last executing test programs:

6m34.641263311s ago: executing program 2 (id=723):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xf, 0x0, &(0x7f0000000840))
pipe(&(0x7f0000000000))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021040100000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000d8000380d40000800800034000000002c8000b80480001800a00010071756f74610000003800028008000240000000030c00014000000000000001010c00044000000000000000", @ANYRESHEX=r2], 0x188}}, 0x0)
syz_emit_ethernet(0x8a, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r7, &(0x7f0000000080)='syz0\x00', 0x1ff)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r11, @ANYBLOB], 0x44}}, 0x0)
r12 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r13], 0x5c}}, 0x40)
setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)
sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0)

6m34.532650032s ago: executing program 2 (id=724):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r0, 0x0) (async)
ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x80064, 0x81, 0xb, 0x6, 0x400, 0x81}) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
close(0x3) (async)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0xd27}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, &(0x7f0000000380)="1695", 0x0}, 0x20) (async)
r4 = socket$xdp(0x2c, 0x3, 0x0) (async)
r5 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r6=>0x0})
bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x5, r6, 0x40}, 0x10)
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000240)={@void, @val={0x2, 0x80, 0x5, 0x6, 0x9, 0xa6f3}, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x21, 0x14, 0x64, 0x0, 0x0, 0x84, 0x0, @private=0xa010102, @multicast1}}}}}}, 0x2c) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r8)
sendmsg$NFC_CMD_VENDOR(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r9, 0x501, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000)
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) (async)
connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e22, @multicast1}, 0x10) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r12, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008090}, 0x30)

6m34.452660184s ago: executing program 2 (id=725):
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x3, @loopback}, 0x1c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r0, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="94000000", @ANYRES16=r5, @ANYBLOB="04002cbd7000fedbdf25050000000c00050009010000000000000c0008000300000000000000400007800c00018008000100", @ANYRES32=r6, @ANYBLOB="0c00018008000100", @ANYRES32=r1, @ANYRESOCT=r3, @ANYRES32=r1, @ANYBLOB="0c00018008000100", @ANYRES32=r1, @ANYBLOB="0cddc10c5d184e92", @ANYRES32=r1, @ANYRESOCT=r3, @ANYRES32=r1, @ANYRESHEX=r0, @ANYRES32=r1, @ANYBLOB="0c00018008000100", @ANYRES32=r0, @ANYBLOB], 0x94}, 0x1, 0x0, 0x0, 0x810}, 0x0)
sendto$inet6(r2, &(0x7f0000000080)="44f9", 0x2, 0x1, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES64=r0, @ANYBLOB="d5"], 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
recvmmsg$unix(r7, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000016c0)=""/172, 0xac}, {&(0x7f0000002480)=""/4100, 0x1004}, {&(0x7f0000000300)=""/92, 0x5c}, {&(0x7f0000001580)=""/60, 0x3c}, {&(0x7f0000001980)=""/236, 0xec}, {&(0x7f00000015c0)=""/192, 0xc0}], 0x6}}], 0x1, 0x40010122, 0x0)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r6)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000004c0)={'vxcan1\x00', <r12=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x60, r8, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000)
write(r7, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, 0x2b, 0xb, 0x0, 0x0, {0x8}, [@typed={0x4, 0x3}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x2c}}, 0x40)
splice(r2, 0x0, r1, 0x0, 0x406f413, 0x0)

6m34.450364982s ago: executing program 2 (id=726):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0x1, 0x0)
vmsplice(r2, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x155555555555586f, 0x0, 0x4, 0x0, 0x0, [{0xb, 0x2, 0x4e20da7d}]}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x20, &(0x7f0000000100)={0x0, 0x0, <r5=>0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r5, 0x4)
close(0x3)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000006800e97800000000ffdbdf258a0000000400000008000500", @ANYRES32, @ANYBLOB="140006"], 0x34}}, 0x0)
write(r0, &(0x7f0000000280)="8ef8", 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)

6m34.31142188s ago: executing program 2 (id=728):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000200)}], 0x1)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e657200000040000280080002"], 0xa8}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xa000}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c810}, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f0003"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x400c5)
sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)=ANY=[@ANYBLOB="34000000120001002abd7000fedbdf2564010100000000000000000000000000000004d50a00ff"], 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x40000)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@ifindex, 0x7, 0x0, 0xae0000, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], <r4=>0x0}, 0x40)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0xfffffffb, 0x6a, &(0x7f0000000240)=""/106, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x0, 0x42b, 0xae93}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000380)=[{0x5, 0x1, 0xb, 0x8}, {0x3, 0x1, 0x4, 0x5}, {0x3, 0x2, 0x5, 0x4}, {0x0, 0x1, 0xa, 0x2}], 0x10, 0xfff}, 0x94)
r6 = socket$inet(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x74, 0x0, 0x0, 0xfffff01c}]}, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="150000000800000000000000", @ANYRES32=r5, @ANYBLOB="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", @ANYRES64=r4], 0x20)

6m34.232325545s ago: executing program 2 (id=729):
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000000c0), 0x0, 0x1)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_freezer_state(r1, &(0x7f00000000c0), 0x2, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000180), 0x12)
write$cgroup_freezer_state(r0, &(0x7f0000000200)='THAWED\x00', 0x7)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'batadv0\x00', 0x2})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
close(r5)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300020e0000000000800000000000050006006c0000000a004e2200000007fc01000000000000000000000000000105000000000000000200010000000000000006007fffffff030005000000000002000000ac1414aa000000000000000002000800080000003400000000000000"], 0x70}, 0x1, 0x7}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0092f88b921e87ceea270a00000202010200000000000000000200000a300002802c00018004000300ff01000000000000000000000000000114000400fe8800"/76], 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x80)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56561, 0x4000, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe8}, {0xffff, 0xffff}, {0x0, 0x6}}}, 0x24}}, 0x4000810)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
splice(r10, 0x0, r0, 0x0, 0x10000008ebc, 0x0)
write(r11, &(0x7f00000001c0)="b40ab29f61", 0x5)

6m19.181494511s ago: executing program 32 (id=729):
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000000c0), 0x0, 0x1)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_freezer_state(r1, &(0x7f00000000c0), 0x2, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000180), 0x12)
write$cgroup_freezer_state(r0, &(0x7f0000000200)='THAWED\x00', 0x7)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'batadv0\x00', 0x2})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
close(r5)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300020e0000000000800000000000050006006c0000000a004e2200000007fc01000000000000000000000000000105000000000000000200010000000000000006007fffffff030005000000000002000000ac1414aa000000000000000002000800080000003400000000000000"], 0x70}, 0x1, 0x7}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0092f88b921e87ceea270a00000202010200000000000000000200000a300002802c00018004000300ff01000000000000000000000000000114000400fe8800"/76], 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x80)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56561, 0x4000, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe8}, {0xffff, 0xffff}, {0x0, 0x6}}}, 0x24}}, 0x4000810)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
splice(r10, 0x0, r0, 0x0, 0x10000008ebc, 0x0)
write(r11, &(0x7f00000001c0)="b40ab29f61", 0x5)

2.649366509s ago: executing program 0 (id=4408):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0x1, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, <r5=>0xffffffffffffffff}, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8fffdffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
vmsplice(r2, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b04000000000000000002000000500004804c0001800a000100696e6e65720000003c0002800800024000000084080003400000000a080004400000000f08000140004e8300180005800e000100696d6d656469617465000000040002800900010073797a30000000000900020073797a3200"], 0xa4}}, 0x0)
sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x60, 0x10, 0x40d, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5019}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0xfffff000}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
write$nci(r2, &(0x7f0000000000)=@NCI_OP_NFCEE_DISCOVER_RSP={0x2, 0x1, 0x2, 0x0, 0x3, {0x3, 0x2}}, 0x5)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
write(r0, &(0x7f0000000280)="8ef8", 0x2)

1.747869946s ago: executing program 0 (id=4415):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000400)={'filter\x00', 0x0, 0x4, 0xca, [0xd417, 0x10000, 0x7, 0x1000, 0x8, 0x5], 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f0000000300)=""/202}, &(0x7f0000000240)=0x78)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="b000000044000701fcffffff00000000017c00009c00048096001280a437fa54a0cc5d11242cccca9a82234d912f8d4196192c1ddd5dcb13d7f0921142632c5ebd28b4b4513d200e3c56c2dfd37d0f42fb34dc396d5a11005f6bfe5993e5c04528fba03ac92ee6ed1d968a7554517590de2c19000000002900de80d3915f12716a643d4966212c4f25b0f088ecbcca05e2c38719e4adaad0c012779c2e654b7a0000000000"], 0xb0}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r3=>0x0})
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="06000000000000020000000002ad0020070000", @ANYRES32=r3, @ANYRESHEX=r4, @ANYBLOB="90000dc6d8214edd98b9af4178f0b62a6ed7f96484b2aa6a809144babc3e8231219137a44dacd5a984d84d7e1497b3b7324eeffa2ec50fe92d62a7f64e7ad2c321fd9fe7b5fba03f053168e6e42163c09df45120f6b7477de6d83d53c4bd6e7d039ddad681f4bc353fa6d6acceea5e4813bfbbe08c1043bd292a37656c066b1c61af8d63812461d04bcc46bf8d3a4dbffd6cf3e841319071b5b6b58385aa2563bdfe9590c91f82ab3dfdb297f8dd800572a5f8c7d8bb6c1ba7f3ce4a0581535cb73a11c58a16e91868df2eb7c00a3f7db24f6204ea51112c6c0db05090c2a37eb8870401b0f2", @ANYRES32=r4, @ANYRES8=r3], 0x44}}, 0x20000840)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000500)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000780)={0x174, 0x9, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x200}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x3}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x60, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @remote}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7fffffff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xb, 0x1a, 'filter\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xffff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}]}, @IPSET_ATTR_PROTOCOL={0x3}, @IPSET_ATTR_ADT={0x54, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xa}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xa, 0x1a, '}\x9e,\'&\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x81000000000000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8}}]}, @IPSET_ATTR_ADT={0x38, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'ip6tnl0\x00'}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0x174}, 0x1, 0x0, 0x0, 0x14}, 0x8000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r6, 0x0, r8, 0x0, 0x1, 0x0)
r9 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r10, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0xff}}, @in6={0xa, 0x4e21, 0xf, @loopback, 0x6}]}, &(0x7f0000000180)=0x10)
r11 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r12=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x85, &(0x7f0000000000)={r12, @in={{0x2, 0x4e24, @empty}}, 0x27c0}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x85, &(0x7f00000001c0)={r12, @in={{0x2, 0x4e24, @empty}}, 0xfffc}, 0x90)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0\x00'})
sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004100)=ANY=[@ANYBLOB="180000004a00010a00000000000000150a"], 0x18}}, 0x4000)
r13 = socket(0x2a, 0x2, 0x0)
ioctl$sock_rose_SIOCADDRT(r13, 0x890b, 0x0)
vmsplice(r7, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
write(r5, &(0x7f0000000280)="8ef8", 0x2)

1.110096067s ago: executing program 3 (id=4424):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0x1, 0x0)
vmsplice(r2, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
close(r4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
write(r0, &(0x7f0000000280)="8ef8", 0x2)

879.024361ms ago: executing program 0 (id=4425):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000900)=ANY=[@ANYBLOB="38010000100001000000000000000000ac1e0101000000000000000000000000fe8000000000000011000000000000aa0000000020000000000000005c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000002000000000000000bb000000146c00000000000014000000000000000000000000000000000000000000000000080000000000000000000000fffffffff7ffffff00000000000000000000000000000000000000000000001000000000000000000000000000000000fbe2000000000000000000000000000000000000000000000000000000000000000000000000008000000000020001062c00000000000000480003006465666cfaffff000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005e36650db8a53e683499f36cc65a251220b2fbb60a666d3b01630ed0821e6b931479d0a72f36b2b817b11816049dc6e1a23b77e8ea46b2f45784558a55cb54322bb07615428bc578b5fdb90c63b9785aa2c469dd3c5e285c084a64c319d4a11cc18db756af6df755080f4ad72ba94ff7278d7824610c67f96d6f6e7017bfafd3311a0b6d3d883bea60e1645a3f53242c7060492c4162f1eb0be3835d000000000000"], 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0)

878.551561ms ago: executing program 0 (id=4426):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r5 = openat$cgroup_type(r4, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r5, &(0x7f0000000280), 0x9)
r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) (async)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r7, 0x29, 0x4b, &(0x7f0000000000)=0x5, 0x4) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4e}, 0x94) (async)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x4, 0xa}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e, 0x0, 0x0, 0x61]}}, 0x0, 0x4a}, 0x28) (async)
write$cgroup_pid(r6, &(0x7f0000000080), 0x12) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}, @CTA_NAT_DST={0x14, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x22}}]}]}, 0x78}}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x19a, &(0x7f0000000480)='cgrouj\x00\xc6\xbfQf\xf6\xcf\x81\xf8\x1b\xf8\xcf\xd0\xdb^\t\x82=\x8f\t\xf4yY\x111]\xca\xe5\x18\x18\xc3\x9d\x9fu\f5\xe1\xfb\xa7u\xa9\x80\xefbD\xa4\xa4\x00\xc1\xa9\xe7\xa4\x8c\x97P7\xfd\xd5tY\x86\x96\xb4\a\x90\x1d$\xbe$\x9d\x03\xb0R\xda\x183\x9d\xe3,~\x9e\x9c\xf9OYe\x9f&\x8fs\xb2gj\x01/F\xbc\xb8E\xba\xce\xbbJ\xc1d\x1e9\x16\x1bn\x86=\xe6}$\xb1?\xdcj\xcb\\\xc6\xb4\x7f\xef\x01\x17;\xf3\xb3\x00\xb5\xd94\xe7\xb5\xad~\x80z\xc1c\xa9H\xea\x03Y\xd3\xa9\xbd6)}\xb4G\xdb\xf9\xcee\x98\xd3V\xa0\xdf\xf0[\xe2\x12\x85\xd2\x87\x8e\x0fv\x8b\xcd\xb4\xd4.\x0eY\xd2\xcf{\xe7\xf9\xccx\xb3\x18\xee\xcaC{\xd8j\xb6*\x04\xaf,\x0e\x7f\x1d\xb4\x96n=\xff\xfakhs`0\xdc\x88\x83\xdd(T\xf4\xcf\x17\xfeSzd\n\x7f\xc4\x83\xa3\x1ae\xb9_\x05\\f\x9ahf\xfe\x91\xb0t\x1c2\xe0\x88\x88\x88\x9cs&l\xbe\a\xf3\x7fN\x11*\x12\x17\x1a\xb3^\xbe|\xa5H\xf9\xc2TQ\xac\x8e\xdc\xed\xe1^\x97\x95z\x02\xd8\xf5]B\x9eB\x13\xc7\xe6\xb25\xf3\x94p\xe6\x88\x9f\xe0@\xd2\xd2mEt\"\xc4M+wv\xca~\x87x\xcez!\x05\x00\xa6\x12Pd\xb1\xc8\xd0\xbb\n\x1e\x80\x91\x88\x99Kc\x1dn&\x1c\xef[\xe5\n\x9c\xe1\xde\x02\xd8\x89\xdd\xd3?pQ\xfc\xd8\xfdD\x039\x01M8\xa5\x9d@G\xc8\x98O\xfd\xfb\xb76\xd3\xa7\x82I\x16M\xa5\xaci\xb5\xe6\x17\x81\xef\"\xd21\xfd\xdd\xd3\xcd\x17\x06'}, 0x30) (async)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r11 = openat$cgroup_subtree(r10, &(0x7f0000000200), 0x2, 0x0) (async)
r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f280080018000dac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
poll(&(0x7f0000000340)=[{r4, 0x3028}, {r12, 0x1000}, {r8, 0x11c}, {r5}, {r10, 0x200}, {r6, 0x42}, {r4, 0x80}, {r9, 0x3400}, {r5, 0x401}, {r5, 0x501a}], 0xa, 0x6) (async)
write$cgroup_subtree(r11, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5)
splice(r0, 0x0, r3, 0x0, 0x7, 0x5) (async)
close(r2) (async)
write$cgroup_int(r3, 0x0, 0x0) (async)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000540)="b5", 0x1}], 0x1)

770.325188ms ago: executing program 0 (id=4427):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe(&(0x7f00000000c0))
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000050000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES8=r0], 0xc4}}, 0x0)

770.093678ms ago: executing program 0 (id=4428):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_init_net_socket$rose(0xb, 0x5, 0x0)
socket$alg(0x26, 0x5, 0x0)
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4)
vmsplice(r2, &(0x7f0000000300)=[{&(0x7f0000000240)="c4a1dc6af6d08e937922b403ae4bed96842dec04fc49e22ee41ee53677bd90261dc844305b6dc44e634fe8679b7c590d672b58aeab1525f2b51ef5cccbeeb8b0215125dde701ce1b2b8d76d3570bfa0ea064ffe6114b2b0f18e26a3d35b3ae70ea14112b704357f4443a37a6432fdcf657b58ab4ce6ad050eca9ea95af23ab55fe491d6eadc66aba3551bededc", 0x8d}, {&(0x7f0000000100)="0d371cfe8fadb87bf197210759ca3589abf899f926a9c5df633dbf6178cf1c5bf1995438711771a4f0c44d750114e730592c0610d2b9dca336fd60f5b136b6680859a9544179c4fdc520add206167e2b4a0d196518b511f519d52f2ca60de653fb5693d1a7dc", 0x66}], 0x2, 0x11)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x154}}, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000012000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb24000900b4000000000000000100000000000080b4000000000000000500000000000000"], 0x128}}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REQ_SET_REG(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012bbf8f00000000001b000000060021006200000008009a080100dc1f51543f27402d47e841eeed6b13e9000023c38d6fecd534898bec1bccc23cfa16c0a4437aee272502a1785a4e111fb62d"], 0x24}}, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007000000000000000000fe80000000000000000000000000001be0000002c4140a654a1e8716760959520200"/63, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000000000000000000b4000000000000020000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
readv(r3, &(0x7f0000001b00)=[{&(0x7f00000008c0)=""/4096, 0x1000}], 0x1)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1e620e7e511fbe63, 0x0)
ioctl$PPPIOCSDEBUG(r10, 0x40047440, &(0x7f00000001c0)=0x1)
splice(r3, 0x0, r1, 0x0, 0x10000008ebc, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"})
r11 = socket(0x2, 0x2, 0x1)
bind$unix(r11, &(0x7f0000000000)=@abs, 0x6e)
connect$unix(r11, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
splice(r0, 0x0, r4, 0x0, 0x25a5, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x52}}], 0x1, 0x4040010)
r12 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r13=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf, r13}, 0x20)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r11, 0x84, 0x75, &(0x7f0000000200)={r13, 0x4c}, 0x8)

370.038598ms ago: executing program 1 (id=4436):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='syzkaller\x00', 0x8, 0x1019, &(0x7f0000001200)=""/4121, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x8, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0xffff7ffe, 0x1000000, 0x0, 0x51f810b7}}}}, 0x30}, 0x1, 0x0, 0x0, 0xc800}, 0x2c040090)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='svcrdma_decode_wseg\x00', 0xffffffffffffffff, 0x0, 0x10001}, 0x18)

319.887431ms ago: executing program 1 (id=4437):
r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000040))
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000980)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01762dbd7000fcdbdf251200000008000300", @ANYRES32=r4, @ANYBLOB="0a00060008021100000100000500740003000000080014"], 0x40}}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r1})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)='8', 0x1}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5], 0x18}}], 0x1, 0x4)
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r5, 0x0, r7, 0x0, 0x39000, 0x0)
socket$pppoe(0x18, 0x1, 0x0)

319.206886ms ago: executing program 1 (id=4438):
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r1 = accept4$rose(0xffffffffffffffff, &(0x7f0000000280)=@full={0xb, @dev, @rose, 0x0, [@null, @null, @rose, @rose, @default, @netrom]}, &(0x7f00000002c0)=0x40, 0x80800)
recvfrom$rose(r1, &(0x7f0000000300)=""/242, 0xf2, 0x43, &(0x7f0000000400)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, 0x1c)
pipe(&(0x7f0000000440)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg$kcm(r3, &(0x7f0000000580)={&(0x7f0000000480)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000500)=""/64, 0x40}], 0x1}, 0x42)
socket$nl_route(0x10, 0x3, 0x0)
r4 = getuid()
r5 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'macsec0\x00'})
setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f00000006c0)={@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x4, 0x1, 0x4, 0x2, {0xa, 0x4e22, 0x2, @mcast1, 0x53}}}, {&(0x7f0000000600)=""/72, 0x48}, &(0x7f0000000680), 0x4}, 0xa0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r6, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r7, 0x200, 0x70bd2d, 0x9, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x34}}, 0x80c1)
openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x2000, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wpan0\x00'})
socket$inet(0x2, 0x4, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000940)={0x28, 0x0, 0x2711}, 0x10)
r8 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$IMSETDEVNAME(r8, 0x80184947, &(0x7f0000000980)={0x0, 'syz0\x00'})
sendmsg$nl_xfrm(r2, &(0x7f0000000b80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a00)=@newae={0x124, 0x1e, 0x4, 0x70bd2c, 0x25dfdbff, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d3, 0xa, 0xff}, @in=@private=0xa010101, 0x100, 0x3507}, [@sa={0xe4, 0x6, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote, 0x4e22, 0x7ff, 0x4e21, 0x10, 0xa, 0xa0, 0xa0, 0x2f, 0x0, r4}, {@in6=@private1, 0x4d4, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, {0x2, 0xffffffffffffffff, 0x5, 0x1, 0x622d, 0x8, 0x0, 0xfff}, {0x8, 0x10, 0x10}, {0x6, 0x80000000, 0xd}, 0x70bd2c, 0x34ff, 0x2, 0x1, 0x7f, 0x22}}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000004}, 0x41)
socket$inet6_udp(0xa, 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000bc0)={<r9=>0x0, <r10=>0x0})
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r3, 0x28, 0x6, &(0x7f0000000c00)={r9, r10/1000+10000}, 0x10)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000c80), r6)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r11, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x3c, r12, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x5f0}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x9}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x766}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xa}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x44841)
r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000dc0), r2)
sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x68, r13, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x4, @link='broadcast-link\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000010}, 0x40853)
getsockname$llc(r2, &(0x7f0000000f00)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000f40)=0x10)

229.755196ms ago: executing program 3 (id=4439):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x7, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000006110b406000000049500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90)

226.982746ms ago: executing program 1 (id=4440):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038340300000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000008030380040300800800034000000002100002800c00028008000180000000000c000440", @ANYBLOB='FQLk'], 0x3c8}, 0x1, 0x0, 0x0, 0x4}, 0x50)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2d, 0x4e22, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES16=r3, @ANYBLOB="01060000000000000000090000003c0004801300010062726f6164636173742d6c696e6b000024000780080005000000000008000300ff00"], 0x50}, 0x1, 0x0, 0x0, 0x14}, 0x0)

225.83898ms ago: executing program 3 (id=4441):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00'})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0)
write(r3, &(0x7f00000001c0)="b40ab29f61", 0x5)
splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0)

137.578026ms ago: executing program 1 (id=4442):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20000000ed071, 0xffffffffffffffff, 0xfffff000)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={0x1, @default, @bpq0, 0x406, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})

137.190568ms ago: executing program 1 (id=4443):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
pipe(&(0x7f0000000600)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10)
accept4$nfc_llcp(r3, &(0x7f0000000580), &(0x7f0000000480)=0x60, 0x80000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000080)
write(r3, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
pipe(&(0x7f0000000500)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r6, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0)
close(r7)
socket$kcm(0x10, 0x2, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000140)=0x3ba, 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
socket$inet(0x2, 0x2, 0x0)
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0\x00', <r9=>0x0})
setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f00000004c0)={r9, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0xc, 0x4, 0x0, 0x0, @str='\x00\x00\x00\x00\x00\x00\x00\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
sendmsg$NLBL_UNLABEL_C_STATICADD(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0)
setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000000)={r9, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10)
sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r9, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)
socket$nl_netfilter(0x10, 0x3, 0xc)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000f10d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340)={0x0, 0xa}, 0xd58495bc, 0x0, 0xffffffffffffffff, 0x2dc2c9024f5022d2}, 0x29)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r12, 0x2000012, 0xffffffffffffffca, 0x0, &(0x7f0000000c40), 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
splice(r2, 0x0, r5, 0x0, 0x1100000000f336, 0x0)

136.476839ms ago: executing program 3 (id=4444):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000040)=0x100000001, 0x12)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0)
shutdown(r3, 0x1)
splice(r3, 0x0, r2, 0x0, 0x2, 0x0)

49.618242ms ago: executing program 3 (id=4445):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x1}, 0xc)
recvmsg(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000040)=""/216, 0xd8}, {&(0x7f0000000140)=""/142, 0x8e}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/66, 0x42}, {&(0x7f0000001280)=""/167, 0xa7}, {&(0x7f0000001340)=""/147, 0x93}, {&(0x7f0000001400)=""/76, 0x4c}], 0x7, &(0x7f0000001500)=""/144, 0x90}, 0x21)
getpeername$packet(0xffffffffffffffff, &(0x7f0000002a00)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002a40)=0x14)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000002a80)={@private1, <r2=>0x0}, &(0x7f0000002ac0)=0x14)
sendmsg$inet(r0, &(0x7f0000002cc0)={&(0x7f0000001600)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000002980)=[{&(0x7f0000001640)="995f6f54a725cc264a2768e9204b015085ee52588b03b2a2c62689e3748e1b7ee14acaed0cb74dbc3828f3ab5969440f6e6e9c67f043ed74a46c7ae3cb52d9b7f290862db6252b5c15a0b6a1b5336019bd3014f0b38f2903edc7209ac76d3d747287967c2b3a1131509bd9fcba3dcf591367782a9aa90c30e5c1d5aac53886db26f0e0d30280c4c0ef395294a5c1821bdc9260621eb32ee102717de2acb9a77d729aef3135d81ad2722c70333513e78b94c011fcf11346d28210706c0ce2400a642c9ed08dd743188e2eeaf68ff88504b2b8531fac1c3cd25ab6031ff9483c7063f8eebb4a32c8", 0xe7}, {&(0x7f0000001740)="ee2437c922e04ffee719e0348f80788bececd64b9b3069e1bd2ae8f396d87f6194d8d94840341252af16bc562e4bb9731569ec728ec046eeb0aa8c5b82ce12f9acc9948d519fe4a4d895b470f00e6c88f4f05160c2b9bfe7773075c393ae9ffee52a01ccf412c6782e37f604bf1db12cef87bda20e6b914fc341bc9e", 0x7c}, {&(0x7f00000017c0)="0f5ecff49fa8c1937afb3f", 0xb}, {&(0x7f0000001800)="f3bcee960e76a1a1204d756bfe5911afa3297b1e6df1b7cc", 0x18}, {&(0x7f0000001840)="f046a28752cdef1298fe5f7bd17bf7df", 0x10}, {&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000002880)="23ebe3ec1214326bd89d09f08ee3261968111266e46f673df351a5db8c6ddcdf418d943b2609209765eb25c8e0a8b79067982cb773fee3f5892ba6e45caaea04444f11308b397fa0fc72613eba18b7a5f450604765ab7db669e26833d3d9bf6701a98ea32fe1f028ade0ac291d257fa69252b4d9d8272df11074e3dd931911e1d12ed26a77f25ba6c844c0eb1ebe954a53100dafb3854764b1a8075fdf1904d585682f849c8808bf30d535cdde1dfd13bceeeb014c85955c4a65a7ece9d1206177", 0xc1}], 0x7, &(0x7f0000002b00)=[@ip_retopts={{0x114, 0x0, 0x7, {[@timestamp={0x44, 0x18, 0xdd, 0x0, 0xd, [0x0, 0x8, 0x8001, 0x9, 0xfffffffb]}, @timestamp_addr={0x44, 0x4c, 0x2c, 0x1, 0x8, [{@rand_addr=0x64010101, 0xffff}, {@remote, 0x8}, {@loopback, 0xfffffffe}, {@broadcast}, {@loopback}, {@rand_addr=0x64010100, 0x80000000}, {@loopback, 0x5}, {@multicast1, 0x7}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7}]}, @cipso={0x86, 0x23, 0x0, [{0x2, 0x2}, {0x7, 0x6, "08d5eef5"}, {0x7, 0xc, "0a935c2fe9e5cb7e1d20"}, {0x2, 0x9, "99ab061e68b4a6"}]}, @cipso={0x86, 0x32, 0x3, [{0x0, 0xe, "dedffc73db95b23db9f4ab52"}, {0x6, 0x10, "56511bee72d9a4fb5e945a93d7e5"}, {0x5, 0xe, "516545edfe804128e303cb87"}]}, @timestamp_addr={0x44, 0x14, 0x1c, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x27}, 0x10000}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x2}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x2f, 0x2, [{0x6, 0x7, "24bfa030e9"}, {0x0, 0x9, "a6b6cd3bd7015a"}, {0x2, 0x8, "a3b18d389300"}, {0x5, 0x4, "9f85"}, {0x1, 0xd, "7d4ed9412e48832f3394f7"}]}, @noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast2, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @loopback}}}], 0x1a8}, 0x404888c)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002d00)='io.stat\x00', 0x0, 0x0)
r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002d40)={0xffffffffffffffff, 0x9, 0x18}, 0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002e00)={{0x1, <r5=>0xffffffffffffffff}, &(0x7f0000002d80), &(0x7f0000002dc0)}, 0x20)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000030c0)={&(0x7f0000002fc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x5, [@fwd={0x3}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x25, 0x0, 0x1e, 0x6}, @ptr={0x3, 0x0, 0x0, 0x2, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5, 0xd1f}}, @float={0x8, 0x0, 0x0, 0x10, 0x10}, @float={0xd, 0x0, 0x0, 0x10, 0x8}, @typedef={0xd}]}, {0x0, [0x61, 0x2e, 0x0]}}, &(0x7f0000003080)=""/48, 0x81, 0x30, 0x0, 0x8, 0x10000}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003300)={0xffffffffffffffff, 0x20, &(0x7f00000032c0)={&(0x7f0000003180)=""/63, 0x3f, <r7=>0x0, &(0x7f00000031c0)=""/250, 0xfa}}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000003540)={0x1e, 0x2, &(0x7f0000003340)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x80000001}], &(0x7f0000003380)='syzkaller\x00', 0x9, 0x30, &(0x7f00000033c0)=""/48, 0x40f00, 0x21, '\x00', r2, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000003400)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000003440)={0x4, 0x4, 0x3, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000003480)=[0xffffffffffffffff, 0x1], &(0x7f00000034c0)=[{0x5, 0x1, 0x4, 0x8}, {0x4, 0x2, 0x7, 0x2}, {0x4, 0x3, 0x1, 0x2}, {0x5, 0x2, 0xf, 0x5}, {0x1, 0x4, 0x4, 0x8}, {0x0, 0x2, 0x7, 0x8}, {0x3, 0x2, 0x6, 0x3}, {0x2, 0x4, 0x5, 0x8}], 0x10, 0x6}, 0x94)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003600)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', r2, 0xffffffffffffffff, 0x5, 0x2}, 0x50)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffcbe, '\x00', r2, 0xffffffffffffffff, 0x5, 0x5}, 0x50)
r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003700)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xcf38, '\x00', r1, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x50)
r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003780)={0x1b, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0xa, '\x00', r2, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x50)
r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003800)={0x0, 0x2b, 0x18}, 0xc)
r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000003880)=@generic={&(0x7f0000003840)='./file0\x00'}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000003980)={0xe, 0x25, &(0x7f0000002e40)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @generic={0xf8, 0x7, 0xe, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd}}, @ldst={0x2, 0x0, 0x6, 0xb, 0x9, 0xfffffffffffffff8, 0x10}, @map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x97}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000002f80)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x4d, '\x00', r2, @sk_skb=0x5, r6, 0x8, &(0x7f0000003100)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000003140)={0x2, 0x2, 0xfffffffc, 0x5}, 0x10, r7, r8, 0x7, &(0x7f00000038c0)=[0xffffffffffffffff, r9, r10, r11, r12, r13, r14], &(0x7f0000003900)=[{0x2, 0x1, 0xd, 0x2}, {0x5, 0x1, 0x10, 0x5}, {0x2, 0x2, 0xa, 0xb}, {0x5, 0x4, 0x10, 0x7}, {0x0, 0x4, 0x2, 0xb}, {0x4, 0x2, 0x1, 0x9}, {0x2, 0x4, 0xf, 0x2}], 0x10, 0x4}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003a40))
r15 = bpf$ITER_CREATE(0x21, &(0x7f0000003a80)={r3}, 0x8)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003ac0)={0x2, 0x4, 0x8, 0x1, 0x80, r15, 0x9, '\x00', r2, r3, 0x3, 0x5, 0x5}, 0x50)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000003b40)={r15, r12}, 0xc)
pipe(&(0x7f0000003bc0)={<r16=>0xffffffffffffffff, <r17=>0xffffffffffffffff})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000003c00)={&(0x7f0000003b80)='svcrdma_encode_wseg\x00', r17, 0x0, 0x40}, 0x18)
socket$inet_tcp(0x2, 0x1, 0x0)
r18 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000004dc0)={0x1b, 0x0, 0x0, 0x3, 0x0, r3, 0x10001, '\x00', r1, r6, 0x5, 0x5, 0x1}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004ec0)={0x18, 0x12, &(0x7f0000003c40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r16}}, {}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003d00)='GPL\x00', 0x5, 0x1000, &(0x7f0000003d40)=""/4096, 0x41000, 0x9, '\x00', r1, 0x0, r6, 0x8, &(0x7f0000004d40)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000004d80)={0x2, 0x5, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000004e40)=[r18, r11, r16, r12, r15, r5, r17, r11], &(0x7f0000004e80)=[{0x2, 0x5, 0x4, 0xc}, {0x5, 0x2, 0x0, 0xa}, {0x0, 0x2, 0xc, 0x7}], 0x10, 0x7f}, 0x94)
r19 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$FS_IOC_GETFLAGS(r19, 0x80086601, &(0x7f0000004f80))

0s ago: executing program 3 (id=4446):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x18, 0x18, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x40}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000540)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)={0x3c, 0x0, 0x411, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x20, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "36ee83966d7cb592be18e2095d151c97"}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r3, &(0x7f0000000000), 0x10)
setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
bind$can_raw(r3, &(0x7f0000000080), 0x10)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000000fff00", 0x58}], 0x1)
syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x8}}}}}, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000240)={@broadcast, @random="67eaa8fce250", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x4, 0x0, 0x10, 0x0, @opaque="d5838fb19a1d56d3"}}}}}, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
r6 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x10, 0x1413, 0x1}, 0x10}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000340))
ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x541b, 0x0)
r9 = accept(0xffffffffffffffff, &(0x7f00000002c0)=@in={0x2, 0x0, @remote}, &(0x7f0000000240)=0x80)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r9, 0x800448d2, &(0x7f0000000280)={0x2, &(0x7f0000000340)=[{@none}, {}]})
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000390400000000fcdbdf25000003e4", @ANYRES32=0x0, @ANYBLOB="00080000c31006002800128008000100736974001c00028006000d0041000000080003000a01010206000e00090000006e518813dca65b3992aa874a5f431f41fcf4b24046a410e2f3834311a16e11a05d9a99bd7124853a29e057b34b1a11183143b1a1e2f049c5be1d8c7c06ee65f6b42f10e2fd03b75a664345483e3c1f0a635d20149b6ebea8f161b2543d7c0b020416a2fff19168ec2025b839db5dbeb85a6d8f4e137abcc2c92a32452662a896b09dd5979ec38163e9f8a21d1bfd9215484a16c6267652aa2a2556243a2b8c15429fbe3bc396cc8c2186da2e24346efa705f28b07200496476a90f96785b355f0cd3c10e"], 0x48}}, 0x0)

kernel console output (not intermixed with test programs):

er after parsing attributes in process `syz.3.1883'.
[  268.816908][T12858] xt_CT: No such helper "snmp"
[  268.821462][T12858] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000
[  268.824510][T12858] tipc: Enabled bearer <udp:syz1>, priority 10
[  269.292940][T12901] pim6reg1: entered allmulticast mode
[  269.428665][T12905] bridge0: entered allmulticast mode
[  269.442553][T12905] bridge0 (unregistering): left allmulticast mode
[  270.809556][T12959] veth1_vlan: left allmulticast mode
[  270.865301][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  270.867979][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  270.872728][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  270.875477][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  272.465385][T12989] netlink: 'syz.1.1924': attribute type 1 has an invalid length.
[  272.479495][T12989] bond6: entered promiscuous mode
[  272.483031][T12989] 8021q: adding VLAN 0 to HW filter on device bond6
[  272.980668][T12999] __nla_validate_parse: 5 callbacks suppressed
[  272.980680][T12999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1927'.
[  272.987101][T12999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1927'.
[  272.993556][T12999] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1927'.
[  273.785864][T13026] can: request_module (can-proto-0) failed.
[  274.072054][T13041] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  274.075574][T13041] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  274.078401][T13041] bond0 (unregistering): Released all slaves
[  274.221944][T13047] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1940'.
[  274.393323][T13056] netlink: 'syz.1.1941': attribute type 3 has an invalid length.
[  274.396630][T13056] netlink: 'syz.1.1941': attribute type 1 has an invalid length.
[  274.399675][T13056] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1941'.
[  276.102514][T13072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1946'.
[  276.112524][T13072] macvlan0: entered promiscuous mode
[  276.116248][T13072] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  276.144978][T13076] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1947'.
[  276.732590][T13129] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1962'.
[  277.068422][T13155] netlink: 1360 bytes leftover after parsing attributes in process `syz.0.1967'.
[  277.071898][T13155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1967'.
[  277.225615][T13166] vlan0: entered promiscuous mode
[  278.013861][T13202] __nla_validate_parse: 2 callbacks suppressed
[  278.013877][T13202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1982'.
[  278.020847][T13202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1982'.
[  278.024626][T13202] netlink: 'syz.0.1982': attribute type 5 has an invalid length.
[  278.039052][T13202] netlink: 'syz.0.1982': attribute type 6 has an invalid length.
[  278.055607][T13202] IPVS: set_ctl: invalid protocol: 41 255.255.255.255:20003
[  278.171706][T13206] netlink: 'syz.0.1983': attribute type 1 has an invalid length.
[  278.175193][T13206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1983'.
[  278.628727][T13223] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  278.633092][   T10] IPVS: starting estimator thread 0...
[  278.720113][T13224] IPVS: using max 48 ests per chain, 115200 per kthread
[  279.026575][T13239] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  279.211819][T13253] netlink: 'syz.1.1997': attribute type 11 has an invalid length.
[  279.217008][T13253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1997'.
[  279.225424][ T5855] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  279.225470][T13253] netlink: 'syz.1.1997': attribute type 11 has an invalid length.
[  279.228903][ T5855] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  279.228937][ T5855] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  279.228958][ T5855] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  279.243639][T13253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1997'.
[  279.389341][T13262] netlink: 'syz.3.2000': attribute type 2 has an invalid length.
[  279.392645][T13262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2000'.
[  280.250845][T13315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2016'.
[  280.278910][T13315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2016'.
[  280.344795][T13315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2016'.
[  280.474684][T13323] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  280.732096][T13338] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2023'.
[  284.045978][T13428] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  284.142935][T13432] __nla_validate_parse: 3 callbacks suppressed
[  284.142956][T13432] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2046'.
[  284.326950][T13443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2047'.
[  284.387914][T13447] C: renamed from team_slave_0
[  284.395399][T13447] netlink: 'syz.1.2048': attribute type 1 has an invalid length.
[  284.398786][T13447] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2048'.
[  284.402792][T13447] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  284.505021][T13453] netlink: 'syz.1.2049': attribute type 21 has an invalid length.
[  284.509953][T13453] netlink: 'syz.1.2049': attribute type 21 has an invalid length.
[  285.068027][T13473] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2056'.
[  285.460669][T13512] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  285.508227][   T33] audit: type=1800 audit(1753360305.760:3): pid=13511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2066" name=33FFFF dev="tmpfs" ino=3554 res=0 errno=0
[  285.654833][T13529] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0
[  285.724566][T13536] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2071'.
[  285.896294][T13553] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2074'.
[  287.009461][T13581] 8021q: VLANs not supported on sit0
[  287.115286][T13585] 8021q: adding VLAN 0 to HW filter on device bond8
[  291.157476][T13631] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2098'.
[  291.346315][T13640] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2099'.
[  291.352728][T13640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2099'.
[  291.753829][T13663] netlink: zone id is out of range
[  291.765186][T13663] netlink: zone id is out of range
[  291.767742][T13663] netlink: zone id is out of range
[  291.772470][T13663] netlink: zone id is out of range
[  291.774666][T13663] netlink: zone id is out of range
[  291.776824][T13663] netlink: zone id is out of range
[  291.779681][T13663] netlink: zone id is out of range
[  291.783448][T13663] netlink: zone id is out of range
[  291.788929][T13663] netlink: zone id is out of range
[  291.794105][T13663] netlink: zone id is out of range
[  291.913718][   T33] audit: type=1800 audit(1753360312.170:4): pid=13667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2108" name="memory.events" dev="tmpfs" ino=3669 res=0 errno=0
[  291.984708][T13670] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2109'.
[  291.992926][T13670] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2109'.
[  291.996569][T13670] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2109'.
[  292.159056][T13679] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2113'.
[  292.932417][T13697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2115'.
[  293.225016][T13717] lo speed is unknown, defaulting to 1000
[  293.272687][T13724] x_tables: duplicate underflow at hook 1
[  293.333131][T13717] lo speed is unknown, defaulting to 1000
[  293.814852][T13737] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  293.818616][T13737] syzkaller0: entered promiscuous mode
[  293.825304][T13737] syzkaller0: entered allmulticast mode
[  294.524086][T13734] tipc: Resetting bearer <eth:syzkaller0>
[  294.537791][T13734] tipc: Disabling bearer <eth:syzkaller0>
[  294.611528][T13748] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2128'.
[  294.616352][T13748] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2128'.
[  295.228564][ T5875] lo speed is unknown, defaulting to 1000
[  295.232363][ T5875] syz1: Port: 1 Link DOWN
[  295.492308][T13781] netlink: 'syz.1.2136': attribute type 2 has an invalid length.
[  296.184239][T13815] __nla_validate_parse: 3 callbacks suppressed
[  296.184253][T13815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2145'.
[  296.235402][T13821] xt_TPROXY: Can be used only with -p tcp or -p udp
[  296.254359][T13821] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2146'.
[  296.345376][T13826] syzkaller1: entered promiscuous mode
[  296.347487][T13826] syzkaller1: entered allmulticast mode
[  296.359005][T13826] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  296.419297][T13830] netlink: 'syz.0.2150': attribute type 29 has an invalid length.
[  296.432431][T13830] netlink: 'syz.0.2150': attribute type 29 has an invalid length.
[  296.439555][T13830] netlink: 524 bytes leftover after parsing attributes in process `syz.0.2150'.
[  296.671485][T13838] xt_addrtype: ipv6 does not support BROADCAST matching
[  297.055221][T13854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  298.201220][T13862] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32)
[  298.213197][T13862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2157'.
[  298.216649][T13863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2157'.
[  298.286079][T13866] net_ratelimit: 4 callbacks suppressed
[  298.286092][T13866] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  298.328604][T13873] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  298.362393][T13875] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2161'.
[  298.477985][T13871] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  298.703390][T13903] vlan3: entered promiscuous mode
[  298.706953][T13903] bond0: (slave vlan3): Opening slave failed
[  298.959343][T13909] batadv_slave_1: entered promiscuous mode
[  298.967428][T13909] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2169'.
[  298.974595][T13908] batadv_slave_1: left promiscuous mode
[  299.144603][T13915] : entered promiscuous mode
[  299.193420][T13919] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  299.201330][T13919] set match dimension is over the limit!
[  300.610671][T13977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2190'.
[  300.933921][T13993] SET target dimension over the limit!
[  301.328281][T14007] openvswitch: netlink: VXLAN extension 274 out of range max 1
[  301.437236][T14012] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  303.473803][T14046] netlink: 'syz.3.2209': attribute type 23 has an invalid length.
[  303.499927][ T5223] Bluetooth: hci0: command tx timeout
[  303.729444][T14069] netlink: 'syz.0.2215': attribute type 13 has an invalid length.
[  303.733227][T14069] netlink: 'syz.0.2215': attribute type 17 has an invalid length.
[  303.767178][T14069] 8021q: adding VLAN 0 to HW filter on device bond0
[  303.773596][T14069] 8021q: adding VLAN 0 to HW filter on device team0
[  303.779079][T14069] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  303.786206][   T10] lo speed is unknown, defaulting to 1000
[  303.788643][   T10] syz1: Port: 1 Link ACTIVE
[  303.856165][T14075] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2217'.
[  304.131661][T14097] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2225'.
[  304.208089][T14103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  304.216314][T14103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  304.226173][T14103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  304.234031][T14103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  304.241307][T14103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  304.264304][T14103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  304.274717][T14103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  304.837898][T14108] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2229'.
[  304.949109][T14115] tap0: tun_chr_ioctl cmd 35108
[  305.084902][T14117] netlink: 'syz.1.2232': attribute type 12 has an invalid length.
[  305.088305][T14117] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.2232'.
[  305.374952][T14132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2236'.
[  306.233607][T14135] bridge0: port 1(erspan0) entered blocking state
[  306.236152][T14135] bridge0: port 1(erspan0) entered disabled state
[  306.238797][T14135] erspan0: entered allmulticast mode
[  306.241730][T14135] erspan0: entered promiscuous mode
[  306.245508][T14135] bridge0: port 1(erspan0) entered blocking state
[  306.248208][T14135] bridge0: port 1(erspan0) entered forwarding state
[  306.252525][T14135] erspan0: left allmulticast mode
[  306.254455][T14135] erspan0: left promiscuous mode
[  306.256366][T14135] bridge0: port 1(erspan0) entered disabled state
[  306.285726][T14137] netlink: 'syz.1.2238': attribute type 1 has an invalid length.
[  306.289177][T14137] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2238'.
[  306.713944][T14153] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2243'.
[  306.720559][T14153] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2243'.
[  306.804697][T14158] syzkaller0: entered promiscuous mode
[  306.807137][T14158] syzkaller0: entered allmulticast mode
[  307.054235][T14162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2245'.
[  307.806386][T14164] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2246'.
[  307.919680][T14174] xt_l2tp: v2 sid > 0xffff: 262144
[  307.932661][T14174] syz_tun: entered promiscuous mode
[  308.043789][T14193] syzkaller1: entered promiscuous mode
[  308.046000][T14193] syzkaller1: entered allmulticast mode
[  308.115906][T14196] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20003
[  308.125896][T14196] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20001
[  308.495057][T14234] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  308.543746][T14234] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  308.605302][T14234] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  308.664276][T14234] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  308.753652][ T5837] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  308.772580][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  308.787811][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  308.797402][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  310.005372][T14263] __nla_validate_parse: 3 callbacks suppressed
[  310.005383][T14263] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2273'.
[  310.012399][T14263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2273'.
[  310.348310][T14273] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2275'.
[  311.321968][T14279] raw_sendmsg: syz.3.2277 forgot to set AF_INET. Fix it!
[  311.380522][T14282] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2278'.
[  311.624728][T14293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2279'.
[  312.296640][T14315] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  312.304869][T14315] syzkaller0: entered promiscuous mode
[  312.307202][T14315] syzkaller0: entered allmulticast mode
[  312.315746][T14315] tipc: Resetting bearer <eth:syzkaller0>
[  312.319123][T14314] tipc: Resetting bearer <eth:syzkaller0>
[  312.332964][T14314] tipc: Disabling bearer <eth:syzkaller0>
[  312.390990][T14317] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2285'.
[  312.566241][T14329] vlan0: entered promiscuous mode
[  312.664170][T14331] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2288'.
[  312.975079][T14343] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2291'.
[  313.287139][T14346] netlink: 'syz.0.2293': attribute type 1 has an invalid length.
[  313.290118][T14346] netlink: 'syz.0.2293': attribute type 3 has an invalid length.
[  313.292699][T14346] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2293'.
[  313.374017][T14350] tipc: Enabling of bearer <eth:macvtap0> rejected, failed to enable media
[  313.959680][T14356] veth0: entered promiscuous mode
[  314.023348][T14359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2295'.
[  314.374986][T14373] lo speed is unknown, defaulting to 1000
[  314.464639][T14373] lo speed is unknown, defaulting to 1000
[  314.558783][T14377] vlan4: entered promiscuous mode
[  315.106582][T14403] __nla_validate_parse: 1 callbacks suppressed
[  315.106593][T14403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2309'.
[  316.114016][T14427] netlink: 'syz.3.2317': attribute type 1 has an invalid length.
[  316.117438][T14427] netlink: 600 bytes leftover after parsing attributes in process `syz.3.2317'.
[  316.239074][T14434] lo speed is unknown, defaulting to 1000
[  316.376327][T14436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2319'.
[  316.396139][T14434] lo speed is unknown, defaulting to 1000
[  316.406952][T14436] erspan0: entered promiscuous mode
[  316.409624][T14436] macsec3: entered promiscuous mode
[  316.414558][T14436] macsec3: entered allmulticast mode
[  316.416980][T14436] erspan0: entered allmulticast mode
[  316.421844][T14436] erspan0: left allmulticast mode
[  316.424229][T14436] erspan0: left promiscuous mode
[  316.541642][T14444] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2321'.
[  316.580624][T14449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2322'.
[  316.704796][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  317.021262][T14476] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2329'.
[  317.025521][T14477] xt_hashlimit: size too large, truncated to 1048576
[  317.028613][T14479] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2326'.
[  317.037607][T14477] syz.1.2329: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[  317.044550][T14477] CPU: 1 UID: 0 PID: 14477 Comm: syz.1.2329 Not tainted 6.16.0-rc6-syzkaller-01646-g56613001dfc9-dirty #0 PREEMPT(full) 
[  317.044571][T14477] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  317.044579][T14477] Call Trace:
[  317.044585][T14477]  <TASK>
[  317.044591][T14477]  dump_stack_lvl+0x189/0x250
[  317.044615][T14477]  ? __pfx_dump_stack_lvl+0x10/0x10
[  317.044629][T14477]  ? __pfx__printk+0x10/0x10
[  317.044646][T14477]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  317.044663][T14477]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  317.044680][T14477]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  317.044697][T14477]  warn_alloc+0x214/0x310
[  317.044713][T14477]  ? __pfx_warn_alloc+0x10/0x10
[  317.044731][T14477]  ? __get_vm_area_node+0x28f/0x300
[  317.044749][T14477]  ? htable_create+0xfc/0x7a0
[  317.044768][T14477]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  317.044806][T14477]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  317.044828][T14477]  ? rcu_is_watching+0x15/0xb0
[  317.044845][T14477]  ? htable_create+0xfc/0x7a0
[  317.044865][T14477]  ? htable_create+0xfc/0x7a0
[  317.044877][T14477]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  317.044895][T14477]  ? htable_create+0xfc/0x7a0
[  317.044907][T14477]  ? hashlimit_pernet+0x23/0x240
[  317.044926][T14477]  htable_create+0xfc/0x7a0
[  317.044947][T14477]  hashlimit_mt_check_common+0x719/0xa10
[  317.044968][T14477]  xt_check_match+0x3d1/0xab0
[  317.044983][T14477]  ? __pfx___mutex_lock+0x10/0x10
[  317.045001][T14477]  ? __pfx_xt_check_match+0x10/0x10
[  317.045017][T14477]  ? pcpu_alloc_noprof+0xfdd/0x16b0
[  317.045072][T14477]  ? xt_find_match+0x1f7/0x250
[  317.045091][T14477]  translate_table+0x1553/0x2040
[  317.045123][T14477]  ? __pfx_translate_table+0x10/0x10
[  317.045139][T14477]  ? __might_fault+0xb0/0x130
[  317.045170][T14477]  ? _copy_from_user+0x94/0xb0
[  317.045191][T14477]  do_ip6t_set_ctl+0x970/0xce0
[  317.045210][T14477]  ? rcu_is_watching+0x15/0xb0
[  317.045223][T14477]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  317.045252][T14477]  ? __pfx___mutex_lock+0x10/0x10
[  317.045265][T14477]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  317.045285][T14477]  ? __lock_acquire+0xab9/0xd20
[  317.045303][T14477]  nf_setsockopt+0x26f/0x290
[  317.045322][T14477]  rawv6_setsockopt+0x23b/0x5b0
[  317.045341][T14477]  ? __pfx_rawv6_setsockopt+0x10/0x10
[  317.045355][T14477]  ? aa_sock_opt_perm+0x74/0x110
[  317.045369][T14477]  ? sock_common_setsockopt+0x36/0xc0
[  317.045387][T14477]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  317.045406][T14477]  do_sock_setsockopt+0x17c/0x1b0
[  317.045423][T14477]  __x64_sys_setsockopt+0x13f/0x1b0
[  317.045440][T14477]  do_syscall_64+0xfa/0x3b0
[  317.045453][T14477]  ? lockdep_hardirqs_on+0x9c/0x150
[  317.045465][T14477]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.045476][T14477]  ? exc_page_fault+0x9f/0xf0
[  317.045490][T14477]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.045501][T14477] RIP: 0033:0x7f513c18e9a9
[  317.045513][T14477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  317.045523][T14477] RSP: 002b:00007f513cf5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  317.045537][T14477] RAX: ffffffffffffffda RBX: 00007f513c3b6080 RCX: 00007f513c18e9a9
[  317.045545][T14477] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003
[  317.045552][T14477] RBP: 00007f513c210d69 R08: 0000000000000588 R09: 0000000000000000
[  317.045559][T14477] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000000
[  317.045566][T14477] R13: 0000000000000000 R14: 00007f513c3b6080 R15: 00007ffc69eba318
[  317.045587][T14477]  </TASK>
[  317.045591][T14477] Mem-Info:
[  317.207519][T14477] active_anon:4798 inactive_anon:7 isolated_anon:0
[  317.207519][T14477]  active_file:1175 inactive_file:38450 isolated_file:0
[  317.207519][T14477]  unevictable:1768 dirty:56 writeback:0
[  317.207519][T14477]  slab_reclaimable:10234 slab_unreclaimable:75781
[  317.207519][T14477]  mapped:23336 shmem:2566 pagetables:954
[  317.207519][T14477]  sec_pagetables:0 bounce:0
[  317.207519][T14477]  kernel_misc_reclaimable:0
[  317.207519][T14477]  free:257668 free_pcp:24489 free_cma:0
[  317.225935][T14477] Node 0 active_anon:11540kB inactive_anon:20kB active_file:3116kB inactive_file:143016kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:59508kB dirty:108kB writeback:0kB shmem:4712kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4932kB pagetables:2220kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  317.239928][T14477] Node 1 active_anon:7652kB inactive_anon:8kB active_file:1584kB inactive_file:10784kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:33836kB dirty:116kB writeback:0kB shmem:5552kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7436kB pagetables:1460kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  317.252121][T14477] Node 0 DMA free:14768kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:588kB local_pcp:296kB free_cma:0kB
[  317.263435][T14477] lowmem_reserve[]: 0 812 812 812 812
[  317.265331][T14477] Node 0 DMA32 free:203596kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11540kB inactive_anon:20kB active_file:3116kB inactive_file:143016kB unevictable:3536kB writepending:108kB present:1556484kB managed:831796kB mlocked:0kB bounce:0kB free_pcp:30072kB local_pcp:15240kB free_cma:0kB
[  317.276116][T14477] lowmem_reserve[]: 0 0 0 0 0
[  317.280462][T14477] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  317.291683][T14477] lowmem_reserve[]: 0 0 854 854 854
[  317.293530][T14477] Node 1 Normal free:353668kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7652kB inactive_anon:8kB active_file:1584kB inactive_file:10784kB unevictable:3536kB writepending:116kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:68144kB local_pcp:52992kB free_cma:0kB
[  317.305527][T14477] lowmem_reserve[]: 0 0 0 0 0
[  317.307521][T14477] Node 0 DMA: 1*4kB (U) 2*8kB (U) 2*16kB (U) 4*32kB (U) 4*64kB (U) 4*128kB (UM) 4*256kB (UM) 5*512kB (UM) 6*1024kB (UM) 2*2048kB (U) 0*4096kB = 14772kB
[  317.313276][T14477] Node 0 DMA32: 695*4kB (UME) 176*8kB (ME) 459*16kB (UM) 314*32kB (UME) 95*64kB (UME) 48*128kB (UM) 27*256kB (UME) 22*512kB (UME) 22*1024kB (UM) 13*2048kB (UM) 25*4096kB (UM) = 203532kB
[  317.321921][T14477] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  317.328656][T14477] Node 1 Normal: 765*4kB (UE) 505*8kB (UME) 354*16kB (UME) 363*32kB (UME) 280*64kB (UME) 115*128kB (UM) 65*256kB (UM) 13*512kB (UM) 3*1024kB (ME) 6*2048kB (ME) 63*4096kB (UM) = 353724kB
[  317.336928][T14477] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  317.341754][T14477] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  317.347377][T14477] 42193 total pagecache pages
[  317.349463][T14477] 0 pages in swap cache
[  317.351378][T14477] Free swap  = 124996kB
[  317.353220][T14477] Total swap = 124996kB
[  317.355000][T14477] 786301 pages RAM
[  317.356671][T14477] 0 pages HighMem/MovableOnly
[  317.358657][T14477] 241104 pages reserved
[  317.360526][T14477] 0 pages cma reserved
[  317.608597][T14498] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2334'.
[  317.897080][T14516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2338'.
[  318.020497][T14522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  319.428712][T14539] delete_channel: no stack
[  319.610903][T14546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2347'.
[  320.708027][T14568] __nla_validate_parse: 1 callbacks suppressed
[  320.708041][T14568] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2351'.
[  320.848527][T14578] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2357'.
[  320.853482][T14578] gretap0: entered promiscuous mode
[  320.859105][T14578] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2357'.
[  320.862194][T14578] 0{X: renamed from gretap0
[  320.865212][T14578] 0{X: left promiscuous mode
[  320.867057][T14578] 0{X: entered allmulticast mode
[  320.871414][T14578] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  321.809051][T14594] lo speed is unknown, defaulting to 1000
[  321.864223][T14596] netlink: 'syz.0.2362': attribute type 13 has an invalid length.
[  321.867609][T14596] netlink: 'syz.0.2362': attribute type 17 has an invalid length.
[  321.873148][T14596] syz_tun: left promiscuous mode
[  321.887857][T14596] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  321.896463][T14598] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2363'.
[  321.936686][T14594] lo speed is unknown, defaulting to 1000
[  322.708292][T14612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2365'.
[  322.717222][T14614] netlink: 'syz.0.2366': attribute type 3 has an invalid length.
[  322.718944][T14612] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  322.933213][T14629] netlink: 'syz.3.2370': attribute type 1 has an invalid length.
[  322.936558][T14629] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2370'.
[  322.971845][T14633] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2372'.
[  323.466174][T14654] lo speed is unknown, defaulting to 1000
[  323.577752][T14654] lo speed is unknown, defaulting to 1000
[  323.854252][T14667] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2378'.
[  323.858895][T14667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2378'.
[  324.035867][T14671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2380'.
[  324.125048][T14673] syzkaller0: entered promiscuous mode
[  324.127138][T14673] syzkaller0: entered allmulticast mode
[  324.857806][T14699] netlink: 'syz.0.2386': attribute type 10 has an invalid length.
[  325.104549][T14713] netlink: 'syz.0.2390': attribute type 39 has an invalid length.
[  326.134451][T14730] __nla_validate_parse: 3 callbacks suppressed
[  326.134468][T14730] netlink: 1808 bytes leftover after parsing attributes in process `syz.3.2395'.
[  326.945256][T14762] netlink: 'syz.1.2404': attribute type 1 has an invalid length.
[  326.948301][T14762] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2404'.
[  327.886543][T14799] lo speed is unknown, defaulting to 1000
[  328.034581][T14799] lo speed is unknown, defaulting to 1000
[  328.277587][T14812] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2417'.
[  328.529563][T14829] netlink: 'syz.3.2423': attribute type 1 has an invalid length.
[  328.553542][T14829] bond3 (unregistering): Released all slaves
[  328.608810][T14834] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2424'.
[  328.946173][T14849] netlink: 'syz.3.2427': attribute type 11 has an invalid length.
[  329.309235][T14868] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2433'.
[  329.314623][T14868] netlink: 'syz.0.2433': attribute type 27 has an invalid length.
[  330.011010][T14877] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  330.059692][T14879] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2436'.
[  330.238732][T14891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2438'.
[  330.250373][T14891] xfrm1: entered promiscuous mode
[  330.252633][T14891] xfrm1: entered allmulticast mode
[  332.291782][T14903] syzkaller0: entered allmulticast mode
[  333.172567][T14957] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  333.223499][T14957] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  333.277808][T14957] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  333.324013][T14957] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  333.391131][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  333.401030][ T5837] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  333.409254][T14971] pim6reg: entered allmulticast mode
[  333.433321][T14971] pim6reg: left allmulticast mode
[  333.454147][ T5837] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  333.465416][ T5837] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  333.655946][T14998] netlink: 2004 bytes leftover after parsing attributes in process `syz.3.2453'.
[  333.717979][T15010] sctp: [Deprecated]: syz.1.2457 (pid 15010) Use of struct sctp_assoc_value in delayed_ack socket option.
[  333.717979][T15010] Use struct sctp_sack_info instead
[  333.840868][T15022] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  333.844496][T15022] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.872295][T15024] 0{X: left allmulticast mode
[  333.902569][T15024] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  333.936454][T15022] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  333.941097][T15022] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.023049][T15022] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  334.026979][T15022] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.099469][T15022] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  334.104358][T15022] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.201283][   T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  334.204957][   T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  334.214663][   T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  334.217863][   T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  334.229584][   T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  334.232786][   T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  334.242220][   T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  334.245970][   T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  334.714348][T15036] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2462'.
[  334.993686][T15057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2469'.
[  335.066966][T15062] netlink: 'syz.0.2470': attribute type 5 has an invalid length.
[  335.072694][T15057] veth1_macvtap (unregistering): left allmulticast mode
[  335.094624][T15057] macsec0 (unregistering): left allmulticast mode
[  335.183755][T15066] pimreg3: entered allmulticast mode
[  335.216935][T15068] netlink: 1808 bytes leftover after parsing attributes in process `syz.0.2472'.
[  336.125486][T15075] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2474'.
[  336.895792][T15086] _Z`Ԁ@: entered promiscuous mode
[  337.216042][T15123] tipc: Trying to set illegal importance in message
[  337.296382][T15130] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2490'.
[  337.299536][T15130] netlink: zone id is out of range
[  337.301371][T15130] netlink: get zone limit has 8 unknown bytes
[  337.763419][T15146] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  337.859541][T15148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2496'.
[  337.916759][T15153] netlink: 1808 bytes leftover after parsing attributes in process `syz.3.2497'.
[  337.965954][T15155] netlink: 212892 bytes leftover after parsing attributes in process `syz.3.2498'.
[  338.295955][T15172] pimreg: entered allmulticast mode
[  338.299127][T15171] netlink: 1808 bytes leftover after parsing attributes in process `syz.0.2502'.
[  338.314217][T15166] pimreg: left allmulticast mode
[  363.927899][T15185] netlink: 'syz.1.2505': attribute type 1 has an invalid length.
[  363.968135][T15185] bond7: (slave vxcan5): The slave device specified does not support setting the MAC address
[  363.980932][T15185] bond7: (slave vxcan5): Error -95 calling set_mac_address
[  364.019034][T15198] macvlan2: entered promiscuous mode
[  364.025155][T15198] macvlan2: entered allmulticast mode
[  364.027509][T15198] bond7: entered promiscuous mode
[  364.029624][T15198] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  364.045130][T15198] bond7: left promiscuous mode
[  364.177260][T15204] veth1_to_team: entered allmulticast mode
[  364.180185][T15204] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  364.269383][T15224] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2514'.
[  364.449556][T15236] ieee802154 phy0 wpan0: encryption failed: -22
[  364.453747][T15236] openvswitch: netlink: Flow actions attr not present in new flow.
[  364.514680][T15238] netlink: 'syz.0.2517': attribute type 1 has an invalid length.
[  364.517433][T15238] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.2517'.
[  364.675233][T15244] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2519'.
[  364.680734][T15244] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  364.917525][T15254] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2522'.
[  364.960568][T15259] openvswitch: netlink: IP tunnel dst address not specified
[  365.135240][T15278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2526'.
[  365.188298][T15279] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2525'.
[  365.715716][T15308] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2534'.
[  366.082029][T15333] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2540'.
[  366.648406][T15340] lo speed is unknown, defaulting to 1000
[  367.920164][T15360] netlink: 'syz.0.2546': attribute type 1 has an invalid length.
[  367.923461][T15360] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2546'.
[  367.934652][T15360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2546'.
[  368.383288][T15395] atomic_op ffff88803c94f198 conn xmit_atomic 0000000000000000
[  368.603056][T15403] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  368.758298][T15407] netlink: 'syz.3.2558': attribute type 7 has an invalid length.
[  368.762333][T15407] netlink: 'syz.3.2558': attribute type 3 has an invalid length.
[  369.304050][T15446] vlan5: entered promiscuous mode
[  369.402998][T15454] netlink: 'syz.3.2572': attribute type 9 has an invalid length.
[  369.461987][T15456] netlink: 'syz.0.2573': attribute type 10 has an invalid length.
[  369.470795][T15456] team0: Port device dummy0 added
[  369.568702][T15468] sctp: [Deprecated]: syz.3.2576 (pid 15468) Use of struct sctp_assoc_value in delayed_ack socket option.
[  369.568702][T15468] Use struct sctp_sack_info instead
[  369.602365][T15473] __nla_validate_parse: 8 callbacks suppressed
[  369.602377][T15473] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2577'.
[  369.744235][T15476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  369.757171][T15476] bond_slave_0: left promiscuous mode
[  369.777469][T15476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  369.795928][T15476] bond_slave_1: left promiscuous mode
[  369.816334][T15476] bond0 (unregistering): Released all slaves
[  369.843486][T15488] lo speed is unknown, defaulting to 1000
[  370.031472][T15512] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  370.035747][T15512] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  370.572830][T15497] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  370.761248][T15526] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2587'.
[  371.652625][T15541] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  371.669457][T15541] syzkaller1: entered promiscuous mode
[  371.671472][T15541] syzkaller1: entered allmulticast mode
[  371.724097][T15547] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2593'.
[  371.874956][T15553] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2594'.
[  371.878743][T15553] netlink: 37 bytes leftover after parsing attributes in process `syz.0.2594'.
[  371.882097][T15553] netlink: 37 bytes leftover after parsing attributes in process `syz.0.2594'.
[  372.518200][T15566] netlink: 'syz.3.2597': attribute type 9 has an invalid length.
[  372.807699][T15587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2604'.
[  372.811244][T15587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2604'.
[  372.933416][T15594] xt_limit: Overflow, try lower: 262144/524288
[  373.017862][   T13] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4
[  373.628421][T15604] netlink: 'syz.1.2607': attribute type 1 has an invalid length.
[  373.653187][T15604] bond8: (slave ip6gretap3): Enslaving as a backup interface with an up link
[  373.659523][ T5837] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  373.667835][T15604] 8021q: adding VLAN 0 to HW filter on device bond8
[  373.690266][T15604] veth7: entered promiscuous mode
[  373.695606][T15604] bond8: (slave veth7): Enslaving as a backup interface with a down link
[  373.703930][T15604] bond3: (slave bridge6): Releasing active interface
[  373.706289][T15604] bond3: (slave bridge6): the permanent HWaddr of slave - 02:8c:06:86:e5:09 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  373.713329][T15604] bond3: (slave gretap1): making interface the new active one
[  373.719359][T15604] bond3: (slave gretap1): Releasing active interface
[  373.724549][T15604] bond4: (slave gretap2): Releasing active interface
[  373.726895][T15604] gretap2: left promiscuous mode
[  373.728739][T15604] gretap2: left allmulticast mode
[  373.733769][T15604] bond5: (slave veth1): Releasing active interface
[  373.738205][T15604] bond8: (slave ip6gretap3): Removing an active aggregator
[  373.743724][T15604] bond8: (slave ip6gretap3): Releasing backup interface
[  373.746184][T15604] bond8: (slave ip6gretap3): the permanent HWaddr of slave - aa:93:36:8b:db:e8 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  373.756297][T15604] bond8: (slave veth7): Releasing backup interface
[  374.110855][T15641] xt_CT: You must specify a L4 protocol and not use inversions on it
[  374.155715][T15649] netlink: 'syz.1.2617': attribute type 1 has an invalid length.
[  374.183074][T15649] 8021q: adding VLAN 0 to HW filter on device bond9
[  374.225036][T15656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2619'.
[  374.538967][T15681] lo speed is unknown, defaulting to 1000
[  374.864713][T15696] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  375.096006][T15705] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2631'.
[  375.136405][T15709] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  375.184877][T15715] netlink: 1808 bytes leftover after parsing attributes in process `syz.1.2633'.
[  375.548594][T15734] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2639'.
[  375.566255][T15736] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2640'.
[  375.682362][T15741] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2639'.
[  375.719225][T15748] netlink: 276 bytes leftover after parsing attributes in process `syz.1.2641'.
[  375.786828][T15759] netlink: 16386 bytes leftover after parsing attributes in process `syz.0.2644'.
[  375.790212][T15758] netlink: 16386 bytes leftover after parsing attributes in process `syz.0.2644'.
[  375.834767][T15762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2645'.
[  375.924873][T15766] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  375.930549][T15766] netlink: 'syz.1.2647': attribute type 4 has an invalid length.
[  378.142806][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  378.322947][T15815] can: request_module (can-proto-3) failed.
[  379.001535][T15827] netlink: 1808 bytes leftover after parsing attributes in process `syz.3.2664'.
[  380.220559][T15814] Bluetooth: hci3: command 0x0405 tx timeout
[  380.223007][T15867] __nla_validate_parse: 1 callbacks suppressed
[  380.223017][T15867] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2675'.
[  380.230176][T15867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2675'.
[  380.280748][T15874] netlink: 'syz.1.2677': attribute type 178 has an invalid length.
[  380.546089][T15894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2681'.
[  380.549443][T15894] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2681'.
[  380.966167][T15910] lo speed is unknown, defaulting to 1000
[  381.474314][T15923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2689'.
[  381.564669][T15926] netlink: 'syz.3.2690': attribute type 3 has an invalid length.
[  381.567430][T15926] netlink: 'syz.3.2690': attribute type 3 has an invalid length.
[  381.992488][T15948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2696'.
[  381.992517][T15949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2696'.
[  382.008807][T15948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2696'.
[  382.227227][T15958] lo speed is unknown, defaulting to 1000
[  383.093489][T15985] xt_hashlimit: size too large, truncated to 1048576
[  383.226961][T15985] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2703'.
[  383.308451][T15985] bond0 (unregistering): Released all slaves
[  383.533000][T16007] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2710'.
[  383.961480][T16032] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  383.964606][T16032] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  384.616120][T16073] xt_recent: hitcount (262144) is larger than allowed maximum (65535)
[  385.087045][T16083] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  385.312114][T16099] __nla_validate_parse: 4 callbacks suppressed
[  385.312126][T16099] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2740'.
[  385.468628][T16108] netlink: 616 bytes leftover after parsing attributes in process `syz.3.2742'.
[  385.492967][T16110] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2743'.
[  385.529453][T16112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2744'.
[  385.604751][T16119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2747'.
[  385.681925][T16127] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma?
[  385.722404][T16135] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[  385.725862][T16135] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  385.981009][T16155] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2755'.
[  385.984636][T16155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2755'.
[  385.988485][T16155] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2755'.
[  385.995016][T16155] netlink: 'syz.0.2755': attribute type 3 has an invalid length.
[  385.998254][T16155] netlink: 'syz.0.2755': attribute type 2 has an invalid length.
[  386.002356][T16155] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2755'.
[  386.037256][T16155] lo speed is unknown, defaulting to 1000
[  386.686284][T16161] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2757'.
[  386.690502][T16161] xt_hashlimit: max too large, truncated to 1048576
[  386.693132][T16161] xt_hashlimit: overflow, rate too high: 0
[  387.656815][T16222] netlink: 'syz.0.2772': attribute type 20 has an invalid length.
[  387.707112][T16228] netlink: 'syz.1.2773': attribute type 1 has an invalid length.
[  387.733020][T16228] 8021q: adding VLAN 0 to HW filter on device bond10
[  388.063124][T16266] netlink: 'syz.1.2785': attribute type 10 has an invalid length.
[  388.165569][T16271] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  388.169226][T16271] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  388.888573][T16283] netlink: 'syz.0.2789': attribute type 64 has an invalid length.
[  389.389277][T16306] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input4
[  390.178958][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  390.183477][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  390.186128][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  390.188995][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  390.347198][T16347] __nla_validate_parse: 12 callbacks suppressed
[  390.347211][T16347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2804'.
[  391.491014][T16369] bridge0: port 1(erspan0) entered blocking state
[  391.493992][T16369] bridge0: port 1(erspan0) entered disabled state
[  391.497073][T16369] erspan0: entered allmulticast mode
[  391.501415][T16369] erspan0: entered promiscuous mode
[  391.505219][T16369] erspan0: left allmulticast mode
[  391.507885][T16369] erspan0: left promiscuous mode
[  391.512887][T16369] bridge0: port 1(erspan0) entered disabled state
[  391.870453][T16383] netdevsim0: entered promiscuous mode
[  391.873127][T16383] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  392.684214][T16392] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2818'.
[  392.855345][T16401] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2819'.
[  392.858919][T16402] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2819'.
[  392.938859][T16408] nbd: couldn't find device at index 0
[  393.095587][T16417] xt_cgroup: xt_cgroup: no path or classid specified
[  393.120792][T16417] pimreg: entered allmulticast mode
[  393.126765][T16417] pimreg: left allmulticast mode
[  393.188480][T16417] netlink: 'syz.1.2823': attribute type 1 has an invalid length.
[  393.192773][T16417] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2823'.
[  393.251822][T16425] xt_hashlimit: size too large, truncated to 1048576
[  393.454616][T16436] netlink: 'syz.1.2826': attribute type 7 has an invalid length.
[  393.472058][T16436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2826'.
[  393.603072][T16457] netlink: 'syz.3.2832': attribute type 1 has an invalid length.
[  393.631645][T16459] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2830'.
[  393.642017][T16461] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2835'.
[  393.646104][T16461] netlink: 'syz.3.2835': attribute type 1 has an invalid length.
[  393.651147][T16461] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2835'.
[  393.692520][T16469] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2836'.
[  393.825121][T16481] syzkaller0: entered promiscuous mode
[  393.826959][T16481] syzkaller0: entered allmulticast mode
[  394.446773][T16505] netlink: 'syz.3.2846': attribute type 1 has an invalid length.
[  394.465142][T16505] 8021q: adding VLAN 0 to HW filter on device bond0
[  394.483969][T16505] bond0: (slave ip6gretap1): making interface the new active one
[  394.488051][T16505] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link
[  394.505504][T16505] veth1: entered promiscuous mode
[  394.508870][T16505] bond0: (slave veth1): Enslaving as an active interface with a down link
[  394.514551][T16505] erspan0: entered allmulticast mode
[  394.523028][T16505] bond0: (slave erspan0): Enslaving as an active interface with an up link
[  394.577471][T16508] netlink: 'syz.1.2847': attribute type 1 has an invalid length.
[  394.924628][T16535] lo speed is unknown, defaulting to 1000
[  396.208712][T16581] __nla_validate_parse: 7 callbacks suppressed
[  396.208724][T16581] netlink: 1808 bytes leftover after parsing attributes in process `syz.1.2864'.
[  396.311773][T16587] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2866'.
[  396.383212][T16592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2867'.
[  396.594428][T16603] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2869'.
[  396.713556][T16607] netlink: 1808 bytes leftover after parsing attributes in process `syz.0.2871'.
[  396.780045][ T5223] Bluetooth: hci3: command 0x0405 tx timeout
[  397.867338][T16627] nftables ruleset with unbound chain
[  397.936805][T16631] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2879'.
[  398.114276][T16648] 8021q: adding VLAN 0 to HW filter on device bond3
[  398.216002][T16660] netlink: 'syz.3.2886': attribute type 4 has an invalid length.
[  398.242256][T16660] netlink: 'syz.3.2886': attribute type 4 has an invalid length.
[  398.322288][T16668] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2887'.
[  399.915656][T16685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2893'.
[  399.919513][T16685] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2893'.
[  400.344560][T16716] lo speed is unknown, defaulting to 1000
[  401.074252][T16732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2903'.
[  401.256121][T16738] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  402.144225][T16745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2907'.
[  402.976844][T16749] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2909'.
[  403.251500][T16766] macsec2: entered promiscuous mode
[  405.234216][T16815] Can't find ip_set type bitmap:ip
[  405.393682][T16829] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2932'.
[  405.418213][T16836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2934'.
[  405.462775][T16842] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2935'.
[  405.604527][T16850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2937'.
[  406.416284][T16867] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2941'.
[  406.419378][T16867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2941'.
[  406.424679][T16867] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2941'.
[  406.472318][T16869] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2942'.
[  406.515960][T16875] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  406.521437][T16875] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  406.675425][T16884] netlink: 'syz.1.2946': attribute type 178 has an invalid length.
[  406.792350][T16891] lo speed is unknown, defaulting to 1000
[  407.535514][T16909] batadv_slave_1: entered promiscuous mode
[  407.542045][T16908] batadv_slave_1: left promiscuous mode
[  407.608617][T16914] vxcan0: entered promiscuous mode
[  407.684210][T16914] __nla_validate_parse: 1 callbacks suppressed
[  407.684227][T16914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2955'.
[  407.756522][T16924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2957'.
[  407.759566][T16924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2957'.
[  407.763144][T16924] netlink: 'syz.0.2957': attribute type 15 has an invalid length.
[  407.769310][T16924] netlink: 'syz.0.2957': attribute type 18 has an invalid length.
[  408.138594][T16941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2959'.
[  408.641961][T16962] netlink: 'syz.3.2963': attribute type 1 has an invalid length.
[  408.681822][T16962] bond4: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  408.704831][T16962] veth3: entered promiscuous mode
[  408.716647][T16963] veth5: entered promiscuous mode
[  408.718975][T16962] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2963'.
[  408.773882][T16972] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2966'.
[  408.820829][T16976] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2967'.
[  408.821890][T16978] netlink: 'syz.3.2967': attribute type 3 has an invalid length.
[  409.773611][T17002] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2972'.
[  410.213057][T17027] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2978'.
[  410.449251][T17043] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2984'.
[  410.514329][T17047] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  410.516956][T17047] batman_adv: batadv0: Removing interface: batadv_slave_1
[  412.296676][T17106] pim6reg1: entered promiscuous mode
[  412.298516][T17106] pim6reg1: entered allmulticast mode
[  412.302657][T17112] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not ''
[  412.556854][T17123] netlink: 'syz.0.3007': attribute type 10 has an invalid length.
[  413.186405][T17135] __nla_validate_parse: 10 callbacks suppressed
[  413.186424][T17135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3009'.
[  414.028979][T17146] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  414.032657][T17147] syzkaller0: entered promiscuous mode
[  414.035043][T17147] syzkaller0: entered allmulticast mode
[  414.042741][T17147] tipc: Resetting bearer <eth:syzkaller0>
[  414.054625][T17148] tipc: Resetting bearer <eth:syzkaller0>
[  414.065586][T17148] tipc: Disabling bearer <eth:syzkaller0>
[  414.654435][T17161] netlink: 1808 bytes leftover after parsing attributes in process `syz.3.3015'.
[  414.696755][T17163] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3016'.
[  414.757716][T17167] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3018'.
[  414.937583][T17180] netlink: 'syz.3.3021': attribute type 1 has an invalid length.
[  414.944161][T17180] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3021'.
[  415.052571][T17183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3022'.
[  415.148277][T17187] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3024'.
[  415.282260][T17196] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3026'.
[  415.337766][T17199] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3026'.
[  415.342564][T17199] netlink: 'syz.1.3026': attribute type 7 has an invalid length.
[  415.345302][T17199] netlink: 'syz.1.3026': attribute type 8 has an invalid length.
[  415.347835][T17199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3026'.
[  415.604127][T17212] netlink: 'syz.3.3031': attribute type 21 has an invalid length.
[  415.801176][T17232] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20000
[  416.352501][T17288] netlink: 'syz.3.3052': attribute type 1 has an invalid length.
[  416.368249][T17288] 8021q: adding VLAN 0 to HW filter on device bond5
[  416.381755][T17288] 8021q: adding VLAN 0 to HW filter on device bond5
[  416.384365][T17288] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address
[  416.388801][T17288] bond5: (slave vxcan5): Error -95 calling set_mac_address
[  416.623052][T17300] lo speed is unknown, defaulting to 1000
[  418.121342][T17354] netlink: 'syz.0.3070': attribute type 1 has an invalid length.
[  418.137463][T17354] 8021q: adding VLAN 0 to HW filter on device bond0
[  418.159745][T17353] bond0: (slave veth19): Enslaving as an active interface with a down link
[  418.173146][T17353] vlan0: entered allmulticast mode
[  418.175109][T17353] veth1: entered allmulticast mode
[  418.177230][T17353] bond0: (slave vlan0): Opening slave failed
[  418.503828][T17367] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  418.698895][T17375] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  418.734292][T17379] __nla_validate_parse: 17 callbacks suppressed
[  418.734327][T17379] netlink: 200 bytes leftover after parsing attributes in process `syz.3.3078'.
[  418.740511][T17379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3078'.
[  418.781355][T17383] netlink: 732 bytes leftover after parsing attributes in process `syz.0.3079'.
[  418.784991][T17383] netlink: 732 bytes leftover after parsing attributes in process `syz.0.3079'.
[  418.788987][T17382] net veth1_virt_wifi : renamed from virt_wifi0
[  418.852150][T17390] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3081'.
[  418.865175][T17390] tun0: tun_chr_ioctl cmd 35111
[  418.937061][T17396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3083'.
[  419.008787][T17398] netlink: 'syz.0.3083': attribute type 2 has an invalid length.
[  419.016213][T17398] : entered promiscuous mode
[  419.413995][T17405] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3086'.
[  420.774204][T17468] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3100'.
[  420.787571][T17470] netlink: 'syz.1.3101': attribute type 6 has an invalid length.
[  420.886206][T17483] 8021q: VLANs not supported on ip_vti0
[  420.895473][T17484] 8021q: VLANs not supported on ip_vti0
[  420.929667][T17489] netlink: 1808 bytes leftover after parsing attributes in process `syz.0.3106'.
[  420.958031][T17494] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3109'.
[  420.981334][T17492] erspan0: left allmulticast mode
[  421.012561][T17492] bridge0: port 1(bridge_slave_0) entered disabled state
[  421.077174][T17492] veth1_to_team: left allmulticast mode
[  421.153402][T17492] gre2: left allmulticast mode
[  421.155622][T17492] bridge2: left allmulticast mode
[  421.160199][T17492] ip6erspan0: left allmulticast mode
[  421.165470][T17492] mac80211_hwsim hwsim9 wlan0: left allmulticast mode
[  421.167761][T17492] macsec2: left promiscuous mode
[  421.169352][T17492] macsec2: left allmulticast mode
[  421.176734][T17492] xfrm1: left promiscuous mode
[  421.178356][T17492] xfrm1: left allmulticast mode
[  421.190763][T17492] veth1: left promiscuous mode
[  421.196577][T17492] veth3: left promiscuous mode
[  421.198390][T17492] veth5: left promiscuous mode
[  421.214838][ T5837] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  421.218752][ T5837] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  421.221732][ T5837] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  421.224449][ T5837] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  421.239834][ T5837] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  421.242601][ T5837] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  421.245652][ T5837] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  421.248943][ T5837] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  421.302459][T17508] netlink: 'syz.3.3110': attribute type 10 has an invalid length.
[  421.305703][T17508] team0: Cannot enslave team device to itself
[  421.486642][T17517] Bluetooth: MGMT ver 1.23
[  422.267862][T17517] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  422.618401][T17550] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  422.622118][T17550] syzkaller0: entered promiscuous mode
[  422.624640][T17550] syzkaller0: entered allmulticast mode
[  422.636247][T17549] tipc: Resetting bearer <eth:syzkaller0>
[  422.665731][T17549] tipc: Disabling bearer <eth:syzkaller0>
[  423.244308][T17588] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  423.276499][T17588] team0 (unregistering): Port device team_slave_0 removed
[  423.280859][T17588] team0 (unregistering): Port device team_slave_1 removed
[  423.285046][T17588] team0 (unregistering): Port device 0! removed
[  423.427709][T17594] nlmon0: Master is either lo or non-ether device
[  423.551125][T17612] xt_hashlimit: size too large, truncated to 1048576
[  423.745480][T17622] netlink: 'syz.0.3140': attribute type 2 has an invalid length.
[  424.258098][T17633] __nla_validate_parse: 8 callbacks suppressed
[  424.258116][T17633] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3143'.
[  424.309607][T17636] netlink: 1808 bytes leftover after parsing attributes in process `syz.0.3144'.
[  424.361515][T17638] lo speed is unknown, defaulting to 1000
[  424.416570][T17647] IPVS: stopping backup sync thread 13529 ...
[  424.426167][T17649] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  424.431589][T17644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3145'.
[  424.887232][T17718] netlink: 'syz.3.3154': attribute type 1 has an invalid length.
[  424.891001][T17718] netlink: 'syz.3.3154': attribute type 1 has an invalid length.
[  425.375921][T17743] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3160'.
[  425.379722][T17743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3160'.
[  425.419537][T17745] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3161'.
[  425.425522][T17743] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma?
[  425.573390][T17756] netlink: 'syz.0.3165': attribute type 13 has an invalid length.
[  425.595076][T17756] gretap0: refused to change device tx_queue_len
[  425.598373][T17756] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  425.606982][T17758] netlink: zone id is out of range
[  425.616888][T17758] netlink: zone id is out of range
[  425.618814][T17758] netlink: zone id is out of range
[  425.621011][T17758] netlink: zone id is out of range
[  425.622823][T17758] netlink: zone id is out of range
[  425.624678][T17758] netlink: zone id is out of range
[  425.626493][T17758] netlink: zone id is out of range
[  425.628402][T17758] netlink: zone id is out of range
[  425.632023][T17758] netlink: zone id is out of range
[  425.714871][T17762] lo speed is unknown, defaulting to 1000
[  426.580586][T17779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3169'.
[  427.434594][T17833] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3181'.
[  427.681076][T17850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3186'.
[  427.684311][T17850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3186'.
[  427.689670][T17850] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  427.694129][T17850] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  427.861484][T17858] netlink: 'syz.1.3188': attribute type 11 has an invalid length.
[  427.864537][T17858] netlink: 'syz.1.3188': attribute type 4 has an invalid length.
[  428.930842][T17900] nbd: must specify at least one socket
[  429.264484][T17920] xt_l2tp: invalid flags combination: 4
[  429.535531][T17929] __nla_validate_parse: 15 callbacks suppressed
[  429.535545][T17929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3209'.
[  429.684808][T17941] netlink: 'syz.0.3212': attribute type 11 has an invalid length.
[  429.934274][T17960] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3216'.
[  429.939041][T17961] netlink: 'syz.0.3216': attribute type 1 has an invalid length.
[  429.943964][T17960] netlink: 'syz.0.3216': attribute type 1 has an invalid length.
[  430.287096][T17983] xt_hashlimit: invalid rate
[  430.292944][T17983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3222'.
[  430.574478][T17994] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3226'.
[  430.622240][T17994] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3226'.
[  430.625929][T17994] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3226'.
[  430.635923][T17994] bond0: (slave erspan0): Releasing active interface
[  430.638507][T17994] ip6gretap1: entered promiscuous mode
[  430.643130][T17994] bridge_slave_0: left allmulticast mode
[  430.645252][T17994] bridge_slave_0: left promiscuous mode
[  430.647607][T17994] bridge0: port 1(bridge_slave_0) entered disabled state
[  430.654070][T17994] bridge_slave_1: left allmulticast mode
[  430.656578][T17994] bridge_slave_1: left promiscuous mode
[  430.659103][T17994] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.665963][T17994] bond1: (slave bridge1): Releasing active interface
[  430.669465][T17994] bond0: (slave ip6gretap1): Releasing active interface
[  430.671989][T17994] bond0: (slave ip6gretap1): the permanent HWaddr of slave - 76:2d:cf:cf:92:d6 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  430.677497][T17994] ip6gretap1: left promiscuous mode
[  430.680774][T17994] bond0: (slave veth1): Releasing active interface
[  430.684955][T17994] bond4: (slave ip6gretap2): Releasing backup interface
[  430.693699][T17994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3226'.
[  430.722740][T18005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3228'.
[  430.725696][T18005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3228'.
[  430.730831][T18005] netlink: 'syz.3.3228': attribute type 19 has an invalid length.
[  430.733421][T18004] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3228'.
[  430.895125][T18015] netlink: 'syz.0.3232': attribute type 21 has an invalid length.
[  431.623648][T18044] netlink: 'syz.3.3239': attribute type 1 has an invalid length.
[  432.445288][T18128] x_tables: duplicate underflow at hook 1
[  432.893196][T18164] net_ratelimit: 7 callbacks suppressed
[  432.893233][T18164] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  432.953075][T18182] veth1_to_team: entered allmulticast mode
[  432.955423][T18182] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  433.042175][T18189] netlink: 'syz.0.3278': attribute type 2 has an invalid length.
[  433.046071][T18189] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  433.054700][T18189] netlink: 'syz.0.3278': attribute type 21 has an invalid length.
[  433.063294][T18189] netdevsim0: left promiscuous mode
[  433.065571][T18189] netdevsim0: entered allmulticast mode
[  433.177167][T18204] netlink: 'syz.0.3283': attribute type 1 has an invalid length.
[  433.198589][T18204] bond63: (slave vxcan1): The slave device specified does not support setting the MAC address
[  433.203032][T18204] bond63: (slave vxcan1): Error -95 calling set_mac_address
[  433.252647][T18207] gretap2: entered promiscuous mode
[  433.257736][T18207] bond63: (slave gretap2): making interface the new active one
[  433.261165][T18207] bond63: (slave gretap2): Enslaving as an active interface with an up link
[  433.935288][T18235] netlink: 'syz.1.3290': attribute type 10 has an invalid length.
[  434.024869][T18237] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  434.029571][T18237] netlink: 'syz.3.3291': attribute type 1 has an invalid length.
[  434.159072][T18248] sock: sock_timestamping_bind_phc: sock not bind to device
[  434.162516][T18249] sock: sock_timestamping_bind_phc: sock not bind to device
[  434.559367][T18261] __nla_validate_parse: 20 callbacks suppressed
[  434.559378][T18261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3297'.
[  434.654469][T18264] pim6reg: entered allmulticast mode
[  434.657705][T18264] pim6reg: left allmulticast mode
[  434.831859][T18272] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3300'.
[  434.834998][T18272] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3300'.
[  434.921014][T18281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3304'.
[  435.133745][T18303] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3310'.
[  435.138744][T18305] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3311'.
[  435.250343][T18312] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3313'.
[  435.313226][T18317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3315'.
[  435.316272][T18317] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3315'.
[  435.358803][T18316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3315'.
[  435.375537][T18317] openvswitch: netlink: Flow key attr not present in new flow.
[  435.383419][T18316] openvswitch: netlink: Flow key attr not present in new flow.
[  435.476860][T18322] netlink: 'syz.3.3317': attribute type 3 has an invalid length.
[  435.481527][T18322] netlink: 'syz.3.3317': attribute type 3 has an invalid length.
[  435.486557][T18322] netlink: 'syz.3.3317': attribute type 5 has an invalid length.
[  435.493661][T18322] geneve3: entered promiscuous mode
[  435.495597][T18322] geneve3: entered allmulticast mode
[  435.498399][   T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  435.502092][   T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  435.505487][   T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  435.508891][   T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  435.625153][T18337] xt_hashlimit: size too large, truncated to 1048576
[  435.645123][T18337] warn_alloc: 1 callbacks suppressed
[  435.645137][T18337] syz.1.3321: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[  435.654032][T18337] CPU: 1 UID: 0 PID: 18337 Comm: syz.1.3321 Not tainted 6.16.0-rc6-syzkaller-01646-g56613001dfc9-dirty #0 PREEMPT(full) 
[  435.654062][T18337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  435.654067][T18337] Call Trace:
[  435.654071][T18337]  <TASK>
[  435.654075][T18337]  dump_stack_lvl+0x189/0x250
[  435.654092][T18337]  ? __pfx_dump_stack_lvl+0x10/0x10
[  435.654101][T18337]  ? __pfx__printk+0x10/0x10
[  435.654111][T18337]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  435.654122][T18337]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  435.654131][T18337]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  435.654141][T18337]  warn_alloc+0x214/0x310
[  435.654151][T18337]  ? __pfx_warn_alloc+0x10/0x10
[  435.654161][T18337]  ? __get_vm_area_node+0x28f/0x300
[  435.654172][T18337]  ? htable_create+0xfc/0x7a0
[  435.654205][T18337]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  435.654228][T18337]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  435.654240][T18337]  ? rcu_is_watching+0x15/0xb0
[  435.654250][T18337]  ? htable_create+0xfc/0x7a0
[  435.654258][T18337]  ? htable_create+0xfc/0x7a0
[  435.654265][T18337]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  435.654276][T18337]  ? htable_create+0xfc/0x7a0
[  435.654284][T18337]  ? hashlimit_pernet+0x23/0x240
[  435.654295][T18337]  htable_create+0xfc/0x7a0
[  435.654306][T18337]  hashlimit_mt_check_common+0x719/0xa10
[  435.654319][T18337]  xt_check_match+0x3d1/0xab0
[  435.654327][T18337]  ? __pfx___mutex_lock+0x10/0x10
[  435.654339][T18337]  ? __pfx_xt_check_match+0x10/0x10
[  435.654348][T18337]  ? pcpu_alloc_noprof+0xfdd/0x16b0
[  435.654362][T18337]  ? xt_find_match+0x1f7/0x250
[  435.654373][T18337]  translate_table+0x1553/0x2040
[  435.654392][T18337]  ? __pfx_translate_table+0x10/0x10
[  435.654401][T18337]  ? __might_fault+0xb0/0x130
[  435.654418][T18337]  ? _copy_from_user+0x94/0xb0
[  435.654430][T18337]  do_ip6t_set_ctl+0x970/0xce0
[  435.654441][T18337]  ? rcu_is_watching+0x15/0xb0
[  435.654449][T18337]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  435.654465][T18337]  ? __pfx___mutex_lock+0x10/0x10
[  435.654472][T18337]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  435.654484][T18337]  ? __lock_acquire+0xab9/0xd20
[  435.654494][T18337]  nf_setsockopt+0x26f/0x290
[  435.654507][T18337]  rawv6_setsockopt+0x23b/0x5b0
[  435.654518][T18337]  ? __pfx_rawv6_setsockopt+0x10/0x10
[  435.654526][T18337]  ? aa_sock_opt_perm+0x74/0x110
[  435.654535][T18337]  ? sock_common_setsockopt+0x36/0xc0
[  435.654547][T18337]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  435.654557][T18337]  do_sock_setsockopt+0x17c/0x1b0
[  435.654567][T18337]  __x64_sys_setsockopt+0x13f/0x1b0
[  435.654577][T18337]  do_syscall_64+0xfa/0x3b0
[  435.654586][T18337]  ? lockdep_hardirqs_on+0x9c/0x150
[  435.654592][T18337]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  435.654599][T18337]  ? exc_page_fault+0x9f/0xf0
[  435.654607][T18337]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  435.654614][T18337] RIP: 0033:0x7f513c18e9a9
[  435.654622][T18337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  435.654628][T18337] RSP: 002b:00007f513cf7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  435.654638][T18337] RAX: ffffffffffffffda RBX: 00007f513c3b5fa0 RCX: 00007f513c18e9a9
[  435.654643][T18337] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000007
[  435.654647][T18337] RBP: 00007f513c210d69 R08: 0000000000000588 R09: 0000000000000000
[  435.654651][T18337] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000000
[  435.654655][T18337] R13: 0000000000000000 R14: 00007f513c3b5fa0 R15: 00007ffc69eba318
[  435.654667][T18337]  </TASK>
[  435.654800][T18337] Mem-Info:
[  435.784393][T18337] active_anon:4806 inactive_anon:7 isolated_anon:0
[  435.784393][T18337]  active_file:1192 inactive_file:38494 isolated_file:0
[  435.784393][T18337]  unevictable:1769 dirty:67 writeback:0
[  435.784393][T18337]  slab_reclaimable:10492 slab_unreclaimable:80107
[  435.784393][T18337]  mapped:23402 shmem:2566 pagetables:952
[  435.784393][T18337]  sec_pagetables:0 bounce:0
[  435.784393][T18337]  kernel_misc_reclaimable:0
[  435.784393][T18337]  free:259188 free_pcp:18084 free_cma:0
[  435.798921][T18337] Node 0 active_anon:11564kB inactive_anon:20kB active_file:3076kB inactive_file:143020kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:59664kB dirty:156kB writeback:0kB shmem:4712kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6352kB pagetables:2348kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  435.810082][T18337] Node 1 active_anon:7592kB inactive_anon:8kB active_file:1692kB inactive_file:10956kB unevictable:3540kB isolated(anon):0kB isolated(file):0kB mapped:33944kB dirty:112kB writeback:0kB shmem:5552kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8988kB pagetables:1460kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  435.821550][T18337] Node 0 DMA free:14928kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:428kB local_pcp:136kB free_cma:0kB
[  435.831211][T18337] lowmem_reserve[]: 0 812 812 812 812
[  435.833052][T18337] Node 0 DMA32 free:181176kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11564kB inactive_anon:20kB active_file:3076kB inactive_file:143020kB unevictable:3536kB writepending:156kB present:1556484kB managed:831796kB mlocked:0kB bounce:0kB free_pcp:43108kB local_pcp:17676kB free_cma:0kB
[  435.843232][T18337] lowmem_reserve[]: 0 0 0 0 0
[  435.844859][T18337] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  435.854689][T18337] lowmem_reserve[]: 0 0 854 854 854
[  435.856620][T18337] Node 1 Normal free:382032kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7592kB inactive_anon:8kB active_file:1692kB inactive_file:10956kB unevictable:3540kB writepending:112kB present:1048576kB managed:875016kB mlocked:4kB bounce:0kB free_pcp:29064kB local_pcp:13800kB free_cma:0kB
[  435.867499][T18337] lowmem_reserve[]: 0 0 0 0 0
[  435.869006][T18337] Node 0 DMA: 1*4kB (U) 2*8kB (U) 2*16kB (U) 3*32kB (U) 3*64kB (U) 4*128kB (UM) 5*256kB (UM) 5*512kB (UM) 6*1024kB (UM) 2*2048kB (U) 0*4096kB = 14932kB
[  435.874795][T18337] Node 0 DMA32: 918*4kB (UME) 568*8kB (UME) 535*16kB (UME) 76*32kB (UME) 102*64kB (UME) 42*128kB (UME) 30*256kB (UM) 8*512kB (UM) 23*1024kB (UM) 6*2048kB (UM) 25*4096kB (UM) = 181128kB
[  435.882063][T18337] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  435.887203][T18337] Node 1 Normal: 437*4kB (UME) 726*8kB (UME) 303*16kB (UME) 384*32kB (UME) 308*64kB (UME) 138*128kB (UM) 76*256kB (UM) 25*512kB (UME) 21*1024kB (UM) 12*2048kB (UME) 59*4096kB (UM) = 382068kB
[  435.895323][T18337] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  435.899133][T18337] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  435.902991][T18337] 42252 total pagecache pages
[  435.904802][T18337] 0 pages in swap cache
[  435.906224][T18337] Free swap  = 124996kB
[  435.907563][T18337] Total swap = 124996kB
[  435.908983][T18337] 786301 pages RAM
[  435.910629][T18337] 0 pages HighMem/MovableOnly
[  435.912126][T18337] 241104 pages reserved
[  435.913540][T18337] 0 pages cma reserved
[  436.148970][T18362] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  436.154976][T18367] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  436.163503][T18371] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  436.291671][T18387] netlink: 'syz.0.3333': attribute type 12 has an invalid length.
[  436.294610][T18388] netlink: 'syz.0.3333': attribute type 12 has an invalid length.
[  436.602468][T18435] openvswitch: netlink: IPv4 tun info is not correct
[  436.714500][T18431] lo speed is unknown, defaulting to 1000
[  438.055337][T18502] netlink: 'syz.1.3359': attribute type 64 has an invalid length.
[  438.970608][T18584] netdevsim0: entered allmulticast mode
[  438.973273][T18584] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  438.983228][T18584] openvswitch: netlink: Flow actions attr not present in new flow.
[  439.262655][T18593] lo speed is unknown, defaulting to 1000
[  439.628705][T18605] __nla_validate_parse: 16 callbacks suppressed
[  439.628721][T18605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3385'.
[  439.634497][T18603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3384'.
[  439.681724][T18603] lo speed is unknown, defaulting to 1000
[  439.723361][T18608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3384'.
[  440.875030][T18651] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3397'.
[  440.878774][T18651] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3397'.
[  440.958612][T18657] netlink: 'syz.1.3399': attribute type 4 has an invalid length.
[  440.964526][T18657] netlink: 'syz.1.3399': attribute type 4 has an invalid length.
[  441.197382][T18680] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  441.253859][T18680] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3405'.
[  441.270721][T18683] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  441.275743][T18683] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  441.294547][T18675] netlink: 'syz.3.3403': attribute type 29 has an invalid length.
[  441.298467][T18675] netlink: 'syz.3.3403': attribute type 29 has an invalid length.
[  441.656443][T18698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3410'.
[  442.035853][T18710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3414'.
[  442.157206][T18714] bridge_slave_1: entered promiscuous mode
[  442.162652][T18714] bridge_slave_1: left promiscuous mode
[  442.329412][T18720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3417'.
[  442.335757][T18720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3417'.
[  442.747509][T18738] netlink: 'syz.0.3420': attribute type 32 has an invalid length.
[  442.834514][T18742] sctp: [Deprecated]: syz.0.3421 (pid 18742) Use of int in maxseg socket option.
[  442.834514][T18742] Use struct sctp_assoc_value instead
[  442.988541][T18748] netlink: 'syz.0.3422': attribute type 13 has an invalid length.
[  442.991463][T18748] netlink: 'syz.0.3422': attribute type 17 has an invalid length.
[  443.010494][T18748] 8021q: adding VLAN 0 to HW filter on device team0
[  443.014681][T18748] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  443.738704][T18758] netlink: 'syz.0.3425': attribute type 4 has an invalid length.
[  444.632077][T18811] netlink: 'syz.1.3438': attribute type 3 has an invalid length.
[  444.673194][T18813] __nla_validate_parse: 10 callbacks suppressed
[  444.673211][T18813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3439'.
[  444.683180][T18813] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3439'.
[  444.700330][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  444.847139][T18822] netlink: 'syz.1.3441': attribute type 9 has an invalid length.
[  444.851166][T18822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3441'.
[  444.855088][T18822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3441'.
[  444.987356][T18836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3443'.
[  445.238924][T18855] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  445.241988][T18855] syzkaller0: entered promiscuous mode
[  445.243949][T18855] syzkaller0: entered allmulticast mode
[  445.262094][T18855] tipc: Resetting bearer <eth:syzkaller0>
[  445.269211][T18854] tipc: Resetting bearer <eth:syzkaller0>
[  445.283587][T18854] tipc: Disabling bearer <eth:syzkaller0>
[  445.383731][T18861] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3452'.
[  445.538435][T18873] mac80211_hwsim hwsim9 wlan0: left promiscuous mode
[  445.541166][T18873] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode
[  445.543906][T18873] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3455'.
[  445.547016][T18873] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  445.635088][T18882] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3459'.
[  446.366244][T18926] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.3468'.
[  446.372977][T18926] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  446.376508][T18926] openvswitch: netlink: Duplicate key (type 0).
[  446.436254][T18929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3469'.
[  446.658930][T18932] netlink: zone id is out of range
[  446.663551][T18932] netlink: zone id is out of range
[  446.666239][T18932] netlink: zone id is out of range
[  446.675196][T18932] netlink: zone id is out of range
[  446.677308][T18932] netlink: zone id is out of range
[  446.679092][T18932] netlink: zone id is out of range
[  446.681220][T18932] netlink: zone id is out of range
[  448.575891][T18963] sctp: [Deprecated]: syz.1.3481 (pid 18963) Use of struct sctp_assoc_value in delayed_ack socket option.
[  448.575891][T18963] Use struct sctp_sack_info instead
[  448.884186][T18976] validate_nla: 2 callbacks suppressed
[  448.884197][T18976] netlink: 'syz.1.3486': attribute type 1 has an invalid length.
[  448.957002][T18982] lo speed is unknown, defaulting to 1000
[  449.144693][T18990] netlink: 'syz.0.3490': attribute type 10 has an invalid length.
[  449.256660][T18998] pim6reg1: entered promiscuous mode
[  449.258713][T18998] pim6reg1: entered allmulticast mode
[  449.480130][T19003] bond11 (unregistering): Released all slaves
[  450.154830][T19025] syzkaller0: tun_chr_ioctl cmd 1074025673
[  450.196232][T19028] __nla_validate_parse: 6 callbacks suppressed
[  450.196245][T19028] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3497'.
[  450.423446][T19038] netlink: 'syz.3.3501': attribute type 1 has an invalid length.
[  450.423447][T19037] netlink: 'syz.3.3501': attribute type 1 has an invalid length.
[  450.445278][T19037] 8021q: adding VLAN 0 to HW filter on device bond6
[  450.507731][T19043] netlink: 'syz.3.3502': attribute type 1 has an invalid length.
[  450.511517][T19043] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3502'.
[  450.534736][T19046] netlink: 'syz.1.3503': attribute type 1 has an invalid length.
[  450.680418][T19064] netlink: 'syz.1.3508': attribute type 1 has an invalid length.
[  450.704547][T19064] 8021q: adding VLAN 0 to HW filter on device bond11
[  450.725172][T19064] vlan0: entered promiscuous mode
[  450.726953][T19064] bond11: entered promiscuous mode
[  450.728939][T19064] vlan0: entered allmulticast mode
[  450.732290][T19064] bond11: entered allmulticast mode
[  451.138583][T19097] sctp: [Deprecated]: syz.1.3518 (pid 19097) Use of int in max_burst socket option.
[  451.138583][T19097] Use struct sctp_assoc_value instead
[  451.179060][T19103] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  451.186724][T19103] syz.1.3520 uses old SIOCAX25GETINFO
[  451.382599][T19110] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3522'.
[  451.586933][T19121] netlink: 'syz.0.3524': attribute type 3 has an invalid length.
[  451.710738][T19131] x_tables: duplicate underflow at hook 1
[  451.714142][T19130] rdma_op ffff88804a8f39f0 conn xmit_rdma 0000000000000000
[  451.717633][T19131] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3526'.
[  451.746820][T19133] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3528'.
[  452.385774][T19166] netlink: 'syz.1.3536': attribute type 29 has an invalid length.
[  452.388841][T19166] netlink: 'syz.1.3536': attribute type 29 has an invalid length.
[  453.253646][T19179] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3541'.
[  454.218261][T19203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3545'.
[  454.312994][T19210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3547'.
[  454.414436][T19216] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3549'.
[  454.470020][T19222] validate_nla: 5 callbacks suppressed
[  454.470038][T19222] netlink: 'syz.1.3551': attribute type 7 has an invalid length.
[  454.475851][T19222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3551'.
[  454.808180][T19239] veth1_to_team: left allmulticast mode
[  454.812394][T19239] hsr0: left allmulticast mode
[  454.815735][T19239] hsr_slave_0: left allmulticast mode
[  454.818421][T19239] hsr_slave_1: left allmulticast mode
[  454.828163][T19239] veth3: left promiscuous mode
[  454.831695][T19239] bond1: left promiscuous mode
[  454.833861][T19239] bond1: left allmulticast mode
[  454.838405][T19239] bond5: left promiscuous mode
[  454.843287][T19239] bond5: left allmulticast mode
[  454.845809][T19239] bridge4: left promiscuous mode
[  454.847839][T19239] bridge4: left allmulticast mode
[  454.850331][T19239] veth11: left promiscuous mode
[  454.852719][T19239] vlan2: left promiscuous mode
[  454.854789][T19239] gretap0: left promiscuous mode
[  454.857034][T19239] ip6erspan0: left allmulticast mode
[  454.859398][T19239] veth13: left promiscuous mode
[  454.864545][T19239] veth15: left promiscuous mode
[  454.872563][T19239] netdevsim0: left allmulticast mode
[  454.912787][T19239] gretap2: left promiscuous mode
[  455.079002][T19245] bridge11: entered promiscuous mode
[  455.081507][T19245] bridge11: entered allmulticast mode
[  455.479196][T19290] sctp: [Deprecated]: syz.0.3567 (pid 19290) Use of struct sctp_assoc_value in delayed_ack socket option.
[  455.479196][T19290] Use struct sctp_sack_info instead
[  455.486738][T19290] __nla_validate_parse: 2 callbacks suppressed
[  455.486748][T19290] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3567'.
[  455.845134][T19310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3571'.
[  456.056777][T19335] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3580'.
[  456.060213][T19335] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3580'.
[  456.066823][T19337] net_ratelimit: 9 callbacks suppressed
[  456.066833][T19337] netlink: zone id is out of range
[  456.213577][T19349] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  456.218359][T19349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3586'.
[  456.229070][T19349] gtp0: entered promiscuous mode
[  456.234449][T19349] gtp0: entered allmulticast mode
[  456.262501][T19352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3587'.
[  456.265570][T19352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3587'.
[  456.275734][T19353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3587'.
[  456.282604][T19353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3587'.
[  456.331345][T19357] ip6t_rpfilter: unknown options
[  456.343116][T19359] tap0: tun_chr_ioctl cmd 1074025680
[  456.346790][T19359] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  456.350604][T19359] D: renamed from syzkaller0
[  456.354296][T19359] tipc: Disabling bearer <eth:syzkaller0>
[  457.293170][T19425] openvswitch: netlink: IP tunnel dst address not specified
[  457.309448][T19425] netlink: 211640 bytes leftover after parsing attributes in process `syz.3.3603'.
[  457.315720][T19425] netlink: zone id is out of range
[  457.317968][T19425] netlink: zone id is out of range
[  457.323824][T19425] netlink: zone id is out of range
[  457.327523][T19425] netlink: zone id is out of range
[  457.332182][T19425] netlink: zone id is out of range
[  457.334327][T19425] netlink: zone id is out of range
[  457.336708][T19425] netlink: zone id is out of range
[  457.339008][T19425] netlink: zone id is out of range
[  457.724451][T19461] syzkaller1: entered promiscuous mode
[  457.728716][T19461] syzkaller1: entered allmulticast mode
[  458.368493][T19511] IPVS: Unknown mcast interface: pimreg0
[  459.121642][T19523] netlink: 'syz.1.3629': attribute type 13 has an invalid length.
[  459.124373][T19523] netlink: 'syz.1.3629': attribute type 17 has an invalid length.
[  459.139633][T19523] ip6gretap0: entered promiscuous mode
[  459.935548][T19530] netlink: 'syz.1.3631': attribute type 16 has an invalid length.
[  459.939082][T19530] netlink: 'syz.1.3631': attribute type 17 has an invalid length.
[  461.024618][T19542] __nla_validate_parse: 4 callbacks suppressed
[  461.024633][T19542] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3635'.
[  461.039381][T19542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3635'.
[  461.263374][T19553] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3637'.
[  461.708268][T19561] batadv0: entered promiscuous mode
[  461.736025][T19562] batadv0: entered promiscuous mode
[  462.262084][T19595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3650'.
[  462.332877][T19601] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3653'.
[  462.801882][T19622] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3658'.
[  463.069201][T19635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3662'.
[  464.927176][T19653] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3668'.
[  465.158055][T19662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3669'.
[  465.359374][T19676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3672'.
[  465.364849][T19676] workqueue: Failed to create a rescuer kthread for wq "bond64": -EINTR
[  466.043844][T19704] __nla_validate_parse: 4 callbacks suppressed
[  466.043865][T19704] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3679'.
[  466.321834][T19714] lo speed is unknown, defaulting to 1000
[  466.467736][T19725] IPv6: sit2: Disabled Multicast RS
[  466.871266][T19744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3688'.
[  466.874471][T19745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3688'.
[  467.332157][T19763] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2913245179/2913245181
[  467.339067][T19763] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2913245179/2913245181
[  467.343767][T19763] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2913245179/2913245181
[  467.863818][T19798] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3702'.
[  467.867260][T19798] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3702'.
[  468.272237][T19802] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3703'.
[  468.646117][T19819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3707'.
[  468.939356][T19829] bridge12: the hash_elasticity option has been deprecated and is always 16
[  468.943220][T19829] bridge12: entered allmulticast mode
[  469.931611][T19842] netlink: 'syz.1.3713': attribute type 9 has an invalid length.
[  469.934986][T19842] netlink: 'syz.1.3713': attribute type 7 has an invalid length.
[  469.938258][T19842] netlink: 'syz.1.3713': attribute type 8 has an invalid length.
[  470.104457][T19858] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3718'.
[  470.340165][T19875] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  470.377763][T19875] syzkaller0: entered promiscuous mode
[  470.381354][T19875] syzkaller0: entered allmulticast mode
[  470.384234][T19875] tipc: Resetting bearer <eth:syzkaller0>
[  470.448314][T19870] tipc: Resetting bearer <eth:syzkaller0>
[  471.575673][T19870] tipc: Disabling bearer <eth:syzkaller0>
[  471.852125][T19920] netlink: 'syz.1.3732': attribute type 1 has an invalid length.
[  471.855619][T19920] netlink: 'syz.1.3732': attribute type 2 has an invalid length.
[  472.158263][T19938] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3736'.
[  472.163023][T19938] netlink: 'syz.0.3736': attribute type 7 has an invalid length.
[  472.166645][T19938] netlink: 'syz.0.3736': attribute type 8 has an invalid length.
[  472.169289][T19938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3736'.
[  472.328095][T19949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3740'.
[  472.333442][T19949] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3740'.
[  472.338064][T19949] netlink: 'syz.0.3740': attribute type 9 has an invalid length.
[  472.424659][T19951] net_ratelimit: 12 callbacks suppressed
[  472.424678][T19951] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  472.562546][T19960] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3742'.
[  472.689345][   T33] audit: type=1107 audit(1753360492.940:5): pid=19971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='*j4UؔhKe
[  472.689345][   T33] 7]4W$>E*gfn]K ׊0jw1#SֲcFN'
[  472.797404][T19982] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  472.804072][T19982] openvswitch: netlink: Unknown key attributes 2
[  473.044855][T19991] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  473.073141][T19995] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3756'.
[  473.122729][T19997] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3757'.
[  473.274966][T20007] SET target dimension over the limit!
[  473.876525][T20028] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3764'.
[  474.104999][T20043] xt_CT: You must specify a L4 protocol and not use inversions on it
[  474.242901][T20043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3767'.
[  474.271603][T20057] netlink: zone id is out of range
[  474.273813][T20057] netlink: zone id is out of range
[  474.279228][T20057] netlink: zone id is out of range
[  474.281844][T20057] netlink: zone id is out of range
[  474.284140][T20057] netlink: zone id is out of range
[  474.286304][T20057] netlink: zone id is out of range
[  474.327624][T20057] lo speed is unknown, defaulting to 1000
[  474.397327][T20064] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3771'.
[  475.147809][T20075] netlink: 'syz.0.3773': attribute type 1 has an invalid length.
[  475.151406][T20075] xt_l2tp: missing protocol rule (udp|l2tpip)
[  475.205270][T20080] netlink: 'syz.0.3775': attribute type 1 has an invalid length.
[  475.248783][T20080] veth23: entered promiscuous mode
[  475.253211][T20080] bond64: (slave veth23): Enslaving as a backup interface with a down link
[  475.340422][T20087] netlink: 'syz.0.3776': attribute type 13 has an invalid length.
[  475.343258][T20087] netlink: 'syz.0.3776': attribute type 17 has an invalid length.
[  475.365077][T20087] 8021q: adding VLAN 0 to HW filter on device team0
[  475.391382][T20086] lo speed is unknown, defaulting to 1000
[  476.067798][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  476.468275][T20099] netlink: 'syz.1.3779': attribute type 1 has an invalid length.
[  476.475554][T20099] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR
[  477.106448][T20107] veth25: entered promiscuous mode
[  477.416275][T20121] __nla_validate_parse: 6 callbacks suppressed
[  477.416285][T20121] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3787'.
[  478.016831][T20114] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  478.122243][T20128] syzkaller1: entered promiscuous mode
[  478.124351][T20128] syzkaller1: entered allmulticast mode
[  478.342033][T20145] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3794'.
[  478.495766][T20164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3798'.
[  478.857649][T20187] xt_hashlimit: overflow, try lower: 18446744073709551615/7
[  478.949745][T20200] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3808'.
[  479.511529][T20227] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3815'.
[  479.520754][T20229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3816'.
[  479.661402][T20237] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3819'.
[  479.685519][T20241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3818'.
[  479.710038][T20235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3817'.
[  479.781969][T20251] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  479.793662][T20250] tipc: Disabling bearer <eth:syzkaller0>
[  479.924335][T20269] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3828'.
[  479.979946][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  480.198646][T20299] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  480.202908][T20299] tipc: Resetting bearer <eth:syzkaller0>
[  480.236070][T20303] tipc: Cannot configure node identity twice
[  480.265750][T20296] tipc: Disabling bearer <eth:syzkaller0>
[  480.387988][T20315] batadv_slave_1: entered promiscuous mode
[  480.392339][T20315] netlink: 'syz.0.3839': attribute type 11 has an invalid length.
[  480.419488][T20314] batadv_slave_1: left promiscuous mode
[  480.552858][T20325] netlink: 'syz.0.3841': attribute type 13 has an invalid length.
[  480.558739][T20325] netlink: 'syz.0.3841': attribute type 17 has an invalid length.
[  480.569679][T20325] net_ratelimit: 11 callbacks suppressed
[  480.569685][T20325] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  481.096122][T20349] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  481.101253][T20349] syzkaller0: entered promiscuous mode
[  481.104200][T20349] syzkaller0: entered allmulticast mode
[  481.125074][T20349] tipc: Resetting bearer <eth:syzkaller0>
[  481.129713][T20348] tipc: Resetting bearer <eth:syzkaller0>
[  481.143896][T20348] tipc: Disabling bearer <eth:syzkaller0>
[  481.518562][T20372] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[  481.733218][T20391] netlink: 'syz.1.3863': attribute type 1 has an invalid length.
[  481.754132][T20395] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[  482.736496][T20416] __nla_validate_parse: 7 callbacks suppressed
[  482.736509][T20416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3870'.
[  482.742660][T20416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3870'.
[  482.745595][T20416] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  482.793871][T20422] veth0_to_bond: entered allmulticast mode
[  483.015380][T20443] netlink: 'syz.0.3876': attribute type 2 has an invalid length.
[  483.018567][T20443] netlink: 119 bytes leftover after parsing attributes in process `syz.0.3876'.
[  483.223902][T20461] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3880'.
[  483.232832][T20463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3881'.
[  483.268100][T20465] netlink: 'syz.3.3882': attribute type 1 has an invalid length.
[  483.593083][T20488] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3886'.
[  484.133694][T20491] x_tables: duplicate underflow at hook 1
[  484.464224][T20505] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  484.467058][T20505] syzkaller0: entered promiscuous mode
[  484.468985][T20505] syzkaller0: entered allmulticast mode
[  484.481726][T20505] tipc: Resetting bearer <eth:syzkaller0>
[  484.486907][T20504] tipc: Resetting bearer <eth:syzkaller0>
[  484.498385][T20504] tipc: Disabling bearer <eth:syzkaller0>
[  484.557048][T20506] netlink: 'syz.1.3889': attribute type 99 has an invalid length.
[  485.864729][T20537] lo speed is unknown, defaulting to 1000
[  486.856901][T20551] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3901'.
[  487.165922][T20563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3906'.
[  487.202574][T20563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3906'.
[  487.212550][T20566] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3907'.
[  487.589954][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  488.307504][T20610] __nla_validate_parse: 3 callbacks suppressed
[  488.307516][T20610] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3919'.
[  488.343182][T20614] netlink: 'syz.0.3921': attribute type 4 has an invalid length.
[  488.353592][T20614] netlink: 'syz.0.3921': attribute type 4 has an invalid length.
[  488.477861][T20625] dummy0: entered promiscuous mode
[  488.484151][T20623] team0: entered promiscuous mode
[  488.486307][T20623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3923'.
[  488.587310][T20623] team0 (unregistering): left promiscuous mode
[  488.590275][T20623] dummy0: left promiscuous mode
[  488.595103][T20623] team0 (unregistering): Port device dummy0 removed
[  488.752656][T20633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3925'.
[  489.327711][T20637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3926'.
[  489.343186][T20637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3926'.
[  489.607214][T20647] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3928'.
[  489.925428][T20659] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  490.653946][T20679] netlink: 212892 bytes leftover after parsing attributes in process `syz.1.3936'.
[  490.721204][T20679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3936'.
[  490.728706][T20679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3936'.
[  490.913197][T20689] netlink: 'syz.1.3940': attribute type 1 has an invalid length.
[  491.127619][T20709] netlink: 'syz.0.3947': attribute type 1 has an invalid length.
[  491.154192][T20709] bond65: entered promiscuous mode
[  491.156123][T20709] 8021q: adding VLAN 0 to HW filter on device bond65
[  491.250203][T20713] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3948'.
[  492.098227][T20723] netlink: 'syz.0.3951': attribute type 1 has an invalid length.
[  492.317523][T20741] x_tables: duplicate underflow at hook 2
[  493.789040][T20765] __nla_validate_parse: 1 callbacks suppressed
[  493.789057][T20765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3963'.
[  493.806587][T20765] netlink: 6040 bytes leftover after parsing attributes in process `syz.3.3963'.
[  494.412334][T20795] netlink: 'syz.0.3971': attribute type 4 has an invalid length.
[  494.422469][T20795] netlink: 'syz.0.3971': attribute type 4 has an invalid length.
[  494.434187][T20795] netlink: 'syz.0.3971': attribute type 4 has an invalid length.
[  495.694467][T20830] lo speed is unknown, defaulting to 1000
[  496.394724][T20857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3990'.
[  496.402242][T20857] gtp1: entered promiscuous mode
[  496.403908][T20857] gtp1: entered allmulticast mode
[  496.608381][T20866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3992'.
[  496.612002][T20866] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3992'.
[  496.702332][T20869] netlink: 'syz.3.3993': attribute type 1 has an invalid length.
[  496.705501][T20869] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3993'.
[  496.708545][T20869] netlink: 'syz.3.3993': attribute type 1 has an invalid length.
[  496.711527][T20869] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3993'.
[  496.715419][T20869] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.3993'.
[  497.107105][T20889] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  497.248785][T20895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3999'.
[  497.589563][T20916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4004'.
[  497.625915][T20916] bridge12: port 1(veth27) entered blocking state
[  497.628339][T20916] bridge12: port 1(veth27) entered disabled state
[  497.631781][T20916] veth27: entered allmulticast mode
[  497.635619][T20916] veth27: entered promiscuous mode
[  497.649953][T20916] vlan0: entered allmulticast mode
[  498.364780][T20952] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  498.367970][T20951] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  498.508038][T20970] sctp: [Deprecated]: syz.0.4016 (pid 20970) Use of int in max_burst socket option.
[  498.508038][T20970] Use struct sctp_assoc_value instead
[  498.604153][T20959] netlink: 'syz.1.4015': attribute type 7 has an invalid length.
[  498.782191][T20985] netlink: 'syz.1.4020': attribute type 5 has an invalid length.
[  498.981790][T20997] ip6t_rpfilter: unknown options
[  499.008641][T21001] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  499.014352][T21003] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  499.021701][T21000] tipc: Resetting bearer <eth:syzkaller0>
[  499.071591][T21007] netlink: 'syz.1.4026': attribute type 1 has an invalid length.
[  499.105025][T21009] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  499.147689][T21001] tipc: Disabling bearer <eth:syzkaller0>
[  499.494895][T21045] netlink: 'syz.3.4038': attribute type 64 has an invalid length.
[  499.534904][T21045] __nla_validate_parse: 3 callbacks suppressed
[  499.534921][T21045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4038'.
[  499.607134][T21067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4044'.
[  499.667672][T21071] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  499.673421][T21071] syzkaller0: entered promiscuous mode
[  499.675658][T21071] syzkaller0: entered allmulticast mode
[  499.695086][T21071] tipc: Resetting bearer <eth:syzkaller0>
[  499.703717][T21073] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4046'.
[  499.706931][T21073] netlink: 'syz.1.4046': attribute type 7 has an invalid length.
[  499.709580][T21073] netlink: 'syz.1.4046': attribute type 8 has an invalid length.
[  499.713213][T21073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4046'.
[  500.313439][T21089] batadv_slave_1: entered promiscuous mode
[  500.317366][T21088] batadv_slave_1: left promiscuous mode
[  500.432483][T21064] tipc: Resetting bearer <eth:syzkaller0>
[  500.443785][T21064] tipc: Disabling bearer <eth:syzkaller0>
[  500.693872][T21116] netlink: 'syz.0.4058': attribute type 7 has an invalid length.
[  500.753009][T21121] netlink: 'syz.0.4058': attribute type 4 has an invalid length.
[  500.790519][T21124] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4060'.
[  501.062342][T21151] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4067'.
[  501.073807][T21151] : left promiscuous mode
[  501.229034][T21159] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4070'.
[  501.617520][T21189] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4078'.
[  502.216148][T21201] netlink: 'syz.1.4082': attribute type 1 has an invalid length.
[  502.218898][T21201] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4082'.
[  502.895816][T21235] lo speed is unknown, defaulting to 1000
[  502.939986][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  503.688169][T21260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4097'.
[  503.866484][T21274] netlink: 'syz.1.4100': attribute type 13 has an invalid length.
[  503.870205][T21272] lo speed is unknown, defaulting to 1000
[  503.883839][T21274] x_tables: duplicate underflow at hook 2
[  505.054149][T21307] x_tables: duplicate underflow at hook 1
[  506.869359][T21369] __nla_validate_parse: 1 callbacks suppressed
[  506.869371][T21369] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4122'.
[  507.210229][T21400] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4127'.
[  507.224641][T21400] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4127'.
[  507.498932][T21435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4139'.
[  507.674268][T21438] lo speed is unknown, defaulting to 1000
[  507.978735][T21455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4143'.
[  508.714080][T21491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4153'.
[  508.729929][T21494] netlink: 'syz.1.4154': attribute type 8 has an invalid length.
[  508.843504][T21498] netlink: 'syz.3.4156': attribute type 21 has an invalid length.
[  508.847343][T21498] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4156'.
[  508.852283][T21498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4156'.
[  508.897874][T21505] syzkaller0: entered allmulticast mode
[  508.909023][T21507] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4159'.
[  509.065770][T21522] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  509.119449][T21525] xt_hashlimit: max too large, truncated to 1048576
[  509.125394][T21525] Cannot find add_set index 3 as target
[  509.295590][T21534] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4167'.
[  509.831206][T21567] netlink: 'syz.0.4176': attribute type 30 has an invalid length.
[  510.867639][T21616] lo speed is unknown, defaulting to 1000
[  510.878028][T21618] sctp: [Deprecated]: syz.0.4189 (pid 21618) Use of int in max_burst socket option deprecated.
[  510.878028][T21618] Use struct sctp_assoc_value instead
[  511.575785][T21641] netlink: zone id is out of range
[  511.578162][T21641] netlink: zone id is out of range
[  511.582836][T21641] openvswitch: netlink: Flow key attr not present in new flow.
[  512.156540][T21676] __nla_validate_parse: 14 callbacks suppressed
[  512.156624][T21676] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4205'.
[  512.756053][T21721] netlink: 85 bytes leftover after parsing attributes in process `syz.1.4215'.
[  513.299431][T21744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4222'.
[  514.155329][T21752] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4224'.
[  514.174489][T21752] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4224'.
[  514.431452][T21768] netlink: 660 bytes leftover after parsing attributes in process `syz.1.4227'.
[  514.713557][ T5837] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  515.433188][T21795] netlink: 404 bytes leftover after parsing attributes in process `syz.3.4235'.
[  516.475480][   T33] audit: type=1107 audit(1753360536.730:6): pid=21814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='{P7BfPȨc%'
[  516.984330][T21842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4247'.
[  517.478117][T21860] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4252'.
[  517.481734][T21860] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4252'.
[  517.550661][T21866] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  517.668212][T21876] xt_socket: unknown flags 0x8
[  517.888934][T21887] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4259'.
[  517.942246][T21887] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4259'.
[  518.085065][T21893] syz_tun: entered promiscuous mode
[  518.165309][T21900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4263'.
[  518.259879][T21900] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.4263'.
[  518.557892][T21909] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4266'.
[  518.656821][T21917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4267'.
[  518.790861][T21924] pim6reg1: entered promiscuous mode
[  518.793289][T21924] pim6reg1: entered allmulticast mode
[  518.945255][T21927] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4270'.
[  518.964892][T21927] bond14 (unregistering): Released all slaves
[  519.694288][T21963] veth0_to_bond: left allmulticast mode
[  519.697171][T21963] bond6: (slave ip6gretap1): Removing an active aggregator
[  519.700616][T21963] bond6: (slave ip6gretap1): Releasing backup interface
[  519.703386][T21963] bond6: (slave ip6gretap1): the permanent HWaddr of slave - de:6c:4d:a1:92:9a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  519.714843][T21963] bond6: (slave veth13): Releasing backup interface
[  519.719665][T21963] bond0: (slave veth19): Releasing active interface
[  519.724813][T21963] bond63: (slave gretap2): Releasing active interface
[  519.728862][T21963] gtp0: left promiscuous mode
[  519.730964][T21963] gtp0: left allmulticast mode
[  519.733572][T21963] veth23: left promiscuous mode
[  519.736252][T21963] bond64: (slave veth23): Releasing backup interface
[  519.741317][T21963] veth25: left promiscuous mode
[  519.743325][T21963] bond65: left promiscuous mode
[  519.744893][T21964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4281'.
[  519.745702][T21963] gtp1: left promiscuous mode
[  519.752239][T21963] gtp1: left allmulticast mode
[  519.754850][T21963] veth27: left allmulticast mode
[  519.756697][T21963] veth27: left promiscuous mode
[  519.758609][T21963] bridge12: port 1(veth27) entered disabled state
[  519.763422][T21963] vlan0: left allmulticast mode
[  519.814815][T21967] netlink: 'syz.0.4282': attribute type 1 has an invalid length.
[  520.835405][T21992] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  521.286930][T22023] lo speed is unknown, defaulting to 1000
[  522.166518][T22044] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  522.206267][T22044] syzkaller0: entered promiscuous mode
[  522.208472][T22044] syzkaller0: entered allmulticast mode
[  522.211197][T22044] tipc: Resetting bearer <eth:syzkaller0>
[  522.218238][T22043] tipc: Resetting bearer <eth:syzkaller0>
[  523.363133][T22043] tipc: Disabling bearer <eth:syzkaller0>
[  523.707070][T22083] netlink: 'syz.0.4316': attribute type 1 has an invalid length.
[  524.396707][T22116] sctp: [Deprecated]: syz.0.4325 (pid 22116) Use of struct sctp_assoc_value in delayed_ack socket option.
[  524.396707][T22116] Use struct sctp_sack_info instead
[  524.403853][T22116] xt_time: unknown flags 0x4
[  524.406520][T22116] __nla_validate_parse: 4 callbacks suppressed
[  524.406531][T22116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4325'.
[  524.557179][T22130] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4328'.
[  524.867351][T22151] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4331'.
[  524.877588][T22153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4332'.
[  524.888904][T22153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4332'.
[  524.903748][T22153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4332'.
[  525.067136][T22157] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4333'.
[  525.071409][T22157] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4333'.
[  525.194217][T22176] netlink: 'syz.3.4338': attribute type 2 has an invalid length.
[  525.202241][T22176] : entered promiscuous mode
[  525.296005][T22199] netlink: 'syz.0.4343': attribute type 1 has an invalid length.
[  525.299506][T22199] workqueue: Failed to create a rescuer kthread for wq "bond68": -EINTR
[  525.668191][T22248] netlink: zone id is out of range
[  525.673977][T22248] netlink: zone id is out of range
[  525.676135][T22248] netlink: zone id is out of range
[  525.677920][T22248] netlink: zone id is out of range
[  525.679574][T22248] netlink: zone id is out of range
[  525.681322][T22248] netlink: zone id is out of range
[  525.683008][T22248] netlink: zone id is out of range
[  525.684657][T22248] netlink: zone id is out of range
[  525.686348][T22248] netlink: zone id is out of range
[  525.688148][T22248] netlink: zone id is out of range
[  525.724053][T22258] netlink: 'syz.3.4360': attribute type 29 has an invalid length.
[  525.727107][T22258] netlink: 'syz.3.4360': attribute type 29 has an invalid length.
[  525.731365][T22258] netlink: 500 bytes leftover after parsing attributes in process `syz.3.4360'.
[  526.180950][T22293] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4368'.
[  526.910784][T22322] block nbd1: server does not support multiple connections per device.
[  526.914120][T22322] block nbd1: shutting down sockets
[  527.206606][T22336] netlink: 'syz.0.4381': attribute type 4 has an invalid length.
[  527.314494][T22352] sctp: [Deprecated]: syz.1.4387 (pid 22352) Use of struct sctp_assoc_value in delayed_ack socket option.
[  527.314494][T22352] Use struct sctp_sack_info instead
[  527.326289][T22353] sctp: [Deprecated]: syz.1.4387 (pid 22353) Use of struct sctp_assoc_value in delayed_ack socket option.
[  527.326289][T22353] Use struct sctp_sack_info instead
[  527.474477][T22367] tc_dump_action: action bad kind
[  527.805815][T22374] veth0_macvtap: left promiscuous mode
[  528.029847][T22395] netlink: 'syz.0.4400': attribute type 2 has an invalid length.
[  532.712683][T22501] __nla_validate_parse: 7 callbacks suppressed
[  532.712698][T22501] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4426'.
[  532.818602][T22508] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4428'.
[  532.839585][T22510] syzkaller1: entered promiscuous mode
[  532.842184][T22510] syzkaller1: entered allmulticast mode
[  533.219600][T22538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4437'.
[  533.358113][T22549] netlink: 732 bytes leftover after parsing attributes in process `syz.1.4440'.
[  533.363200][T22549] netlink: 732 bytes leftover after parsing attributes in process `syz.1.4440'.
[  533.572945][T22559] veth0: entered promiscuous mode
[  533.575582][T22559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4443'.
[  533.580791][T22559] veth0 (unregistering): left promiscuous mode
[  533.596102][T22559] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI
[  533.600010][T22559] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007]
[  533.603516][T22559] CPU: 0 UID: 0 PID: 22559 Comm: syz.1.4443 Not tainted 6.16.0-rc6-syzkaller-01646-g56613001dfc9-dirty #0 PREEMPT(full) 
[  533.608210][T22559] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  533.611514][T22559] RIP: 0010:mld_clear_delrec+0x3a5/0x660
[  533.613379][T22559] Code: ff ff ff e8 9d b3 42 01 89 c5 31 ff 89 c6 e8 32 b6 92 f7 85 ed 74 40 e8 e9 b1 92 f7 eb 05 e8 e2 b1 92 f7 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 ec c0 f4 f7 4d 8b 27 49 8d 7f 30
[  533.619650][T22559] RSP: 0018:ffffc900085c6cf0 EFLAGS: 00010206
[  533.621850][T22559] RAX: 000000001fffe000 RBX: ffff8881068e8538 RCX: 0000000000080000
[  533.624725][T22559] RDX: ffffc90020d69000 RSI: 000000000000789e RDI: 000000000000789f
[  533.627311][T22559] RBP: 0000000000000001 R08: ffffffff8fa22cf7 R09: 1ffffffff1f4459e
[  533.629925][T22559] R10: dffffc0000000000 R11: fffffbfff1f4459f R12: ffff888119a71828
[  533.632898][T22559] R13: dffffc0000000000 R14: ffff888119a71800 R15: 00000000ffff0000
[  533.635650][T22559] FS:  00007f513cf5e6c0(0000) GS:ffff8880b8615000(0000) knlGS:0000000000000000
[  533.638553][T22559] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  533.640748][T22559] CR2: 0000000000000000 CR3: 000000010d90a000 CR4: 00000000000006f0
[  533.643649][T22559] Call Trace:
[  533.644848][T22559]  <TASK>
[  533.645837][T22559]  ? ipv6_mc_down+0x2a3/0x360
[  533.647394][T22559]  ipv6_mc_destroy_dev+0x45/0x5a0
[  533.649053][T22559]  ? addrconf_ifdown+0x1396/0x1880
[  533.650834][T22559]  addrconf_ifdown+0x139e/0x1880
[  533.652812][T22559]  ? tls_dev_event+0x717/0xec0
[  533.654549][T22559]  ? __pfx_addrconf_ifdown+0x10/0x10
[  533.656358][T22559]  addrconf_notify+0x1bc/0x1010
[  533.658043][T22559]  notifier_call_chain+0x1b6/0x3e0
[  533.659791][T22559]  unregister_netdevice_many_notify+0x14d7/0x1ff0
[  533.661955][T22559]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  533.664237][T22559]  ? unregister_netdevice_queue+0x1b3/0x380
[  533.666261][T22559]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  533.668371][T22559]  ? __pfx_veth_dellink+0x10/0x10
[  533.670072][T22559]  rtnl_dellink+0x488/0x710
[  533.671737][T22559]  ? __pfx_rtnl_dellink+0x10/0x10
[  533.673887][T22559]  ? __lock_acquire+0xab9/0xd20
[  533.675888][T22559]  ? __pfx_rtnl_dellink+0x10/0x10
[  533.677668][T22559]  rtnetlink_rcv_msg+0x7cf/0xb70
[  533.679345][T22559]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  533.681117][T22559]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  533.683043][T22559]  netlink_rcv_skb+0x208/0x470
[  533.684671][T22559]  ? __lock_acquire+0xab9/0xd20
[  533.686383][T22559]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  533.688230][T22559]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  533.690061][T22559]  ? netlink_deliver_tap+0x2e/0x1b0
[  533.691981][T22559]  netlink_unicast+0x82f/0x9e0
[  533.693822][T22559]  ? __pfx_netlink_unicast+0x10/0x10
[  533.695671][T22559]  ? netlink_sendmsg+0x642/0xb30
[  533.697352][T22559]  ? skb_put+0x11b/0x210
[  533.699079][T22559]  netlink_sendmsg+0x805/0xb30
[  533.701110][T22559]  ? __pfx_netlink_sendmsg+0x10/0x10
[  533.703347][T22559]  ? aa_sock_msg_perm+0x94/0x160
[  533.705623][T22559]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  533.707902][T22559]  ? __pfx_netlink_sendmsg+0x10/0x10
[  533.710205][T22559]  __sock_sendmsg+0x21c/0x270
[  533.712261][T22559]  ____sys_sendmsg+0x505/0x830
[  533.714336][T22559]  ? __pfx_____sys_sendmsg+0x10/0x10
[  533.716676][T22559]  ? import_iovec+0x74/0xa0
[  533.718636][T22559]  ___sys_sendmsg+0x21f/0x2a0
[  533.720670][T22559]  ? __pfx____sys_sendmsg+0x10/0x10
[  533.722909][T22559]  ? __fget_files+0x2a/0x420
[  533.724896][T22559]  ? __fget_files+0x3a0/0x420
[  533.726934][T22559]  __x64_sys_sendmsg+0x19b/0x260
[  533.729065][T22559]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  533.731438][T22559]  ? rcu_is_watching+0x15/0xb0
[  533.733542][T22559]  ? trace_sys_enter+0x25/0x120
[  533.735657][T22559]  do_syscall_64+0xfa/0x3b0
[  533.737217][T22559]  ? lockdep_hardirqs_on+0x9c/0x150
[  533.739207][T22559]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  533.741355][T22559]  ? exc_page_fault+0x9f/0xf0
[  533.743166][T22559]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  533.745452][T22559] RIP: 0033:0x7f513c18e9a9
[  533.747312][T22559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  533.754516][T22559] RSP: 002b:00007f513cf5e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  533.758110][T22559] RAX: ffffffffffffffda RBX: 00007f513c3b6080 RCX: 00007f513c18e9a9
[  533.761540][T22559] RDX: 0000000020048054 RSI: 0000200000000200 RDI: 000000000000000e
[  533.764957][T22559] RBP: 00007f513c210d69 R08: 0000000000000000 R09: 0000000000000000
[  533.768381][T22559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  533.771803][T22559] R13: 0000000000000000 R14: 00007f513c3b6080 R15: 00007ffc69eba318
[  533.775198][T22559]  </TASK>
[  533.776587][T22559] Modules linked in:
[  533.779076][T22559] ---[ end trace 0000000000000000 ]---
[  533.784223][T22559] RIP: 0010:mld_clear_delrec+0x3a5/0x660
[  533.786851][T22559] Code: ff ff ff e8 9d b3 42 01 89 c5 31 ff 89 c6 e8 32 b6 92 f7 85 ed 74 40 e8 e9 b1 92 f7 eb 05 e8 e2 b1 92 f7 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 ec c0 f4 f7 4d 8b 27 49 8d 7f 30
[  533.795571][T22559] RSP: 0018:ffffc900085c6cf0 EFLAGS: 00010206
[  533.804374][T22559] RAX: 000000001fffe000 RBX: ffff8881068e8538 RCX: 0000000000080000
[  533.807923][T22559] RDX: ffffc90020d69000 RSI: 000000000000789e RDI: 000000000000789f
[  533.811355][T22559] RBP: 0000000000000001 R08: ffffffff8fa22cf7 R09: 1ffffffff1f4459e
[  533.814762][T22559] R10: dffffc0000000000 R11: fffffbfff1f4459f R12: ffff888119a71828
[  533.818542][T22559] R13: dffffc0000000000 R14: ffff888119a71800 R15: 00000000ffff0000
[  533.822132][T22559] FS:  00007f513cf5e6c0(0000) GS:ffff8880b8615000(0000) knlGS:0000000000000000
[  533.825948][T22559] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  533.829004][T22559] CR2: 00007f98b0183178 CR3: 000000010d90a000 CR4: 00000000000006f0
[  533.833585][T22559] Kernel panic - not syncing: Fatal exception
[  533.837065][T22559] Kernel Offset: disabled
[  533.838969][T22559] Rebooting in 86400 seconds..

VM DIAGNOSIS:
12:35:54  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000033 RBX=0000000000000033 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000008b41 RDI=0000000000008b42 RBP=00000000000003f8 RSP=ffffc900085c6490
R8 =ffff888107df0237 R9 =1ffff11020fbe046 R10=dffffc0000000000 R11=ffffffff85463620
R12=dffffc0000000000 R13=ffffffff99aff885 R14=ffffffff99e044c0 R15=0000000000000000
RIP=ffffffff8546369c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f513cf5e6c0 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000010d90a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f513c211ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=d93ba134157ae800 RBX=ffffffff81976a48 RCX=d93ba134157ae800 RDX=0000000000000001
RSI=ffffffff8be28c20 RDI=ffffffff81976a48 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa22cf0 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001e000
RIP=ffffffff8b7024f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c268a68 CR3=0000000128df2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f98b0186478 00007f98b0186450 XMM03=00007f98b0186488 00007f98b0186480
XMM04=00007f98b0ced100 00007f98b0186440 XMM05=00007f98b0186458 00007f98b01864a0
XMM06=00007f98b0186498 00007f98b0186490 XMM07=00007f98b0186488 00007f98b0186480
XMM08=00040000ffffffff fffffffd00000000 XMM09=0000000000000000 00007f98b0011ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
