attribute type 25 has an invalid length.
[  386.889579][T21462] netlink: 'syz.1.4180': attribute type 26 has an invalid length.
[  386.892369][T21462] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4180'.
[  386.906318][T21463] lo speed is unknown, defaulting to 1000
[  386.912415][T21463] syzkaller0 speed is unknown, defaulting to 1000
[  387.017189][T21463] netlink: 'syz.2.4181': attribute type 1 has an invalid length.
[  387.214037][T21484] lo speed is unknown, defaulting to 1000
[  387.218286][T21484] syzkaller0 speed is unknown, defaulting to 1000
[  387.589920][T21518] team0: Unable to change to the same mode the team is in
[  387.685319][T21523] lo speed is unknown, defaulting to 1000
[  387.691060][T21523] syzkaller0 speed is unknown, defaulting to 1000
[  387.756267][T21525] 8021q: adding VLAN 0 to HW filter on device bond0
[  387.759698][T21525] 8021q: adding VLAN 0 to HW filter on device team0
[  387.762121][T21525] tipc: Resetting bearer <ib:team0>
[  387.766492][T21525] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  387.785382][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  387.790269][T21088] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  387.793636][T21088] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  387.882096][T21088] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  387.999295][ T5314] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  388.458354][T21539] lo speed is unknown, defaulting to 1000
[  388.464118][T21539] syzkaller0 speed is unknown, defaulting to 1000
[  388.937451][T21545] lo speed is unknown, defaulting to 1000
[  388.947364][T21545] syzkaller0 speed is unknown, defaulting to 1000
[  389.427839][T21556] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  389.435927][T21556] __nla_validate_parse: 15 callbacks suppressed
[  389.435942][T21556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4207'.
[  389.443704][T21556] siw: device registration error -23
[  389.766104][T21563] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4209'.
[  389.766621][T21564] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4209'.
[  390.021796][T21568] lo speed is unknown, defaulting to 1000
[  390.026247][T21568] syzkaller0 speed is unknown, defaulting to 1000
[  390.254129][T21585] lo speed is unknown, defaulting to 1000
[  390.259545][T21585] syzkaller0 speed is unknown, defaulting to 1000
[  390.351002][T21596] validate_nla: 10 callbacks suppressed
[  390.351013][T21596] netlink: 'syz.0.4216': attribute type 13 has an invalid length.
[  390.359131][T21596] netlink: 'syz.0.4216': attribute type 17 has an invalid length.
[  390.374656][T21596] tipc: Resetting bearer <ib:team0>
[  390.376571][T21596] tipc: Resetting bearer <ib:team0>
[  390.390166][T21596] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  390.406634][ T5314] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  390.453791][T21600] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  390.456562][T21600] CPU: 0 UID: 0 PID: 21600 Comm: syz.1.4218 Not tainted syzkaller #0 PREEMPT(full) 
[  390.456574][T21600] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  390.456580][T21600] Call Trace:
[  390.456585][T21600]  <TASK>
[  390.456589][T21600]  dump_stack_lvl+0x189/0x250
[  390.456605][T21600]  ? __pfx_dump_stack_lvl+0x10/0x10
[  390.456614][T21600]  ? __pfx__printk+0x10/0x10
[  390.456627][T21600]  ? kernfs_path_from_node+0x2f/0x290
[  390.456637][T21600]  ? kernfs_path_from_node+0x250/0x290
[  390.456644][T21600]  ? kernfs_path_from_node+0x2f/0x290
[  390.456655][T21600]  sysfs_warn_dup+0x8e/0xa0
[  390.456664][T21600]  sysfs_do_create_link_sd+0xc0/0x110
[  390.456674][T21600]  device_add_class_symlinks+0x1cf/0x240
[  390.456684][T21600]  device_add+0x475/0xb50
[  390.456693][T21600]  wiphy_register+0x1ba6/0x28d0
[  390.456708][T21600]  ? __pfx_wiphy_register+0x10/0x10
[  390.456717][T21600]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  390.456753][T21600]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  390.456766][T21600]  ieee80211_register_hw+0x3484/0x4100
[  390.456782][T21600]  ? ieee80211_register_hw+0x1431/0x4100
[  390.456798][T21600]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  390.456810][T21600]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  390.456825][T21600]  ? __hrtimer_setup+0x187/0x210
[  390.456831][T21600]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  390.456843][T21600]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  390.456864][T21600]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  390.456873][T21600]  ? trace_kmalloc+0x1f/0xd0
[  390.456882][T21600]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  390.456891][T21600]  ? kstrndup+0xbf/0x160
[  390.456903][T21600]  hwsim_new_radio_nl+0xea4/0x1b10
[  390.456913][T21600]  ? __pfx___nla_validate_parse+0x10/0x10
[  390.456930][T21600]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  390.456944][T21600]  ? __nla_parse+0x40/0x60
[  390.456952][T21600]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  390.456966][T21600]  genl_family_rcv_msg_doit+0x215/0x300
[  390.456978][T21600]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  390.456992][T21600]  ? bpf_lsm_capable+0x9/0x20
[  390.457002][T21600]  ? security_capable+0x7e/0x2e0
[  390.457015][T21600]  genl_rcv_msg+0x60e/0x790
[  390.457027][T21600]  ? __pfx_genl_rcv_msg+0x10/0x10
[  390.457035][T21600]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  390.457050][T21600]  netlink_rcv_skb+0x208/0x470
[  390.457056][T21600]  ? __lock_acquire+0xab9/0xd20
[  390.457066][T21600]  ? __pfx_genl_rcv_msg+0x10/0x10
[  390.457075][T21600]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  390.457090][T21600]  ? down_read+0x1ad/0x2e0
[  390.457099][T21600]  genl_rcv+0x28/0x40
[  390.457107][T21600]  netlink_unicast+0x82f/0x9e0
[  390.457122][T21600]  ? __pfx_netlink_unicast+0x10/0x10
[  390.457133][T21600]  ? netlink_sendmsg+0x642/0xb30
[  390.457139][T21600]  ? skb_put+0x11b/0x210
[  390.457149][T21600]  netlink_sendmsg+0x805/0xb30
[  390.457161][T21600]  ? __pfx_netlink_sendmsg+0x10/0x10
[  390.457169][T21600]  ? aa_sock_msg_perm+0xf1/0x1d0
[  390.457177][T21600]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  390.457185][T21600]  ? __pfx_netlink_sendmsg+0x10/0x10
[  390.457192][T21600]  __sock_sendmsg+0x21c/0x270
[  390.457204][T21600]  ____sys_sendmsg+0x505/0x830
[  390.457215][T21600]  ? __pfx_____sys_sendmsg+0x10/0x10
[  390.457227][T21600]  ? import_iovec+0x74/0xa0
[  390.457237][T21600]  ___sys_sendmsg+0x21f/0x2a0
[  390.457247][T21600]  ? __pfx____sys_sendmsg+0x10/0x10
[  390.457270][T21600]  ? __fget_files+0x2a/0x420
[  390.457277][T21600]  ? __fget_files+0x3a0/0x420
[  390.457287][T21600]  __x64_sys_sendmsg+0x19b/0x260
[  390.457297][T21600]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  390.457309][T21600]  ? rcu_is_watching+0x15/0xb0
[  390.457319][T21600]  ? do_syscall_64+0xbe/0x3b0
[  390.457329][T21600]  do_syscall_64+0xfa/0x3b0
[  390.457336][T21600]  ? lockdep_hardirqs_on+0x9c/0x150
[  390.457346][T21600]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  390.457357][T21600]  ? exc_page_fault+0x9f/0xf0
[  390.457370][T21600]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  390.457381][T21600] RIP: 0033:0x7fbe26b8ebe9
[  390.457393][T21600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  390.457405][T21600] RSP: 002b:00007fbe27ada038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  390.457420][T21600] RAX: ffffffffffffffda RBX: 00007fbe26dc5fa0 RCX: 00007fbe26b8ebe9
[  390.457429][T21600] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  390.457437][T21600] RBP: 00007fbe26c11e19 R08: 0000000000000000 R09: 0000000000000000
[  390.457445][T21600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  390.457452][T21600] R13: 00007fbe26dc6038 R14: 00007fbe26dc5fa0 R15: 00007ffc7c836598
[  390.457485][T21600]  </TASK>
[  390.470076][T21593] lo speed is unknown, defaulting to 1000
[  390.549196][ T5314] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  390.555264][T21593] syzkaller0 speed is unknown, defaulting to 1000
[  390.582936][T21607] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  390.668826][T21614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  390.670363][T21596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  390.802236][T21623] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  390.813822][T21623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4223'.
[  390.818892][T21623] siw: device registration error -23
[  390.846026][T21625] unsupported nla_type 52263
[  390.929440][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  390.932124][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  390.991870][T21633] netlink: 'syz.1.4226': attribute type 10 has an invalid length.
[  390.995155][T21633] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4226'.
[  391.000920][T21633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4226'.
[  391.337983][T21645] siw: device registration error -23
[  391.341898][T21644] siw: device registration error -23
[  391.347056][T21645] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4229'.
[  391.351151][T21645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4229'.
[  391.359428][T21644] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4229'.
[  391.362746][T21644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4229'.
[  391.372691][T21643] tipc: Bearer <eth:syzkaller0>: already 2 bearers with priority 0
[  391.376280][T21643] tipc: Enabling of bearer <eth:syzkaller0> rejected, cannot adjust to lower
[  391.466837][T21649] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  391.493162][T21088] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  392.072451][T21690] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  392.075094][T21690] syzkaller0: entered promiscuous mode
[  392.077169][T21690] syzkaller0: entered allmulticast mode
[  392.122043][T21697] tipc: Resetting bearer <eth:syzkaller0>
[  392.133813][T21697] tipc: Disabling bearer <eth:syzkaller0>
[  392.254575][T21701] syzkaller1: entered promiscuous mode
[  392.257356][T21701] syzkaller1: entered allmulticast mode
[  393.013717][T21742] netlink: 'syz.2.4262': attribute type 20 has an invalid length.
[  393.154012][T21754] lo speed is unknown, defaulting to 1000
[  393.163023][T21754] syzkaller0 speed is unknown, defaulting to 1000
[  393.264838][T21754] v: renamed from ip6_vti0 (while UP)
[  393.376346][T21768] netlink: 'syz.2.4268': attribute type 12 has an invalid length.
[  393.606398][T21784] lo speed is unknown, defaulting to 1000
[  393.610494][T21784] syzkaller0 speed is unknown, defaulting to 1000
[  393.655661][T21787] netlink: 'syz.2.4273': attribute type 5 has an invalid length.
[  393.662196][T21786] lo speed is unknown, defaulting to 1000
[  393.671040][T21788] netlink: 'syz.0.4272': attribute type 1 has an invalid length.
[  393.678767][T21786] syzkaller0 speed is unknown, defaulting to 1000
[  393.931708][T21087] ip6_tnl_xmit_ctl: 2 callbacks suppressed
[  393.931724][T21087] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  394.239253][T21087] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  394.620820][T21805] lo speed is unknown, defaulting to 1000
[  394.624882][T21805] syzkaller0 speed is unknown, defaulting to 1000
[  394.680860][T21809] __nla_validate_parse: 11 callbacks suppressed
[  394.680875][T21809] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4279'.
[  394.687375][T21809] openvswitch: netlink: Flow key attr not present in new flow.
[  394.781524][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  394.832107][T21822] lo speed is unknown, defaulting to 1000
[  394.836117][T21822] syzkaller0 speed is unknown, defaulting to 1000
[  394.927374][T21827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4285'.
[  394.977721][T21831] syzkaller1: entered promiscuous mode
[  394.979841][T21831] syzkaller1: entered allmulticast mode
[  395.078548][T21836] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  395.082232][T21836] CPU: 1 UID: 0 PID: 21836 Comm: syz.0.4288 Not tainted syzkaller #0 PREEMPT(full) 
[  395.082250][T21836] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  395.082258][T21836] Call Trace:
[  395.082264][T21836]  <TASK>
[  395.082271][T21836]  dump_stack_lvl+0x189/0x250
[  395.082294][T21836]  ? __pfx_dump_stack_lvl+0x10/0x10
[  395.082311][T21836]  ? __pfx__printk+0x10/0x10
[  395.082341][T21836]  ? kernfs_path_from_node+0x2f/0x290
[  395.082355][T21836]  ? kernfs_path_from_node+0x250/0x290
[  395.082369][T21836]  ? kernfs_path_from_node+0x2f/0x290
[  395.082387][T21836]  sysfs_warn_dup+0x8e/0xa0
[  395.082401][T21836]  sysfs_do_create_link_sd+0xc0/0x110
[  395.082416][T21836]  device_add_class_symlinks+0x1cf/0x240
[  395.082433][T21836]  device_add+0x475/0xb50
[  395.082450][T21836]  wiphy_register+0x1ba6/0x28d0
[  395.082478][T21836]  ? __pfx_wiphy_register+0x10/0x10
[  395.082491][T21836]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  395.082515][T21836]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  395.082535][T21836]  ieee80211_register_hw+0x3484/0x4100
[  395.082564][T21836]  ? ieee80211_register_hw+0x1431/0x4100
[  395.082587][T21836]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  395.082607][T21836]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  395.082632][T21836]  ? __hrtimer_setup+0x187/0x210
[  395.082643][T21836]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  395.082692][T21836]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  395.082737][T21836]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  395.082754][T21836]  ? trace_kmalloc+0x1f/0xd0
[  395.082771][T21836]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  395.082788][T21836]  ? kstrndup+0xbf/0x160
[  395.082812][T21836]  hwsim_new_radio_nl+0xea4/0x1b10
[  395.082833][T21836]  ? __pfx___nla_validate_parse+0x10/0x10
[  395.082863][T21836]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  395.082891][T21836]  ? __nla_parse+0x40/0x60
[  395.082906][T21836]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  395.082930][T21836]  genl_family_rcv_msg_doit+0x215/0x300
[  395.082952][T21836]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  395.082979][T21836]  ? bpf_lsm_capable+0x9/0x20
[  395.082995][T21836]  ? security_capable+0x7e/0x2e0
[  395.083019][T21836]  genl_rcv_msg+0x60e/0x790
[  395.083040][T21836]  ? __pfx_genl_rcv_msg+0x10/0x10
[  395.083056][T21836]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  395.083085][T21836]  netlink_rcv_skb+0x208/0x470
[  395.083095][T21836]  ? __lock_acquire+0xab9/0xd20
[  395.083113][T21836]  ? __pfx_genl_rcv_msg+0x10/0x10
[  395.083130][T21836]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  395.083158][T21836]  ? down_read+0x1ad/0x2e0
[  395.083175][T21836]  genl_rcv+0x28/0x40
[  395.083190][T21836]  netlink_unicast+0x82f/0x9e0
[  395.083215][T21836]  ? __pfx_netlink_unicast+0x10/0x10
[  395.083236][T21836]  ? netlink_sendmsg+0x642/0xb30
[  395.083247][T21836]  ? skb_put+0x11b/0x210
[  395.083264][T21836]  netlink_sendmsg+0x805/0xb30
[  395.083285][T21836]  ? __pfx_netlink_sendmsg+0x10/0x10
[  395.083301][T21836]  ? aa_sock_msg_perm+0xf1/0x1d0
[  395.083315][T21836]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  395.083334][T21836]  ? __pfx_netlink_sendmsg+0x10/0x10
[  395.083348][T21836]  __sock_sendmsg+0x21c/0x270
[  395.083369][T21836]  ____sys_sendmsg+0x505/0x830
[  395.083389][T21836]  ? __pfx_____sys_sendmsg+0x10/0x10
[  395.083412][T21836]  ? import_iovec+0x74/0xa0
[  395.083432][T21836]  ___sys_sendmsg+0x21f/0x2a0
[  395.083450][T21836]  ? __pfx____sys_sendmsg+0x10/0x10
[  395.083497][T21836]  ? __fget_files+0x2a/0x420
[  395.083508][T21836]  ? __fget_files+0x3a0/0x420
[  395.083528][T21836]  __x64_sys_sendmsg+0x19b/0x260
[  395.083544][T21836]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  395.083568][T21836]  ? rcu_is_watching+0x15/0xb0
[  395.083584][T21836]  ? do_syscall_64+0xbe/0x3b0
[  395.083602][T21836]  do_syscall_64+0xfa/0x3b0
[  395.083614][T21836]  ? lockdep_hardirqs_on+0x9c/0x150
[  395.083627][T21836]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  395.083638][T21836]  ? exc_page_fault+0x9f/0xf0
[  395.083654][T21836]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  395.083694][T21836] RIP: 0033:0x7fb1c598ebe9
[  395.083707][T21836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  395.083718][T21836] RSP: 002b:00007fb1c686e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  395.083734][T21836] RAX: ffffffffffffffda RBX: 00007fb1c5bc5fa0 RCX: 00007fb1c598ebe9
[  395.083743][T21836] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  395.083751][T21836] RBP: 00007fb1c5a11e19 R08: 0000000000000000 R09: 0000000000000000
[  395.083760][T21836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  395.083767][T21836] R13: 00007fb1c5bc6038 R14: 00007fb1c5bc5fa0 R15: 00007fff640a3aa8
[  395.083790][T21836]  </TASK>
[  395.389649][T21840] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4289'.
[  395.402608][T21841] lo speed is unknown, defaulting to 1000
[  395.415203][T21841] syzkaller0 speed is unknown, defaulting to 1000
[  395.417952][T21840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4289'.
[  395.422068][T21840] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4289'.
[  395.425980][T21840] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4289'.
[  395.430043][T21840] netlink: 540 bytes leftover after parsing attributes in process `syz.0.4289'.
[  395.437836][T21840] netlink: 'syz.0.4289': attribute type 10 has an invalid length.
[  395.442259][T21840] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  395.448784][T21840] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  395.677500][T21864] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4294'.
[  395.781267][T21858] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  395.784132][T21858] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  396.017850][T21878] lo speed is unknown, defaulting to 1000
[  396.021775][T21879] lo speed is unknown, defaulting to 1000
[  396.022914][T21878] syzkaller0 speed is unknown, defaulting to 1000
[  396.032838][T21879] syzkaller0 speed is unknown, defaulting to 1000
[  396.840545][T21909] lo speed is unknown, defaulting to 1000
[  396.846011][T21909] syzkaller0 speed is unknown, defaulting to 1000
[  397.349804][T21928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4313'.
[  397.358040][T21928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4313'.
[  397.743197][T21950] lo speed is unknown, defaulting to 1000
[  397.747412][T21950] syzkaller0 speed is unknown, defaulting to 1000
[  397.967266][T21966] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  397.990095][T21966] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  398.037245][T21975] lo speed is unknown, defaulting to 1000
[  398.043560][T21975] syzkaller0 speed is unknown, defaulting to 1000
[  398.915034][T21990] siw: device registration error -23
[  399.000422][T21994] lo speed is unknown, defaulting to 1000
[  399.005799][T21994] syzkaller0 speed is unknown, defaulting to 1000
[  399.087999][T22000] lo speed is unknown, defaulting to 1000
[  399.130898][T22000] syzkaller0 speed is unknown, defaulting to 1000
[  399.142415][T22003] lo speed is unknown, defaulting to 1000
[  399.153515][T22003] syzkaller0 speed is unknown, defaulting to 1000
[  399.215468][T22011] siw: device registration error -23
[  399.233921][T22011] tipc: Bearer <eth:syzkaller0>: already 2 bearers with priority 0
[  399.237161][T22011] tipc: Enabling of bearer <eth:syzkaller0> rejected, cannot adjust to lower
[  399.370484][T22023] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  399.410646][T22023] siw: device registration error -23
[  399.451028][T22022] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  399.487494][T22029] netlink: 'syz.2.4341': attribute type 13 has an invalid length.
[  399.582690][T22030] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  399.933773][T22041] lo speed is unknown, defaulting to 1000
[  399.937647][T22041] syzkaller0 speed is unknown, defaulting to 1000
[  400.017828][T22044] __nla_validate_parse: 11 callbacks suppressed
[  400.017838][T22044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4344'.
[  400.025496][T22041] IPVS: Unknown mcast interface: hsr0
[  400.122588][T22050] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4346'.
[  400.126623][T22050] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4346'.
[  400.243485][T22057] netlink: 'syz.1.4350': attribute type 3 has an invalid length.
[  400.271157][T22057] syz_tun: entered allmulticast mode
[  400.275271][T22057] siw: device registration error -23
[  400.306635][T22057] 8021q: adding VLAN 0 to HW filter on device bond0
[  400.311667][T22057] 8021q: adding VLAN 0 to HW filter on device team0
[  400.315038][T22057] tipc: Resetting bearer <eth:team0>
[  400.317564][T22057] tipc: Resetting bearer <eth:team0>
[  400.325344][T22057] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  400.335172][T21087] lo speed is unknown, defaulting to 1000
[  400.337579][T21087] syz2: Port: 1 Link ACTIVE
[  400.347911][T22054] syz_tun: left allmulticast mode
[  400.370683][T22066] lo speed is unknown, defaulting to 1000
[  400.375308][T22066] syzkaller0 speed is unknown, defaulting to 1000
[  400.521519][T22076] siw: device registration error -23
[  400.538309][T22076] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4353'.
[  400.610743][T22082] lo speed is unknown, defaulting to 1000
[  400.615088][T22082] syzkaller0 speed is unknown, defaulting to 1000
[  400.902626][T22086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4356'.
[  400.948736][T22100] lo speed is unknown, defaulting to 1000
[  400.956728][T22100] syzkaller0 speed is unknown, defaulting to 1000
[  401.080775][T22105] lo speed is unknown, defaulting to 1000
[  401.091125][T22105] syzkaller0 speed is unknown, defaulting to 1000
[  401.601377][T22129] netlink: 'syz.1.4367': attribute type 1 has an invalid length.
[  401.623069][T22129] bond9: entered promiscuous mode
[  401.624819][T22129] bond9: entered allmulticast mode
[  401.626754][T22129] 8021q: adding VLAN 0 to HW filter on device bond9
[  401.670777][T22126] tipc: Resetting bearer <eth:syz_tun>
[  401.684022][T22126] tipc: Resetting bearer <eth:team0>
[  402.221002][T22150] siw: device registration error -23
[  402.271071][T22150] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4372'.
[  402.405464][T22155] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  402.408098][T22155] CPU: 0 UID: 0 PID: 22155 Comm: syz.2.4373 Not tainted syzkaller #0 PREEMPT(full) 
[  402.408110][T22155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  402.408114][T22155] Call Trace:
[  402.408119][T22155]  <TASK>
[  402.408122][T22155]  dump_stack_lvl+0x189/0x250
[  402.408137][T22155]  ? __pfx_dump_stack_lvl+0x10/0x10
[  402.408147][T22155]  ? __pfx__printk+0x10/0x10
[  402.408159][T22155]  ? kernfs_path_from_node+0x2f/0x290
[  402.408168][T22155]  ? kernfs_path_from_node+0x250/0x290
[  402.408176][T22155]  ? kernfs_path_from_node+0x2f/0x290
[  402.408186][T22155]  sysfs_warn_dup+0x8e/0xa0
[  402.408206][T22155]  sysfs_do_create_link_sd+0xc0/0x110
[  402.408214][T22155]  device_add_class_symlinks+0x1cf/0x240
[  402.408226][T22155]  device_add+0x475/0xb50
[  402.408235][T22155]  wiphy_register+0x1ba6/0x28d0
[  402.408250][T22155]  ? __pfx_wiphy_register+0x10/0x10
[  402.408257][T22155]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  402.408271][T22155]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  402.408283][T22155]  ieee80211_register_hw+0x3484/0x4100
[  402.408300][T22155]  ? ieee80211_register_hw+0x1431/0x4100
[  402.408313][T22155]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  402.408324][T22155]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  402.408340][T22155]  ? __hrtimer_setup+0x187/0x210
[  402.408347][T22155]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  402.408358][T22155]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  402.408380][T22155]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  402.408388][T22155]  ? trace_kmalloc+0x1f/0xd0
[  402.408396][T22155]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  402.408405][T22155]  ? kstrndup+0xbf/0x160
[  402.408417][T22155]  hwsim_new_radio_nl+0xea4/0x1b10
[  402.408427][T22155]  ? __pfx___nla_validate_parse+0x10/0x10
[  402.408444][T22155]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  402.408458][T22155]  ? __nla_parse+0x40/0x60
[  402.408466][T22155]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  402.408480][T22155]  genl_family_rcv_msg_doit+0x215/0x300
[  402.408492][T22155]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  402.408506][T22155]  ? bpf_lsm_capable+0x9/0x20
[  402.408515][T22155]  ? security_capable+0x7e/0x2e0
[  402.408528][T22155]  genl_rcv_msg+0x60e/0x790
[  402.408540][T22155]  ? __pfx_genl_rcv_msg+0x10/0x10
[  402.408548][T22155]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  402.408592][T22155]  netlink_rcv_skb+0x208/0x470
[  402.408601][T22155]  ? __lock_acquire+0xab9/0xd20
[  402.408612][T22155]  ? __pfx_genl_rcv_msg+0x10/0x10
[  402.408623][T22155]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  402.408639][T22155]  ? down_read+0x1ad/0x2e0
[  402.408649][T22155]  genl_rcv+0x28/0x40
[  402.408657][T22155]  netlink_unicast+0x82f/0x9e0
[  402.408673][T22155]  ? __pfx_netlink_unicast+0x10/0x10
[  402.408684][T22155]  ? netlink_sendmsg+0x642/0xb30
[  402.408691][T22155]  ? skb_put+0x11b/0x210
[  402.408701][T22155]  netlink_sendmsg+0x805/0xb30
[  402.408714][T22155]  ? __pfx_netlink_sendmsg+0x10/0x10
[  402.408724][T22155]  ? aa_sock_msg_perm+0xf1/0x1d0
[  402.408732][T22155]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  402.408739][T22155]  ? __pfx_netlink_sendmsg+0x10/0x10
[  402.408747][T22155]  __sock_sendmsg+0x21c/0x270
[  402.408759][T22155]  ____sys_sendmsg+0x505/0x830
[  402.408769][T22155]  ? __pfx_____sys_sendmsg+0x10/0x10
[  402.408781][T22155]  ? import_iovec+0x74/0xa0
[  402.408791][T22155]  ___sys_sendmsg+0x21f/0x2a0
[  402.408800][T22155]  ? __pfx____sys_sendmsg+0x10/0x10
[  402.408824][T22155]  ? __fget_files+0x2a/0x420
[  402.408830][T22155]  ? __fget_files+0x3a0/0x420
[  402.408840][T22155]  __x64_sys_sendmsg+0x19b/0x260
[  402.408850][T22155]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  402.408866][T22155]  ? do_syscall_64+0xbe/0x3b0
[  402.408875][T22155]  do_syscall_64+0xfa/0x3b0
[  402.408882][T22155]  ? lockdep_hardirqs_on+0x9c/0x150
[  402.408889][T22155]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.408896][T22155]  ? exc_page_fault+0x9f/0xf0
[  402.408904][T22155]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.408910][T22155] RIP: 0033:0x7f19b318ebe9
[  402.408918][T22155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  402.408924][T22155] RSP: 002b:00007f19b13d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  402.408933][T22155] RAX: ffffffffffffffda RBX: 00007f19b33c6090 RCX: 00007f19b318ebe9
[  402.408938][T22155] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008
[  402.408943][T22155] RBP: 00007f19b3211e19 R08: 0000000000000000 R09: 0000000000000000
[  402.408947][T22155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  402.408951][T22155] R13: 00007f19b33c6128 R14: 00007f19b33c6090 R15: 00007ffe015c2438
[  402.408980][T22155]  </TASK>
[  402.674153][T22170] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4374'.
[  402.699322][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  402.708694][T22174] lo speed is unknown, defaulting to 1000
[  402.713933][T22174] syzkaller0 speed is unknown, defaulting to 1000
[  402.805646][T22181] tipc: Resetting bearer <eth:team0>
[  402.812278][T22181] team0: Port device geneve0 removed
[  402.815452][T22181] bond6: (slave bridge6): Removing an active aggregator
[  402.822140][T22181] bond6: (slave bridge6): Releasing backup interface
[  402.831256][T22181] bond7: (slave bridge7): Removing an active aggregator
[  402.837900][T22181] bond7: (slave bridge7): Releasing backup interface
[  402.885499][T22181] team0: Unable to change to the same mode the team is in
[  402.888628][T22181] vlan0: entered promiscuous mode
[  402.891364][T22190] netlink: 'syz.0.4380': attribute type 13 has an invalid length.
[  402.895044][T22181] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  402.898083][T22181] netlink: 'syz.1.4381': attribute type 1 has an invalid length.
[  402.906549][T22181] netlink: 'syz.1.4381': attribute type 2 has an invalid length.
[  402.907021][T22182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4379'.
[  402.920279][T22182] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  403.006665][T22194] lo speed is unknown, defaulting to 1000
[  403.013657][T22194] syzkaller0 speed is unknown, defaulting to 1000
[  403.017837][T22197] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4384'.
[  403.029157][T22198] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4384'.
[  403.282992][T22216] xt_limit: Overflow, try lower: 604147548/4200216962
[  403.819669][T22225] lo speed is unknown, defaulting to 1000
[  403.826007][T22225] syzkaller0 speed is unknown, defaulting to 1000
[  403.850170][T22226] netlink: 'syz.0.4390': attribute type 5 has an invalid length.
[  404.217148][T22237] lo speed is unknown, defaulting to 1000
[  404.222478][T22237] syzkaller0 speed is unknown, defaulting to 1000
[  404.353275][T22253] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  404.415821][T22257] gre4: entered allmulticast mode
[  404.452691][T22264] lo speed is unknown, defaulting to 1000
[  404.456678][T22264] syzkaller0 speed is unknown, defaulting to 1000
[  404.524895][T22267] lo speed is unknown, defaulting to 1000
[  404.531851][T22266] lo speed is unknown, defaulting to 1000
[  404.536344][T22267] syzkaller0 speed is unknown, defaulting to 1000
[  404.546682][T22266] syzkaller0 speed is unknown, defaulting to 1000
[  404.628479][   T61] block nbd3: Possible stuck request ffff888020380000: control (read@0,1024B). Runtime 150 seconds
[  404.635037][   T61] block nbd3: Possible stuck request ffff888020380200: control (read@1024,1024B). Runtime 150 seconds
[  404.639346][   T61] block nbd3: Possible stuck request ffff888020380400: control (read@2048,1024B). Runtime 150 seconds
[  404.643067][   T61] block nbd3: Possible stuck request ffff888020380600: control (read@3072,1024B). Runtime 150 seconds
[  404.723846][T22273] netlink: 'syz.0.4402': attribute type 4 has an invalid length.
[  404.779742][T21086] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  404.850265][T22280] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:19999
[  404.853796][T22280] IPVS: lc: FWM 3 0x00000003 - no destination available
[  404.882997][T22282] lo speed is unknown, defaulting to 1000
[  404.887263][T22282] syzkaller0 speed is unknown, defaulting to 1000
[  404.890412][T21086] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  405.194395][T22296] lo speed is unknown, defaulting to 1000
[  405.207447][T22296] syzkaller0 speed is unknown, defaulting to 1000
[  405.825852][T22302] lo speed is unknown, defaulting to 1000
[  405.832875][T22302] syzkaller0 speed is unknown, defaulting to 1000
[  405.901781][T22306] __nla_validate_parse: 9 callbacks suppressed
[  405.901792][T22306] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4411'.
[  406.111195][T22319] block nbd8: server does not support multiple connections per device.
[  406.115120][T22319] block nbd8: shutting down sockets
[  406.118789][T22320] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4413'.
[  406.123717][T22320] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4413'.
[  406.126984][T22320] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4413'.
[  406.130185][T22320] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4413'.
[  406.238920][T22324] tipc: Resetting bearer <eth:team0>
[  406.254816][ T5314] lo speed is unknown, defaulting to 1000
[  406.257397][ T5314] syz2: Port: 1 Link DOWN
[  406.290729][T22329] netlink: 20824 bytes leftover after parsing attributes in process `syz.2.4417'.
[  406.319445][T22329] lo speed is unknown, defaulting to 1000
[  406.326313][T22329] syzkaller0 speed is unknown, defaulting to 1000
[  406.504827][T22343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4421'.
[  406.523466][T22344] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4420'.
[  406.534122][T22343] team0: Unable to change to the same mode the team is in
[  406.537741][T22343] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  406.629094][T22350] netlink: 'syz.2.4423': attribute type 12 has an invalid length.
[  406.672691][T22344] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  406.797110][T22368] sctp: [Deprecated]: syz.2.4426 (pid 22368) Use of int in max_burst socket option.
[  406.797110][T22368] Use struct sctp_assoc_value instead
[  406.885835][T22372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4427'.
[  406.888826][T22372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4427'.
[  406.985798][T22380] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  407.649470][T21086] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  407.831555][T22437] lo speed is unknown, defaulting to 1000
[  407.836742][T22437] syzkaller0 speed is unknown, defaulting to 1000
[  408.078250][T22459] netlink: 'syz.2.4448': attribute type 3 has an invalid length.
[  408.232281][T22500] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  408.235996][T22500] veth0_to_bridge: entered promiscuous mode
[  408.238634][T22500] veth0_to_bridge: entered allmulticast mode
[  408.254006][T22499] tipc: Disabling bearer <eth:syzkaller0>
[  408.459278][T21086] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  408.535114][T22521] netlink: 'syz.1.4461': attribute type 13 has an invalid length.
[  408.540978][T22521] netlink: 'syz.1.4461': attribute type 17 has an invalid length.
[  408.573729][T22521] 8021q: adding VLAN 0 to HW filter on device bond0
[  408.578121][T22521] 8021q: adding VLAN 0 to HW filter on device team0
[  408.582935][T22521] tipc: Resetting bearer <eth:team0>
[  408.585560][T22521] tipc: Resetting bearer <eth:team0>
[  408.593533][T22521] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  408.599984][ T5314] lo speed is unknown, defaulting to 1000
[  408.602240][ T5314] syz2: Port: 1 Link ACTIVE
[  408.650760][T22535] netlink: 'syz.1.4465': attribute type 13 has an invalid length.
[  408.653561][T22535] netlink: 'syz.1.4465': attribute type 17 has an invalid length.
[  408.661349][T22535] tipc: Resetting bearer <eth:team0>
[  408.664468][T22535] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  408.693893][T22537] lo speed is unknown, defaulting to 1000
[  408.698404][T22537] syzkaller0 speed is unknown, defaulting to 1000
[  409.131753][T22560] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  409.176426][T22559] lo speed is unknown, defaulting to 1000
[  409.191653][T22559] syzkaller0 speed is unknown, defaulting to 1000
[  409.206376][T22564] siw: device registration error -23
[  409.390461][T22574] netlink: 'syz.1.4475': attribute type 1 has an invalid length.
[  409.530438][T22582] lo speed is unknown, defaulting to 1000
[  409.535320][T22582] syzkaller0 speed is unknown, defaulting to 1000
[  409.570972][T22583] netlink: 'syz.1.4477': attribute type 5 has an invalid length.
[  409.574137][T22583] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:21
[  409.749818][T22594] netlink: 'syz.0.4481': attribute type 10 has an invalid length.
[  409.866992][T22604] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  410.482841][T22654] lo speed is unknown, defaulting to 1000
[  410.489592][T22654] syzkaller0 speed is unknown, defaulting to 1000
[  410.580275][T22662] netlink: 'syz.1.4498': attribute type 5 has an invalid length.
[  410.760108][T22680] veth0_to_bridge: left promiscuous mode
[  410.762696][T22680] veth0_to_bridge: left allmulticast mode
[  410.776041][T22680] macvlan0: left promiscuous mode
[  410.778498][T22680] bond9: left promiscuous mode
[  410.787561][T22680] bond9: left allmulticast mode
[  410.790160][T22680] bond10: left promiscuous mode
[  410.793055][T22680] bond10: left allmulticast mode
[  410.985833][T22693] 8021q: adding VLAN 0 to HW filter on device bond0
[  410.992796][T22693] 8021q: adding VLAN 0 to HW filter on device team0
[  410.997803][T22693] tipc: Resetting bearer <eth:team0>
[  411.003200][T22693] tipc: Resetting bearer <eth:team0>
[  411.011770][T22693] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  411.113575][T22698] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20002
[  411.118906][T22699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  411.434090][T22714] __nla_validate_parse: 26 callbacks suppressed
[  411.434105][T22714] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4516'.
[  411.658638][T22719] lo speed is unknown, defaulting to 1000
[  411.667826][T22719] syzkaller0 speed is unknown, defaulting to 1000
[  411.741839][T22723] tipc: Resetting bearer <eth:syz_tun>
[  411.755249][T22723] tipc: Resetting bearer <eth:team0>
[  411.758209][T22727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4519'.
[  411.770010][T22727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4519'.
[  411.773977][T22727] validate_nla: 2 callbacks suppressed
[  411.773993][T22727] netlink: 'syz.0.4519': attribute type 11 has an invalid length.
[  411.823968][T22727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4519'.
[  411.827938][T22727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4519'.
[  411.834331][T22727] netlink: 'syz.0.4519': attribute type 11 has an invalid length.
[  411.842954][T22727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4519'.
[  411.846516][T22727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4519'.
[  411.850113][T22727] netlink: 'syz.0.4519': attribute type 11 has an invalid length.
[  411.853950][T22727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4519'.
[  411.857560][T22727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4519'.
[  411.867146][T22731] syzkaller1: entered promiscuous mode
[  411.869121][T22727] netlink: 'syz.0.4519': attribute type 11 has an invalid length.
[  411.872290][T22731] syzkaller1: entered allmulticast mode
[  411.876337][T22727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4519'.
[  411.880929][T22727] netlink: 'syz.0.4519': attribute type 11 has an invalid length.
[  411.885132][T22727] netlink: 'syz.0.4519': attribute type 11 has an invalid length.
[  411.907621][T22727] netlink: 'syz.0.4519': attribute type 11 has an invalid length.
[  411.911318][T22727] netlink: 'syz.0.4519': attribute type 11 has an invalid length.
[  411.914576][T22727] netlink: 'syz.0.4519': attribute type 11 has an invalid length.
[  411.917740][T22727] netlink: 'syz.0.4519': attribute type 11 has an invalid length.
[  412.416223][T22744] IPVS: Unknown mcast interface: vetN1_macvtap
[  413.001831][T22770] tipc: Bearer <eth:syzkaller0>: already 2 bearers with priority 0
[  413.004573][T22770] tipc: Enabling of bearer <eth:syzkaller0> rejected, cannot adjust to lower
[  413.362880][T22791] tipc: Resetting bearer <eth:team0>
[  413.370694][ T1270] lo speed is unknown, defaulting to 1000
[  413.374871][ T1270] syz2: Port: 1 Link DOWN
[  413.495736][T22795] IPv6: NLM_F_REPLACE set, but no existing node found!
[  414.161979][T22800] lo speed is unknown, defaulting to 1000
[  414.167037][T22800] syzkaller0 speed is unknown, defaulting to 1000
[  414.276331][T22813] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  414.303197][T22815] lo speed is unknown, defaulting to 1000
[  414.309741][T22815] syzkaller0 speed is unknown, defaulting to 1000
[  414.380511][T22819] 8021q: adding VLAN 0 to HW filter on device bond0
[  414.385457][T22819] 8021q: adding VLAN 0 to HW filter on device team0
[  414.388591][T22819] tipc: Resetting bearer <eth:team0>
[  414.392955][T22819] tipc: Resetting bearer <eth:team0>
[  414.396919][T22819] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  414.408087][T22817] lo speed is unknown, defaulting to 1000
[  414.410393][T21078] lo speed is unknown, defaulting to 1000
[  414.412476][T21078] syz2: Port: 1 Link ACTIVE
[  414.414774][T22817] syzkaller0 speed is unknown, defaulting to 1000
[  414.432809][T22815] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  414.435455][T22815] IPv6: NLM_F_CREATE should be set when creating new route
[  414.437828][T22815] IPv6: NLM_F_CREATE should be set when creating new route
[  414.527370][T22833] IPVS: stopping backup sync thread 13573 ...
[  414.698503][ T5695] bond0 (unregistering): Released all slaves
[  414.838033][T22851] tipc: Resetting bearer <eth:team0>
[  414.843424][T22851] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  415.071681][T22865] team0: Unable to change to the same mode the team is in
[  415.076057][T22865] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  415.163792][T22874] lo speed is unknown, defaulting to 1000
[  415.184632][T22874] syzkaller0 speed is unknown, defaulting to 1000
[  415.218536][T22881] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 1, id = 0
[  415.352448][T22894] siw: device registration error -23
[  415.354722][T22893] siw: device registration error -23
[  415.424595][T22893] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  415.461702][T22893] veth0_to_bridge: entered promiscuous mode
[  415.463902][T22893] veth0_to_bridge: entered allmulticast mode
[  415.478142][T22905] lo speed is unknown, defaulting to 1000
[  415.483567][T22905] syzkaller0 speed is unknown, defaulting to 1000
[  415.639509][T22915] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  415.649370][T22916] IPv6: NLM_F_CREATE should be specified when creating new route
[  415.988110][T22953] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  415.988121][T22952] IPVS: stopping backup sync thread 22953 ...
[  416.156765][T22972] team0: Unable to change to the same mode the team is in
[  416.160692][T22972] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  416.264487][T22983] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  416.340790][T22985] lo speed is unknown, defaulting to 1000
[  416.346030][T22985] syzkaller0 speed is unknown, defaulting to 1000
[  416.465892][T22987] __nla_validate_parse: 91 callbacks suppressed
[  416.465903][T22987] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4596'.
[  417.122418][T23005] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  417.257142][T23018] lo speed is unknown, defaulting to 1000
[  417.266669][T23018] syzkaller0 speed is unknown, defaulting to 1000
[  417.380843][T23028] lo speed is unknown, defaulting to 1000
[  417.385881][T23028] syzkaller0 speed is unknown, defaulting to 1000
[  417.421764][T23029] validate_nla: 32 callbacks suppressed
[  417.421778][T23029] netlink: 'syz.1.4606': attribute type 1 has an invalid length.
[  417.426996][T23029] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4606'.
[  418.294872][T23061] team0: Unable to change to the same mode the team is in
[  418.303016][T23061] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  418.306650][T23061] netlink: 'syz.2.4618': attribute type 1 has an invalid length.
[  418.311849][T23061] netlink: 'syz.2.4618': attribute type 2 has an invalid length.
[  418.352676][T23064] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  418.415960][T23071] netlink: 'syz.2.4622': attribute type 4 has an invalid length.
[  418.461226][T23073] lo speed is unknown, defaulting to 1000
[  418.465959][T23073] syzkaller0 speed is unknown, defaulting to 1000
[  418.588114][T23079] netlink: 'syz.1.4624': attribute type 16 has an invalid length.
[  418.590800][T23079] netlink: 'syz.1.4624': attribute type 17 has an invalid length.
[  418.660482][T23079] tipc: Resetting bearer <eth:team0>
[  418.666232][ T1270] lo speed is unknown, defaulting to 1000
[  418.668124][ T1270] syz2: Port: 1 Link DOWN
[  418.670320][T23080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4624'.
[  418.676678][T23085] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  418.688507][T23079] IPv6: NLM_F_REPLACE set, but no existing node found!
[  418.702731][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  418.760542][T23082] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  418.809792][T23090] lo speed is unknown, defaulting to 1000
[  418.814393][T23090] syzkaller0 speed is unknown, defaulting to 1000
[  418.886813][T23098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4629'.
[  418.893294][T23098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4629'.
[  418.896478][T23098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4629'.
[  418.903627][T23098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4629'.
[  418.906549][T23098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4629'.
[  419.524804][T23113] lo speed is unknown, defaulting to 1000
[  419.528892][T23113] syzkaller0 speed is unknown, defaulting to 1000
[  419.593398][T23117] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4635'.
[  419.701096][T23121] veth0_to_bridge: left promiscuous mode
[  419.703595][T23121] veth0_to_bridge: left allmulticast mode
[  419.837538][T23137] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4641'.
[  419.863850][T23137] netlink: 'syz.1.4641': attribute type 12 has an invalid length.
[  420.148873][T23173] lo speed is unknown, defaulting to 1000
[  420.156976][T23173] syzkaller0 speed is unknown, defaulting to 1000
[  420.173092][T23177] netlink: 'syz.1.4653': attribute type 13 has an invalid length.
[  420.184108][T23177] netlink: 'syz.1.4653': attribute type 17 has an invalid length.
[  420.207464][T23179] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  420.237164][T23177] 8021q: adding VLAN 0 to HW filter on device bond0
[  420.241641][T23177] 8021q: adding VLAN 0 to HW filter on device team0
[  420.244910][T23177] tipc: Resetting bearer <eth:team0>
[  420.247534][T23177] tipc: Resetting bearer <eth:team0>
[  420.254307][T23177] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  420.261161][T21083] lo speed is unknown, defaulting to 1000
[  420.263684][T21083] syz2: Port: 1 Link ACTIVE
[  420.292292][T23180] lo speed is unknown, defaulting to 1000
[  420.294825][T23177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  420.301760][T23177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  420.301930][T23180] syzkaller0 speed is unknown, defaulting to 1000
[  420.845916][    C1] ==================================================================
[  420.849345][    C1] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  420.852656][    C1] Write of size 8 at addr ffff888030fdd230 by task swapper/1/0
[  420.856654][    C1] 
[  420.857678][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  420.857694][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  420.857703][    C1] Call Trace:
[  420.857711][    C1]  <IRQ>
[  420.857718][    C1]  dump_stack_lvl+0x189/0x250
[  420.857734][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  420.857749][    C1]  ? rcu_is_watching+0x15/0xb0
[  420.857760][    C1]  ? __kasan_check_byte+0x12/0x40
[  420.857775][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  420.857787][    C1]  ? rcu_is_watching+0x15/0xb0
[  420.857799][    C1]  ? lock_release+0x4b/0x3e0
[  420.857816][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  420.857830][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  420.857844][    C1]  print_report+0xca/0x240
[  420.857856][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  420.857868][    C1]  kasan_report+0x118/0x150
[  420.857884][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  420.857899][    C1]  __xfrm_state_delete+0x696/0xca0
[  420.857914][    C1]  xfrm_timer_handler+0x18f/0xa00
[  420.857930][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  420.857940][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  420.857958][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  420.857970][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  420.857985][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  420.858003][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  420.858016][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  420.858028][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  420.858046][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  420.858056][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  420.858070][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  420.858083][    C1]  handle_softirqs+0x286/0x870
[  420.858096][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  420.858108][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  420.858120][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  420.858135][    C1]  __irq_exit_rcu+0xca/0x1f0
[  420.858146][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  420.858159][    C1]  irq_exit_rcu+0x9/0x30
[  420.858169][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  420.858180][    C1]  </IRQ>
[  420.858184][    C1]  <TASK>
[  420.858189][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  420.858201][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  420.858214][    C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 73 b7 0d 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  420.858232][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  420.858245][    C1] RAX: 93333a4895eeab00 RBX: ffffffff819683f8 RCX: 93333a4895eeab00
[  420.858254][    C1] RDX: 0000000000000001 RSI: ffffffff8d9b9d26 RDI: ffffffff8be33880
[  420.858262][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  420.858271][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa39230
[  420.858279][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d0000
[  420.858289][    C1]  ? do_idle+0x1e8/0x510
[  420.858302][    C1]  default_idle+0x13/0x20
[  420.858314][    C1]  default_idle_call+0x74/0xb0
[  420.858355][    C1]  do_idle+0x1e8/0x510
[  420.858367][    C1]  ? __pfx_do_idle+0x10/0x10
[  420.858382][    C1]  cpu_startup_entry+0x44/0x60
[  420.858394][    C1]  start_secondary+0x101/0x110
[  420.858409][    C1]  common_startup_64+0x13e/0x147
[  420.858428][    C1]  </TASK>
[  420.858432][    C1] 
[  420.993374][    C1] Allocated by task 21305:
[  420.995206][    C1]  kasan_save_track+0x3e/0x80
[  420.997160][    C1]  __kasan_slab_alloc+0x6c/0x80
[  420.999149][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  421.001449][    C1]  xfrm_state_alloc+0x24/0x2f0
[  421.003406][    C1]  __find_acq_core+0x8a7/0x1c00
[  421.005483][    C1]  xfrm_find_acq+0x78/0xa0
[  421.007374][    C1]  xfrm_alloc_userspi+0x6b3/0xc90
[  421.009500][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  421.011437][    C1]  netlink_rcv_skb+0x208/0x470
[  421.013457][    C1]  xfrm_netlink_rcv+0x79/0x90
[  421.015368][    C1]  netlink_unicast+0x82f/0x9e0
[  421.017203][    C1]  netlink_sendmsg+0x805/0xb30
[  421.018917][    C1]  __sock_sendmsg+0x21c/0x270
[  421.020493][    C1]  ____sys_sendmsg+0x505/0x830
[  421.022143][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  421.023697][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  421.025704][    C1]  do_syscall_64+0xfa/0x3b0
[  421.027797][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  421.030259][    C1] 
[  421.031282][    C1] Freed by task 5314:
[  421.032901][    C1]  kasan_save_track+0x3e/0x80
[  421.034844][    C1]  kasan_save_free_info+0x46/0x50
[  421.036948][    C1]  __kasan_slab_free+0x5b/0x80
[  421.038956][    C1]  kmem_cache_free+0x18f/0x400
[  421.040962][    C1]  xfrm_state_gc_task+0x52d/0x6b0
[  421.043072][    C1]  process_scheduled_works+0xae1/0x17b0
[  421.045428][    C1]  worker_thread+0x8a0/0xda0
[  421.047367][    C1]  kthread+0x711/0x8a0
[  421.049053][    C1]  ret_from_fork+0x3fc/0x770
[  421.050929][    C1]  ret_from_fork_asm+0x1a/0x30
[  421.052861][    C1] 
[  421.053879][    C1] The buggy address belongs to the object at ffff888030fdd200
[  421.053879][    C1]  which belongs to the cache xfrm_state of size 928
[  421.059489][    C1] The buggy address is located 48 bytes inside of
[  421.059489][    C1]  freed 928-byte region [ffff888030fdd200, ffff888030fdd5a0)
[  421.064854][    C1] 
[  421.065886][    C1] The buggy address belongs to the physical page:
[  421.068312][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888030fde880 pfn:0x30fdc
[  421.072350][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  421.075690][    C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  421.078699][    C1] page_type: f5(slab)
[  421.080347][    C1] raw: 00fff00000000040 ffff888104f628c0 dead000000000122 0000000000000000
[  421.083292][    C1] raw: ffff888030fde880 00000000800e0005 00000000f5000000 0000000000000000
[  421.086889][    C1] head: 00fff00000000040 ffff888104f628c0 dead000000000122 0000000000000000
[  421.090380][    C1] head: ffff888030fde880 00000000800e0005 00000000f5000000 0000000000000000
[  421.093989][    C1] head: 00fff00000000002 ffffea0000c3f701 00000000ffffffff 00000000ffffffff
[  421.097551][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  421.101036][    C1] page dumped because: kasan: bad access detected
[  421.103668][    C1] page_owner tracks the page as allocated
[  421.105940][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6459, tgid 6452 (syz.0.134), ts 69072836238, free_ts 63738338488
[  421.113483][    C1]  post_alloc_hook+0x240/0x2a0
[  421.115536][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  421.117874][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  421.120287][    C1]  alloc_pages_mpol+0x232/0x4a0
[  421.122340][    C1]  allocate_slab+0x8a/0x370
[  421.124138][    C1]  ___slab_alloc+0xbeb/0x1420
[  421.126107][    C1]  kmem_cache_alloc_noprof+0x283/0x3c0
[  421.128390][    C1]  xfrm_state_alloc+0x24/0x2f0
[  421.130333][    C1]  xfrm_state_find+0x37d4/0x5400
[  421.132376][    C1]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  421.134916][    C1]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  421.137185][    C1]  xfrm_lookup_route+0x3c/0x1c0
[  421.139254][    C1]  udp_sendmsg+0x142e/0x2170
[  421.141217][    C1]  __sock_sendmsg+0x19c/0x270
[  421.143179][    C1]  ____sys_sendmsg+0x52d/0x830
[  421.145202][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  421.147141][    C1] page last free pid 5296 tgid 5296 stack trace:
[  421.149792][    C1]  __free_frozen_pages+0xbc4/0xd30
[  421.151964][    C1]  __put_partials+0x156/0x1a0
[  421.153964][    C1]  put_cpu_partial+0x17c/0x250
[  421.155939][    C1]  __slab_free+0x2d5/0x3c0
[  421.157844][    C1]  qlist_free_all+0x97/0x140
[  421.159920][    C1]  kasan_quarantine_reduce+0x148/0x160
[  421.162238][    C1]  __kasan_slab_alloc+0x22/0x80
[  421.164371][    C1]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  421.166922][    C1]  __alloc_skb+0x112/0x2d0
[  421.168847][    C1]  netlink_sendmsg+0x5c6/0xb30
[  421.170913][    C1]  __sock_sendmsg+0x21c/0x270
[  421.172938][    C1]  ____sys_sendmsg+0x505/0x830
[  421.174894][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  421.176853][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  421.178932][    C1]  do_syscall_64+0xfa/0x3b0
[  421.180812][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  421.183248][    C1] 
[  421.184241][    C1] Memory state around the buggy address:
[  421.186562][    C1]  ffff888030fdd100: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  421.189817][    C1]  ffff888030fdd180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  421.193111][    C1] >ffff888030fdd200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  421.196428][    C1]                                      ^
[  421.198712][    C1]  ffff888030fdd280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  421.202015][    C1]  ffff888030fdd300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  421.205262][    C1] ==================================================================
[  421.208857][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  421.211833][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  421.215438][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  421.219437][    C1] Call Trace:
[  421.220831][    C1]  <IRQ>
[  421.222029][    C1]  dump_stack_lvl+0x99/0x250
[  421.223924][    C1]  ? __asan_memcpy+0x40/0x70
[  421.225875][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  421.228066][    C1]  ? __pfx__printk+0x10/0x10
[  421.230010][    C1]  vpanic+0x281/0x750
[  421.231709][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  421.233909][    C1]  ? __pfx_vpanic+0x10/0x10
[  421.235946][    C1]  ? asm_common_interrupt+0x26/0x40
[  421.238125][    C1]  panic+0xb9/0xc0
[  421.239753][    C1]  ? __pfx_panic+0x10/0x10
[  421.241552][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  421.243988][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  421.246597][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  421.248771][    C1]  check_panic_on_warn+0x89/0xb0
[  421.250794][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  421.252948][    C1]  end_report+0x78/0x160
[  421.254722][    C1]  kasan_report+0x129/0x150
[  421.256602][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  421.258817][    C1]  __xfrm_state_delete+0x696/0xca0
[  421.260931][    C1]  xfrm_timer_handler+0x18f/0xa00
[  421.263003][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  421.265239][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  421.267739][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  421.269902][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  421.272355][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  421.275020][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  421.277291][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  421.279614][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  421.281744][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  421.284174][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  421.286771][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  421.289211][    C1]  handle_softirqs+0x286/0x870
[  421.291406][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  421.293525][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  421.295830][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  421.297971][    C1]  __irq_exit_rcu+0xca/0x1f0
[  421.299810][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  421.301942][    C1]  irq_exit_rcu+0x9/0x30
[  421.303667][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  421.305918][    C1]  </IRQ>
[  421.307149][    C1]  <TASK>
[  421.308391][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  421.310789][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  421.313099][    C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 73 b7 0d 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  421.320778][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  421.323210][    C1] RAX: 93333a4895eeab00 RBX: ffffffff819683f8 RCX: 93333a4895eeab00
[  421.326401][    C1] RDX: 0000000000000001 RSI: ffffffff8d9b9d26 RDI: ffffffff8be33880
[  421.329580][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  421.332742][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa39230
[  421.335872][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d0000
[  421.339083][    C1]  ? do_idle+0x1e8/0x510
[  421.340855][    C1]  default_idle+0x13/0x20
[  421.342607][    C1]  default_idle_call+0x74/0xb0
[  421.344537][    C1]  do_idle+0x1e8/0x510
[  421.346202][    C1]  ? __pfx_do_idle+0x10/0x10
[  421.348081][    C1]  cpu_startup_entry+0x44/0x60
[  421.350006][    C1]  start_secondary+0x101/0x110
[  421.351941][    C1]  common_startup_64+0x13e/0x147
[  421.354100][    C1]  </TASK>
[  421.356161][    C1] Kernel Offset: disabled
[  421.357954][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
02:58:42  Registers:
info registers vcpu 0

CPU#0
RAX=e6a8065093dc9e00 RBX=ffffffff819683f8 RCX=e6a8065093dc9e00 RDX=0000000000000001
RSI=ffffffff8d9b9d26 RDI=ffffffff8be33880 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa39230 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7a73f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fec68849fca CR3=0000000026e12000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fb1c5a12e53
XMM06=0000000000000000 00007fb1c5a12e4d XMM07=0000000000000000 00007fb1c5a12e61
XMM08=0000000000000000 00007fb1c5a12ee7 XMM09=0000000000000000 00007fb1c5a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001e03b0
R8 =ffff88801f9c0237 R9 =1ffff11003f38046 R10=dffffc0000000000 R11=ffffffff854f4b80
R12=dffffc0000000000 R13=ffffffff99b01913 R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f4bfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3e61f3 CR3=000000003004e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 00002418120c968b
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 2418120c968b8482
XMM04=00007fbe278fd100 00007fbe26d97460 XMM05=00007fbe26d97478 00007fbe26d974c0
XMM06=00007fbe26d974b8 00007fbe26d974b0 XMM07=00007fbe26d974a8 00007fbe26d974a0
XMM08=07c6a7151ba41403 0912340256624a03 XMM09=0000000000000000 00007fbe26c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
