last executing test programs:

6m34.026172816s ago: executing program 0 (id=2503):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0xa400, 0x0)
ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000000080)={'\x00', 0x1, 0x3, 0xf129})

6m34.025103941s ago: executing program 0 (id=2504):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0xcb1f, 0x4)
bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000004cc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, r1, 0x4, 0x3}, 0x50) (async)
sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x200000000000033b, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x10}, 0x94) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000002000000014"], 0x34}}, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4)
r7 = accept$packet(r6, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000580)=0x14)
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000005c0)=r2, 0x4) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xfffffef4, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xff}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES64=r1, @ANYRES16=r4, @ANYRESOCT, @ANYRESHEX, @ANYRES16], 0xe8}}, 0x0) (async)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000004c0)={'syzkaller0\x00', 0x10}) (async)
r12 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})

6m33.951609862s ago: executing program 0 (id=2505):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d", @ANYRESDEC=0x0, @ANYBLOB='Djw@'], 0x4c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x8090) (async)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d", @ANYRESDEC=0x0, @ANYBLOB='Djw@'], 0x4c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x8090)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f0000000080), 0x10)
sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000001a6b4263"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0)
sendmsg$can_bcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x209, 0x1, {0x77359400}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x3, 0x0, 0x0, 0x0, "b68c52d2ba3c0d90"}}, 0x48}, 0x1, 0x0, 0x0, 0xc4}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) (async)
sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x6}]}, 0x14}], 0x1}, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000080)=0xc)

6m33.66785694s ago: executing program 0 (id=2509):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
syz_emit_ethernet(0x7b, &(0x7f0000000040)={@empty, @empty, @val={@void, {0x8100, 0x2, 0x1, 0x1}}, {@ipv6={0x86dd, @generic={0x4, 0x6, "e3bc27", 0x41, 0xff, 0xff, @private1, @mcast1, {[@fragment={0x3a, 0x0, 0x0, 0x1, 0x0, 0x1d, 0x65}], "96f177b2a6e1131d1294c21c62ba4d70578dcf48b1c63c38eb18b132c439f59b27c7be455f5496fd15ec987c4b9ec0a98c403e6a5618f91a45"}}}}}, &(0x7f00000001c0)={0x0, 0x3, [0xa62, 0xe75, 0xd22, 0xc51]})
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6866f59e001406fffc010000000000000000000000000001ff"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007112bc000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=@newtaction={0x970, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x95c, 0x1, [@m_police={0x958, 0x1, 0x0, 0x0, {{0xb}, {0x92c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x3, 0x3, 0xfffffeff, 0x2de, 0x1, 0x9, 0x8, 0x0, 0xffffffff, 0x9, 0xff, 0x4, 0x7fff, 0xfe5, 0xffffffff, 0x8, 0x1, 0x8, 0x10000, 0x0, 0xb, 0x5, 0x1, 0x8, 0x5, 0x7fff, 0x0, 0x1, 0x4, 0x8000, 0x2, 0x0, 0x8, 0x5, 0x8, 0x1, 0x9, 0x5, 0x4, 0x10001, 0x85, 0x7f9, 0x8001, 0x7, 0x7f, 0xd67, 0xffff, 0x3, 0x545, 0x2638, 0x6, 0x0, 0x81, 0x0, 0x5, 0xffff, 0x0, 0x3, 0x2, 0x3, 0xfffffff9, 0x50, 0x5, 0x6, 0x5, 0x5, 0x9, 0x3, 0x4, 0x7, 0xfffffffb, 0x0, 0x1ff, 0x7, 0x9, 0x2, 0x0, 0x3, 0x8, 0x726, 0x0, 0x4, 0x2, 0x800, 0x3, 0x40, 0x2, 0x8001, 0xff, 0x200, 0x101, 0x5b30a931, 0x0, 0xc4d3, 0x3a1, 0x9, 0x3, 0x2, 0x40, 0xffff, 0xff, 0x5, 0x83, 0xfffffffd, 0x1, 0x3, 0x2, 0x2, 0x10, 0x80000000, 0xfffffff9, 0x0, 0x4, 0x9, 0x1, 0x88, 0x4, 0x6, 0xffffff20, 0x700f, 0x5, 0xfffffff9, 0x58, 0x9, 0x7, 0xffffffff, 0x7, 0xffff, 0x7ff, 0x28c, 0x7, 0xff, 0x3, 0x60000000, 0x4, 0x4, 0x0, 0x2, 0x4, 0x0, 0x8a11, 0x40, 0x3, 0x8, 0x1, 0x1000, 0x100, 0x0, 0xa0, 0x80000001, 0x2, 0x3, 0xfff, 0x101, 0x0, 0x5, 0xd5b, 0x6, 0x7f, 0xfff, 0x45e2, 0x0, 0x0, 0x2, 0xbb, 0x4, 0x2, 0x32, 0xb, 0x1ff, 0xff, 0x6, 0x2, 0x7, 0x9, 0x5, 0x1, 0x2d9, 0x233, 0x200, 0x0, 0x2, 0x355, 0xfa, 0x8, 0xffffffff, 0x3, 0x3, 0xfffffeff, 0xd35, 0x3, 0x4, 0x9, 0x1cc, 0x1, 0x7, 0x2, 0x84, 0x2, 0x80, 0x1, 0x0, 0x8, 0x7fff, 0x81, 0x1, 0x1, 0x8000, 0x0, 0x9, 0x4, 0x80, 0x80, 0xfff, 0x7f, 0xaa2b, 0x1, 0xfffffffd, 0x3, 0x6, 0x298, 0x80000000, 0x4, 0xc0, 0x2, 0x1, 0x500, 0x4, 0x9, 0xffff9bdd, 0x1be, 0x3, 0x131b, 0x6, 0x8, 0x5, 0x4, 0x10001, 0x3ff, 0x9, 0x9, 0x12000, 0x8, 0x7, 0xc, 0x81, 0x4, 0x8, 0x1, 0x2, 0x4, 0x625a, 0x80, 0xc, 0x80]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x400, 0x6, 0x7fffffff, 0xff, 0xffffffff, 0x10, 0x8, 0x8, 0x3, 0x8, 0x9, 0xfffffff9, 0x28f6541b, 0x2, 0x5, 0x634d, 0x40, 0x7, 0x0, 0x3, 0x7, 0x1, 0x10, 0x1, 0x8, 0x8, 0xcfdc, 0x8, 0x0, 0x2, 0x3ff, 0xc83, 0x4, 0x7, 0xf, 0x2b5, 0x10001, 0x0, 0x3, 0xffffffff, 0x3, 0xffffc289, 0x7ff, 0x8000, 0x8, 0x4, 0xa, 0x75, 0x8, 0x1, 0x5b3, 0x8, 0x5, 0xb101, 0x3, 0x4, 0xfffffffe, 0x400, 0x6, 0x8, 0xe, 0x7257, 0x9, 0x200, 0x81, 0x100, 0x4, 0x9, 0x6, 0x6, 0x9, 0x3, 0x749568f, 0x1, 0xad9, 0x6, 0x1, 0x82f, 0xffffffff, 0x1000, 0x7, 0x3d, 0x5, 0x9, 0x9, 0x5, 0x2, 0x9, 0x76, 0xb, 0x0, 0x98, 0x27, 0x7, 0x7, 0x22, 0x8001, 0x7, 0x8, 0x3, 0x2, 0xc, 0x10, 0xffff, 0x8, 0x1, 0x2, 0x7, 0x9, 0x9, 0x3000000, 0x1a97, 0x3, 0x8, 0x40, 0x3, 0x1, 0xfffffffc, 0x6, 0x4, 0xc, 0x7ff, 0x2, 0x1ff, 0xfffffffa, 0x6, 0x2, 0x8, 0x3, 0x8001, 0x4, 0x5, 0xf, 0x80000001, 0x9, 0x8, 0x2, 0x1, 0x3, 0x3, 0x3, 0x3, 0x6, 0x2, 0x4, 0xffffffff, 0x0, 0x4, 0x610, 0x4, 0x4, 0x3, 0x4, 0xfffffffe, 0x5, 0x6, 0x3, 0x4, 0x5, 0x53645739, 0x8, 0x7f, 0x7, 0x3, 0x6, 0x2, 0x4, 0x8, 0x54, 0x4, 0x6e, 0x80005, 0xffffffff, 0x6, 0x170, 0x0, 0x1, 0xfff, 0x0, 0x3d, 0x6, 0x7, 0x98b, 0x57, 0xb, 0xffffffff, 0x10000, 0xc0fb, 0x3, 0x8, 0x7fffffff, 0x3, 0x101, 0x1ff, 0xfffffffb, 0x0, 0xffff672d, 0xfffffffc, 0x80000001, 0x4, 0x7fff, 0x7, 0x8, 0xffffa28a, 0x5, 0xfb, 0x4, 0x0, 0x2, 0xb1d, 0x1, 0x2, 0x2, 0x8001, 0x40, 0x80000000, 0x8, 0x200, 0x8, 0x10001, 0x93, 0xc3c7, 0x5, 0x0, 0x7, 0x7, 0x6, 0x800, 0x3, 0x8, 0x3000000, 0x3, 0x401, 0x800, 0x80000001, 0x5, 0x9, 0x4, 0xfffffffb, 0x28, 0x8, 0xf, 0x0, 0x3ff, 0x5, 0x9, 0x4, 0xd0, 0x7f, 0x81, 0x8, 0x0, 0x80000000, 0x4, 0x3, 0xfff]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x29bf}, @TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0x5, 0x6, 0x8b0a, 0x40, {0x9, 0x2, 0x523, 0x7f, 0x68, 0x80000001}, {0x3, 0x0, 0x1, 0x4, 0x7f, 0x1}, 0x3, 0x1, 0xff}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x177e}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x0, 0x3, 0xd, 0x0, {0x80, 0x0, 0x400, 0x7, 0x9, 0x5}, {0x5, 0x1, 0x9, 0x8, 0x7, 0x8}, 0x2, 0x2, 0x1}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x8, 0x7, 0x8000, 0x10, {0x2, 0x1, 0x9, 0x8000, 0x7, 0x2}, {0x0, 0x0, 0x7f8, 0x200, 0x6d, 0x9}, 0x4, 0x6}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7e15}]]}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x970}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'bridge0\x00', <r3=>0x0})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x59, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7af}, 0x48)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x280608c0}, 0x0)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1e, &(0x7f0000000840)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x20000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}, @map_fd={0x18, 0x5, 0x1, 0x0, r4}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0xffffffffffffffff, <r8=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)='%pB    \x00'}, 0x20)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r9, &(0x7f0000000200), 0xffffffc1)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000300000014001f"], 0x5c}, 0x1, 0x6c}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r9, 0x0)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r9, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x8, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_fd={0x18, 0x9, 0x1, 0x0, r4}, @map_val={0x18, 0x6, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000380)='GPL\x00', 0x7, 0x78, &(0x7f00000003c0)=""/120, 0x41000, 0x2, '\x00', r3, 0x0, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x4, 0xf, 0x4}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000480)=[{0x2, 0x5, 0x9, 0x3}, {0x5, 0x2, 0x9, 0x6}, {0x2, 0x5, 0x8, 0x4}, {0x0, 0x3, 0x8, 0x6}, {0x3, 0x3, 0xc, 0x9}, {0x4, 0x2, 0x6, 0x9}], 0x10, 0x800}, 0x94)

6m33.368344732s ago: executing program 0 (id=2513):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x6, 0xa, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}}]}, 0x50}, 0x1, 0x7}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x211, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8}]}, 0x24}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a78000000060a010400000000000000000200000038000480340001800a0001006d617463680000002400028008000100756470000e0003007acc6338a90000b03bd9000008000240000000000900010073797a30000000000900020073797a32000000001400058008000140f2000011080002"], 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
sendto(r4, &(0x7f0000000880)="45caed6be9718e10c21dc50f89", 0xd, 0x10, &(0x7f0000000980)=@nfc={0x27, 0x0, 0x1, 0x7}, 0x80)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe)

6m33.288706908s ago: executing program 0 (id=2514):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xda, 0x0, 0x0, 0x0, 0x8}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x6e6bc0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}}, 0x0)
listen(r0, 0xfff)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}}, 0x0)

6m33.264468894s ago: executing program 32 (id=2514):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xda, 0x0, 0x0, 0x0, 0x8}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x6e6bc0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}}, 0x0)
listen(r0, 0xfff)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}}, 0x0)

1.800374554s ago: executing program 2 (id=8222):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = getpid()
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r4, &(0x7f0000000000)="2e000400010002", 0x7)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_BROADCAST={0xa}, @IFLA_NET_NS_PID={0x8, 0x13, r2}, @IFLA_MTU={0x8, 0x4, 0xffe1}]}, 0x50}}, 0x0) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000002c0)={'pimreg1\x00', @multicast})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94)

1.668492582s ago: executing program 2 (id=8223):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$l2tp(0x2, 0x2, 0x73)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x1, 0x3, {0xa, 0x4e21, 0x101, @mcast2, 0x2}}}, 0x3a) (async)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', {0x2}, 0x9})
pwritev(r2, &(0x7f0000000380)=[{&(0x7f00000000c0)="c9781bd8500775cdbd06cf98b4f933", 0xf}, {&(0x7f0000000100)="b34fcf3731d574b1e89c3b80370186de4359", 0x12}, {&(0x7f0000000140)="ac375ee3f9d1b5", 0x7}, {&(0x7f0000000180)="803c57af1cfc408bbc5d8e95d23f9cad3ead373d673c613a1870df499b5ac0950a0bd8eff06889c43af5143b942ca60a6e296908c33bcda6d66d0e0112c96987540384af9c92426f95ebdd7b3036ffd69d49ea1657340e6027a8dba54ebec568f3d06182c9bbb50f2f57542dc2bb978328b7063e017eafdd1d63b4417327977ceffddeec99af880dc3c8f1645f21190f501008e8bc71a9a0c9cc51433a87fc8386a9f6a9c35dcb3f145687f1832d2269a75a5202bc6bc8dfef8746a4e01b12fc4e2708fb4a5958af52729b53eaea449ba11a3c13f5e47eeb47d65a4e64837a615fe796c2d73da07b11b227723955329bd21e2292069dd58439", 0xf9}, {&(0x7f0000000280)="d6199022544c3444f176b135078d4fdaccc3c5b7c5dcd75b43e71f79fbbe034685eeb41488c051082210c44bc536ceaf23f4d066d935fb641242ed3861649a1f0b0dc5c7bf2ef8e22d174849bd443fb57c99b8862c13a4f1b85b20d1bb69e26a64dd2d80bbecf3da31ed509ba2701e444976ae824ea55a3b31de16b54d7921780c57b4a8fa1dbbabb2aa3ef19cf1115ab79e65a0bc06b251cc5f2873479b76fa7bd73f25ad847531361b8bd82e92dd77aca44bb2edfda11ba531b9743f48bf81765fb2a7b0ddc9928325d9de9b250b1e0558890edde2c1", 0xd7}], 0x5, 0x100, 0x6) (async)
socket$l2tp(0x2, 0x2, 0x73) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xc0}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc809}, 0x40) (async, rerun: 32)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000500)) (async, rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='subflow_check_data_avail\x00', 0xffffffffffffffff, 0x0, 0x1d1}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1, <r4=>0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'ip6_vti0\x00', <r5=>0x0, 0x4, 0x7, 0x84, 0x0, 0x46, @private2, @rand_addr=' \x01\x00', 0x8000, 0x8, 0x3, 0x4}}) (async)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000007c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) (async)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4}, 0x50)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x2, 0x9, 0x0, 0x4, 0x40000, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5}, 0x50) (async)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x4}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a40)={{0xffffffffffffffff, <r10=>0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)='%+9llu \x00'}, 0x20)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x5, &(0x7f0000000680)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], &(0x7f00000006c0)='GPL\x00', 0x9, 0x0, 0x0, 0x83d00, 0x58, '\x00', r5, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x2, 0x0, 0x5, 0xe}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000a80)=[r7, r8, r9, 0x1, 0xffffffffffffffff, r10], &(0x7f0000000ac0)=[{0x3, 0x3, 0x10, 0xc}, {0x1, 0x1, 0xe, 0xc}, {0x3, 0x2, 0x2, 0x6}, {0x5, 0x3, 0x8, 0x5}, {0x0, 0x2, 0xd, 0xb}, {0x4, 0x1, 0xe}, {0x5, 0x3, 0x10, 0xb}, {0x3, 0x4, 0x3}, {0x1, 0x2, 0xc}, {0x0, 0x2, 0x4, 0x9}], 0x10, 0x6}, 0x94) (async)
ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000c40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async)
ioctl$SIOCX25GFACILITIES(r6, 0x89e2, &(0x7f0000000e80))
ioctl$AUTOFS_IOC_READY(r11, 0x9360, 0x4) (async)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000020c0)={&(0x7f0000000ec0)="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", &(0x7f0000001ec0)=""/11, &(0x7f0000001f00)="9de07435bde451282e5f3e01953c96cee623c634bf91fd1a6a0c17168e9c2ad63d8177f1d19aa02f08ce5277c6476aba78ce99276c293205dc320224becdeb24e6a082b20aedb60d4f3b174abcfd10583eb040d78c01726315640ba9d8b4f575dea79ffe1d94830730901d912d01f1c6b0bd3a3874a116f06d0ac36fcaf6bcc68e2f684f6f4fbafff5fcb42bdd6de1e5bcfa0aea5038c58cca897b665425c15188a320b66d835e0ea432f13f95a8dc7b51e82ec81eddb93c0626cf528aeff11f47bb87e46d92c43a2cf40b43fa4fd4b68fc53e8881b9524b56205d59ba8a23", &(0x7f0000002000)="216fe26cdd5a33b154362d65dbfaa31e2ec061f3896a8e65da5f71d0792785dc7685cea8768dfe1e521381063004fce2d9cd4b1e1c10a4c5e67b7687bd930e0f6ce8e979cba79e566a2b66c965439e5d7c33a17e2ab138861d2acfd06409168bbc33a77193e5b759e72a3a6995fbffec2609bd6c70764d6a747927dfebf83c2fb85ecfc8e8d65733db11ae70a7f618dd55166bdefd83d6431e594ce7ecde9695d20476", 0x0, r10}, 0x38) (async)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002140), r2) (rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002180)={'wlan1\x00', <r14=>0x0})
sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000002240)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x34, r13, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x8000, 0x45}}}}, [@NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}]}, 0x34}}, 0x20044080) (async, rerun: 32)
ioctl$BTRFS_IOC_DEV_INFO(r10, 0xd000941e, &(0x7f0000002280)={0x0, "1cce45f2da164933db7421e4ee0e959e"}) (async, rerun: 32)
r15 = syz_genetlink_get_family_id$nfc(&(0x7f00000032c0), r12)
sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f00000033c0)={&(0x7f0000003280), 0xc, &(0x7f0000003380)={&(0x7f0000003340)={0x1c, r15, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x24000040)

1.667368992s ago: executing program 2 (id=8224):
unshare(0x68040200)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
unshare(0x62040200)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r1, 0x5421, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020b0db888cff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffff850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000061000000b70000004000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
socket$l2tp6(0xa, 0x2, 0x73)
ioctl$int_in(r0, 0x0, &(0x7f0000000580)=0xf)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @empty, 0x109}], 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r4, &(0x7f0000000280), 0x9)
r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000c40), 0x12)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r7, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r7, &(0x7f0000005240), 0x4000095, 0x0)
getsockname$packet(r7, 0x0, 0x0)
connect$rose(r7, 0x0, 0x0)
recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000180)=""/4, 0x4, 0x4120, &(0x7f0000000440)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8006}, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
socketpair(0x1, 0x20000000000001, 0xfffffffb, &(0x7f0000000380))
openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)

699.593116ms ago: executing program 2 (id=8243):
syz_emit_ethernet(0x26, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2200, 0x0)
write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="663869bb033e3aff00000000000000000000ffffac1414aa0000000000000000000000000000000089000b19650000003c0e04079128a948fe880000000000000000000000000101200100000000000000000000000000000000000000000000000000000000000100000000000000000000ffffac1414bbfe8000000000000000000000000000bb00000000000000000000000000000001dd02000000000000000000000000000d3a010000000000000107000000000000000000000000000032000190000000000105000000000000c910fe80000000000000000000000000002b04010004017f0710000000010209fbff01000000000000000000000000001602000000000000040181c910200100000000000000000000000000020000000823000000000000040103c204000000020738000000030c0707000300000000000000ae0300000000000009000000000000000100000001000000050000000000000000000020000000000401b100010004034509784ecd7d536dd9955c4c16a2b010574c5a7dce10543fd11fa77039ea22cb8c8d0454f650b9cf8252a5265ba4ce6571058e821251667aad21c0ef70b4714556705ddec7b03bb4f0a4159ff49bff60b59c6dabcc2a42116cdd9d0e908284e1cc3c3988dbb331c5f55a2429c4f6703f2d078e66e2b60f5a435b3b96e4e2f6da202f256d11f30c292a64a88452fb1fb31f3a7f6e246cc96ea82843389ce4dc70afb590cb70351331763db11a8c06edcd29fe14c1a7391686f845d90529df9c593a56b14e1e8765aef0d1b011e46b53d5801f00000002009078000002136ceef27100073a01fe8000000000000000000000000000aafc0100000000000000000000000000015e06040308200300fe8000000000000000000000000000bbfe800000000000000000000000000010ff020000000000000000000000000001d641c58a0fe2d8dcd0a31aeaa2f6a655b87c5e0fbbbcd992d551f07a9d203d15e9684bb66d15564d5e7397d538120ea65aed46070bbb1a02d900fc6fdc6073a9b03c6629a5098f68126c48c28d4f03e3ba9a09dd6f2537e93d6c85d314254a3124775dbc1d678b7963418e1a7e819e8d1583834fc90cb84c109c9fbed14d891cc44d8950637ccdecf76f75b85bb11290d89e9963218a0d6ecb58eaad4a85532d5bd9e0c697bda7d9fc4f3155255f725a3bc90a395b46"], 0x366)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6866f59e001406fffc010000000000000000000000000001ff05"], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x59, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7af}, 0x48)
socket(0x400000000010, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000d0425bd7000ffdbff2500000000", @ANYRES32=0x0, @ANYBLOB="10000000000000001c001280a534cc2e62726964676500000e000280050019"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xffff}, {0x5, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c)
sendto$inet6(r3, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4)
sendto$inet6(r3, 0x0, 0x0, 0x801, 0x0, 0x0)
syz_init_net_socket$bt_rfcomm(0x1f, 0x0, 0x3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'macsec0\x00', <r6=>0x0})
setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@private1, r6}, 0x14)
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r6, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840)
close(r5)
socket$netlink(0x10, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan4\x00'})

520.452386ms ago: executing program 2 (id=8244):
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c0000002100010000000000fedbdf250200000000002000000000fe52bb8cc261b0d874d702b0c3ade04b462a"], 0x1c}}, 0x44044)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x4, 0xfff1}, {0xfff3, 0xffff}, {0x9, 0xfff3}}, ["", "", "", "", "", "", "", ""]}, 0x24}}, 0x800)
r4 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x1, 0x10, 0x9, 0x6}, &(0x7f0000000100)=0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7000001000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000680)={'batadv0\x00', <r8=>0x0})
sendto$packet(r5, &(0x7f0000000640)="053c8100", 0x4, 0xb00, &(0x7f0000000080)={0x11, 0x8100, r8, 0x1, 0x0, 0x6, @local}, 0x14)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="28000000120001003dbd70000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00o'], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="07230000020073797a5f74756e0000000000000000000c0003800400038004000100"/50], 0x38}}, 0x0)
tee(r3, r4, 0x3, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0x16, &(0x7f0000000180)=ANY=[@ANYRES16=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0)

519.656641ms ago: executing program 3 (id=8245):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r0, @ANYBLOB="200001"], 0x38}}, 0x800)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r4, &(0x7f0000001440)={0x24, @short={0x2, 0x2, 0xffff}}, 0x8)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0)
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x64, r6, 0x1, 0x70bd2c, 0x0, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0xc010000}, 0x4044841)
r7 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r10 = socket(0x400000000010, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r12, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
r13 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r14, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x48}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
sendmmsg(r3, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x1000, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x84, 0x3}], 0x10}}], 0x2, 0xc88c4)
setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000080)=0xcb1d, 0x4)
sendto$inet6(r2, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x4, @empty, 0x6}, 0x1c)

419.709515ms ago: executing program 1 (id=8246):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000e08000340000000170900010073797a300000000009"], 0x94}}, 0x0)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newtclass={0xac, 0x28, 0x10, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0x5, 0xf}, {0xe, 0x4}}, [@c_atm={{0x8}, {0x6c, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xc, 0x2}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x2, 0xc}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x10, 0x7}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x6, 0x7}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x6, 0xc}}, @TCA_ATM_HDR={0x3d, 0x3, "402cb6208a6666194eede0ecd7f1b9451b6df0f73511eb7678fd2bba0966446f15151ce8243d588398c2ae911136b39c8b4c2dfde1330df993"}]}}, @c_atm={{0x8}, {0xc, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x7, 0x5}}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4}, 0x24040001)
getpeername$netlink(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000540)=0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)
socket(0x15, 0x6, 0xf)

350.613954ms ago: executing program 1 (id=8247):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000040)={'syztnl0\x00', <r1=>0x0, 0x2f, 0xa, 0xc, 0x2cc, 0x41, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x10, 0x8, 0x2, 0x8}})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000004c0)=@RTM_DELMDB={0x78, 0x55, 0x1, 0x70bd28, 0x25dfdbfd, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2, 0x0, {@in6_addr=@private2, 0x9edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x0, {@ip4=@multicast2, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x3, 0x0, {@ip4=@remote, 0x8edd}}}]}, 0x78}}, 0x0)

347.984011ms ago: executing program 3 (id=8248):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = getpid()
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r4, &(0x7f0000000000)="2e000400010002", 0x7)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_BROADCAST={0xa}, @IFLA_NET_NS_PID={0x8, 0x13, r2}, @IFLA_MTU={0x8, 0x4, 0xffe1}]}, 0x50}}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, r3}, 0x94)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f00000003c0)={0x0, 'team0\x00', 0x1}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94)

270.931576ms ago: executing program 1 (id=8249):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb7}, 0x94)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
syz_emit_ethernet(0x62, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0xf, 0xc9, [@multicast1, @local, @private=0xa010102]}, @timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [0x5, 0x0]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x800, {[@timestamp={0x8, 0xa, 0x0, 0x3ff}]}}}}}}}, 0x0)
listen(r0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
accept4(r0, &(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000300)=0x80, 0x81800)
syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa5a86dd60f900f500180600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e220b54ab08d57c34284756768165a6518f78f5645ca71164ce4728dac383661863e11f36d474499c75f108113439bdc104b2cc56ade4efadb90fa39c70c15e4d40366a789af418f07c380b7a7279000374908d3b6752c01b68093bd93d7329d4637dfbfc0280bbae9391d8344ffaad3a7f1474fe968b0eb11910236fa4180759e6de1ff2e5ce11b0f59a715aaf5d8a42372a62a229b7e8cee417337902ed889a9b692d0df0b07da19050cf6bc238cdb95a9b86e68d95beca4ecf6efbbd8073", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60020000907800001e020000"], 0x0)

270.510044ms ago: executing program 3 (id=8250):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
unshare(0x6060600)
bind$bt_rfcomm(r0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2040000, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x1}, @TCA_CAKE_MPU={0x8, 0xe, 0x1}, @TCA_CAKE_NAT={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x4000)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r7, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c)

147.381752ms ago: executing program 3 (id=8251):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0xcb1f, 0x4)
bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9deb0100f9ffffffffffffff0c0100000c000000020000000000000000000023e70000000000ad392148a57f7b720000a3d90fd26253fcc65b3f41586a7ea1435739df9cd77845bb6846242a645370a66f8a574a2c1098840fdf95abc878bebf8142a0a417d77e5a99ad40164a7a"], 0x0, 0x26}, 0x28)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000004cc0)=ANY=[@ANYBLOB="0300180004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="040000000300"/28], 0x50) (async)
sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="8803aeb8e80a0d52ae8f2ea3cb1a2874e0ca3cdc50c8e559563ca20acf0b55ca46f112851b13ec5c42ef0ab0be302a88c526a326bcd3b4e29feaee004fd764453e3d3f394f299b7f7014f97f0076f226fc4eebd9ae34c0d5762749ad8a7d7893b16e3a4f7b85daa61aa3f75063d0586eeaff0da593ea32ac90c5b50f33d4e6dc684ebbf3932b749a7a4e7c7031f5770ca10c000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x240000c1}, 0x4002c001) (rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000480000000820000095000000000000002ba7e1d30c04aa8b3382022ce2a1d97411a0f6b599e83f24a3aa81d36bb7019c13bd23212fb56f040026fbfefc4a056bdc17487902317142fac7e7be168c1886d0d4d94f2f4eb45c652fbc1626cca2a28d67893547db51ee988e6e06c8cedf7ceb9fc40400ae5e4aa74c92c6a51cbf9b0a4def23d410f6accd364158a4591c559f76c0130bfc4e90a6341865c3f5ab3e89cf6c662ed4148d3b3e22278d00031e5388ee5c867de2c6211d6ececb0c18ce74c4dae15cb7947c491b8bea3fd2f73902ebcfcf4982277d9800011b405bbf7b02433a9bcd715f5888b2007f000000001c000000010000000000000600000000309329170ee5b567e70f00c484d339c480f70006a10f58fa64533500000000000000000000000031000000000000001208e75a89faffbfb11b7dc6ea31001e846c12423a169f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617de7a6520655a80d0900f4d433623c850af895abba14f6fbd7fbad1f98e26ad4deaf1a4f294b2a431ab9142f3a06d54740a4bc5e3abd378af7c9676a08ef74c48785f895b4ec8d1141d5e8744d7f09ab4df6027bf48cabecead649f96ea24d3287a7b01ab84d336f3c0f45a0642d6f2c494160cb7f46ce680eeb80157eb23f9902519ac655fa73103170cbc496d7122034b85e7e87a2db762cbb253fbd76b9117c1a11d18aa2040c5f0c289906000000000000005ffe91ff799a11d9b219c00c369a12bf8685b862d0dbdd956cbda1bae489bcef5ae59136aaadc59609f4d42617c0e6066938b521a0f2e2467a6c435ad5b800262a5da053ced5e95394e500000072737638ac44fb61310e2df511c60b3c88113996a81fb64bce5eb95ce91738640ff7ae6ed6b62086e699955926934389cdf9bcffff3ffd86fe9ce05268bf8a3958f2206cdc7095682c14f10be1075832956762b2dcc6251e7b74cb1da627e332765511c58215bf84d253e8778e6e8ffe4ea50b076446f35efffc806b340658342d2d9e1ef68c6ef3e98407d2fcefb34a0000000000000000895ddbb76122b1222e4da37177fe833e4fcaa67997e92a206ebd085bd9f90008d3fdd528efe6c1dca17f45ba5e8bd3153a0077bb43f8a63dd390d18f0239b41da1a52383a4c6768ca1bb66b8fb3c5000f6f246fd20356a60769b461b6cdf133de073b1df08ae09268b0073bb97d88d741a5546e76caf4b6b1387ff37ec13d262dae0260be74cdf7bb6d3107597430ef5bbd476bb9d69b2aef9f3cb644b4bf01ccf16d40720939daf2af469bdfb361b9c015dd026fd0fffe3c66f5c343afb78a7cfd852f3e05c089887d7df2ff4f9982030019421af6b78ff9c444a17091875cfe4eab0e7f50eb69c860b1613a6b4f5af04f9c635d8d646c89f8b85f820ce7464c731deba39f9ff7b815f7b0acba754c01ed8bf1bba0010a8c6a2b966d861f9dd547abf2e9b23e5607f00f80b58fd76e4bc46c84799aa792cdaeb6cfb858e577dacff607ba513250e13ae696cd6ed7d318190a93b9ee07927efca6b8d1f5980994690bbe002db5146439d906a0d4aef065214b15666cdca81091b69acee2c7ce0821fc19e0891f0b53469f935c5ac420100010000000000fb53faf4420638489e6a1c696d8c414a87b60000000000080000b6be15579518540000bc2d061827ae6349a045b780893771524a424335b9fc34616ee9f09141057262530b7c2f7c9b969938779736ece7b470078ac0b1b4b528000000009866e99948a9096672ec9f3800c2fc35ba6516e542624c47bdba76a816c3a3dd6c3fa87a3ec91df199a9af91a7babf2b8d0e7b77e6dfb4bbc9817847b705000000a1000000000000ab8353f3800f045b90b0eaab6d731199c9447eabbc8c740183aff5389742e47de5000000826a570d14310700cf2ae3366ebdb7f1000000000000333c00e6addbf4c71ffad6bfb5babb49109f92a5a52042c425190a6e3f1a8a3abfe6059da9c952cf35c98ce7616355493d280f2d0be99e18fd0900c769e7eb4edc1c03a33676080000007229e0237c1e34641848531712ff09e89fb062a3e66f4f3c9d7a7fc9aab1ced0ae679733830039cb61ea0691f0b4e0b33194404e643243c3841e1e7fe301f7f47a7f89512d92e83624e3de705bdfbfd0e5e381398e9d5428a00cc8a6d097d97e6ac8bd09b1a5577920a650114a522c1e2dcdc4f606fcbcee91770a9fada34d38cd7976a9228a0a0dd8661be8162e966aac26bea4c11458cd6ce22ddf7054cdd0a60ef3ec000000000000000000425cb75dc7ec92e9a5d29f9c99697d2a98ae0a9f35e4196c3faeb7a690bf897846f6f0f1c163d6075119169d55d10da9ad0e4b2c636d200000009baaf94e2b2c48e70d8453f832eecfb1de2a3f38a5c986de9e37737dac74db251d5e9ea2b8ed39e91a7a17d01b49f7aaff7c4c73c3484bdcab362838ed940035b270a3646ef55b9f070ae14466b3acef9f8b28fb938a237e2e068ae4a6bce4407b54cc14614c2cdf877f000000000000000000000000bdcf23144e6c16b9235552aed83b6428f34d88c258a9ad16386bba51b60838fb11bc193a206b5a25b7233b222e4e68e0d1e88f26b9a45b6c29469530a37ea92aaf421cdcc1f594ecfaff9a79b56f8b380380020000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48)
socket$packet(0x11, 0x3, 0x300) (async)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0xcc15, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) (async)
socket$xdp(0x2c, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00022fbd7000fbdbdf2502000000080069000600000005003d00040000001c00258005000500080000000600030017080000050001000200000008004000b3fcffff08000c0104000000140002000000000000000000000000000000000006003d0005000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4040855}, 0x8084) (async)
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000001c0)={0x28, r3, 0x400, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x49}}}}}, 0x28}}, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x87) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async, rerun: 64)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000) (async, rerun: 64)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) (rerun: 64)
write$cgroup_int(r6, &(0x7f0000000200)=0x10001, 0x12) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (rerun: 32)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7}, &(0x7f0000000040), &(0x7f00000003c0)=r8}, 0x20)
sendmsg$NL80211_CMD_SET_BSS(r8, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r3, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x8}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x10}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x8}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x8}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x99}]}, 0x4c}, 0x1, 0x0, 0x0, 0x84000}, 0x0)

146.663414ms ago: executing program 2 (id=8252):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000005)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001000)='veno\x00', 0x5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="480100001600010028bd7000fbdbdf25fe8000000000000000000000000000aae00000020000000000000000200000004e23000f4e23000e020020005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc000000000000000000000000000001000004d66c0000000a010100000000000000000000000000080000000000000000010000000000000500000000000000070000000000000000100000000000000100000000000000000000000000000000000100000000000200000000000000090000000000000003000000000000005d19000000000000090000000600000000f8ffff25bd7000013500000a0001daec00000000000000030000002b0300000c001c00", @ANYBLOB="0200000008001f000400000028001a"], 0x148}, 0x1, 0x0, 0x0, 0x8000}, 0x24000014)
r4 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, r2, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r6, 0x89b1, &(0x7f0000000040)={'syz_tun\x00', 0xfffffffe})
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001180)="009fc3e8a42c8d01fc4ebeb6c15e4b166c541d808cdd6524cc2319725dd45208cd8be28cb104e3d0f056240c324ba0143f77474668566bce917af3d89c8ef5e062a214b60f15", 0x46)
r7 = accept4(r5, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
unshare(0x20040600)
r8 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_opts(r8, 0x29, 0x37, 0x0, 0x8)
sendto$inet6(r8, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
socket$nl_route(0x10, 0x3, 0x0)

89.906851ms ago: executing program 3 (id=8253):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
unshare(0x6060600)
bind$bt_rfcomm(r0, 0x0, 0x0) (async)
r2 = socket$inet6(0x10, 0x2, 0x4)
getsockopt$sock_buf(r2, 0x1, 0x2d, &(0x7f0000000480)=""/238, &(0x7f0000000300)=0xee) (async)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x803, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) (async)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r7=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000040)={r7, @in6={{0xa, 0x4e20, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, &(0x7f0000000180)=0x84) (async)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000005c0)={r7, 0x3ff}, &(0x7f0000000600)=0x8) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r4, 0x0, 0x0, 0x2040000, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x1}, @TCA_CAKE_MPU={0x8, 0xe, 0x1}, @TCA_CAKE_NAT={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x4000) (async)
r10 = socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_emit_ethernet(0x496, &(0x7f0000000100)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "a3fc00", 0x460, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x11, 0x4, 0xc18, 0xa000010, [{0x3, 0x14, "e71f8e70c28ec69e8ebe36aca03a343cbfbd82c7b4788d9f5e26ff1ff40a4572988b545c2c7f46e027f5f058d3a20bd75b518999f69f73fd43b26b59422724c3d26b021d0f215b77f276fd8c09b9a8f636fc53b62f654bd7ea12660d45d8af19e9cc6eb5a024f086e9c8dfef81a25cc6361c3f1ff0e6738d612ce2fcfc864eb187d7f93a550397138b8b35aa4ff465f56ff147340b0dc170df0000000000"}, {0x3, 0xd, "ad76198c18d1313cc877cfdffd832556357f0d4509e2a7b895c47fe891c2c7407af9c873a3595d3c015c06028675b479c67091ecb309bc3612cc4f731686381c2ab65ec1db6441cddf9cc3010837d0bc576b97ca438056094843b67304db01ef535eb34d1bd7"}, {0x3, 0x13, "c5af417b80835fbcc25455b7e13aad37405651c6bc79fd506803586fdfaa7747c039c5f8471e3deb6f39743e6b08724cad55b642e6024a4ed07ac03bcaba137d397beca669c6d7d4bfe5ed62c49c92d41259b28d0bef013c2fbf0c26bca3404ffdc21f8bfa5706dbaf65c0de91bddd85a60cc0bd9b7145c12eaae3e1731ec2994d77412405d8f8c6157663aa5b2e2d45f3e3561a70d1ee9a708073"}, {0x2, 0x55, "ec0cf65406d655d9136e2bc478e94a04ccd1ba082b3f580f6f71bc0de9647358ca36c79879ea0e3680dd1df4578048053be5c66d4a76e00d449a4c6f1c1cda2bf64912581454501f001596c8cd6f03f08dd22a3c5df0092afc2c0723ae593789333f710f5d7036871b05a6462fccae790475c31fcc2ffff95c2211332d51ba4abea15c61f0328fcf3a852e6b6275d9e9cfbba7f3b8e9b48bf2c4f7ecc6b38b64e3106481eb8ac2d469a591ab2259fa9d70f04092f7379963eaac8cf183d33e744d8def4cc872c9f0a84dac84e2a360430707922486ab63072eaca10686ae355949189719ecfadeb8cd1de02426891bdb749b04f770db15d637d2db9dd12bb94ead8c4d506d24a5c9d5cc4be6d77b78d2739b26df21758cf5fe03f5148c58d8cba72897f1256b5e49f6e3ff1e39cc6070df18e74e707324633917f1a97f8c2b97faa0da365f91abec1b060b2c8452872e2e5cf78871a06c21503cde0e97ad6c8615e307aa49a3faecd1b4c2cba297ebf95173b96ad7d11490e55707024c3152232d7e3c33b1b8e308b69235de82a1684083dacc13c0b20ef4110765cb2f647e10b98c13138b832d34e1fb0d3ba23ab76665d363c33538a5992adbf01beabd1eaadfeb71c3f2b3faedb8a28dc69ebb1495c6134a684919dacd49172c56fc2a639909004fb062711b9c7c6c17a978d35c8b0f8bff9a633acb597808e89b38a3c396c81b05cbce459bfbc49997772fa53e12013a973c52a95465d6fb89ef2726793af1ff967de5fc24f2b6dc95b3f112ffe58c64c30836e69a092cd7561de0d219d7b1041dc04737889bc7e4731fd6c47f0fee1411ac25f9012c6017cb209711ed733b24b1fd5fc77980907b0157f7e1b13857d0ec33eaa2b26a5e8ec1ab3016f0b52f180c3255e607946e034b5e8395378e08f4ec86aa92c628a3030251fb5dcc5e899633e06710d10e0a"}]}}}}}}, 0x0)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fe8000000000000000000000000000bb0200010100000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000030000000000000000000000000000000000000000000000dd020000400000000400000000000000000001000000000084010500ac141439000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff000000000000000000000000007f000001000000000000000000000000000000003200000000000000ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000100000001030000000000000000000000000000ff020000000000000000000000000001000000003200000002000000200100000000000000000000000000010000000000"], 0x23c}}, 0x0) (async)
bind$inet6(r10, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r10, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c)
sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0xa8, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x113}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x40)

89.181761ms ago: executing program 1 (id=8254):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x4c)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r2)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000700)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf2507000000140001800800fd007f0000010600010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x441c0)
bind$netlink(r2, 0x0, 0x0)
sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001200050926bd7000fddbdf251a0d04064e224e22fbffffffff0000000600000007000000ddffffff0500005bfee5881e16081bcde1874f0a78ecde2db9116e5fbf"], 0x4c}, 0x1, 0x0, 0x0, 0x22004014}, 0x800)

88.609624ms ago: executing program 3 (id=8255):
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0xfffffffffffffe5c, 0x2, 0x9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x17f}], 0x3}, 0x0)

494.617µs ago: executing program 1 (id=8256):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002740)={'vlan0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000280)="f4416eb4e8d263afa99fefa788a8684c88a8195b9215", 0x16, 0x0, &(0x7f0000002780)={0x11, 0x0, r1, 0x1, 0x4, 0x6, @broadcast}, 0x14)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x7}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4)
socket(0x10, 0x803, 0x0)
socket(0x1, 0x803, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0xd, &(0x7f00000003c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x8c, 0x8, 0x8, &(0x7f0000000480)}}, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@ifindex=r4, 0x2f, 0x1, 0x18000, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0]}, 0x40)
r5 = socket$inet(0x2, 0x3, 0x8d)
setsockopt$inet_msfilter(r5, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1)
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000200)={<r6=>0x0, @local, @local}, &(0x7f0000000040)=0xc)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x73, r6})
r8 = socket(0xa, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0)
ioctl(r7, 0x8916, &(0x7f0000000000))
ioctl(r8, 0x8936, &(0x7f0000000000))
sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r3)
r9 = socket$inet6(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f00000003c0)=ANY=[], 0x90)
sendto$inet6(r2, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c)
shutdown(r2, 0x1)
socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000000)=0x7ff, 0x4)

0s ago: executing program 1 (id=8257):
socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
recvmmsg(r0, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x490267a0}, 0x1c)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='4'], 0x34}, 0x1, 0x0, 0x0, 0x200040c1}, 0x8004)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r4, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x11, 0x6, @udp='udp:syz0\x00'}}}}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40)

kernel console output (not intermixed with test programs):

 402.415278][T23925] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5641'.
[  402.519000][T23930] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5643'.
[  402.711119][T23957] lo speed is unknown, defaulting to 1000
[  403.113862][T23965] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5651'.
[  403.126426][T23966] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5651'.
[  403.129586][T23966] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5651'.
[  403.135523][T23965] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5651'.
[  403.327862][T23975] lo speed is unknown, defaulting to 1000
[  403.353935][T23976] netlink: 'syz.2.5653': attribute type 2 has an invalid length.
[  403.610264][T23997] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  403.614216][T23997] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  403.630981][   T64] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  403.690321][T24004] lo speed is unknown, defaulting to 1000
[  404.428390][T24032] can: request_module (can-proto-0) failed.
[  404.453725][T24035] netlink: 'syz.1.5671': attribute type 3 has an invalid length.
[  404.504702][T24035] veth1_to_bridge: left allmulticast mode
[  404.508606][T24035] veth0_to_bond: left allmulticast mode
[  404.517820][T24035] bond3: left promiscuous mode
[  404.521899][T24035] hsr1: left allmulticast mode
[  404.527700][T24035] batadv_slave_0: left allmulticast mode
[  404.543345][T24034] syz_tun: left allmulticast mode
[  404.582043][T24053] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5674'.
[  404.642029][T24065] lo speed is unknown, defaulting to 1000
[  404.655338][T24068] siw: device registration error -23
[  404.876719][T24108] lo speed is unknown, defaulting to 1000
[  404.882964][T24105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5689'.
[  404.994105][T24119] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5692'.
[  405.426753][T24162] netlink: 'syz.1.5701': attribute type 6 has an invalid length.
[  405.430201][T24161] delete_channel: no stack
[  405.528222][T24168] netlink: 'syz.1.5703': attribute type 13 has an invalid length.
[  405.531512][T24168] netlink: 'syz.1.5703': attribute type 17 has an invalid length.
[  405.551504][T24168] 8021q: adding VLAN 0 to HW filter on device bond0
[  405.555490][T24168] 8021q: adding VLAN 0 to HW filter on device team0
[  405.560857][T24168] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  405.567237][ T5313] lo speed is unknown, defaulting to 1000
[  405.569500][ T5313] syz2: Port: 1 Link ACTIVE
[  405.589394][T24167] lo speed is unknown, defaulting to 1000
[  405.957150][T24182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5707'.
[  406.168337][T24202] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5713'.
[  406.175089][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  406.181249][T24202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5713'.
[  406.185039][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  406.190150][T24202] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  406.193880][T24202] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  406.241365][T24204] netlink: 'syz.3.5713': attribute type 10 has an invalid length.
[  406.245763][T24204] team0: Device ipvlan1 failed to register rx_handler
[  406.909997][T24227] netlink: 'syz.2.5719': attribute type 1 has an invalid length.
[  406.923802][T24227] 8021q: adding VLAN 0 to HW filter on device bond4
[  406.929744][T24227] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5719'.
[  406.943616][T24227] lo speed is unknown, defaulting to 1000
[  406.976561][T24227] netlink: 'syz.2.5719': attribute type 15 has an invalid length.
[  407.359983][T24257] netlink: 'syz.1.5728': attribute type 5 has an invalid length.
[  407.379255][T24257] netlink: 'syz.1.5728': attribute type 15 has an invalid length.
[  407.474249][T24266] netlink: 165 bytes leftover after parsing attributes in process `syz.1.5730'.
[  408.242579][T24306] lo speed is unknown, defaulting to 1000
[  408.775580][T24329] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5743'.
[  408.831052][T24330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5743'.
[  409.127083][T24340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5748'.
[  409.348931][T21535] bond1 (unregistering): (slave gretap1): Releasing active interface
[  409.400283][T21535] team0: Port device bridge1 removed
[  409.562556][T21535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  409.567034][T21535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  409.570719][T21535] bond0 (unregistering): (slave team0): Releasing backup interface
[  409.575762][T21535] bond0 (unregistering): Released all slaves
[  409.581405][T21535] bond1 (unregistering): Released all slaves
[  409.991242][T24375] lo speed is unknown, defaulting to 1000
[  410.071512][T24380] bridge0: port 1(batadv0) entered blocking state
[  410.074067][T24380] bridge0: port 1(batadv0) entered disabled state
[  410.076562][T24380] batadv0: entered allmulticast mode
[  410.079337][T24380] batadv0: entered promiscuous mode
[  410.082980][T24378] lo speed is unknown, defaulting to 1000
[  410.111495][T24378] validate_nla: 2 callbacks suppressed
[  410.111509][T24378] netlink: 'syz.3.5759': attribute type 22 has an invalid length.
[  410.116451][T24378] __nla_validate_parse: 2 callbacks suppressed
[  410.116462][T24378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5759'.
[  410.124734][T24378] netlink: 'syz.3.5759': attribute type 22 has an invalid length.
[  410.127623][T24378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5759'.
[  410.132493][T24378] netlink: 'syz.3.5759': attribute type 1 has an invalid length.
[  410.135008][T24378] netlink: 228 bytes leftover after parsing attributes in process `syz.3.5759'.
[  410.138211][T24378] NCSI netlink: No device for ifindex 0
[  410.194357][T24392] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5762'.
[  410.198664][T24392] netlink: 216 bytes leftover after parsing attributes in process `syz.2.5762'.
[  410.347653][T24413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5769'.
[  410.576180][ T5694] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  410.579896][ T5694] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  410.585009][T24423] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5771'.
[  410.743515][T24430] lo speed is unknown, defaulting to 1000
[  411.046757][T21535] tipc: Left network mode
[  411.086296][T21535] IPVS: stopping backup sync thread 10214 ...
[  411.153305][T24444] lo speed is unknown, defaulting to 1000
[  411.199609][T24444] netlink: 'syz.2.5776': attribute type 2 has an invalid length.
[  411.213426][T24446] netlink: 'syz.2.5776': attribute type 2 has an invalid length.
[  411.217613][T24446] netlink: 119 bytes leftover after parsing attributes in process `syz.2.5776'.
[  411.298304][T21535] hsr_slave_0: left promiscuous mode
[  411.302322][T21535] hsr_slave_1: left promiscuous mode
[  411.310682][T21535] batman_adv: batadv0: Removing interface: batadv_slave_0
[  411.314381][T21535] batman_adv: batadv0: Removing interface: batadv_slave_1
[  411.378801][T21535] team0 (unregistering): Port device team_slave_1 removed
[  411.387156][T21535] team0 (unregistering): Port device team_slave_0 removed
[  412.344373][T24498] lo speed is unknown, defaulting to 1000
[  412.497310][T24510] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.5790'.
[  412.647531][T24520] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  412.812996][T24534] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5797'.
[  413.319506][T21535] IPVS: stop unused estimator thread 0...
[  413.631517][T24564] tipc: Trying to set illegal importance in message
[  413.634022][T24561] lo speed is unknown, defaulting to 1000
[  413.634279][T24563] tipc: Trying to set illegal importance in message
[  414.294002][T24600] lo speed is unknown, defaulting to 1000
[  414.466132][T24606] netlink: 'syz.2.5816': attribute type 3 has an invalid length.
[  414.540026][T24612] netlink: 'syz.3.5818': attribute type 9 has an invalid length.
[  414.549200][T24614] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  414.623173][T24606] batadv_slave_0: left promiscuous mode
[  414.629657][T24606] ip6tnl3: left promiscuous mode
[  414.631739][T24606] vlan0: left allmulticast mode
[  414.633461][T24606] bond0: left allmulticast mode
[  414.635697][T24606] bond3: left promiscuous mode
[  414.671904][T24617] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  414.706963][   T33] audit: type=1804 audit(1756598552.579:5): pid=24619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5820" name="/newroot/2288/cgroup.controllers" dev="tmpfs" ino=11694 res=1 errno=0
[  414.714732][   T33] audit: type=1800 audit(1756598552.579:6): pid=24619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5820" name="cgroup.controllers" dev="tmpfs" ino=11694 res=0 errno=0
[  415.432672][T24627] __nla_validate_parse: 6 callbacks suppressed
[  415.432683][T24627] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5823'.
[  415.512194][T24636] netlink: 161716 bytes leftover after parsing attributes in process `syz.1.5826'.
[  415.517425][T24636] netlink: zone id is out of range
[  415.573873][T24642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5829'.
[  415.602215][T24643] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5828'.
[  415.606790][T24643] tipc: Disabling bearer <udp:syz2>
[  415.638698][T24647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5829'.
[  415.941971][T24652] lo speed is unknown, defaulting to 1000
[  416.273693][T24664] netlink: 'syz.2.5834': attribute type 1 has an invalid length.
[  416.492058][T24674] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5838'.
[  416.543091][T24673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5837'.
[  416.547894][T24677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5837'.
[  416.721266][T24689] ip6gre2: entered allmulticast mode
[  416.756050][T24691] lo speed is unknown, defaulting to 1000
[  416.923135][T24697] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  416.953701][T24699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5844'.
[  416.962023][T24700] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5844'.
[  417.313774][T24710] netlink: 'syz.3.5847': attribute type 2 has an invalid length.
[  417.350629][T24717] netlink: 'syz.3.5849': attribute type 4 has an invalid length.
[  417.356312][T24717] netlink: 'syz.3.5849': attribute type 4 has an invalid length.
[  417.361296][T24717] netlink: 'syz.3.5849': attribute type 4 has an invalid length.
[  417.484246][T24726] veth0_to_bond: entered allmulticast mode
[  417.689587][T24744] sit1: entered promiscuous mode
[  417.692713][T24744] team0: Port device sit1 added
[  417.772311][T24738] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  418.030435][T24760] netlink: 'syz.2.5858': attribute type 12 has an invalid length.
[  418.359292][T24772] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  419.672841][T24844] netlink: 'syz.1.5883': attribute type 1 has an invalid length.
[  419.691421][T24844] gretap2: entered allmulticast mode
[  419.696475][T24844] bond9: (slave gretap2): making interface the new active one
[  419.700065][T24844] bond9: (slave gretap2): Enslaving as an active interface with an up link
[  419.715069][T24844] lo speed is unknown, defaulting to 1000
[  420.070662][T24882] netlink: 'syz.1.5892': attribute type 13 has an invalid length.
[  420.074129][T24882] netlink: 'syz.1.5892': attribute type 17 has an invalid length.
[  420.083188][T24882] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  420.092919][T24883] lo speed is unknown, defaulting to 1000
[  420.395901][T24905] netlink: 'syz.2.5896': attribute type 4 has an invalid length.
[  420.459758][T24918] __nla_validate_parse: 13 callbacks suppressed
[  420.459770][T24918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5899'.
[  420.508566][T24914] syzkaller0: entered promiscuous mode
[  420.510486][T24914] syzkaller0: entered allmulticast mode
[  420.527305][T24924] lo speed is unknown, defaulting to 1000
[  420.668181][T24924] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  420.772955][T24938] lo speed is unknown, defaulting to 1000
[  420.852536][T24944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5905'.
[  421.297853][T24952] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5907'.
[  421.345382][ T5850] Bluetooth: hci1: command 0x0405 tx timeout
[  421.454463][T24971] netlink: 112 bytes leftover after parsing attributes in process `syz.3.5914'.
[  421.461299][T24971] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5914'.
[  421.465638][T24971] tipc: Bearer <udp:sy{>: already 2 bearers with priority 26
[  421.468878][T24971] tipc: Bearer <udp:sy{>: trying with adjusted priority
[  421.471704][T24971] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5914'.
[  421.475423][T24971] tipc: Invalid UDP bearer configuration
[  421.475452][T24971] tipc: Enabling of bearer <udp:sy{> rejected, failed to enable media
[  421.481309][T24971] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5914'.
[  421.543641][T24978] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5916'.
[  421.606856][T24984] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  421.681881][T24998] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5922'.
[  421.687496][T24996] lo speed is unknown, defaulting to 1000
[  423.253923][T25032] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  423.333907][T25046] validate_nla: 1 callbacks suppressed
[  423.333922][T25046] netlink: 'syz.3.5935': attribute type 3 has an invalid length.
[  423.417962][T25053] IPVS: length: 167 != 24
[  423.461640][T25054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5934'.
[  424.259945][T25074] IPVS: set_ctl: invalid protocol: 1 172.20.20.187:20003
[  424.314112][T25081] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  424.537511][T25099] netlink: 'syz.2.5949': attribute type 1 has an invalid length.
[  424.841885][T25114] lo speed is unknown, defaulting to 1000
[  426.473606][T25133] lo speed is unknown, defaulting to 1000
[  426.473668][T25127] netlink: 'syz.3.5955': attribute type 7 has an invalid length.
[  426.547961][T25127] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  426.777931][T25151] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  427.576989][T25163] netlink: 'syz.3.5966': attribute type 2 has an invalid length.
[  427.580034][T25163] netlink: 'syz.3.5966': attribute type 2 has an invalid length.
[  427.619919][T25163] __nla_validate_parse: 4 callbacks suppressed
[  427.619941][T25163] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5966'.
[  428.322840][T25170] lo speed is unknown, defaulting to 1000
[  429.201978][T25199] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5972'.
[  429.338384][T25207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5975'.
[  429.615904][T25229] netlink: 'syz.2.5980': attribute type 13 has an invalid length.
[  429.618570][T25229] netlink: 'syz.2.5980': attribute type 17 has an invalid length.
[  429.631943][T25229] 8021q: adding VLAN 0 to HW filter on device 
[  429.634689][T25229] 8021q: adding VLAN 0 to HW filter on device team0
[  429.638375][T25229] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  429.652464][T25229] lo speed is unknown, defaulting to 1000
[  429.678380][T25228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5980'.
[  431.151148][   T13] batman_adv: batadv0: IGMP Querier appeared
[  431.153748][   T13] batman_adv: batadv0: MLD Querier appeared
[  431.490145][T25252] lo speed is unknown, defaulting to 1000
[  431.651577][T25278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5993'.
[  431.655202][T25278] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5993'.
[  431.658827][T25278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5993'.
[  431.661742][T25280] netlink: 'syz.1.5994': attribute type 4 has an invalid length.
[  431.662055][T25278] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5993'.
[  431.673372][T25278] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5993'.
[  431.810361][T25292] lo speed is unknown, defaulting to 1000
[  432.214850][T25340] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  432.270620][T25350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6012'.
[  432.363363][T25353] netlink: 'syz.1.6014': attribute type 12 has an invalid length.
[  432.990265][T25384] __nla_validate_parse: 1 callbacks suppressed
[  432.990282][T25384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6023'.
[  433.002967][T25384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6023'.
[  433.198821][T25406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6028'.
[  433.527264][T25415] lo speed is unknown, defaulting to 1000
[  433.569662][T25415] lo speed is unknown, defaulting to 1000
[  433.849455][T25423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6031'.
[  434.077905][T25426] lo speed is unknown, defaulting to 1000
[  434.309925][T25433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6034'.
[  434.313759][T25433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6034'.
[  434.449123][T25442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6037'.
[  434.452378][T25442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6037'.
[  434.687893][T25450] lo speed is unknown, defaulting to 1000
[  434.691522][T25451] lo speed is unknown, defaulting to 1000
[  434.833820][T25451] netlink: 'syz.1.6040': attribute type 2 has an invalid length.
[  434.924831][T25457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6041'.
[  434.928619][T25457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6041'.
[  435.033987][T25466] lo speed is unknown, defaulting to 1000
[  435.054663][T25466] netlink: 'syz.1.6045': attribute type 10 has an invalid length.
[  435.086388][T25473] netlink: 'syz.1.6045': attribute type 2 has an invalid length.
[  435.204208][T25484] lo speed is unknown, defaulting to 1000
[  435.303457][T25484] netlink: 'syz.2.6049': attribute type 2 has an invalid length.
[  435.383092][T25504] lo speed is unknown, defaulting to 1000
[  435.768992][T25529] lo speed is unknown, defaulting to 1000
[  436.191774][T25544] lo speed is unknown, defaulting to 1000
[  436.510517][T25554] netlink: 'syz.1.6068': attribute type 13 has an invalid length.
[  436.513484][T25554] netlink: 'syz.1.6068': attribute type 17 has an invalid length.
[  436.532926][T25554] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  436.628982][T25554] lo speed is unknown, defaulting to 1000
[  436.705634][T25561] veth0_vlan: entered allmulticast mode
[  436.820495][ T5846] Bluetooth: hci1: link tx timeout
[  436.822395][ T5846] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa
[  437.072764][T25580] lo speed is unknown, defaulting to 1000
[  437.183059][T25582] delete_channel: no stack
[  437.319463][T25604] syzkaller1: entered allmulticast mode
[  438.085538][T25616] netlink: 'syz.3.6085': attribute type 1 has an invalid length.
[  438.092110][T25616] __nla_validate_parse: 1 callbacks suppressed
[  438.092125][T25616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6085'.
[  438.419683][T25629] lo speed is unknown, defaulting to 1000
[  438.437248][T25631] lo speed is unknown, defaulting to 1000
[  438.557443][T25647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6092'.
[  438.561108][T25647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6092'.
[  438.875441][ T5846] Bluetooth: hci1: command 0x0405 tx timeout
[  439.478586][T25673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6098'.
[  439.600085][T25685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6099'.
[  439.787945][T25696] netlink: 'syz.2.6102': attribute type 3 has an invalid length.
[  439.836276][T25696] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6102'.
[  439.924030][T25696] ip6gre2: left allmulticast mode
[  439.997997][T25705] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  440.901133][T25737] lo speed is unknown, defaulting to 1000
[  441.117697][T25749] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  441.121223][T25749] syzkaller0: entered promiscuous mode
[  441.123219][T25749] syzkaller0: entered allmulticast mode
[  441.205038][T25758] lo speed is unknown, defaulting to 1000
[  441.534790][T25771] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6117'.
[  442.042812][T25789] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6121'.
[  442.281030][T25796] team0: Device gtp1 is up. Set it down before adding it as a team port
[  442.329796][T25797] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  442.360525][T25799] !: renamed from dummy0 (while UP)
[  442.487953][T25814] lo speed is unknown, defaulting to 1000
[  442.599266][T25831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6128'.
[  442.664565][T25831] sctp: [Deprecated]: syz.2.6128 (pid 25831) Use of int in max_burst socket option.
[  442.664565][T25831] Use struct sctp_assoc_value instead
[  442.671718][T25833] sctp: [Deprecated]: syz.2.6128 (pid 25833) Use of int in max_burst socket option.
[  442.671718][T25833] Use struct sctp_assoc_value instead
[  443.263184][T25853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6132'.
[  443.361850][T25867] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6136'.
[  443.364879][T25867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6136'.
[  443.433275][T25869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6136'.
[  443.564289][T25872] netlink: 'syz.2.6137': attribute type 10 has an invalid length.
[  443.570475][T25872] team0: Cannot enslave team device to itself
[  443.692928][T25881] netlink: 'syz.2.6140': attribute type 5 has an invalid length.
[  443.713533][T25881] dvmrp8: entered allmulticast mode
[  443.721501][T25881] netlink: 'syz.2.6140': attribute type 23 has an invalid length.
[  443.767671][T25880] dvmrp8: left allmulticast mode
[  444.180383][T25911] nbd: must specify a device to reconfigure
[  444.242500][T25913] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  444.689659][T25930] lo speed is unknown, defaulting to 1000
[  445.080948][T25934] sctp: [Deprecated]: syz.3.6157 (pid 25934) Use of struct sctp_assoc_value in delayed_ack socket option.
[  445.080948][T25934] Use struct sctp_sack_info instead
[  445.196455][T25937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6158'.
[  445.199617][T25937] openvswitch: netlink: Flow actions attr not present in new flow.
[  445.843882][T25957] netlink: 'syz.2.6162': attribute type 1 has an invalid length.
[  445.878267][T25959] lo speed is unknown, defaulting to 1000
[  446.044766][T25968] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  446.048442][T25968] syzkaller0: entered promiscuous mode
[  446.050381][T25968] syzkaller0: entered allmulticast mode
[  446.056972][T25968] tipc: Resetting bearer <eth:syzkaller0>
[  446.060754][T25967] tipc: Resetting bearer <eth:syzkaller0>
[  446.076113][T25967] tipc: Disabling bearer <eth:syzkaller0>
[  446.173182][T25974] netlink: 13 bytes leftover after parsing attributes in process `syz.3.6167'.
[  446.221470][T25978] netlink: 'syz.3.6169': attribute type 1 has an invalid length.
[  446.310448][ T5694] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[  447.147419][T26018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6179'.
[  447.153248][T26018] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6179'.
[  447.177431][T26011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6176'.
[  447.239157][T26024] : (slave bond2): Releasing backup interface
[  447.246490][T26024] batadv0: left allmulticast mode
[  447.253503][T26024] batadv0: left promiscuous mode
[  447.259668][T26024] bridge0: port 1(batadv0) entered disabled state
[  447.420118][T26034] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  447.528137][T26049] lo speed is unknown, defaulting to 1000
[  447.843666][T26053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6190'.
[  448.193403][T26072] batman_adv: batadv0: Adding interface: ip6gretap2
[  448.197880][T26072] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  448.210569][T26072] batman_adv: batadv0: Interface activated: ip6gretap2
[  448.257278][T26087] syzkaller0: Caught tx_queue_len zero misconfig
[  448.640936][T26105] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  448.752647][T26113] __nla_validate_parse: 6 callbacks suppressed
[  448.752667][T26113] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6209'.
[  448.760249][T26113] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6209'.
[  448.792592][T26115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6210'.
[  448.796787][T26115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6210'.
[  448.830245][T26117] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6211'.
[  448.859832][T26119] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  449.164679][T26131] netlink: 'syz.3.6216': attribute type 3 has an invalid length.
[  449.169864][T26131] C: entered allmulticast mode
[  449.208826][T26131] siw: device registration error -23
[  449.208918][T26132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6216'.
[  449.214509][T26137] netlink: 'syz.1.6217': attribute type 3 has an invalid length.
[  449.219197][T26130] C: left allmulticast mode
[  449.224422][T26137] syz_tun: entered allmulticast mode
[  449.272926][T26137] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  449.280873][  T792] lo speed is unknown, defaulting to 1000
[  449.290075][  T792] syz2: Port: 1 Link DOWN
[  449.292314][T26136] syz_tun: left allmulticast mode
[  449.461808][T26151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6220'.
[  449.854989][T26161] netlink: 'syz.2.6222': attribute type 12 has an invalid length.
[  450.181620][T26177] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  450.313864][T26187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6228'.
[  452.044517][T26228] lo speed is unknown, defaulting to 1000
[  452.166386][T26231] netlink: 'syz.1.6240': attribute type 3 has an invalid length.
[  452.170748][T26231] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6240'.
[  452.211477][T26228] netlink: 'syz.3.6239': attribute type 2 has an invalid length.
[  453.406134][T26263] xt_HMARK: spi-set and port-set can't be combined
[  453.532283][T26278] netlink: 'syz.1.6256': attribute type 16 has an invalid length.
[  453.535747][T26278] netlink: 'syz.1.6256': attribute type 17 has an invalid length.
[  453.562383][T26278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6256'.
[  453.566885][T26278] IPv6: NLM_F_REPLACE set, but no existing node found!
[  453.589505][T26280] netlink: 'syz.1.6257': attribute type 10 has an invalid length.
[  453.592217][T26280] bond0: entered promiscuous mode
[  453.593941][T26280] bond0: entered allmulticast mode
[  453.597893][T26280] 8021q: adding VLAN 0 to HW filter on device bond0
[  453.601289][T26280] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  454.069137][T26291] C: entered allmulticast mode
[  454.074318][T26291] dvmrp8: entered allmulticast mode
[  454.079020][T26291] C: left allmulticast mode
[  454.080933][T26291] dvmrp8: left allmulticast mode
[  454.131117][T26292] __nla_validate_parse: 1 callbacks suppressed
[  454.131128][T26292] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6260'.
[  455.188679][T26337] lo speed is unknown, defaulting to 1000
[  455.273168][T26345] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  455.324258][T26350] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  455.404126][T26354] lo speed is unknown, defaulting to 1000
[  455.516295][T26354] netlink: 'syz.2.6280': attribute type 2 has an invalid length.
[  455.593903][T26358] lo speed is unknown, defaulting to 1000
[  455.993746][T26393] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  456.120416][T26402] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  456.134588][T26402] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6293'.
[  456.135900][T26403] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6293'.
[  456.144878][T26405] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6294'.
[  456.279071][T26418] lo speed is unknown, defaulting to 1000
[  457.198873][T26457] netlink: 'syz.2.6305': attribute type 3 has an invalid length.
[  457.440947][T26472] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  457.464271][T26474] syzkaller0: left promiscuous mode
[  457.466277][T26474] syzkaller0: left allmulticast mode
[  457.469756][T26474] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  457.494519][T26476] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  457.528509][T26478] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6312'.
[  457.881468][T26494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6317'.
[  457.884537][T26494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6317'.
[  458.110941][T26516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6325'.
[  458.115249][T26516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6325'.
[  458.205443][T26524] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6328'.
[  458.991516][T26536] netlink: 'syz.1.6331': attribute type 3 has an invalid length.
[  458.997520][T26536] syz_tun: entered allmulticast mode
[  459.027341][T26536] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  459.033914][T26535] syz_tun: left allmulticast mode
[  459.057922][T26540] netlink: 'syz.1.6332': attribute type 1 has an invalid length.
[  459.138111][T26550] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  459.240959][T26554] __nla_validate_parse: 4 callbacks suppressed
[  459.240983][T26554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6339'.
[  459.694522][T26583] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6347'.
[  459.726289][T26583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6347'.
[  459.965402][T26614] netlink: 348 bytes leftover after parsing attributes in process `syz.2.6353'.
[  460.049805][T26622] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  460.088492][T26626] bridge0: failed insert local address into bridge forwarding table
[  460.097459][T26626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6359'.
[  460.553563][T26653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6366'.
[  460.557490][T26653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6366'.
[  460.630088][T26662] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6369'.
[  460.707788][T26666] sctp: [Deprecated]: syz.2.6371 (pid 26666) Use of int in max_burst socket option.
[  460.707788][T26666] Use struct sctp_assoc_value instead
[  460.749691][T26671] lo speed is unknown, defaulting to 1000
[  460.802628][T26675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6373'.
[  460.806095][T26675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6373'.
[  460.941515][T26685] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  460.960660][T26690] netlink: 'syz.3.6378': attribute type 1 has an invalid length.
[  461.843211][T26714] lo speed is unknown, defaulting to 1000
[  462.181702][T26730] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  462.196817][T26730] lo speed is unknown, defaulting to 1000
[  462.329900][T26737] lo speed is unknown, defaulting to 1000
[  463.014499][T26790] pimreg: entered allmulticast mode
[  463.170189][T26801] xt_l2tp: unknown flags: 51
[  463.175909][T26801] netlink: 'syz.2.6409': attribute type 12 has an invalid length.
[  464.097439][T26845] netlink: 'syz.1.6419': attribute type 1 has an invalid length.
[  464.814202][T26878] __nla_validate_parse: 143 callbacks suppressed
[  464.814223][T26878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6430'.
[  464.821407][T26878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6430'.
[  465.771731][T26919] netlink: 332 bytes leftover after parsing attributes in process `syz.2.6444'.
[  465.777855][T26922] netlink: 332 bytes leftover after parsing attributes in process `syz.2.6444'.
[  465.849241][T26929] sctp: [Deprecated]: syz.2.6445 (pid 26929) Use of struct sctp_assoc_value in delayed_ack socket option.
[  465.849241][T26929] Use struct sctp_sack_info instead
[  465.857164][T26928] sctp: [Deprecated]: syz.2.6445 (pid 26928) Use of struct sctp_assoc_value in delayed_ack socket option.
[  465.857164][T26928] Use struct sctp_sack_info instead
[  465.863010][T26928] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6445'.
[  465.866517][T26929] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6445'.
[  465.872460][T26928] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6445'.
[  466.444506][T26947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6450'.
[  466.451008][T26947] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6450'.
[  466.910375][T26963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6456'.
[  466.953681][T26970] IPVS: set_ctl: invalid protocol: 2 172.20.20.59:20000
[  467.019008][T26977] lo speed is unknown, defaulting to 1000
[  467.223784][T26984] lo speed is unknown, defaulting to 1000
[  467.277776][T26990] lo speed is unknown, defaulting to 1000
[  470.163590][T27150] __nla_validate_parse: 8 callbacks suppressed
[  470.163605][T27150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6502'.
[  470.169669][T27150] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6502'.
[  470.843347][T27170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6508'.
[  471.298417][T27203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6513'.
[  471.771931][T27220] lo speed is unknown, defaulting to 1000
[  471.909826][T27220] netlink: 'syz.1.6519': attribute type 2 has an invalid length.
[  472.101612][T27228] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  472.110241][T27228] netlink: 'syz.1.6522': attribute type 7 has an invalid length.
[  472.110275][T27231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6523'.
[  472.113458][T27228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6522'.
[  472.217026][T27242] openvswitch: netlink: IP tunnel TTL not specified.
[  472.258806][T27246] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  472.362995][T27259] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6533'.
[  473.261823][T27281] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  474.159753][T27292] tun0: tun_chr_ioctl cmd 1074025675
[  474.161712][T27292] tun0: persist enabled
[  474.163476][T27292] tun0: tun_chr_ioctl cmd 1074025675
[  474.165790][T27292] tun0: persist enabled
[  474.390946][T27314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6546'.
[  474.394472][T27314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6546'.
[  475.343890][T27338] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  475.370973][T27340] siw: device registration error -23
[  475.480370][T27359] Unsupported ieee802154 address type: 0
[  475.488549][T27361] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6560'.
[  475.650980][T27361] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6560'.
[  475.654476][T27361] netlink: 216 bytes leftover after parsing attributes in process `syz.2.6560'.
[  475.756702][T27377] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  475.918088][T27386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6568'.
[  476.124127][T27400] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  476.248309][T27406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6574'.
[  476.394400][T27402] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  476.413600][T27414] syz_tun: entered allmulticast mode
[  476.419227][T27414] dvmrp8: entered allmulticast mode
[  476.443650][T27414] lo speed is unknown, defaulting to 1000
[  476.476411][T27414] netlink: 'syz.1.6575': attribute type 23 has an invalid length.
[  476.480784][T27413] syz_tun: left allmulticast mode
[  476.482952][T27413] dvmrp8: left allmulticast mode
[  476.654053][T27434] lo speed is unknown, defaulting to 1000
[  476.753442][T27440] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  476.804604][T27442] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6582'.
[  476.847299][T27434] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6580'.
[  477.173413][T27463] lo speed is unknown, defaulting to 1000
[  477.511826][T27474] netlink: 468 bytes leftover after parsing attributes in process `syz.3.6588'.
[  477.576774][T27478] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6588'.
[  478.372307][T27492] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  478.454986][T27496] pim6reg: entered allmulticast mode
[  478.978048][T27526] lo speed is unknown, defaulting to 1000
[  479.149468][T27538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6607'.
[  480.017450][T27589] lo speed is unknown, defaulting to 1000
[  480.344242][T27615] lo speed is unknown, defaulting to 1000
[  480.445313][T27628] netlink: 'syz.2.6634': attribute type 1 has an invalid length.
[  480.459052][T27626] infiniband syz!: set down
[  480.461175][T27626] infiniband syz!: added team_slave_0
[  480.474302][T27626] RDS/IB: syz!: added
[  480.477137][T27626] smc: adding ib device syz! with port count 1
[  480.479239][T27626] smc:    ib device syz! port 1 has pnetid 
[  480.988019][T27654] __nla_validate_parse: 5 callbacks suppressed
[  480.988038][T27654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6639'.
[  480.997053][T27654] netlink: 'syz.3.6639': attribute type 11 has an invalid length.
[  481.046876][T27658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6641'.
[  481.050960][T27658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6641'.
[  481.265526][T27669] netlink: 'syz.1.6644': attribute type 1 has an invalid length.
[  481.267927][T27669] netlink: 172 bytes leftover after parsing attributes in process `syz.1.6644'.
[  481.843019][T27720] lo speed is unknown, defaulting to 1000
[  482.179481][T27743] netlink: 'syz.3.6661': attribute type 3 has an invalid length.
[  482.189686][T27743] C: entered allmulticast mode
[  482.198579][T27747] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  482.240314][T27743] siw: device registration error -23
[  482.243419][T27743] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6661'.
[  482.250269][T27742] C: left allmulticast mode
[  482.283166][T27755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6665'.
[  482.288234][T27755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6665'.
[  482.303675][T27753] netlink: 'syz.2.6664': attribute type 12 has an invalid length.
[  482.424366][T27767] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  482.461564][T27760] tun0: tun_chr_ioctl cmd 1074812118
[  482.617978][T27784] lo speed is unknown, defaulting to 1000
[  483.335745][T27808] netlink: 'syz.3.6681': attribute type 1 has an invalid length.
[  483.338514][T27808] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6681'.
[  483.866437][T27821] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6685'.
[  483.871665][T27822] IPv6: sit3: Disabled Multicast RS
[  483.902696][T27821] netlink: 161716 bytes leftover after parsing attributes in process `syz.1.6685'.
[  483.908030][T27821] netlink: zone id is out of range
[  483.910112][T27821] netlink: zone id is out of range
[  483.912427][T27821] netlink: zone id is out of range
[  483.915049][T27821] netlink: zone id is out of range
[  483.917170][T27821] netlink: zone id is out of range
[  483.919077][T27821] netlink: zone id is out of range
[  483.920928][T27821] netlink: zone id is out of range
[  483.922690][T27821] netlink: zone id is out of range
[  483.926435][T27821] netlink: zone id is out of range
[  483.928293][T27821] netlink: zone id is out of range
[  483.986090][T27833] lo speed is unknown, defaulting to 1000
[  484.226914][T27846] netlink: 'syz.2.6694': attribute type 6 has an invalid length.
[  484.249116][T27846] lo speed is unknown, defaulting to 1000
[  486.061610][T27928] __nla_validate_parse: 6 callbacks suppressed
[  486.061625][T27928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6714'.
[  486.268140][T27933] lo speed is unknown, defaulting to 1000
[  486.530465][T27942] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.6718'.
[  486.534125][T27942] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6718'.
[  486.557622][T27942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6718'.
[  486.609360][T27943] siw: device registration error -23
[  486.867112][T27946] lo speed is unknown, defaulting to 1000
[  486.882046][T27949] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6721'.
[  487.165871][T27958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6722'.
[  487.222439][T27959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6722'.
[  487.233627][T27959] netlink: 'syz.1.6722': attribute type 29 has an invalid length.
[  487.237983][T27959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6722'.
[  487.347307][T27961] lo speed is unknown, defaulting to 1000
[  487.542088][T27971] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6725'.
[  487.587270][   T33] audit: type=1107 audit(1756598625.459:7): pid=27970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  487.746372][T27978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6727'.
[  488.126735][T28021] lo speed is unknown, defaulting to 1000
[  488.789060][T28050] lo speed is unknown, defaulting to 1000
[  489.176583][T28079] netlink: 'syz.3.6754': attribute type 3 has an invalid length.
[  489.182220][T28079] C: entered allmulticast mode
[  489.218233][T28079] siw: device registration error -23
[  489.326903][T28079] veth0_vlan: left allmulticast mode
[  489.358943][T28078] C: left allmulticast mode
[  489.584306][T28105] lo speed is unknown, defaulting to 1000
[  489.859241][T28124] lo speed is unknown, defaulting to 1000
[  489.861944][T28125] lo speed is unknown, defaulting to 1000
[  490.036430][T28131] netlink: 'syz.1.6765': attribute type 13 has an invalid length.
[  490.039685][T28131] netlink: 'syz.1.6765': attribute type 17 has an invalid length.
[  490.112536][T28131] bond0: left promiscuous mode
[  490.114710][T28131] bond0: left allmulticast mode
[  490.119376][T28131] 8021q: adding VLAN 0 to HW filter on device bond0
[  490.128595][T28131] 8021q: adding VLAN 0 to HW filter on device team0
[  490.140303][T28131] net_ratelimit: 262 callbacks suppressed
[  490.140309][T28131] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  490.148833][T17555] lo speed is unknown, defaulting to 1000
[  490.151672][T17555] syz2: Port: 1 Link ACTIVE
[  490.259502][T28133] lo speed is unknown, defaulting to 1000
[  490.724206][T28155] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  491.206217][T28174] lo speed is unknown, defaulting to 1000
[  491.223663][T28176] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[  491.582790][T28190] __nla_validate_parse: 7 callbacks suppressed
[  491.582808][T28190] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6783'.
[  491.714853][T28202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6786'.
[  492.571590][T28237] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6796'.
[  492.623274][T28242] IPVS: Error connecting to the multicast addr
[  492.629116][T28243] veth0_vlan: mtu less than device minimum
[  492.898727][T28272] netlink: 'syz.2.6806': attribute type 21 has an invalid length.
[  492.901375][T28272] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6806'.
[  493.184886][T28285] netlink: 'syz.1.6810': attribute type 12 has an invalid length.
[  493.416006][T28296] lo speed is unknown, defaulting to 1000
[  493.753121][T28303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6815'.
[  494.203970][T28340] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  494.220701][T28340] lo speed is unknown, defaulting to 1000
[  494.326103][T28346] netlink: 'syz.2.6830': attribute type 1 has an invalid length.
[  494.400216][T28352] tipc: Enabled bearer <eth:team0>, priority 10
[  495.217475][T28392] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6844'.
[  495.220472][T28392] tc_dump_action: action bad kind
[  495.240756][T28392] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.6844'.
[  495.356063][T28407] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  495.567229][T28426] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  495.744905][T28446] netlink: 'syz.1.6861': attribute type 12 has an invalid length.
[  495.748411][T28446] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.6861'.
[  495.829782][T28459] lo speed is unknown, defaulting to 1000
[  496.024701][T28465] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6867'.
[  496.698386][T28491] netlink: 'syz.3.6874': attribute type 1 has an invalid length.
[  496.701197][T28491] netlink: 232 bytes leftover after parsing attributes in process `syz.3.6874'.
[  496.704961][T28491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6874'.
[  496.822233][T28495] lo speed is unknown, defaulting to 1000
[  497.282119][T28510] lo speed is unknown, defaulting to 1000
[  498.008758][T28529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6885'.
[  498.011851][T28529] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6885'.
[  498.014774][T28529] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6885'.
[  498.053907][T28534] netlink: 'syz.2.6887': attribute type 7 has an invalid length.
[  498.062000][T28536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6886'.
[  498.062389][T28534] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6887'.
[  498.248157][T28544] lo speed is unknown, defaulting to 1000
[  498.252214][T28545] lo speed is unknown, defaulting to 1000
[  498.709467][T28560] lo speed is unknown, defaulting to 1000
[  498.939821][T28570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6898'.
[  499.119271][   T33] audit: type=1107 audit(1756598636.989:8): pid=28584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=',WZ߂%眮ldj8p	^kpFp*;bA	>MJ^=]*5RKrjz7eEs綂}kHlw2^ܕ̲`ѳ6Oj^!;LP16,y[زN>=Y['
[  499.295065][T28605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6910'.
[  499.521221][T28627] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  499.526261][T28627] syzkaller0: entered promiscuous mode
[  499.529245][T28627] syzkaller0: entered allmulticast mode
[  500.278326][T28635] ip6gre1: entered allmulticast mode
[  500.291013][T28621] tipc: Resetting bearer <eth:syzkaller0>
[  500.296918][T28621] tipc: Disabling bearer <eth:syzkaller0>
[  500.305463][T28637] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  500.310867][T28637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6920'.
[  500.631056][T28658] IPVS: set_ctl: invalid protocol: 98 224.0.0.2:65535
[  501.750155][T28713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6935'.
[  501.778000][T28713] netlink: 'syz.3.6935': attribute type 12 has an invalid length.
[  501.895320][T28716] netlink: 248 bytes leftover after parsing attributes in process `syz.3.6936'.
[  502.208278][T28737] veth0_to_bond: left allmulticast mode
[  502.217403][T28737] gretap2: left allmulticast mode
[  502.219522][  T793] lo speed is unknown, defaulting to 1000
[  502.222026][  T793] syz2: Port: 1 Link DOWN
[  502.224162][T28737] IPVS: length: 200 != 8
[  502.249876][T28745] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  502.253053][T28745] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  502.283290][T28749] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv侦Kc'A
[  502.502817][T28754] netlink: 'syz.2.6948': attribute type 23 has an invalid length.
[  502.784549][T28775] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  502.844806][T28780] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  502.859152][T28784] tipc: Resetting bearer <eth:syzkaller0>
[  502.876721][T28777] tipc: Disabling bearer <eth:syzkaller0>
[  502.966082][T28798] lo speed is unknown, defaulting to 1000
[  503.310909][T28821] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6967'.
[  503.431829][T28848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6975'.
[  503.481756][T28862] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  503.488024][T28862] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  503.539411][T28866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6980'.
[  503.781233][T28896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6987'.
[  503.849946][T28900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6988'.
[  503.854036][T28900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6988'.
[  504.509599][T28922] lo speed is unknown, defaulting to 1000
[  505.029856][T28927] netlink: 'syz.3.6995': attribute type 12 has an invalid length.
[  505.035536][T28927] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.6995'.
[  505.185069][T28933] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  505.188193][T28933] syzkaller0: entered promiscuous mode
[  505.190031][T28933] syzkaller0: entered allmulticast mode
[  505.198680][T28933] tipc: Resetting bearer <eth:syzkaller0>
[  505.253634][T28937] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6999'.
[  505.260316][T28932] tipc: Resetting bearer <eth:syzkaller0>
[  505.266239][T28932] tipc: Disabling bearer <eth:syzkaller0>
[  505.306604][T28943] netlink: 'syz.2.7000': attribute type 3 has an invalid length.
[  505.364686][T28954] netlink: 'syz.2.7004': attribute type 1 has an invalid length.
[  505.397716][T28959] netlink: 'syz.2.7006': attribute type 1 has an invalid length.
[  505.401085][T28959] netlink: 'syz.2.7006': attribute type 3 has an invalid length.
[  505.404208][T28959] netlink: 'syz.2.7006': attribute type 1 has an invalid length.
[  505.410249][T28959] NCSI netlink: No device for ifindex 0
[  505.513332][T28971] sit0: entered promiscuous mode
[  505.527575][T28971] netlink: 'syz.3.7009': attribute type 1 has an invalid length.
[  505.714840][T29000] netlink: 'syz.3.7015': attribute type 1 has an invalid length.
[  505.730666][T29000] 8021q: adding VLAN 0 to HW filter on device bond6
[  505.772043][T28999] veth5: entered promiscuous mode
[  505.778603][T27070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  505.783060][T27070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  505.863310][T29006] lo speed is unknown, defaulting to 1000
[  505.976464][T29026] netlink: 'syz.3.7020': attribute type 10 has an invalid length.
[  505.980465][T29026] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  506.192954][T29036] lo speed is unknown, defaulting to 1000
[  506.201502][T29037] lo speed is unknown, defaulting to 1000
[  506.529310][T29062] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  506.759669][T29083] bridge0: entered allmulticast mode
[  506.827754][T29092] lo speed is unknown, defaulting to 1000
[  507.271405][T29112] lo speed is unknown, defaulting to 1000
[  507.799665][T29166] sctp: [Deprecated]: syz.1.7051 (pid 29166) Use of struct sctp_assoc_value in delayed_ack socket option.
[  507.799665][T29166] Use struct sctp_sack_info instead
[  507.804833][T29167] sctp: [Deprecated]: syz.1.7051 (pid 29167) Use of struct sctp_assoc_value in delayed_ack socket option.
[  507.804833][T29167] Use struct sctp_sack_info instead
[  507.919580][T29170] netlink: 'syz.3.7054': attribute type 12 has an invalid length.
[  508.581551][T29204] lo speed is unknown, defaulting to 1000
[  508.659155][T29213] __nla_validate_parse: 8 callbacks suppressed
[  508.659816][T29213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7064'.
[  508.720407][T29216] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  508.790390][T29223] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7067'.
[  508.858803][T29227] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  508.871381][T29226] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  509.185687][ T5694] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  509.388816][T29282] lo speed is unknown, defaulting to 1000
[  509.733628][T29290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7084'.
[  510.010292][T29299] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7085'.
[  510.013385][T29299] netlink: 19 bytes leftover after parsing attributes in process `syz.2.7085'.
[  510.101515][T29322] lo speed is unknown, defaulting to 1000
[  510.143676][T29317] openvswitch: netlink: Multiple metadata blocks provided
[  510.156349][T29331] validate_nla: 3 callbacks suppressed
[  510.156364][T29331] netlink: 'syz.1.7093': attribute type 2 has an invalid length.
[  510.623784][T29378] lo speed is unknown, defaulting to 1000
[  510.765561][T29378] netlink: 'syz.2.7107': attribute type 15 has an invalid length.
[  510.772079][T29378] netlink: 'syz.2.7107': attribute type 2 has an invalid length.
[  510.808842][T29387] netlink: 'syz.1.7108': attribute type 12 has an invalid length.
[  510.993988][T29399] lo speed is unknown, defaulting to 1000
[  511.830899][T29415] sctp: [Deprecated]: syz.1.7114 (pid 29415) Use of struct sctp_assoc_value in delayed_ack socket option.
[  511.830899][T29415] Use struct sctp_sack_info instead
[  511.902022][T29419] lo speed is unknown, defaulting to 1000
[  512.090909][T29428] netlink: 'syz.2.7120': attribute type 2 has an invalid length.
[  512.093842][T29428] netlink: 1184 bytes leftover after parsing attributes in process `syz.2.7120'.
[  512.268468][T29430] lo speed is unknown, defaulting to 1000
[  512.318971][T29432] lo speed is unknown, defaulting to 1000
[  512.839181][T29468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7128'.
[  512.868243][T29458] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:65535
[  512.922814][T29468] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  512.933550][T29472] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7129'.
[  513.322096][T29488] lo speed is unknown, defaulting to 1000
[  513.507096][T29514] lo speed is unknown, defaulting to 1000
[  513.564048][T29520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7144'.
[  513.572946][T29520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7144'.
[  513.713305][T29527] lo speed is unknown, defaulting to 1000
[  513.748026][T29514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7142'.
[  513.909903][T29535] bridge0: port 1(ipvlan3) entered blocking state
[  513.915771][T29535] bridge0: port 1(ipvlan3) entered disabled state
[  513.918771][T29535] ipvlan3: entered allmulticast mode
[  513.921071][T29535] bridge0: entered allmulticast mode
[  513.941512][T29542] netlink: 'syz.2.7148': attribute type 12 has an invalid length.
[  513.949342][T29535] ipvlan3: left allmulticast mode
[  513.951478][T29535] bridge0: left allmulticast mode
[  514.021908][T29548] lo speed is unknown, defaulting to 1000
[  514.146545][T29552] pimreg: left allmulticast mode
[  514.198519][T29554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7150'.
[  514.199611][T29552] tipc: Resetting bearer <eth:syzkaller0>
[  514.214790][T29552] batman_adv: batadv0: Interface deactivated: ip6gretap2
[  514.258134][T29568] lo speed is unknown, defaulting to 1000
[  514.341131][T29573] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  514.477885][T29585] netlink: 'syz.2.7162': attribute type 83 has an invalid length.
[  514.481768][T29585] netlink: 'syz.2.7162': attribute type 21 has an invalid length.
[  514.484970][T29585] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7162'.
[  514.687259][T29604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7164'.
[  514.721810][T29608] lo speed is unknown, defaulting to 1000
[  514.839735][T29611] lo speed is unknown, defaulting to 1000
[  515.194468][T29612] lo speed is unknown, defaulting to 1000
[  515.371808][T29611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7167'.
[  515.475346][T29633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7172'.
[  515.668254][T29645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7175'.
[  515.671753][T29645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7175'.
[  515.738144][T29649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7176'.
[  516.357622][T29684] lo speed is unknown, defaulting to 1000
[  516.467061][T29692] lo speed is unknown, defaulting to 1000
[  516.718568][T29700] lo speed is unknown, defaulting to 1000
[  517.054358][T29730] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  517.210914][T29735] lo speed is unknown, defaulting to 1000
[  517.518116][T29751] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7199'.
[  517.636236][T29756] netlink: 'syz.1.7201': attribute type 1 has an invalid length.
[  517.647503][T29756] 8021q: adding VLAN 0 to HW filter on device bond10
[  517.655937][T29756] bond10: (slave wlan0): Enslaving as an active interface with a down link
[  517.809946][T29773] lo speed is unknown, defaulting to 1000
[  517.967785][T29789] delete_channel: no stack
[  518.328296][T29815] lo speed is unknown, defaulting to 1000
[  518.472507][T29825] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  518.998178][T29864] __nla_validate_parse: 3 callbacks suppressed
[  518.998201][T29864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7225'.
[  519.598454][T29888] netlink: 232 bytes leftover after parsing attributes in process `syz.1.7233'.
[  519.619762][T29887] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7232'.
[  519.678175][T29897] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7234'.
[  519.687787][T29897] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7234'.
[  519.697587][T29897] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7234'.
[  519.711706][T29901] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7236'.
[  520.772780][T29947] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7252'.
[  520.927552][T29964] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7256'.
[  521.031642][T29975] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7259'.
[  521.349623][T30000] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  521.386687][T30001] lo speed is unknown, defaulting to 1000
[  521.643846][T30016] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  521.854120][T30021] netlink: 'syz.1.7275': attribute type 5 has an invalid length.
[  521.946197][T30026] netlink: 'syz.1.7276': attribute type 10 has an invalid length.
[  521.949074][T30026] bond0: entered promiscuous mode
[  521.950930][T30026] bond0: entered allmulticast mode
[  521.953119][T30026] 8021q: adding VLAN 0 to HW filter on device bond0
[  521.956642][T30026] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  522.251684][T30037] lo speed is unknown, defaulting to 1000
[  522.560527][T30047] siw: device registration error -23
[  522.651778][T30049] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  522.830625][T30057] syzkaller0: entered promiscuous mode
[  522.832751][T30057] syzkaller0: entered allmulticast mode
[  523.519879][T30092] lo speed is unknown, defaulting to 1000
[  523.916731][T30102] lo speed is unknown, defaulting to 1000
[  524.163300][T30119] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  524.323156][T30142] netlink: 'syz.1.7309': attribute type 6 has an invalid length.
[  524.346776][T30140] lo speed is unknown, defaulting to 1000
[  524.522235][T30149] __nla_validate_parse: 11 callbacks suppressed
[  524.522252][T30149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7310'.
[  525.040299][T30170] lo speed is unknown, defaulting to 1000
[  525.118281][T30181] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  525.233652][T30188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7318'.
[  525.497502][T30195] netlink: 'syz.1.7321': attribute type 32 has an invalid length.
[  525.698108][T30207] netlink: 27 bytes leftover after parsing attributes in process `syz.1.7323'.
[  525.870353][T30173] tipc: Disabling bearer <eth:syzkaller0>
[  525.903543][T30230] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  525.911427][T30230] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  526.120835][T30240] lo speed is unknown, defaulting to 1000
[  526.157978][T30247] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7334'.
[  526.164088][T30247] sctp: [Deprecated]: syz.1.7334 (pid 30247) Use of int in max_burst socket option deprecated.
[  526.164088][T30247] Use struct sctp_assoc_value instead
[  526.256351][T30251] netlink: 'syz.2.7339': attribute type 1 has an invalid length.
[  526.272588][T30251] 8021q: adding VLAN 0 to HW filter on device bond5
[  526.304866][T30251] lo speed is unknown, defaulting to 1000
[  527.210108][T30284] netlink: 28640 bytes leftover after parsing attributes in process `syz.2.7348'.
[  527.390111][T30295] lo: entered promiscuous mode
[  527.392314][T30295] lo: entered allmulticast mode
[  527.394927][T30295] tunl0: entered promiscuous mode
[  527.397724][T30295] tunl0: entered allmulticast mode
[  527.400584][T30295] gre0: entered promiscuous mode
[  527.402986][T30295] gre0: entered allmulticast mode
[  527.405997][T30295] gretap0: entered promiscuous mode
[  527.408451][T30295] gretap0: entered allmulticast mode
[  527.411016][T30295] erspan0: entered promiscuous mode
[  527.413481][T30295] erspan0: entered allmulticast mode
[  527.416209][T30295] ip_vti0: entered promiscuous mode
[  527.418582][T30295] ip_vti0: entered allmulticast mode
[  527.422025][T30295] v: entered promiscuous mode
[  527.424143][T30295] v: entered allmulticast mode
[  527.427747][T30295] sit0: entered promiscuous mode
[  527.429774][T30295] sit0: entered allmulticast mode
[  527.431945][T30295] ip6tnl0: entered promiscuous mode
[  527.439598][T30295] ip6tnl0: entered allmulticast mode
[  527.441624][T30295] ip6gre0: entered promiscuous mode
[  527.443309][T30295] ip6gre0: entered allmulticast mode
[  527.445210][T30295] ip6gretap0: entered promiscuous mode
[  527.447402][T30295] ip6gretap0: entered allmulticast mode
[  527.449699][T30295] : entered promiscuous mode
[  527.451623][T30295] : entered allmulticast mode
[  527.453715][T30295] team0: entered promiscuous mode
[  527.456008][T30295] team0: entered allmulticast mode
[  527.458188][T30295] dummy0: entered promiscuous mode
[  527.460235][T30295] dummy0: entered allmulticast mode
[  527.462509][T30295] nlmon0: entered promiscuous mode
[  527.464592][T30295] nlmon0: entered allmulticast mode
[  527.467256][T30295] caif0: entered promiscuous mode
[  527.469281][T30295] caif0: entered allmulticast mode
[  527.471449][T30295] vxcan0: entered promiscuous mode
[  527.473498][T30295] vxcan0: entered allmulticast mode
[  527.473709][T30303] netlink: 'syz.3.7352': attribute type 13 has an invalid length.
[  527.475818][T30295] vxcan1: entered promiscuous mode
[  527.475842][T30295] vxcan1: entered allmulticast mode
[  527.475904][T30295] veth0: entered promiscuous mode
[  527.479338][T30303] netlink: 'syz.3.7352': attribute type 17 has an invalid length.
[  527.480672][T30295] veth0: entered allmulticast mode
[  527.480880][T30295] veth1: entered promiscuous mode
[  527.491909][T30295] veth1: entered allmulticast mode
[  527.494157][T30295] wg1: entered promiscuous mode
[  527.496353][T30295] wg1: entered allmulticast mode
[  527.498496][T30295] wg2: entered promiscuous mode
[  527.500459][T30295] wg2: entered allmulticast mode
[  527.502214][T30295] veth0_to_bridge: entered promiscuous mode
[  527.504490][T30295] veth0_to_bridge: entered allmulticast mode
[  527.506922][T30295] bridge_slave_0: entered promiscuous mode
[  527.508877][T30295] bridge_slave_0: entered allmulticast mode
[  527.510774][T30295] veth1_to_bridge: entered promiscuous mode
[  527.512601][T30295] veth1_to_bridge: entered allmulticast mode
[  527.514487][T30295] bridge_slave_1: entered promiscuous mode
[  527.516726][T30295] bridge_slave_1: entered allmulticast mode
[  527.519191][T30295] veth0_to_bond: entered promiscuous mode
[  527.521465][T30295] veth0_to_bond: entered allmulticast mode
[  527.523947][T30295] bond_slave_0: entered promiscuous mode
[  527.526453][T30295] bond_slave_0: entered allmulticast mode
[  527.529504][T30295] veth1_to_bond: entered promiscuous mode
[  527.532938][T30295] veth1_to_bond: entered allmulticast mode
[  527.535702][T30295] bond_slave_1: entered promiscuous mode
[  527.537974][T30295] bond_slave_1: entered allmulticast mode
[  527.540573][T30295] veth0_to_team: entered promiscuous mode
[  527.542869][T30295] veth0_to_team: entered allmulticast mode
[  527.545541][T30295] team_slave_0: entered promiscuous mode
[  527.547756][T30295] team_slave_0: entered allmulticast mode
[  527.550242][T30295] veth1_to_team: entered promiscuous mode
[  527.552539][T30295] veth1_to_team: entered allmulticast mode
[  527.555006][T30295] team_slave_1: entered promiscuous mode
[  527.557459][T30295] team_slave_1: entered allmulticast mode
[  527.559903][T30295] veth0_to_batadv: entered promiscuous mode
[  527.562260][T30295] veth0_to_batadv: entered allmulticast mode
[  527.564809][T30295] batadv_slave_0: entered promiscuous mode
[  527.567286][T30295] batadv_slave_0: entered allmulticast mode
[  527.569808][T30295] xfrm0: entered promiscuous mode
[  527.571896][T30295] xfrm0: entered allmulticast mode
[  527.574048][T30295] veth0_to_hsr: entered promiscuous mode
[  527.576801][T30295] veth0_to_hsr: entered allmulticast mode
[  527.579165][T30295] hsr_slave_0: entered allmulticast mode
[  527.581492][T30295] veth1_to_hsr: entered promiscuous mode
[  527.583765][T30295] veth1_to_hsr: entered allmulticast mode
[  527.586432][T30295] hsr_slave_1: entered allmulticast mode
[  527.588852][T30295] hsr0: entered promiscuous mode
[  527.590864][T30295] hsr0: entered allmulticast mode
[  527.593095][T30295] veth1_virt_wifi: entered promiscuous mode
[  527.595621][T30295] veth1_virt_wifi: entered allmulticast mode
[  527.598242][T30295] veth0_virt_wifi: entered promiscuous mode
[  527.600612][T30295] veth0_virt_wifi: entered allmulticast mode
[  527.603082][T30295] geneve0: entered promiscuous mode
[  527.605227][T30295] geneve0: entered allmulticast mode
[  527.607495][T30295] geneve1: entered promiscuous mode
[  527.609581][T30295] geneve1: entered allmulticast mode
[  527.611881][T30295] mac80211_hwsim hwsim4 ;: entered promiscuous mode
[  527.614631][T30295] mac80211_hwsim hwsim4 ;: entered allmulticast mode
[  527.617735][T30295] ip6tnl1: entered promiscuous mode
[  527.619876][T30295] ip6tnl1: entered allmulticast mode
[  527.621991][T30295] geneve2: entered promiscuous mode
[  527.624028][T30295] geneve2: entered allmulticast mode
[  527.626434][T30295] veth2: entered promiscuous mode
[  527.628489][T30295] veth2: entered allmulticast mode
[  527.630680][T30295] veth3: entered promiscuous mode
[  527.632723][T30295] veth3: entered allmulticast mode
[  527.634936][T30295] ip6erspan0: entered promiscuous mode
[  527.637315][T30295] ip6erspan0: entered allmulticast mode
[  527.639551][T30295] vlan2: entered promiscuous mode
[  527.641527][T30295] vlan2: entered allmulticast mode
[  527.643507][T30295] veth4: entered promiscuous mode
[  527.645635][T30295] veth4: entered allmulticast mode
[  527.647922][T30295] veth5: entered promiscuous mode
[  527.649958][T30295] veth5: entered allmulticast mode
[  527.652091][T30295] ave_0: entered allmulticast mode
[  527.654277][T30295] mac80211_hwsim hwsim12 wlan2: entered promiscuous mode
[  527.657184][T30295] mac80211_hwsim hwsim12 wlan2: entered allmulticast mode
[  527.660169][T30295] tipc: Resetting bearer <eth:syzkaller0>
[  527.664613][T30295] geneve1.1: entered promiscuous mode
[  527.667109][T30295] geneve1.1: entered allmulticast mode
[  527.669431][T30295] syztnl0: entered promiscuous mode
[  527.671559][T30295] syztnl0: entered allmulticast mode
[  527.673858][T30295] ip6gretap1: entered promiscuous mode
[  527.676218][T30295] ip6gretap1: entered allmulticast mode
[  527.678582][T30295] vxcan2: entered promiscuous mode
[  527.680653][T30295] vxcan2: entered allmulticast mode
[  527.682902][T30295] vxcan3: entered promiscuous mode
[  527.684973][T30295] vxcan3: entered allmulticast mode
[  527.687498][T30295] gre1: entered promiscuous mode
[  527.689459][T30295] gre1: entered allmulticast mode
[  527.691565][T30295] syztnl1: entered promiscuous mode
[  527.693445][T30295] syztnl1: entered allmulticast mode
[  527.695825][T30295] sit1: entered promiscuous mode
[  527.697841][T30295] sit1: entered allmulticast mode
[  527.699940][T30295] gre2: entered promiscuous mode
[  527.701912][T30295] gre2: entered allmulticast mode
[  527.703990][T30295] ip6gre1: entered promiscuous mode
[  527.706163][T30295] ip6gre1: entered allmulticast mode
[  527.708399][T30295] mac80211_hwsim hwsim17 wlan3: entered promiscuous mode
[  527.710876][T30295] mac80211_hwsim hwsim17 wlan3: entered allmulticast mode
[  527.713666][T30295] ip6tnl2: entered promiscuous mode
[  527.715960][T30295] ip6tnl2: entered allmulticast mode
[  527.718200][T30295] gre3: entered promiscuous mode
[  527.720214][T30295] gre3: entered allmulticast mode
[  527.722341][T30295] ipip0: entered promiscuous mode
[  527.724380][T30295] ipip0: entered allmulticast mode
[  527.726708][T30295] vxlan0: entered promiscuous mode
[  527.728800][T30295] vxlan0: entered allmulticast mode
[  527.730979][T30295] wireguard0: entered promiscuous mode
[  527.733187][T30295] wireguard0: entered allmulticast mode
[  527.735722][T30295] sit2: entered promiscuous mode
[  527.737722][T30295] sit2: entered allmulticast mode
[  527.739953][T30295] mac80211_hwsim hwsim21 wlan4: entered promiscuous mode
[  527.742682][T30295] mac80211_hwsim hwsim21 wlan4: entered allmulticast mode
[  527.745808][T30295] bond1: entered promiscuous mode
[  527.747830][T30295] bond1: entered allmulticast mode
[  527.749962][T30295] bond2: entered promiscuous mode
[  527.751937][T30295] bond2: entered allmulticast mode
[  527.754146][T30295] vti60: entered promiscuous mode
[  527.756438][T30295] vti60: entered allmulticast mode
[  527.758190][T30295] bridge1: entered promiscuous mode
[  527.760282][T30295] bridge1: entered allmulticast mode
[  527.762508][T30295] bridge2: entered promiscuous mode
[  527.764581][T30295] bridge2: entered allmulticast mode
[  527.767352][T30295] gtp0: entered promiscuous mode
[  527.769472][T30295] gtp0: entered allmulticast mode
[  527.771707][T30295] vti0: entered promiscuous mode
[  527.773751][T30295] vti0: entered allmulticast mode
[  527.776094][T30295] vxcan4: entered promiscuous mode
[  527.778223][T30295] vxcan4: entered allmulticast mode
[  527.780456][T30295] vxcan5: entered promiscuous mode
[  527.782514][T30295] vxcan5: entered allmulticast mode
[  527.784681][T30295] vxcan6: entered promiscuous mode
[  527.786926][T30295] vxcan6: entered allmulticast mode
[  527.789144][T30295] vxcan7: entered promiscuous mode
[  527.792205][T30295] vxcan7: entered allmulticast mode
[  527.794386][T30295] bridge_slave_1.: entered promiscuous mode
[  527.797383][T30295] bridge_slave_1.: entered allmulticast mode
[  527.799976][T30295] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode
[  527.802738][T30295] mac80211_hwsim hwsim24 wlan0: entered allmulticast mode
[  527.805822][T30295] veth6: entered promiscuous mode
[  527.807817][T30295] veth6: entered allmulticast mode
[  527.809894][T30295] veth7: entered promiscuous mode
[  527.811427][T30295] veth7: entered allmulticast mode
[  527.813174][T30295] bond0: entered promiscuous mode
[  527.815370][T30295] bond0: entered allmulticast mode
[  527.817536][T30295] mac80211_hwsim hwsim25 wlan5: entered promiscuous mode
[  527.820690][T30295] mac80211_hwsim hwsim25 wlan5: entered allmulticast mode
[  527.823008][T30295] mac80211_hwsim hwsim26 wlan6: entered promiscuous mode
[  527.825349][T30295] mac80211_hwsim hwsim26 wlan6: entered allmulticast mode
[  527.827897][T30295] ipip1: entered promiscuous mode
[  527.829420][T30295] ipip1: entered allmulticast mode
[  527.831072][T30295] vxcan8: entered promiscuous mode
[  527.832632][T30295] vxcan8: entered allmulticast mode
[  527.834270][T30295] vxcan9: entered promiscuous mode
[  527.835963][T30295] vxcan9: entered allmulticast mode
[  527.837641][T30295] ip6tnl3: entered promiscuous mode
[  527.839221][T30295] ip6tnl3: entered allmulticast mode
[  527.841135][T30295] veth8: entered promiscuous mode
[  527.842713][T30295] veth8: entered allmulticast mode
[  527.844533][T30295] veth9: entered promiscuous mode
[  527.846282][T30295] veth9: entered allmulticast mode
[  527.848162][T30295] vxcan10: entered promiscuous mode
[  527.849905][T30295] vxcan10: entered allmulticast mode
[  527.852256][T30295] vxcan11: entered promiscuous mode
[  527.854410][T30295] vxcan11: entered allmulticast mode
[  527.856609][T30295] vlan0: entered promiscuous mode
[  527.859073][T30295] vlan0: entered allmulticast mode
[  527.861192][T30295] bond3: entered promiscuous mode
[  527.863371][T30295] bond3: entered allmulticast mode
[  527.865979][T30295] xfrm1: entered promiscuous mode
[  527.868154][T30295] xfrm1: entered allmulticast mode
[  527.870493][T30295] bond4: entered promiscuous mode
[  527.872680][T30295] bond4: entered allmulticast mode
[  527.875023][T30295] veth10: entered promiscuous mode
[  527.878867][T30295] veth10: entered allmulticast mode
[  527.881317][T30295] veth11: entered promiscuous mode
[  527.883530][T30295] veth11: entered allmulticast mode
[  527.886174][T30295] batadv0: entered promiscuous mode
[  527.888477][T30295] batadv0: entered allmulticast mode
[  527.890964][T30295] ip6gre2: entered promiscuous mode
[  527.892610][T30295] ip6gre2: entered allmulticast mode
[  527.894443][T30295] bridge3: entered promiscuous mode
[  527.896698][T30295] bridge3: entered allmulticast mode
[  527.898924][T30295] mac80211_hwsim hwsim31 wlan7: entered promiscuous mode
[  527.901617][T30295] mac80211_hwsim hwsim31 wlan7: entered allmulticast mode
[  527.904666][T30295] veth12: entered promiscuous mode
[  527.907024][T30295] veth12: entered allmulticast mode
[  527.909068][T30295] veth13: entered promiscuous mode
[  527.910857][T30295] veth13: entered allmulticast mode
[  527.912920][T30295] batadv1: entered promiscuous mode
[  527.914931][T30295] batadv1: entered allmulticast mode
[  527.917238][T30295] ip6gretap2: entered promiscuous mode
[  527.919290][T30295] ip6gretap2: entered allmulticast mode
[  527.921519][T30295] mac80211_hwsim hwsim35 wlan8: entered promiscuous mode
[  527.924171][T30295] mac80211_hwsim hwsim35 wlan8: entered allmulticast mode
[  527.927114][T30295] mac80211_hwsim hwsim37 wlan1: entered promiscuous mode
[  527.929686][T30295] mac80211_hwsim hwsim37 wlan1: entered allmulticast mode
[  527.932678][T30295] netdevsim netdevsim2 eth0: entered promiscuous mode
[  527.935577][T30295] netdevsim netdevsim2 eth0: entered allmulticast mode
[  527.938250][T30295] netdevsim netdevsim2 eth1: entered promiscuous mode
[  527.940805][T30295] netdevsim netdevsim2 eth1: entered allmulticast mode
[  527.943261][T30295] netdevsim netdevsim2 eth2: entered promiscuous mode
[  527.945492][T30295] netdevsim netdevsim2 eth2: entered allmulticast mode
[  527.947925][T30295] netdevsim netdevsim2 eth3: entered promiscuous mode
[  527.950576][T30295] netdevsim netdevsim2 eth3: entered allmulticast mode
[  527.953067][T30295] tun0: entered promiscuous mode
[  527.955028][T30295] tun0: entered allmulticast mode
[  527.957294][T30295] gtp1: entered promiscuous mode
[  527.959323][T30295] gtp1: entered allmulticast mode
[  527.961490][T30295] pim6reg: entered promiscuous mode
[  527.963713][T30295] mac80211_hwsim hwsim39 wlan9: entered promiscuous mode
[  527.966626][T30295] mac80211_hwsim hwsim39 wlan9: entered allmulticast mode
[  527.969288][T30295] sit3: entered promiscuous mode
[  527.971058][T30295] sit3: entered allmulticast mode
[  527.973096][T30295] pim6reg0: entered promiscuous mode
[  527.975418][T30295] pim6reg0: entered allmulticast mode
[  527.977702][T30295] ip6gretap0.4: entered promiscuous mode
[  527.980155][T30295] ip6gretap0.4: entered allmulticast mode
[  527.982188][T30295] mac80211_hwsim hwsim49 wlan10: entered promiscuous mode
[  527.984861][T30295] mac80211_hwsim hwsim49 wlan10: entered allmulticast mode
[  527.987431][T30295] mac80211_hwsim hwsim50 wlan11: entered promiscuous mode
[  527.990010][T30295] mac80211_hwsim hwsim50 wlan11: entered allmulticast mode
[  527.993030][T30295] bond5: entered promiscuous mode
[  527.994817][T30295] bond5: entered allmulticast mode
[  528.010706][T30303] gretap0: refused to change device tx_queue_len
[  528.015471][T30303] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  528.031147][T30304] lo speed is unknown, defaulting to 1000
[  528.163221][T30323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7359'.
[  528.367419][T30318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7358'.
[  528.381385][T30336] netlink: 'syz.2.7362': attribute type 3 has an invalid length.
[  528.483044][T30337] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7362'.
[  528.765895][T30375] netlink: zone id is out of range
[  528.768295][T30375] netlink: zone id is out of range
[  528.770758][T30375] netlink: zone id is out of range
[  528.773564][T30375] netlink: zone id is out of range
[  528.775902][T30375] netlink: zone id is out of range
[  528.778077][T30375] netlink: zone id is out of range
[  528.780247][T30375] netlink: zone id is out of range
[  528.786969][T30375] netlink: zone id is out of range
[  528.789124][T30375] netlink: zone id is out of range
[  528.853333][T30375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7372'.
[  528.858184][T30375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7372'.
[  528.862702][T30375] netlink: 'syz.3.7372': attribute type 15 has an invalid length.
[  529.766878][T30407] lo speed is unknown, defaulting to 1000
[  529.803026][T30410] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  530.007367][T30430] __nla_validate_parse: 1 callbacks suppressed
[  530.007383][T30430] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7388'.
[  530.040861][T30429] lo speed is unknown, defaulting to 1000
[  530.102805][T30433] netlink: 'syz.1.7390': attribute type 1 has an invalid length.
[  530.111269][T30433] netlink: 244 bytes leftover after parsing attributes in process `syz.1.7390'.
[  530.126621][T30433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7390'.
[  530.130665][T30433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7390'.
[  530.381771][T30447] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7393'.
[  530.702421][T30465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7398'.
[  530.706874][T30465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7398'.
[  530.710380][T30465] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7398'.
[  530.752397][T30464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7398'.
[  530.850547][T30477] lo speed is unknown, defaulting to 1000
[  531.023752][T30487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7404'.
[  531.482147][T30532] nbd: must specify at least one socket
[  531.630727][T30546] lo speed is unknown, defaulting to 1000
[  531.769793][T30555] lo speed is unknown, defaulting to 1000
[  532.877788][T30599] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  532.917300][T30602] lo speed is unknown, defaulting to 1000
[  533.058908][T30607] lo speed is unknown, defaulting to 1000
[  534.170443][T30640] netlink: 'syz.2.7436': attribute type 1 has an invalid length.
[  534.390460][T30646] netlink: 'syz.2.7438': attribute type 3 has an invalid length.
[  534.396653][T30647] netlink: 'syz.2.7438': attribute type 3 has an invalid length.
[  534.455302][T30646] lo: left promiscuous mode
[  534.457254][T30646] lo: left allmulticast mode
[  534.459269][T30646] tunl0: left promiscuous mode
[  534.461289][T30646] tunl0: left allmulticast mode
[  534.463432][T30646] gre0: left promiscuous mode
[  534.472158][T30646] gre0: left allmulticast mode
[  534.474490][T30646] erspan0: left promiscuous mode
[  534.478869][T30646] erspan0: left allmulticast mode
[  534.480764][T30646] ip_vti0: left promiscuous mode
[  534.482571][T30646] ip_vti0: left allmulticast mode
[  534.484206][T30646] v: left promiscuous mode
[  534.486296][T30646] v: left allmulticast mode
[  534.487829][T30646] sit0: left promiscuous mode
[  534.489519][T30646] sit0: left allmulticast mode
[  534.491208][T30646] ip6tnl0: left promiscuous mode
[  534.492858][T30646] ip6tnl0: left allmulticast mode
[  534.497101][T30646] ip6gre0: left promiscuous mode
[  534.498853][T30646] ip6gre0: left allmulticast mode
[  534.500567][T30646] : left promiscuous mode
[  534.502328][T30646] : left allmulticast mode
[  534.503866][T30646] team0: left promiscuous mode
[  534.505946][T30646] team0: left allmulticast mode
[  534.507725][T30646] dummy0: left promiscuous mode
[  534.509900][T30646] dummy0: left allmulticast mode
[  534.511539][T30646] nlmon0: left promiscuous mode
[  534.513191][T30646] nlmon0: left allmulticast mode
[  534.514824][T30646] caif0: left promiscuous mode
[  534.516789][T30646] caif0: left allmulticast mode
[  534.518525][T30646] vxcan0: left promiscuous mode
[  534.520167][T30646] vxcan0: left allmulticast mode
[  534.521829][T30646] vxcan1: left promiscuous mode
[  534.523522][T30646] vxcan1: left allmulticast mode
[  534.526019][T30646] veth0: left promiscuous mode
[  534.527770][T30646] veth0: left allmulticast mode
[  534.529683][T30646] veth1: left promiscuous mode
[  534.531605][T30646] veth1: left allmulticast mode
[  534.533694][T30646] wg1: left promiscuous mode
[  534.535802][T30646] wg1: left allmulticast mode
[  534.537801][T30646] wg2: left promiscuous mode
[  534.539726][T30646] wg2: left allmulticast mode
[  534.541757][T30646] veth0_to_bridge: left promiscuous mode
[  534.543659][T30646] veth0_to_bridge: left allmulticast mode
[  534.546162][T30646] bridge_slave_0: left promiscuous mode
[  534.547890][T30646] bridge_slave_0: left allmulticast mode
[  534.549757][T30646] veth1_to_bridge: left promiscuous mode
[  534.551640][T30646] veth1_to_bridge: left allmulticast mode
[  534.553606][T30646] veth0_to_bond: left promiscuous mode
[  534.555604][T30646] veth0_to_bond: left allmulticast mode
[  534.557778][T30646] bond_slave_0: left promiscuous mode
[  534.559653][T30646] bond_slave_0: left allmulticast mode
[  534.561640][T30646] veth1_to_bond: left promiscuous mode
[  534.563536][T30646] veth1_to_bond: left allmulticast mode
[  534.565692][T30646] bond_slave_1: left promiscuous mode
[  534.567565][T30646] bond_slave_1: left allmulticast mode
[  534.569575][T30646] veth0_to_team: left promiscuous mode
[  534.571496][T30646] veth0_to_team: left allmulticast mode
[  534.573347][T30646] team_slave_0: left promiscuous mode
[  534.575560][T30646] team_slave_0: left allmulticast mode
[  534.577740][T30646] veth1_to_team: left promiscuous mode
[  534.579646][T30646] veth1_to_team: left allmulticast mode
[  534.581561][T30646] team_slave_1: left promiscuous mode
[  534.583393][T30646] team_slave_1: left allmulticast mode
[  534.585567][T30646] veth0_to_batadv: left promiscuous mode
[  534.587585][T30646] veth0_to_batadv: left allmulticast mode
[  534.589498][T30646] batadv_slave_0: left promiscuous mode
[  534.591549][T30646] batadv_slave_0: left allmulticast mode
[  534.593497][T30646] xfrm0: left promiscuous mode
[  534.595023][T30646] xfrm0: left allmulticast mode
[  534.597836][T30646] veth0_to_hsr: left promiscuous mode
[  534.599614][T30646] veth0_to_hsr: left allmulticast mode
[  534.601905][T30646] veth1_to_hsr: left promiscuous mode
[  534.604076][T30646] veth1_to_hsr: left allmulticast mode
[  534.606385][T30646] hsr0: left promiscuous mode
[  534.607990][T30646] hsr0: left allmulticast mode
[  534.609561][T30646] hsr_slave_0: left allmulticast mode
[  534.611341][T30646] hsr_slave_1: left allmulticast mode
[  534.613425][T30646] veth1_virt_wifi: left promiscuous mode
[  534.615561][T30646] veth1_virt_wifi: left allmulticast mode
[  534.617800][T30646] veth0_virt_wifi: left promiscuous mode
[  534.619872][T30646] veth0_virt_wifi: left allmulticast mode
[  534.622435][T30646] geneve0: left promiscuous mode
[  534.624375][T30646] geneve0: left allmulticast mode
[  534.626697][T30646] mac80211_hwsim hwsim4 ;: left promiscuous mode
[  534.628911][T30646] mac80211_hwsim hwsim4 ;: left allmulticast mode
[  534.631252][T30646] ip6tnl1: left promiscuous mode
[  534.633065][T30646] ip6tnl1: left allmulticast mode
[  534.635364][T30646] geneve2: left promiscuous mode
[  534.637051][T30646] geneve2: left allmulticast mode
[  534.638817][T30646] veth2: left promiscuous mode
[  534.640488][T30646] veth2: left allmulticast mode
[  534.642295][T30646] veth3: left promiscuous mode
[  534.643897][T30646] veth3: left allmulticast mode
[  534.645803][T30646] ip6erspan0: left promiscuous mode
[  534.647618][T30646] ip6erspan0: left allmulticast mode
[  534.649474][T30646] vlan2: left promiscuous mode
[  534.651111][T30646] gretap0: left promiscuous mode
[  534.652833][T30646] vlan2: left allmulticast mode
[  534.654413][T30646] gretap0: left allmulticast mode
[  534.656295][T30646] veth4: left promiscuous mode
[  534.657842][T30646] veth4: left allmulticast mode
[  534.659462][T30646] veth5: left promiscuous mode
[  534.661223][T30646] veth5: left allmulticast mode
[  534.663405][T30646] ave_0: left allmulticast mode
[  534.665663][T30646] mac80211_hwsim hwsim12 wlan2: left promiscuous mode
[  534.668482][T30646] mac80211_hwsim hwsim12 wlan2: left allmulticast mode
[  534.671347][T30646] syzkaller0: left promiscuous mode
[  534.673564][T30646] syzkaller0: left allmulticast mode
[  534.676248][T30646] geneve1.1: left promiscuous mode
[  534.678361][T30646] geneve1: left promiscuous mode
[  534.680577][T30646] geneve1.1: left allmulticast mode
[  534.682611][T30646] geneve1: left allmulticast mode
[  534.684823][T30646] syztnl0: left promiscuous mode
[  534.686974][T30646] syztnl0: left allmulticast mode
[  534.689145][T30646] ip6gretap1: left promiscuous mode
[  534.691315][T30646] ip6gretap1: left allmulticast mode
[  534.693551][T30646] vxcan2: left promiscuous mode
[  534.695674][T30646] vxcan2: left allmulticast mode
[  534.697778][T30646] vxcan3: left promiscuous mode
[  534.699771][T30646] vxcan3: left allmulticast mode
[  534.702000][T30646] gre1: left promiscuous mode
[  534.703934][T30646] gre1: left allmulticast mode
[  534.706356][T30646] syztnl1: left promiscuous mode
[  534.708390][T30646] syztnl1: left allmulticast mode
[  534.710556][T30646] sit1: left promiscuous mode
[  534.712522][T30646] sit1: left allmulticast mode
[  534.714550][T30646] gre2: left promiscuous mode
[  534.716595][T30646] gre2: left allmulticast mode
[  534.718616][T30646] ip6gre1: left promiscuous mode
[  534.720607][T30646] ip6gre1: left allmulticast mode
[  534.722833][T30646] mac80211_hwsim hwsim17 wlan3: left promiscuous mode
[  534.725676][T30646] mac80211_hwsim hwsim17 wlan3: left allmulticast mode
[  534.728674][T30646] ip6tnl2: left promiscuous mode
[  534.730670][T30646] ip6tnl2: left allmulticast mode
[  534.732787][T30646] gre3: left promiscuous mode
[  534.734798][T30646] gre3: left allmulticast mode
[  534.737347][T30646] ipip0: left promiscuous mode
[  534.739313][T30646] ipip0: left allmulticast mode
[  534.741392][T30646] vxlan0: left promiscuous mode
[  534.743456][T30646] vxlan0: left allmulticast mode
[  534.745643][T30646] wireguard0: left promiscuous mode
[  534.747748][T30646] wireguard0: left allmulticast mode
[  534.749942][T30646] sit2: left promiscuous mode
[  534.751824][T30646] sit2: left allmulticast mode
[  534.753988][T30646] mac80211_hwsim hwsim21 wlan4: left promiscuous mode
[  534.756908][T30646] mac80211_hwsim hwsim21 wlan4: left allmulticast mode
[  534.759812][T30646] bond1: left promiscuous mode
[  534.761792][T30646] bond1: left allmulticast mode
[  534.763820][T30646] bond2: left promiscuous mode
[  534.766159][T30646] bond2: left allmulticast mode
[  534.768249][T30646] vti60: left promiscuous mode
[  534.770179][T30646] vti60: left allmulticast mode
[  534.772293][T30646] bridge1: left promiscuous mode
[  534.774312][T30646] bridge1: left allmulticast mode
[  534.776585][T30646] bridge2: left promiscuous mode
[  534.778634][T30646] bridge2: left allmulticast mode
[  534.780757][T30646] gtp0: left promiscuous mode
[  534.782688][T30646] gtp0: left allmulticast mode
[  534.784773][T30646] vti0: left promiscuous mode
[  534.788600][T30646] vti0: left allmulticast mode
[  534.790970][T30646] vxcan4: left promiscuous mode
[  534.793012][T30646] vxcan4: left allmulticast mode
[  534.795234][T30646] vxcan5: left promiscuous mode
[  534.797258][T30646] vxcan5: left allmulticast mode
[  534.799401][T30646] vxcan6: left promiscuous mode
[  534.801426][T30646] vxcan6: left allmulticast mode
[  534.803804][T30646] vxcan7: left promiscuous mode
[  534.806147][T30646] vxcan7: left allmulticast mode
[  534.808318][T30646] bridge_slave_1.: left promiscuous mode
[  534.810658][T30646] bridge_slave_1: left promiscuous mode
[  534.813027][T30646] bridge_slave_1.: left allmulticast mode
[  534.815462][T30646] bridge_slave_1: left allmulticast mode
[  534.817890][T30646] mac80211_hwsim hwsim24 wlan0: left promiscuous mode
[  534.820673][T30646] mac80211_hwsim hwsim24 wlan0: left allmulticast mode
[  534.823483][T30646] veth6: left promiscuous mode
[  534.825502][T30646] veth6: left allmulticast mode
[  534.827642][T30646] veth7: left promiscuous mode
[  534.829525][T30646] veth7: left allmulticast mode
[  534.831678][T30646] mac80211_hwsim hwsim25 wlan5: left promiscuous mode
[  534.834373][T30646] mac80211_hwsim hwsim25 wlan5: left allmulticast mode
[  534.837550][T30646] mac80211_hwsim hwsim26 wlan6: left promiscuous mode
[  534.840273][T30646] mac80211_hwsim hwsim26 wlan6: left allmulticast mode
[  534.843138][T30646] ipip1: left promiscuous mode
[  534.845050][T30646] ipip1: left allmulticast mode
[  534.847817][T30646] vxcan8: left promiscuous mode
[  534.849512][T30646] vxcan8: left allmulticast mode
[  534.851372][T30646] vxcan9: left promiscuous mode
[  534.852972][T30646] vxcan9: left allmulticast mode
[  534.855177][T30646] ip6tnl3: left promiscuous mode
[  534.857212][T30646] ip6tnl3: left allmulticast mode
[  534.859175][T30646] veth8: left promiscuous mode
[  534.861017][T30646] veth8: left allmulticast mode
[  534.863152][T30646] veth9: left promiscuous mode
[  534.864963][T30646] veth9: left allmulticast mode
[  534.867097][T30646] vxcan10: left promiscuous mode
[  534.868844][T30646] vxcan10: left allmulticast mode
[  534.870696][T30646] vxcan11: left promiscuous mode
[  534.872323][T30646] vxcan11: left allmulticast mode
[  534.874017][T30646] vlan0: left promiscuous mode
[  534.875670][T30646] bond0: left promiscuous mode
[  534.877386][T30646] vlan0: left allmulticast mode
[  534.879036][T30646] bond0: left allmulticast mode
[  534.880941][T30646] bond3: left promiscuous mode
[  534.882879][T30646] bond3: left allmulticast mode
[  534.884992][T30646] xfrm1: left promiscuous mode
[  534.887142][T30646] xfrm1: left allmulticast mode
[  534.889306][T30646] bond4: left promiscuous mode
[  534.891243][T30646] bond4: left allmulticast mode
[  534.893378][T30646] veth10: left promiscuous mode
[  534.895874][T30646] veth10: left allmulticast mode
[  534.898046][T30646] veth11: left promiscuous mode
[  534.900086][T30646] veth11: left allmulticast mode
[  534.902282][T30646] batadv0: left promiscuous mode
[  534.904340][T30646] batadv0: left allmulticast mode
[  534.906624][T30646] ip6gre2: left promiscuous mode
[  534.908659][T30646] ip6gre2: left allmulticast mode
[  534.910864][T30646] bridge3: left promiscuous mode
[  534.913034][T30646] bridge3: left allmulticast mode
[  534.915322][T30646] mac80211_hwsim hwsim31 wlan7: left promiscuous mode
[  534.918248][T30646] mac80211_hwsim hwsim31 wlan7: left allmulticast mode
[  534.921178][T30646] veth12: left promiscuous mode
[  534.923184][T30646] veth12: left allmulticast mode
[  534.925649][T30646] veth13: left promiscuous mode
[  534.927673][T30646] veth13: left allmulticast mode
[  534.929824][T30646] batadv1: left promiscuous mode
[  534.931808][T30646] batadv1: left allmulticast mode
[  534.933647][T30646] ip6gretap2: left promiscuous mode
[  534.935440][T30646] ip6gretap2: left allmulticast mode
[  534.937267][T30646] mac80211_hwsim hwsim35 wlan8: left promiscuous mode
[  534.939432][T30646] mac80211_hwsim hwsim35 wlan8: left allmulticast mode
[  534.941995][T30646] mac80211_hwsim hwsim37 wlan1: left promiscuous mode
[  534.944679][T30646] mac80211_hwsim hwsim37 wlan1: left allmulticast mode
[  534.947448][T30646] netdevsim netdevsim2 eth0: left promiscuous mode
[  534.949506][T30646] netdevsim netdevsim2 eth0: left allmulticast mode
[  534.952007][T30646] netdevsim netdevsim2 eth1: left promiscuous mode
[  534.954608][T30646] netdevsim netdevsim2 eth1: left allmulticast mode
[  534.957558][T30646] netdevsim netdevsim2 eth2: left promiscuous mode
[  534.959603][T30646] netdevsim netdevsim2 eth2: left allmulticast mode
[  534.961859][T30646] netdevsim netdevsim2 eth3: left promiscuous mode
[  534.963866][T30646] netdevsim netdevsim2 eth3: left allmulticast mode
[  534.966057][T30646] tun0: left promiscuous mode
[  534.967537][T30646] tun0: left allmulticast mode
[  534.969096][T30646] gtp1: left promiscuous mode
[  534.970671][T30646] gtp1: left allmulticast mode
[  534.972314][T30646] pim6reg: left promiscuous mode
[  534.973910][T30646] mac80211_hwsim hwsim39 wlan9: left promiscuous mode
[  534.976094][T30646] mac80211_hwsim hwsim39 wlan9: left allmulticast mode
[  534.978297][T30646] sit3: left promiscuous mode
[  534.979809][T30646] sit3: left allmulticast mode
[  534.981746][T30646] pim6reg0: left promiscuous mode
[  534.983535][T30646] pim6reg0: left allmulticast mode
[  534.985465][T30646] ip6gretap0.4: left promiscuous mode
[  534.987196][T30646] ip6gretap0: left promiscuous mode
[  534.988960][T30646] ip6gretap0.4: left allmulticast mode
[  534.990764][T30646] ip6gretap0: left allmulticast mode
[  534.992664][T30646] mac80211_hwsim hwsim49 wlan10: left promiscuous mode
[  534.994809][T30646] mac80211_hwsim hwsim49 wlan10: left allmulticast mode
[  534.997180][T30646] mac80211_hwsim hwsim50 wlan11: left promiscuous mode
[  534.999675][T30646] mac80211_hwsim hwsim50 wlan11: left allmulticast mode
[  535.002413][T30646] bond5: left promiscuous mode
[  535.004236][T30646] bond5: left allmulticast mode
[  535.474800][T30690] macsec0: entered promiscuous mode
[  535.477309][T30690] macsec0: entered allmulticast mode
[  535.483352][T30690] __nla_validate_parse: 4 callbacks suppressed
[  535.483374][T30690] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7447'.
[  536.212820][T30697] netlink: 'syz.1.7449': attribute type 3 has an invalid length.
[  536.220103][T30697] syz_tun: entered allmulticast mode
[  536.261710][T30696] syz_tun: left allmulticast mode
[  536.275973][T30702] veth0_vlan: left promiscuous mode
[  536.281373][T30702] veth0_vlan: entered promiscuous mode
[  536.283539][T30702] veth0_vlan: entered allmulticast mode
[  536.288781][T30701] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  536.312308][T30702] tipc: Disabling bearer <eth:syzkaller0>
[  536.338870][T30708] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  536.400028][T30713] sctp: [Deprecated]: syz.1.7453 (pid 30713) Use of int in maxseg socket option.
[  536.400028][T30713] Use struct sctp_assoc_value instead
[  536.497583][T30731] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  536.500578][T30731] syzkaller0: entered promiscuous mode
[  536.502778][T30731] syzkaller0: entered allmulticast mode
[  536.510753][T30731] tipc: Resetting bearer <eth:syzkaller0>
[  536.647138][T30720] tipc: Resetting bearer <eth:syzkaller0>
[  536.651443][T30720] tipc: Disabling bearer <eth:syzkaller0>
[  537.046008][T30760] sock: sock_timestamping_bind_phc: sock not bind to device
[  537.100585][T30764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7469'.
[  537.361136][T30773] syzkaller1: entered promiscuous mode
[  537.363438][T30773] syzkaller1: entered allmulticast mode
[  537.471583][T30779] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7473'.
[  537.474521][T30779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7473'.
[  537.516281][T30784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7475'.
[  538.425651][T30837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7489'.
[  538.579749][T30840] netlink: 'syz.2.7490': attribute type 12 has an invalid length.
[  538.682889][T30846] net_ratelimit: 17 callbacks suppressed
[  538.682901][T30846] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  538.826098][T30861] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7498'.
[  538.870532][T30864] lo speed is unknown, defaulting to 1000
[  539.362485][T30900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7508'.
[  539.367113][T30902] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7509'.
[  539.491308][T30923] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7513'.
[  540.684892][T30983] lo speed is unknown, defaulting to 1000
[  540.914747][T30997] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7532'.
[  540.919080][T30997] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7532'.
[  541.590000][T31008] lo speed is unknown, defaulting to 1000
[  541.754228][T31019] lo speed is unknown, defaulting to 1000
[  542.051161][T31028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7541'.
[  542.359614][T31041] lo speed is unknown, defaulting to 1000
[  542.569592][T31051] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  542.575470][T31048] lo speed is unknown, defaulting to 1000
[  543.303045][T31088] syzkaller0: entered promiscuous mode
[  543.304909][T31088] syzkaller0: entered allmulticast mode
[  543.309229][T31089] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7558'.
[  543.313167][T31088] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7558'.
[  543.527068][T31111] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  543.529859][T31112] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  543.666544][T31126] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7571'.
[  544.391507][T31159] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7581'.
[  544.450856][T31162] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7582'.
[  544.459071][T31162] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7582'.
[  545.584929][T31191] netlink: 'syz.3.7590': attribute type 3 has an invalid length.
[  545.590676][T31191] C: entered allmulticast mode
[  545.616666][T31191] siw: device registration error -23
[  545.631368][T31191] sit0: left promiscuous mode
[  545.634642][T31191] veth0_vlan: left allmulticast mode
[  545.649566][T31191] ip6gre1: left allmulticast mode
[  545.663779][T31191] veth5: left promiscuous mode
[  545.666756][T31191] macsec0: left promiscuous mode
[  545.668890][T31191] macsec0: left allmulticast mode
[  545.677098][T31190] C: left allmulticast mode
[  545.711851][T31204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7593'.
[  546.133903][T31185] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  546.198951][T31235] netlink: 'syz.1.7602': attribute type 21 has an invalid length.
[  546.201529][T31235] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7602'.
[  546.583302][T31258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7609'.
[  546.589250][T31259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7609'.
[  546.753564][T31266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7611'.
[  546.933224][T31274] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  546.961336][T31278] xt_policy: neither incoming nor outgoing policy selected
[  547.214821][T31288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7617'.
[  547.281543][T31297] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  547.561059][T31317] lo speed is unknown, defaulting to 1000
[  547.563965][T31318] lo speed is unknown, defaulting to 1000
[  547.912576][T31333] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  547.934204][T31338] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7632'.
[  547.974565][T31345] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7633'.
[  547.978717][T31345] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7633'.
[  548.022828][T31352] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7635'.
[  548.055984][T31356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7637'.
[  548.430547][T31411] lo speed is unknown, defaulting to 1000
[  548.540931][T31411] openvswitch: netlink: Key type 251 is out of range max 32
[  549.102171][T31442] lo speed is unknown, defaulting to 1000
[  549.152781][T31443] lo speed is unknown, defaulting to 1000
[  549.267872][T31447] netlink: 'syz.3.7658': attribute type 32 has an invalid length.
[  549.699397][T31475] netlink: 'syz.3.7664': attribute type 1 has an invalid length.
[  549.701993][T31475] netlink: 'syz.3.7664': attribute type 1 has an invalid length.
[  549.812879][T31490] lo speed is unknown, defaulting to 1000
[  549.978693][T31509] IPVS: set_ctl: invalid protocol: 44 100.1.1.1:20003
[  549.983790][T31509] syz_tun: entered allmulticast mode
[  550.019764][T31490] netlink: 'syz.3.7669': attribute type 2 has an invalid length.
[  550.062413][T31514] lo speed is unknown, defaulting to 1000
[  550.515011][T31530] lo speed is unknown, defaulting to 1000
[  550.654819][T31534] lo speed is unknown, defaulting to 1000
[  550.706979][T31535] lo speed is unknown, defaulting to 1000
[  551.413376][T31555] netlink: 'syz.3.7684': attribute type 29 has an invalid length.
[  551.974650][T31571] veth0_to_bond: entered allmulticast mode
[  552.067010][T31573] __nla_validate_parse: 12 callbacks suppressed
[  552.067021][T31573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7690'.
[  552.114689][T31576] lo speed is unknown, defaulting to 1000
[  552.118575][T31577] lo speed is unknown, defaulting to 1000
[  552.420678][T31602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7696'.
[  552.670076][T31620] netlink: 236 bytes leftover after parsing attributes in process `syz.3.7699'.
[  552.673160][T31620] netlink: 1 bytes leftover after parsing attributes in process `syz.3.7699'.
[  552.863814][T31634] netlink: 'syz.3.7701': attribute type 13 has an invalid length.
[  552.867165][T31634] netlink: 212 bytes leftover after parsing attributes in process `syz.3.7701'.
[  552.882396][T31634] lo speed is unknown, defaulting to 1000
[  553.035065][T31586] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  553.038070][T31586] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  553.052793][T31586] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  553.063472][T31586] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  553.153636][T31652] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  553.383571][T31676] lo speed is unknown, defaulting to 1000
[  553.424373][T31671] lo speed is unknown, defaulting to 1000
[  553.638455][T31690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7710'.
[  553.966354][T31714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7715'.
[  554.032185][T31725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7717'.
[  554.035019][T31725] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7717'.
[  554.038482][T31721] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  554.041173][T31721] syzkaller0: entered promiscuous mode
[  554.042960][T31721] syzkaller0: entered allmulticast mode
[  554.069034][T31721] tipc: Resetting bearer <eth:syzkaller0>
[  554.125492][T31721] tipc: Resetting bearer <eth:syzkaller0>
[  554.151352][T31721] tipc: Disabling bearer <eth:syzkaller0>
[  554.432273][T31749] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7721'.
[  554.435752][T31731] lo speed is unknown, defaulting to 1000
[  554.735827][T31772] netlink: 'syz.1.7724': attribute type 30 has an invalid length.
[  555.298394][T31792] netlink: 'syz.3.7730': attribute type 4 has an invalid length.
[  555.303162][T31792] : renamed from bond0
[  556.285530][T31834] lo speed is unknown, defaulting to 1000
[  556.553547][T31849] syzkaller0: entered promiscuous mode
[  556.558157][T31849] syzkaller0: entered allmulticast mode
[  556.560962][T31847] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  556.580469][T31851] tipc: Resetting bearer <eth:syzkaller0>
[  556.585071][T31851] tipc: Disabling bearer <eth:syzkaller0>
[  556.743905][T31861] lo speed is unknown, defaulting to 1000
[  557.172481][T31893] __nla_validate_parse: 11 callbacks suppressed
[  557.172492][T31893] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7756'.
[  557.181521][T31895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7757'.
[  557.188654][T31895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7757'.
[  558.234848][T31943] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7769'.
[  558.249277][T31943] lo speed is unknown, defaulting to 1000
[  558.354144][T31943] netlink: 'syz.3.7769': attribute type 2 has an invalid length.
[  558.474572][T31953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7773'.
[  559.509881][T31972] lo speed is unknown, defaulting to 1000
[  559.914876][T31992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7785'.
[  559.959775][T31994] lo speed is unknown, defaulting to 1000
[  560.055281][T31997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7787'.
[  560.288580][T32015] lo speed is unknown, defaulting to 1000
[  560.300223][T32014] lo speed is unknown, defaulting to 1000
[  560.740529][T32040] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7798'.
[  560.834896][T32046] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.7800'.
[  560.964538][T32043] netlink: 'syz.2.7799': attribute type 1 has an invalid length.
[  560.967534][T32043] netlink: 'syz.2.7799': attribute type 2 has an invalid length.
[  560.975328][T32043] netlink: 'syz.2.7799': attribute type 1 has an invalid length.
[  560.977963][T32043] netlink: 'syz.2.7799': attribute type 2 has an invalid length.
[  561.222983][T32067] lo speed is unknown, defaulting to 1000
[  561.392197][T32078] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7804'.
[  562.292123][T32102] lo speed is unknown, defaulting to 1000
[  562.512171][T32130] __nla_validate_parse: 2 callbacks suppressed
[  562.512191][T32130] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7816'.
[  562.893787][T32179] syzkaller1: entered allmulticast mode
[  562.906894][T32180] syzkaller1: left allmulticast mode
[  563.030937][T32192] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7829'.
[  563.034329][T32192] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7829'.
[  563.124079][T32201] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20002
[  563.324004][T32208] lo speed is unknown, defaulting to 1000
[  563.370567][T32213] netlink: 'syz.2.7835': attribute type 1 has an invalid length.
[  563.375537][T32213] netlink: 212 bytes leftover after parsing attributes in process `syz.2.7835'.
[  563.379843][T32213] netlink: 'syz.2.7835': attribute type 1 has an invalid length.
[  563.528006][T32226] lo speed is unknown, defaulting to 1000
[  563.983810][T32240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7842'.
[  564.179768][T32249] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7843'.
[  564.390750][T32265] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7847'.
[  564.408759][T32268] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  564.419900][T32266] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7848'.
[  564.671657][T32295] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7855'.
[  564.674784][T32295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7855'.
[  564.739038][T32298] lo speed is unknown, defaulting to 1000
[  565.621756][T32317] syzkaller0: entered promiscuous mode
[  565.623587][T32317] syzkaller0: entered allmulticast mode
[  565.813984][T32341] netlink: 'syz.3.7870': attribute type 3 has an invalid length.
[  565.832074][T32343] syzkaller1: entered promiscuous mode
[  565.834747][T32343] syzkaller1: entered allmulticast mode
[  565.839958][T32345] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  565.845817][T32341] C: entered allmulticast mode
[  565.890906][T32341] siw: device registration error -23
[  565.913759][T32340] C: left allmulticast mode
[  566.662895][T32398] lo speed is unknown, defaulting to 1000
[  566.805034][T32409] lo speed is unknown, defaulting to 1000
[  567.094205][T32426] lo speed is unknown, defaulting to 1000
[  567.369829][T32435] lo speed is unknown, defaulting to 1000
[  567.673347][T32443] __nla_validate_parse: 6 callbacks suppressed
[  567.673360][T32443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7891'.
[  567.681337][T32443] netlink: 92 bytes leftover after parsing attributes in process `syz.3.7891'.
[  567.918182][T32450] netlink: 'syz.1.7893': attribute type 12 has an invalid length.
[  567.920740][T32450] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.7893'.
[  568.149808][T32462] netlink: 504 bytes leftover after parsing attributes in process `syz.1.7895'.
[  568.272019][T32470] lo speed is unknown, defaulting to 1000
[  568.579640][T32482] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7900'.
[  568.630585][T32485] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7901'.
[  568.689065][T32487] lo speed is unknown, defaulting to 1000
[  568.729725][T32489] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7902'.
[  568.926542][T32504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7907'.
[  568.930192][T32504] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7907'.
[  568.934057][T32504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7907'.
[  569.053245][T32512] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  569.114924][T32514] netlink: 'syz.2.7912': attribute type 12 has an invalid length.
[  569.224624][T32520] syzkaller0: entered promiscuous mode
[  569.227318][T32520] syzkaller0: entered allmulticast mode
[  569.954456][T32599] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  570.090220][T32610] netlink: 'syz.3.7939': attribute type 1 has an invalid length.
[  570.092897][T32610] netlink: 'syz.3.7939': attribute type 1 has an invalid length.
[  570.268364][T32619] lo speed is unknown, defaulting to 1000
[  570.985562][T32650] syzkaller1: entered promiscuous mode
[  570.987892][T32650] syzkaller1: entered allmulticast mode
[  571.404051][T32666] lo speed is unknown, defaulting to 1000
[  572.042429][T32685] lo speed is unknown, defaulting to 1000
[  572.209442][T32698] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  572.222387][T32698] IPVS: set_ctl: invalid protocol: 46 172.30.0.2:20003
[  572.278351][T32700] netlink: 'syz.2.7960': attribute type 12 has an invalid length.
[  572.651357][T32725] syzkaller0: entered promiscuous mode
[  572.653737][T32725] syzkaller0: entered allmulticast mode
[  572.990768][T32733] lo speed is unknown, defaulting to 1000
[  573.293002][T32744] __nla_validate_parse: 16 callbacks suppressed
[  573.293019][T32744] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7971'.
[  573.328344][T32747] netlink: 'syz.2.7972': attribute type 3 has an invalid length.
[  573.387727][T32747] veth0_to_bond: left allmulticast mode
[  573.389942][T32747] tipc: Resetting bearer <eth:syzkaller0>
[  573.392216][T32747] syzkaller0: left promiscuous mode
[  573.393997][T32747] syzkaller0: left allmulticast mode
[  573.441915][T32754] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7973'.
[  573.498294][T32758] syzkaller0: entered promiscuous mode
[  573.501146][T32758] syzkaller0: entered allmulticast mode
[  573.506653][T32758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7975'.
[  573.553732][T32762] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7974'.
[  573.772480][  T301] lo speed is unknown, defaulting to 1000
[  573.842273][  T306] lo speed is unknown, defaulting to 1000
[  573.900173][  T308] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7980'.
[  573.984836][  T310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7979'.
[  574.225571][ T5846] Bluetooth: hci0: command tx timeout
[  574.241822][  T331] IPVS: Error connecting to the multicast addr
[  574.257690][  T331] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7986'.
[  574.260778][  T331] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7986'.
[  574.313881][  T334] lo speed is unknown, defaulting to 1000
[  574.528668][  T354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7993'.
[  574.627666][  T366] tipc: Enabled bearer <udp:syz0>, priority 26
[  574.820317][  T376] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.8002'.
[  574.831124][  T376] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  574.907672][  T383] openvswitch: netlink: Tunnel attr 226 out of range max 16
[  575.147707][  T396] lo speed is unknown, defaulting to 1000
[  575.983504][  T419] IPVS: length: 37 != 24
[  576.286667][  T432] lo speed is unknown, defaulting to 1000
[  576.303561][  T434] lo speed is unknown, defaulting to 1000
[  576.456420][  T444] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  577.228878][  T475] lo speed is unknown, defaulting to 1000
[  577.334025][  T479] netlink: 'syz.3.8036': attribute type 2 has an invalid length.
[  577.923726][  T538] sock: sock_timestamping_bind_phc: sock not bind to device
[  578.048776][  T544] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  578.576887][  T584] __nla_validate_parse: 14 callbacks suppressed
[  578.576908][  T584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8069'.
[  578.602440][  T586] lo speed is unknown, defaulting to 1000
[  578.620530][  T584] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8069'.
[  578.761280][  T593] lo speed is unknown, defaulting to 1000
[  580.098756][  T613] netlink: 'syz.1.8074': attribute type 12 has an invalid length.
[  580.138439][  T615] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8075'.
[  580.169136][  T619] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8076'.
[  580.226540][  T625] netlink: 'syz.1.8077': attribute type 10 has an invalid length.
[  580.523267][  T649] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8086'.
[  580.567454][  T650] lo speed is unknown, defaulting to 1000
[  580.598486][  T655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8088'.
[  580.604294][  T655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8088'.
[  580.621729][  T657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8089'.
[  580.630194][  T662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8089'.
[  580.735567][  T650] netlink: 'syz.1.8085': attribute type 2 has an invalid length.
[  580.792733][  T675] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8092'.
[  580.804180][  T675] lo speed is unknown, defaulting to 1000
[  580.861900][  T679] netlink: 'syz.2.8092': attribute type 2 has an invalid length.
[  581.415572][  T724] lo speed is unknown, defaulting to 1000
[  581.544657][  T738] netlink: 'syz.2.8108': attribute type 1 has an invalid length.
[  581.549090][  T736] netlink: 'syz.2.8108': attribute type 1 has an invalid length.
[  581.873350][  T755] syzkaller1: entered promiscuous mode
[  581.875463][  T755] syzkaller1: entered allmulticast mode
[  581.889149][  T762] lo speed is unknown, defaulting to 1000
[  582.298791][  T797] netlink: 'syz.1.8123': attribute type 1 has an invalid length.
[  582.641105][  T836] lo speed is unknown, defaulting to 1000
[  584.104596][  T941] __nla_validate_parse: 11 callbacks suppressed
[  584.104610][  T941] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8154'.
[  584.178449][  T944] lo speed is unknown, defaulting to 1000
[  584.837368][  T963] netlink: 'syz.3.8159': attribute type 3 has an invalid length.
[  584.840755][  T963] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8159'.
[  585.246794][  T971] netlink: 'syz.1.8161': attribute type 4 has an invalid length.
[  585.250258][  T971] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8161'.
[  585.254870][  T971] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  585.296199][  T973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8162'.
[  585.451116][  T978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8164'.
[  585.455523][  T978] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8164'.
[  585.459185][  T978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8164'.
[  585.464114][  T978] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8164'.
[  585.538218][  T985] netlink: 'syz.1.8165': attribute type 13 has an invalid length.
[  585.541240][  T985] netlink: 'syz.1.8165': attribute type 17 has an invalid length.
[  585.573233][  T985] bond0: left promiscuous mode
[  585.575760][  T985] bond0: left allmulticast mode
[  585.577899][  T985] 8021q: adding VLAN 0 to HW filter on device bond0
[  585.584916][  T985] 8021q: adding VLAN 0 to HW filter on device team0
[  585.599497][  T985] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  585.609742][  T793] lo speed is unknown, defaulting to 1000
[  585.611734][  T793] syz2: Port: 1 Link ACTIVE
[  585.632915][  T990] lo speed is unknown, defaulting to 1000
[  585.649925][  T998] lo speed is unknown, defaulting to 1000
[  585.807348][ T1006] IPVS: set_ctl: invalid protocol: 12 127.0.0.1:20004
[  585.869247][ T1013] netlink: 788 bytes leftover after parsing attributes in process `syz.3.8175'.
[  586.087739][ T1047] batadv_slave_0: entered promiscuous mode
[  586.099957][ T1047] lo speed is unknown, defaulting to 1000
[  586.528872][ T1047] batadv_slave_0: left promiscuous mode
[  586.731181][ T1072] netlink: 'syz.2.8184': attribute type 13 has an invalid length.
[  586.734845][ T1072] netlink: 'syz.2.8184': attribute type 17 has an invalid length.
[  586.755523][ T1072] 8021q: adding VLAN 0 to HW filter on device 
[  586.758569][ T1072] 8021q: adding VLAN 0 to HW filter on device team0
[  586.761386][ T1072] tipc: Resetting bearer <eth:team0>
[  586.763374][ T1072] tipc: Resetting bearer <eth:team0>
[  586.766563][ T1072] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  586.839807][ T1082] lo speed is unknown, defaulting to 1000
[  587.326821][ T1108] Bluetooth: MGMT ver 1.23
[  587.539457][ T1117] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8195'.
[  587.556683][ T1117] lo speed is unknown, defaulting to 1000
[  588.840318][ T1209] lo speed is unknown, defaulting to 1000
[  589.264758][ T1226] lo speed is unknown, defaulting to 1000
[  589.319669][ T1227] lo speed is unknown, defaulting to 1000
[  589.421583][ T1231] macsec0: entered promiscuous mode
[  589.423481][ T1231] !: entered promiscuous mode
[  589.425513][ T1231] macsec0: entered allmulticast mode
[  589.427494][ T1231] !: entered allmulticast mode
[  589.430044][ T1231] !: left allmulticast mode
[  589.431799][ T1231] !: left promiscuous mode
[  589.734302][ T1247] __nla_validate_parse: 8 callbacks suppressed
[  589.734315][ T1247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8230'.
[  589.771950][ T1249] netlink: 'syz.3.8231': attribute type 10 has an invalid length.
[  589.775965][ T1249] netlink: 'syz.3.8231': attribute type 10 has an invalid length.
[  589.816921][ T1249] 8021q: adding VLAN 0 to HW filter on device bond0
[  589.829125][ T1256] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8232'.
[  589.847824][ T1256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8232'.
[  589.996611][ T1271] dvmrp8: entered allmulticast mode
[  590.001072][ T1270] dvmrp8: left allmulticast mode
[  590.073976][ T1283] lo speed is unknown, defaulting to 1000
[  590.294875][ T1295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8243'.
[  590.410147][ T1304] lo speed is unknown, defaulting to 1000
[  590.541543][ T1309] netlink: 'syz.2.8244': attribute type 2 has an invalid length.
[  590.596030][ T1318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8248'.
[  590.855952][ T1344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8255'.
[  590.913423][ T1352] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8252'.
[  590.930625][ T1352] ==================================================================
[  590.933962][ T1352] BUG: KASAN: use-after-free in xfrm_alloc_spi+0x570/0xf30
[  590.936898][ T1352] Read of size 4 at addr ffff888110bb5744 by task syz.2.8252/1352
[  590.940609][ T1352] 
[  590.942034][ T1352] CPU: 1 UID: 0 PID: 1352 Comm: syz.2.8252 Not tainted syzkaller #0 PREEMPT(full) 
[  590.942059][ T1352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  590.942073][ T1352] Call Trace:
[  590.942085][ T1352]  <TASK>
[  590.942095][ T1352]  dump_stack_lvl+0x189/0x250
[  590.942118][ T1352]  ? __pfx_dump_stack_lvl+0x10/0x10
[  590.942129][ T1352]  ? lock_release+0x4b/0x3e0
[  590.942142][ T1352]  ? __virt_addr_valid+0x4a5/0x5c0
[  590.942156][ T1352]  print_report+0xca/0x240
[  590.942165][ T1352]  ? xfrm_alloc_spi+0x570/0xf30
[  590.942175][ T1352]  kasan_report+0x118/0x150
[  590.942188][ T1352]  ? lock_acquire+0x5f/0x360
[  590.942200][ T1352]  ? xfrm_alloc_spi+0x570/0xf30
[  590.942210][ T1352]  xfrm_alloc_spi+0x570/0xf30
[  590.942219][ T1352]  ? xfrm_alloc_spi+0x2a0/0xf30
[  590.942231][ T1352]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  590.942241][ T1352]  ? xfrm_find_acq+0x87/0xa0
[  590.942251][ T1352]  xfrm_alloc_userspi+0x70b/0xc90
[  590.942266][ T1352]  ? apparmor_capable+0x137/0x1b0
[  590.942276][ T1352]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  590.942286][ T1352]  ? __nla_parse+0x40/0x60
[  590.942299][ T1352]  xfrm_user_rcv_msg+0x7a3/0xab0
[  590.942309][ T1352]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  590.942324][ T1352]  ? __pfx___mutex_trylock_common+0x10/0x10
[  590.942334][ T1352]  ? rcu_is_watching+0x15/0xb0
[  590.942343][ T1352]  ? trace_contention_end+0x39/0x120
[  590.942351][ T1352]  ? __mutex_lock+0x335/0x1350
[  590.942364][ T1352]  netlink_rcv_skb+0x208/0x470
[  590.942377][ T1352]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  590.942386][ T1352]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  590.942398][ T1352]  ? lock_release+0x4b/0x3e0
[  590.942410][ T1352]  ? netlink_deliver_tap+0x2e/0x1b0
[  590.942422][ T1352]  xfrm_netlink_rcv+0x79/0x90
[  590.942433][ T1352]  netlink_unicast+0x82f/0x9e0
[  590.942446][ T1352]  ? __pfx_netlink_unicast+0x10/0x10
[  590.942456][ T1352]  ? netlink_sendmsg+0x642/0xb30
[  590.942466][ T1352]  ? skb_put+0x11b/0x210
[  590.942474][ T1352]  netlink_sendmsg+0x805/0xb30
[  590.942487][ T1352]  ? __pfx_netlink_sendmsg+0x10/0x10
[  590.942499][ T1352]  ? futex_unqueue+0x22/0x240
[  590.942508][ T1352]  ? aa_sock_msg_perm+0xf1/0x1d0
[  590.942515][ T1352]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  590.942524][ T1352]  ? __pfx_netlink_sendmsg+0x10/0x10
[  590.942535][ T1352]  __sock_sendmsg+0x21c/0x270
[  590.942546][ T1352]  ____sys_sendmsg+0x505/0x830
[  590.942555][ T1352]  ? __pfx_____sys_sendmsg+0x10/0x10
[  590.942564][ T1352]  ? import_iovec+0x74/0xa0
[  590.942574][ T1352]  ___sys_sendmsg+0x21f/0x2a0
[  590.942582][ T1352]  ? __pfx____sys_sendmsg+0x10/0x10
[  590.942591][ T1352]  ? futex_wait+0x285/0x360
[  590.942606][ T1352]  ? __fget_files+0x2a/0x420
[  590.942618][ T1352]  ? __fget_files+0x3a0/0x420
[  590.942630][ T1352]  __x64_sys_sendmsg+0x19b/0x260
[  590.942638][ T1352]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  590.942648][ T1352]  ? rcu_is_watching+0x15/0xb0
[  590.942656][ T1352]  ? rcu_is_watching+0x15/0xb0
[  590.942710][ T1352]  do_syscall_64+0xfa/0x3b0
[  590.942738][ T1352]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  590.942751][ T1352]  ? exc_page_fault+0x9f/0xf0
[  590.942764][ T1352]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  590.942775][ T1352] RIP: 0033:0x7f613038ebe9
[  590.942788][ T1352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  590.942796][ T1352] RSP: 002b:00007f61311d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  590.942807][ T1352] RAX: ffffffffffffffda RBX: 00007f61305c6180 RCX: 00007f613038ebe9
[  590.942814][ T1352] RDX: 0000000024000014 RSI: 0000200000000200 RDI: 0000000000000006
[  590.942819][ T1352] RBP: 00007f6130411e19 R08: 0000000000000000 R09: 0000000000000000
[  590.942825][ T1352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  590.942831][ T1352] R13: 00007f61305c6218 R14: 00007f61305c6180 R15: 00007fff51706fc8
[  590.942840][ T1352]  </TASK>
[  590.942844][ T1352] 
[  591.082505][ T1352] The buggy address belongs to the physical page:
[  591.084561][ T1352] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888110bb5f00 pfn:0x110bb5
[  591.087643][ T1352] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff)
[  591.089955][ T1352] raw: 057ff00000000000 dead000000000100 dead000000000122 0000000000000000
[  591.092665][ T1352] raw: ffff888110bb5f00 0000000000110000 00000000ffffffff 0000000000000000
[  591.095349][ T1352] page dumped because: kasan: bad access detected
[  591.097366][ T1352] page_owner tracks the page as freed
[  591.099083][ T1352] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 593, tgid 591 (syz.1.8070), ts 579213535473, free_ts 582635488370
[  591.105206][ T1352]  post_alloc_hook+0x240/0x2a0
[  591.106748][ T1352]  get_page_from_freelist+0x21e4/0x22c0
[  591.108481][ T1352]  __alloc_frozen_pages_noprof+0x181/0x370
[  591.110334][ T1352]  alloc_pages_mpol+0x232/0x4a0
[  591.112025][ T1352]  allocate_slab+0x8a/0x370
[  591.113614][ T1352]  ___slab_alloc+0xbeb/0x1410
[  591.115214][ T1352]  kmem_cache_alloc_noprof+0x283/0x3c0
[  591.117016][ T1352]  __kernfs_new_node+0xd7/0x7e0
[  591.118562][ T1352]  kernfs_new_node+0x102/0x210
[  591.120140][ T1352]  __kernfs_create_file+0x4b/0x2e0
[  591.121959][ T1352]  sysfs_add_file_mode_ns+0x238/0x300
[  591.123977][ T1352]  internal_create_group+0x66d/0x1110
[  591.125970][ T1352]  sysfs_create_groups+0x59/0x120
[  591.128026][ T1352]  ib_setup_port_attrs+0x1407/0x2070
[  591.130185][ T1352]  add_one_compat_dev+0x3d6/0x5c0
[  591.132242][ T1352]  rdma_dev_init_net+0x1dd/0x270
[  591.134253][ T1352] page last free pid 840 tgid 840 stack trace:
[  591.136706][ T1352]  __free_frozen_pages+0xbc4/0xd30
[  591.138811][ T1352]  __put_partials+0x156/0x1a0
[  591.140771][ T1352]  put_cpu_partial+0x17c/0x250
[  591.142703][ T1352]  __slab_free+0x2d5/0x3c0
[  591.144409][ T1352]  qlist_free_all+0x97/0x140
[  591.146202][ T1352]  kasan_quarantine_reduce+0x148/0x160
[  591.148357][ T1352]  __kasan_slab_alloc+0x22/0x80
[  591.150378][ T1352]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  591.152602][ T1352]  vm_area_alloc+0x24/0x140
[  591.154521][ T1352]  mmap_region+0xdc7/0x20c0
[  591.156548][ T1352]  do_mmap+0xc45/0x10d0
[  591.158210][ T1352]  vm_mmap_pgoff+0x2a6/0x4d0
[  591.159680][ T1352]  ksys_mmap_pgoff+0x51f/0x760
[  591.161218][ T1352]  do_syscall_64+0xfa/0x3b0
[  591.162632][ T1352]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  591.164470][ T1352] 
[  591.165258][ T1352] Memory state around the buggy address:
[  591.167059][ T1352]  ffff888110bb5600: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  591.169589][ T1352]  ffff888110bb5680: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  591.172167][ T1352] >ffff888110bb5700: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  591.174886][ T1352]                                            ^
[  591.176868][ T1352]  ffff888110bb5780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  591.179460][ T1352]  ffff888110bb5800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  591.181995][ T1352] ==================================================================
[  591.184887][ T1352] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  591.187172][ T1352] CPU: 1 UID: 0 PID: 1352 Comm: syz.2.8252 Not tainted syzkaller #0 PREEMPT(full) 
[  591.190117][ T1352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  591.193432][ T1352] Call Trace:
[  591.194506][ T1352]  <TASK>
[  591.195465][ T1352]  dump_stack_lvl+0x99/0x250
[  591.196961][ T1352]  ? __asan_memcpy+0x40/0x70
[  591.198423][ T1352]  ? __pfx_dump_stack_lvl+0x10/0x10
[  591.200083][ T1352]  ? __pfx__printk+0x10/0x10
[  591.201565][ T1352]  vpanic+0x281/0x750
[  591.202854][ T1352]  ? __pfx_vpanic+0x10/0x10
[  591.204296][ T1352]  ? rcu_is_watching+0x15/0xb0
[  591.205845][ T1352]  panic+0xb9/0xc0
[  591.207041][ T1352]  ? __pfx_panic+0x10/0x10
[  591.208473][ T1352]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  591.210398][ T1352]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  591.212315][ T1352]  ? xfrm_alloc_spi+0x570/0xf30
[  591.213912][ T1352]  check_panic_on_warn+0x89/0xb0
[  591.215568][ T1352]  ? xfrm_alloc_spi+0x570/0xf30
[  591.217148][ T1352]  end_report+0x78/0x160
[  591.218718][ T1352]  kasan_report+0x129/0x150
[  591.220154][ T1352]  ? lock_acquire+0x5f/0x360
[  591.221686][ T1352]  ? xfrm_alloc_spi+0x570/0xf30
[  591.223285][ T1352]  xfrm_alloc_spi+0x570/0xf30
[  591.224795][ T1352]  ? xfrm_alloc_spi+0x2a0/0xf30
[  591.226386][ T1352]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  591.228346][ T1352]  ? xfrm_find_acq+0x87/0xa0
[  591.230244][ T1352]  xfrm_alloc_userspi+0x70b/0xc90
[  591.232316][ T1352]  ? apparmor_capable+0x137/0x1b0
[  591.234207][ T1352]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  591.236153][ T1352]  ? __nla_parse+0x40/0x60
[  591.237556][ T1352]  xfrm_user_rcv_msg+0x7a3/0xab0
[  591.239160][ T1352]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  591.241313][ T1352]  ? __pfx___mutex_trylock_common+0x10/0x10
[  591.243762][ T1352]  ? rcu_is_watching+0x15/0xb0
[  591.245591][ T1352]  ? trace_contention_end+0x39/0x120
[  591.247324][ T1352]  ? __mutex_lock+0x335/0x1350
[  591.249045][ T1352]  netlink_rcv_skb+0x208/0x470
[  591.250701][ T1352]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  591.252522][ T1352]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  591.254276][ T1352]  ? lock_release+0x4b/0x3e0
[  591.255745][ T1352]  ? netlink_deliver_tap+0x2e/0x1b0
[  591.257466][ T1352]  xfrm_netlink_rcv+0x79/0x90
[  591.259011][ T1352]  netlink_unicast+0x82f/0x9e0
[  591.260688][ T1352]  ? __pfx_netlink_unicast+0x10/0x10
[  591.262606][ T1352]  ? netlink_sendmsg+0x642/0xb30
[  591.264483][ T1352]  ? skb_put+0x11b/0x210
[  591.265942][ T1352]  netlink_sendmsg+0x805/0xb30
[  591.267608][ T1352]  ? __pfx_netlink_sendmsg+0x10/0x10
[  591.269464][ T1352]  ? futex_unqueue+0x22/0x240
[  591.271177][ T1352]  ? aa_sock_msg_perm+0xf1/0x1d0
[  591.273121][ T1352]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  591.274947][ T1352]  ? __pfx_netlink_sendmsg+0x10/0x10
[  591.276798][ T1352]  __sock_sendmsg+0x21c/0x270
[  591.278400][ T1352]  ____sys_sendmsg+0x505/0x830
[  591.280177][ T1352]  ? __pfx_____sys_sendmsg+0x10/0x10
[  591.282057][ T1352]  ? import_iovec+0x74/0xa0
[  591.283743][ T1352]  ___sys_sendmsg+0x21f/0x2a0
[  591.285424][ T1352]  ? __pfx____sys_sendmsg+0x10/0x10
[  591.287090][ T1352]  ? futex_wait+0x285/0x360
[  591.288848][ T1352]  ? __fget_files+0x2a/0x420
[  591.290648][ T1352]  ? __fget_files+0x3a0/0x420
[  591.292479][ T1352]  __x64_sys_sendmsg+0x19b/0x260
[  591.294428][ T1352]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  591.296478][ T1352]  ? rcu_is_watching+0x15/0xb0
[  591.298299][ T1352]  ? rcu_is_watching+0x15/0xb0
[  591.300186][ T1352]  do_syscall_64+0xfa/0x3b0
[  591.302342][ T1352]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  591.304687][ T1352]  ? exc_page_fault+0x9f/0xf0
[  591.306481][ T1352]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  591.308690][ T1352] RIP: 0033:0x7f613038ebe9
[  591.310358][ T1352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  591.317103][ T1352] RSP: 002b:00007f61311d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  591.319812][ T1352] RAX: ffffffffffffffda RBX: 00007f61305c6180 RCX: 00007f613038ebe9
[  591.322328][ T1352] RDX: 0000000024000014 RSI: 0000200000000200 RDI: 0000000000000006
[  591.324957][ T1352] RBP: 00007f6130411e19 R08: 0000000000000000 R09: 0000000000000000
[  591.327490][ T1352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  591.330039][ T1352] R13: 00007f61305c6218 R14: 00007f61305c6180 R15: 00007fff51706fc8
[  591.332752][ T1352]  </TASK>
[  591.334349][ T1352] Kernel Offset: disabled
[  591.335785][ T1352] Rebooting in 86400 seconds..

VM DIAGNOSIS:
00:05:28  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b44ceb RBX=1ffff11026cc7f61 RCX=0000000000080000 RDX=ffffc90020fc8000
RSI=000000000007ffff RDI=0000000000080000 RBP=ffffc90003b7ec80 RSP=ffffc90003b7eb00
R8 =ffffffff8fa38437 R9 =1ffffffff1f47086 R10=dffffc0000000000 R11=fffffbfff1f47087
R12=ffff88813663fb08 R13=dffffc0000000000 R14=ffff88804b03b1c0 R15=0000000000000001
RIP=ffffffff81b44cd3 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f61311f56c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000006aa000 CR3=000000011208e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000039 RBX=0000000000000039 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001830 RDI=0000000000001831 RBP=00000000000003f8 RSP=ffffc9000429e9f0
R8 =ffff88801f9b8237 R9 =1ffff11003f37046 R10=dffffc0000000000 R11=ffffffff854f1e80
R12=dffffc0000000000 R13=ffffffff99afa8cd R14=ffffffff99def3e0 R15=0000000000000000
RIP=ffffffff854f1efc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f61311d46c0 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9e4a2003b0 CR3=000000011208e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f563e012e53
XMM06=0000000000000000 00007f563e012e4d XMM07=0000000000000000 00007f563e012e61
XMM08=0000000000000000 00007f563e012ee7 XMM09=0000000000000000 00007f563e012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
